last executing test programs: 2m28.319857998s ago: executing program 3 (id=8702): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x52}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94) write(r2, &(0x7f0000003300)="ac", 0x1) write(r0, &(0x7f00000002c0)="1fe7435f587b", 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) unshare(0x2a020400) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="d5882a4648fd80339e07a2b59614", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r10 = socket(0x10, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 2m27.142821121s ago: executing program 3 (id=8716): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000cb00004000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x53388220}, 0x1c) 2m27.03594874s ago: executing program 3 (id=8718): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=@newsa={0x184, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in=@local, @in6=@local, 0x4e20, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x2000000, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc7539esp(ecb-camellia-aesni,sha3-256)\x00'}, 0x0, 0xc0}}]}, 0x184}}, 0x48000) 2m26.850967342s ago: executing program 3 (id=8721): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x1e0, 0x288, 0xffffffff, 0x288, 0x288, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, &(0x7f0000000000), {[{{@ip={@multicast2, @multicast2, 0x0, 0xffffffff, 'pimreg\x00', 'bond_slave_1\x00', {0xff}, {}, 0x7e, 0x5, 0x2}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0x21, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @port=0x4e20, @gre_key=0x4}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'syz_tun\x00', {}, {}, 0xc, 0x1, 0x38}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0xb3d]}}, @common=@ah={{0x30}, {[0x800, 0x5], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x15, @private=0xa010100, @private=0xa010100, @gre_key=0x1, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x15, @loopback, @local, @port=0x4e21, @port=0x4e22}}}}, {{@ip={@empty, @rand_addr=0x64010102, 0xff, 0xff, 'bond_slave_1\x00', 'ip6gretap0\x00', {}, {}, 0x29, 0x2, 0x18}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@ttl={{0x28}}, @common=@set={{0x40}, {{0x4, [0x0, 0x2, 0x2, 0x2, 0x3], 0x3, 0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x2, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000600)={r1, 0x0, 0x8b, 0x7, 0x7, 0xf}) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r1}, 0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000800)={{r2, &(0x7f0000000680)='\x00', 0x600, &(0x7f00000006c0)={@align=0xa, {0x4, 0x8, 0x1, 0x4}}, 0xa672, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0xc}, {[0x9, 0x8, 0x2, 0x7]}, 0x9, 0x59, &(0x7f0000000780)=""/89}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x5, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0xe840) close(r0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f00000009c0)={{r2}, "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"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001a00)={0x0, 0x3ff, 0x8}, &(0x7f0000001a40)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001a80)={r6, 0xfffe, 0x7}, 0x8) getsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) r7 = socket$inet(0x2, 0x2, 0x5d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001c40)={r3, &(0x7f0000001b40)="e99cd918537d60b66996600d53092c56f0ce8d31e89db527e5a3749b3bc8ad76dd0711ed6a230c8a4023a69d6446662a53e6bbb47c291776cfbaf5ac95e088962213b82afa5f1b588326f7774e56a27b2ea3c310f13b80484b0455239dd65915ab322098bed8f0e1d81156e2482b3eb06977c21899f3", &(0x7f0000001bc0)=@buf="870c9925bb312579586604d9ccc6c3ed3715bd9b6aad070dd49ac745a687b4979efdba3fbb694d74dcfc53a7fcef67ba3d0ccb24e59a758ca7482624e31c36c00697fd2a8ba67883172ec19ebfc2", 0x4}, 0x20) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000001c80)={0x5, 0x6, 0xea, 0x1, 0xb, 0x0, 0x6}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001d80)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0xe, &(0x7f0000001dc0)={@empty, 0x0}, &(0x7f0000001e00)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001e40)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000001f40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x44, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20004040) close(r3) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8010, r7, 0x872b1000) r12 = getpid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001f80)={0x0, 0x0, 0x0}, &(0x7f0000001fc0)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002000)={r12, 0xffffffffffffffff, r13}, 0xc) 2m26.515404022s ago: executing program 3 (id=8724): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000010000007000fcdbdf250a001409000000040004f489ae37168000000180000002007b402b23245f76aa865d762a5e212b23245b2d3a5b2c2721292b2c8100000800"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)="2e9b020007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000004c0)="b7f3dd8729bf61a740a6c7ab77820e5fc44abd546c5774e451227db3494bc82e34d148ff5370", 0x26}], 0x2) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x63, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="220004000400000010290000001260a3e47ac34af615449b3e252847e1257be33f41", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="18080200d4ff000000000000ff000015182e1b43", @ANYRES32=r4, @ANYBLOB="0000000002000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r9) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x0, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x8000) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x5}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m26.103287042s ago: executing program 3 (id=8729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="f75fe8ba23c37dc6be000c1e58c80df48eeee731ec281644d78167e29c915ef333aa75d999f57425c8516edf760c5c0aef9d4ae4a6ba53cb612b7c72d1", @ANYRES8=r0, @ANYRES64, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @private=0xa010101}}, 0xfffffff8, 0x2648, 0x3, 0xfffffffc, 0xd8f}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x3}, &(0x7f0000000280)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290391200100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0xfffffffffffffdd7, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x335}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x178}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f00000005c0)={@null, 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x415}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 3.631444781s ago: executing program 1 (id=10566): syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 3.583968391s ago: executing program 1 (id=10567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0xf0, 0x12, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x4d5, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}}, 0xf0}, 0x1, 0x0, 0x32000000}, 0x0) 3.466814349s ago: executing program 1 (id=10569): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000ffffffff000000000400000018010000696c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088310000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x1, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x88}}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.105660255s ago: executing program 1 (id=10578): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165cc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) listen(r5, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x4, @remote, 0xe3}}, 0x0, 0x0, 0x3f, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmmsg$inet_sctp(r1, &(0x7f0000008880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="4839fc1cb9e7fceeb8bf92652e9b890ec0", 0x11}, {&(0x7f0000001e00)="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", 0x33c}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000084000000070000000a01010200000000180000000000000084000000060000007b01000000000000180000"], 0x48, 0x20000004}], 0x1, 0x4000000) 2.042193169s ago: executing program 1 (id=10580): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000008880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001e00)="8a5ca710df5494002afd08e7fe361dbabfb1b4199959f375d11fcb0f3d3552446ff2d014f7d4661d6c27eba83888b8382adca4b0097694429fe7fcea338a1bfe37c28d320b6bf7756c60720e2365f521fd384b09c0491ac2ae1f96bfa9793800b9a767a52f545920afaebb37ea22a4db07b319440a1c5f1ccfdc49f08c06494fdb541c8c4cf85dcff44ffaa0741fa2e493a90cf93da7a171ab043f2ecbed7451c8ad6af2a4924228fa27c7f296099957ae7058bd73542f96b1f9e4a9675e6ed089f4c9e210be4efe4399bfff42e61f3f59663a0e816bcb3d7ddd053ae7e76eee6bc240b3ba1d0ae2507d5fdc47", 0xed}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000084000000070000000a01010200000000180000000000000084000000060000007b01000000000000"], 0x48, 0x20000004}], 0x1, 0x4000000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x12, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000400}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x3010000}}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0x1fcaf44cdf6a459a}, @generic={0x45, 0x0, 0x0, 0x2, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb", 0x30}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604", 0xf4}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x153}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f168", 0x12}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.611313407s ago: executing program 4 (id=10586): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x2, 0x6, 0x8b0, 0x550, 0x550, 0x250, 0x250, 0x0, 0x808, 0x808, 0x808, 0x808, 0x808, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x200, 0x228, 0x0, {0x7a00000010000000}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010101, [0xff000000, 0x1fe000000, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xff, 0xffffffff], 0x4d5, 0x0, 0x1, 0x1, 0x0, 0x16}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff], @ipv4=@broadcast, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 0x4d4, 0x3507, 0x89, 0x1, 0x16, 0x4}, {@ipv4=@remote, [0xffffff00], @ipv6=@mcast1, [0xff, 0xff000000, 0xffffff, 0xff000000], 0x4d2, 0x3505, 0x19, 0x0, 0x10, 0x9}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x32}, [0x0, 0x0, 0x0, 0xff], @ipv4=@rand_addr=0x64010100, [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d5, 0x3502, 0x16, 0x0, 0x10, 0xc}], 0x4, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x910) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) (async) unshare(0x6a040000) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000400030a010200000000000000000100f0ff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d61633dfd61700000000900010073797a31000000004c000000050a01020000000001000000000000000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005140000001100010000000000000000000000000a"], 0xe8}}, 0x0) 1.518108556s ago: executing program 0 (id=10589): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100970067"], 0x25}, 0x8000) 1.394395718s ago: executing program 0 (id=10591): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000000300000090000180380004001400010002000000ac5414aa0000000000000000200002000a004e2200000d617000000000000000000000080000000077e800000d0001007564703a73790000000000004400028008000100008000"], 0xa4}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, r3, 0x300, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cc2062ff070000000000000093e10100"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r11, 0x112, 0x4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r9, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x400c0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 1.050456186s ago: executing program 1 (id=10593): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0001009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0001009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x3c, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x3c}}, 0x20000040) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x8c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '[&$-+\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x54) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x13, 0xa, 0x0, 0x6}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d00000080", 0x5}], 0x2, &(0x7f0000000100)=ANY=[], 0xd}, 0x20000810) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d00000080", 0x5}], 0x2, &(0x7f0000000100)=ANY=[], 0xd}, 0x20000810) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000001b00)="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") socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) (async) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, 0x0, 0x810) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, 0x0) 859.573872ms ago: executing program 4 (id=10596): r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2400000000000000000000000700004044140de3891414aa00000005ec"], 0x28}}], 0x1, 0x400c810) 811.559231ms ago: executing program 0 (id=10598): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 669.527245ms ago: executing program 4 (id=10600): r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2400000000000000ff9700000700"], 0x28}}], 0x1, 0x400c810) 596.084608ms ago: executing program 2 (id=10601): syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 588.55096ms ago: executing program 2 (id=10602): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r11, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) close(r0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) sendto(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) 574.233819ms ago: executing program 4 (id=10603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 480.765564ms ago: executing program 4 (id=10604): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) r1 = socket(0x22, 0x2, 0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) (async) socket(0x22, 0x2, 0x4) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) (async) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (async) 353.555214ms ago: executing program 0 (id=10605): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 350.828798ms ago: executing program 2 (id=10606): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x148}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x90}, {0x28}}}}, 0x2d8) 264.045777ms ago: executing program 2 (id=10607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000680)={'filter\x00', 0x0, [0x80000001, 0x99a, 0x3, 0x3, 0x9]}, &(0x7f0000000700)=0x54) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xc, 0xc0, 0x3, 0x6}, {0x39, 0x4, 0x2, 0x2}, {0x6, 0x3, 0x9, 0x7}]}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async, rerun: 64) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) (async, rerun: 64) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f00000004c0)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000100)=""/32, 0x20}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/158, 0x9e}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x7, &(0x7f0000002980)=""/4096, 0x1000}, 0x40012021) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRESHEX, @ANYRES32], 0x60}}, 0x4000) 263.75696ms ago: executing program 4 (id=10608): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 211.146253ms ago: executing program 0 (id=10609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xd, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x5, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0xc000, 0x0, {0x3}}}, 0xc0}}, 0x0) 111.772983ms ago: executing program 2 (id=10610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048001}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048001}, 0x20000000) (async) 49.552232ms ago: executing program 0 (id=10611): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027bd7000ffffff97040000000c001700020000000000000008", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 0s ago: executing program 2 (id=10612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a0101000000000000f500010000000900010073797a30000000000900030073797a3200000000c4000000060a010400000000000000000100000208000b40000000009c000480340001800b000100657874686472000024000280080001400000000c08000340000000020800044000000022050002000700000064000180080002801c000380040001"], 0x138}}, 0x0) kernel console output (not intermixed with test programs): arsing attributes in process `syz.2.9447'. [ 881.615741][ T2858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9447'. [ 883.744589][ T2816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 884.128993][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 884.144937][ T2885] netlink: 'syz.1.9457': attribute type 3 has an invalid length. [ 884.154731][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 884.160019][ T2885] netlink: 'syz.1.9457': attribute type 7 has an invalid length. [ 884.175218][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 884.190224][ T2885] netlink: 'syz.1.9457': attribute type 5 has an invalid length. [ 884.200576][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 884.208415][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 884.215145][ T2885] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9457'. [ 884.333077][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 884.341847][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 884.349519][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 884.357689][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 884.365425][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 884.687064][ T2916] __nla_validate_parse: 1 callbacks suppressed [ 884.687083][ T2916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9463'. [ 884.949208][ T2937] xt_CONNSECMARK: invalid mode: 65 [ 885.119803][ T2944] vxcan3: entered promiscuous mode [ 885.143903][ T2880] lo speed is unknown, defaulting to 1000 [ 885.284745][ T2952] FAULT_INJECTION: forcing a failure. [ 885.284745][ T2952] name failslab, interval 1, probability 0, space 0, times 0 [ 885.301734][ T2952] CPU: 1 UID: 0 PID: 2952 Comm: syz.1.9474 Not tainted syzkaller #0 PREEMPT(full) [ 885.301757][ T2952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 885.301768][ T2952] Call Trace: [ 885.301775][ T2952] [ 885.301783][ T2952] dump_stack_lvl+0xe8/0x150 [ 885.301811][ T2952] should_fail_ex+0x412/0x560 [ 885.301843][ T2952] should_failslab+0xa8/0x100 [ 885.301867][ T2952] __kmalloc_cache_noprof+0x88/0x660 [ 885.301887][ T2952] ? rtnl_newlink+0x136/0x1be0 [ 885.301913][ T2952] rtnl_newlink+0x136/0x1be0 [ 885.301935][ T2952] ? unwind_next_frame+0xa5/0x23c0 [ 885.301968][ T2952] ? __pfx_rtnl_newlink+0x10/0x10 [ 885.301999][ T2952] ? __lock_acquire+0x6b5/0x2cf0 [ 885.302026][ T2952] ? __lock_acquire+0x6b5/0x2cf0 [ 885.302049][ T2952] ? __lock_acquire+0x6b5/0x2cf0 [ 885.302079][ T2952] ? unwind_next_frame+0xa5/0x23c0 [ 885.302121][ T2952] ? __lock_acquire+0x6b5/0x2cf0 [ 885.302144][ T2952] ? is_bpf_text_address+0x26/0x2b0 [ 885.302164][ T2952] ? kernel_text_address+0xa5/0xe0 [ 885.302208][ T2952] ? __pfx_rtnl_newlink+0x10/0x10 [ 885.302228][ T2952] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 885.302251][ T2952] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 885.302275][ T2952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 885.302297][ T2952] ? __lock_acquire+0x6b5/0x2cf0 [ 885.302326][ T2952] netlink_rcv_skb+0x232/0x4b0 [ 885.302356][ T2952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 885.302378][ T2952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 885.302407][ T2952] ? netlink_deliver_tap+0x2e/0x1b0 [ 885.302433][ T2952] netlink_unicast+0x80f/0x9b0 [ 885.302459][ T2952] ? __pfx_netlink_unicast+0x10/0x10 [ 885.302479][ T2952] ? netlink_sendmsg+0x650/0xb40 [ 885.302497][ T2952] ? skb_put+0x11b/0x210 [ 885.302522][ T2952] netlink_sendmsg+0x813/0xb40 [ 885.302550][ T2952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.302573][ T2952] ? aa_sock_msg_perm+0xf1/0x1b0 [ 885.302595][ T2952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 885.302615][ T2952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.302632][ T2952] ____sys_sendmsg+0xa68/0xad0 [ 885.302663][ T2952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.302695][ T2952] ? import_iovec+0x73/0xa0 [ 885.302722][ T2952] ___sys_sendmsg+0x2a5/0x360 [ 885.302751][ T2952] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.302808][ T2952] ? __fget_files+0x2a/0x420 [ 885.302829][ T2952] ? __fget_files+0x3a0/0x420 [ 885.302861][ T2952] __x64_sys_sendmsg+0x1bd/0x2a0 [ 885.302887][ T2952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 885.302919][ T2952] ? __pfx_ksys_write+0x10/0x10 [ 885.302948][ T2952] do_syscall_64+0x14d/0xf80 [ 885.302971][ T2952] ? trace_irq_disable+0x3b/0x150 [ 885.302994][ T2952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.303011][ T2952] ? clear_bhb_loop+0x40/0x90 [ 885.303031][ T2952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.303048][ T2952] RIP: 0033:0x7f1ab239c629 [ 885.303064][ T2952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.303078][ T2952] RSP: 002b:00007f1ab32bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.303097][ T2952] RAX: ffffffffffffffda RBX: 00007f1ab2615fa0 RCX: 00007f1ab239c629 [ 885.303109][ T2952] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 885.303120][ T2952] RBP: 00007f1ab32bc090 R08: 0000000000000000 R09: 0000000000000000 [ 885.303131][ T2952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.303141][ T2952] R13: 00007f1ab2616038 R14: 00007f1ab2615fa0 R15: 00007ffe2824b108 [ 885.303170][ T2952] [ 885.691982][ T2880] chnl_net:caif_netlink_parms(): no params data found [ 885.812522][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.819877][ T2880] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.827514][ T2880] bridge_slave_0: entered allmulticast mode [ 885.835258][ T2880] bridge_slave_0: entered promiscuous mode [ 885.839046][ T2966] openvswitch: netlink: Message has 75 unknown bytes. [ 885.844206][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.855171][ T2880] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.862316][ T2880] bridge_slave_1: entered allmulticast mode [ 885.870771][ T2880] bridge_slave_1: entered promiscuous mode [ 885.895190][ T2965] bond0: (slave dummy0): Releasing backup interface [ 885.904604][ T2965] dummy0: left promiscuous mode [ 885.943123][ T2969] netlink: 41 bytes leftover after parsing attributes in process `syz.0.9478'. [ 885.953045][ T2969] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9478'. [ 885.954110][ T2880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.975682][ T2880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.991807][ T2965] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9476'. [ 886.009772][ T2969] netlink: 41 bytes leftover after parsing attributes in process `syz.0.9478'. [ 886.015695][ T2965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9476'. [ 886.031074][ T2880] team0: Port device team_slave_0 added [ 886.039563][ T2880] team0: Port device team_slave_1 added [ 886.117775][ T2880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.124931][ T2880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.154303][ T2880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.167289][ T2880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.174566][ T2880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.200569][ T2880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.243153][ T2982] FAULT_INJECTION: forcing a failure. [ 886.243153][ T2982] name failslab, interval 1, probability 0, space 0, times 0 [ 886.257060][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: syz.2.9484 Not tainted syzkaller #0 PREEMPT(full) [ 886.257083][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 886.257094][ T2982] Call Trace: [ 886.257102][ T2982] [ 886.257110][ T2982] dump_stack_lvl+0xe8/0x150 [ 886.257138][ T2982] should_fail_ex+0x412/0x560 [ 886.257165][ T2982] should_failslab+0xa8/0x100 [ 886.257188][ T2982] __kmalloc_noprof+0xe8/0x760 [ 886.257208][ T2982] ? sock_kmalloc+0xd6/0x160 [ 886.257230][ T2982] ? hash_recvmsg+0x130/0x840 [ 886.257263][ T2982] sock_kmalloc+0xd6/0x160 [ 886.257290][ T2982] hash_recvmsg+0x1d4/0x840 [ 886.257313][ T2982] ? hash_check_key+0x173/0x1e0 [ 886.257333][ T2982] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 886.257357][ T2982] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 886.257380][ T2982] sock_recvmsg_nosec+0x186/0x1c0 [ 886.257404][ T2982] ____sys_recvmsg+0x3e3/0x4a0 [ 886.257438][ T2982] ? __pfx_____sys_recvmsg+0x10/0x10 [ 886.257478][ T2982] ? import_iovec+0x73/0xa0 [ 886.257505][ T2982] ___sys_recvmsg+0x215/0x590 [ 886.257528][ T2982] ? __lock_acquire+0x6b5/0x2cf0 [ 886.257555][ T2982] ? __pfx____sys_recvmsg+0x10/0x10 [ 886.257617][ T2982] do_recvmmsg+0x334/0x800 [ 886.257651][ T2982] ? __pfx_do_recvmmsg+0x10/0x10 [ 886.257687][ T2982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 886.257731][ T2982] __x64_sys_recvmmsg+0x198/0x250 [ 886.257759][ T2982] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 886.257795][ T2982] do_syscall_64+0x14d/0xf80 [ 886.257818][ T2982] ? trace_irq_disable+0x3b/0x150 [ 886.257842][ T2982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.257860][ T2982] ? clear_bhb_loop+0x40/0x90 [ 886.257882][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.257900][ T2982] RIP: 0033:0x7fd2bbb9c629 [ 886.257917][ T2982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.257932][ T2982] RSP: 002b:00007fd2bc975028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 886.257951][ T2982] RAX: ffffffffffffffda RBX: 00007fd2bbe15fa0 RCX: 00007fd2bbb9c629 [ 886.257965][ T2982] RDX: 000000000000049f RSI: 0000200000006100 RDI: 0000000000000004 [ 886.257977][ T2982] RBP: 00007fd2bc975090 R08: 0000000000000000 R09: 0000000000000000 [ 886.257988][ T2982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 886.257999][ T2982] R13: 00007fd2bbe16038 R14: 00007fd2bbe15fa0 R15: 00007fffb5a15378 [ 886.258030][ T2982] [ 886.286936][ T2880] hsr_slave_0: entered promiscuous mode [ 886.429540][ T5837] Bluetooth: hci5: command tx timeout [ 886.518917][ T2880] hsr_slave_1: entered promiscuous mode [ 886.525304][ T2880] debugfs: 'hsr0' already exists in 'hsr' [ 886.544221][ T2880] Cannot create hsr debugfs directory [ 886.668197][ T2998] netlink: 'syz.0.9488': attribute type 1 has an invalid length. [ 886.723255][ T2998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 886.962415][ T3018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9496'. [ 887.197553][ T3034] batman_adv: batadv0: Adding interface: ipvlan1 [ 887.198549][ T3019] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9495'. [ 887.211800][ T3034] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.239863][ T3034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.268778][ T3034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.289183][ T3034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 887.329508][ T3034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.354121][ T3034] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 887.799733][ T3043] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9504'. [ 887.818602][ T3043] netlink: Unknown conntrack attr (0) [ 888.146061][ T3053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9508'. [ 888.320774][ T3068] FAULT_INJECTION: forcing a failure. [ 888.320774][ T3068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.334516][ T3068] CPU: 0 UID: 0 PID: 3068 Comm: syz.0.9515 Not tainted syzkaller #0 PREEMPT(full) [ 888.334530][ T3068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.334537][ T3068] Call Trace: [ 888.334542][ T3068] [ 888.334546][ T3068] dump_stack_lvl+0xe8/0x150 [ 888.334564][ T3068] should_fail_ex+0x412/0x560 [ 888.334580][ T3068] _copy_from_user+0x2d/0xb0 [ 888.334594][ T3068] vti6_siocdevprivate+0x1f2/0x7a0 [ 888.334609][ T3068] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 888.334632][ T3068] ? full_name_hash+0xb0/0xe0 [ 888.334650][ T3068] dev_ifsioc+0xba6/0x1280 [ 888.334667][ T3068] dev_ioctl+0x84c/0x1150 [ 888.334681][ T3068] sock_ioctl+0x75f/0x7f0 [ 888.334692][ T3068] ? __pfx_sock_ioctl+0x10/0x10 [ 888.334703][ T3068] ? __fget_files+0x3a0/0x420 [ 888.334716][ T3068] ? __fget_files+0x2a/0x420 [ 888.334731][ T3068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 888.334743][ T3068] ? __pfx_sock_ioctl+0x10/0x10 [ 888.334752][ T3068] __se_sys_ioctl+0xfc/0x170 [ 888.334765][ T3068] do_syscall_64+0x14d/0xf80 [ 888.334778][ T3068] ? trace_irq_disable+0x3b/0x150 [ 888.334792][ T3068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.334810][ T3068] ? clear_bhb_loop+0x40/0x90 [ 888.334822][ T3068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.334832][ T3068] RIP: 0033:0x7fd67319c629 [ 888.334842][ T3068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.334851][ T3068] RSP: 002b:00007fd673fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.334862][ T3068] RAX: ffffffffffffffda RBX: 00007fd673415fa0 RCX: 00007fd67319c629 [ 888.334870][ T3068] RDX: 00002000000002c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 888.334876][ T3068] RBP: 00007fd673fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 888.334882][ T3068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.334888][ T3068] R13: 00007fd673416038 R14: 00007fd673415fa0 R15: 00007fffa8ad92a8 [ 888.334904][ T3068] [ 888.335214][ T3066] tipc: Enabled bearer , priority 0 [ 888.501380][ T3081] FAULT_INJECTION: forcing a failure. [ 888.501380][ T3081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.513473][ T5837] Bluetooth: hci5: command tx timeout [ 888.582109][ T3066] tipc: Resetting bearer [ 888.595938][ T3081] CPU: 1 UID: 0 PID: 3081 Comm: syz.0.9516 Not tainted syzkaller #0 PREEMPT(full) [ 888.595960][ T3081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.595970][ T3081] Call Trace: [ 888.595978][ T3081] [ 888.595985][ T3081] dump_stack_lvl+0xe8/0x150 [ 888.596020][ T3081] should_fail_ex+0x412/0x560 [ 888.596045][ T3081] _copy_to_user+0x31/0xb0 [ 888.596071][ T3081] simple_read_from_buffer+0xe1/0x170 [ 888.596100][ T3081] proc_fail_nth_read+0x1bb/0x230 [ 888.596127][ T3081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 888.596154][ T3081] ? rw_verify_area+0x2a6/0x4d0 [ 888.596170][ T3081] ? tun_chr_write_iter+0xe0/0x200 [ 888.596190][ T3081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 888.596214][ T3081] vfs_read+0x20c/0xa70 [ 888.596230][ T3081] ? fdget_pos+0x246/0x320 [ 888.596258][ T3081] ? __pfx___mutex_lock+0x10/0x10 [ 888.596285][ T3081] ? __pfx_vfs_read+0x10/0x10 [ 888.596304][ T3081] ? __fget_files+0x2a/0x420 [ 888.596331][ T3081] ? __fget_files+0x3a0/0x420 [ 888.596353][ T3081] ? __fget_files+0x2a/0x420 [ 888.596385][ T3081] ksys_read+0x150/0x270 [ 888.596406][ T3081] ? __pfx_ksys_read+0x10/0x10 [ 888.596435][ T3081] do_syscall_64+0x14d/0xf80 [ 888.596459][ T3081] ? trace_irq_disable+0x3b/0x150 [ 888.596482][ T3081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.596501][ T3081] ? clear_bhb_loop+0x40/0x90 [ 888.596522][ T3081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.596540][ T3081] RIP: 0033:0x7fd67315cece [ 888.596558][ T3081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 888.596573][ T3081] RSP: 002b:00007fd673f73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 888.596592][ T3081] RAX: ffffffffffffffda RBX: 00007fd673f746c0 RCX: 00007fd67315cece [ 888.596605][ T3081] RDX: 000000000000000f RSI: 00007fd673f740a0 RDI: 0000000000000005 [ 888.596615][ T3081] RBP: 00007fd673f74090 R08: 0000000000000000 R09: 0000000000000000 [ 888.596626][ T3081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.596637][ T3081] R13: 00007fd673416218 R14: 00007fd673416180 R15: 00007fffa8ad92a8 [ 888.596667][ T3081] [ 888.774186][ T3084] netlink: 'syz.2.9513': attribute type 14 has an invalid length. [ 888.832073][ T3084] netlink: 'syz.2.9513': attribute type 13 has an invalid length. [ 888.834318][ T3065] tipc: Disabling bearer [ 889.503185][ T3093] FAULT_INJECTION: forcing a failure. [ 889.503185][ T3093] name failslab, interval 1, probability 0, space 0, times 0 [ 889.523657][ T3093] CPU: 0 UID: 0 PID: 3093 Comm: syz.2.9522 Not tainted syzkaller #0 PREEMPT(full) [ 889.523680][ T3093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 889.523691][ T3093] Call Trace: [ 889.523699][ T3093] [ 889.523706][ T3093] dump_stack_lvl+0xe8/0x150 [ 889.523736][ T3093] should_fail_ex+0x412/0x560 [ 889.523759][ T3093] ? __d_alloc+0x37/0x6f0 [ 889.523784][ T3093] should_failslab+0xa8/0x100 [ 889.523807][ T3093] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 889.523843][ T3093] __d_alloc+0x37/0x6f0 [ 889.523874][ T3093] d_alloc+0x4b/0x190 [ 889.523897][ T3093] ? lookup_one_qstr_excl+0xc8/0x360 [ 889.523924][ T3093] lookup_one_qstr_excl+0xdc/0x360 [ 889.523956][ T3093] ? lookup_noperm_common+0x245/0x430 [ 889.523981][ T3093] start_dirop+0x5c/0x90 [ 889.524004][ T3093] simple_start_creating+0xcc/0x110 [ 889.524029][ T3093] ? __pfx_simple_start_creating+0x10/0x10 [ 889.524052][ T3093] ? do_raw_spin_unlock+0xf5/0x210 [ 889.524070][ T3093] ? mntput+0x65/0xc0 [ 889.524093][ T3093] debugfs_start_creating+0xdb/0x1a0 [ 889.524119][ T3093] __debugfs_create_file+0x6f/0x400 [ 889.524146][ T3093] debugfs_create_file_full+0x3f/0x60 [ 889.524172][ T3093] ref_tracker_dir_debugfs+0x197/0x360 [ 889.524196][ T3093] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 889.524245][ T3093] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 889.524266][ T3093] ? alloc_netdev_mqs+0xa6/0x11b0 [ 889.524287][ T3093] ? __raw_spin_lock_init+0x45/0x100 [ 889.524308][ T3093] alloc_netdev_mqs+0x272/0x11b0 [ 889.524324][ T3093] ? __pfx_vlan_setup+0x10/0x10 [ 889.524353][ T3093] rtnl_create_link+0x31f/0xd70 [ 889.524378][ T3093] rtnl_newlink_create+0x277/0xb70 [ 889.524402][ T3093] ? __pfx___nla_validate_parse+0x10/0x10 [ 889.524435][ T3093] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 889.524462][ T3093] ? __pfx___mutex_lock+0x10/0x10 [ 889.524499][ T3093] ? ns_capable+0x89/0xe0 [ 889.524525][ T3093] rtnl_newlink+0x1666/0x1be0 [ 889.524562][ T3093] ? __pfx_rtnl_newlink+0x10/0x10 [ 889.524594][ T3093] ? __lock_acquire+0x6b5/0x2cf0 [ 889.524622][ T3093] ? __lock_acquire+0x6b5/0x2cf0 [ 889.524647][ T3093] ? __lock_acquire+0x6b5/0x2cf0 [ 889.524679][ T3093] ? unwind_next_frame+0xa5/0x23c0 [ 889.524727][ T3093] ? __lock_acquire+0x6b5/0x2cf0 [ 889.524752][ T3093] ? is_bpf_text_address+0x26/0x2b0 [ 889.524774][ T3093] ? kernel_text_address+0xa5/0xe0 [ 889.524822][ T3093] ? __pfx_rtnl_newlink+0x10/0x10 [ 889.524842][ T3093] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 889.524867][ T3093] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 889.524888][ T3093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 889.524913][ T3093] ? __lock_acquire+0x6b5/0x2cf0 [ 889.524951][ T3093] netlink_rcv_skb+0x232/0x4b0 [ 889.524973][ T3093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 889.524996][ T3093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 889.525029][ T3093] ? netlink_deliver_tap+0x2e/0x1b0 [ 889.525058][ T3093] netlink_unicast+0x80f/0x9b0 [ 889.525085][ T3093] ? __pfx_netlink_unicast+0x10/0x10 [ 889.525106][ T3093] ? netlink_sendmsg+0x650/0xb40 [ 889.525124][ T3093] ? skb_put+0x11b/0x210 [ 889.525151][ T3093] netlink_sendmsg+0x813/0xb40 [ 889.525181][ T3093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.525206][ T3093] ? aa_sock_msg_perm+0xf1/0x1b0 [ 889.525229][ T3093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 889.525250][ T3093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.525270][ T3093] ____sys_sendmsg+0xa68/0xad0 [ 889.525304][ T3093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 889.525338][ T3093] ? import_iovec+0x73/0xa0 [ 889.525365][ T3093] ___sys_sendmsg+0x2a5/0x360 [ 889.525395][ T3093] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.525456][ T3093] ? __fget_files+0x2a/0x420 [ 889.525479][ T3093] ? __fget_files+0x3a0/0x420 [ 889.525512][ T3093] __x64_sys_sendmsg+0x1bd/0x2a0 [ 889.525539][ T3093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 889.525574][ T3093] ? __pfx_ksys_write+0x10/0x10 [ 889.525604][ T3093] do_syscall_64+0x14d/0xf80 [ 889.525627][ T3093] ? trace_irq_disable+0x3b/0x150 [ 889.525660][ T3093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.525678][ T3093] ? clear_bhb_loop+0x40/0x90 [ 889.525700][ T3093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.525717][ T3093] RIP: 0033:0x7fd2bbb9c629 [ 889.525735][ T3093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.525749][ T3093] RSP: 002b:00007fd2bc975028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 889.525768][ T3093] RAX: ffffffffffffffda RBX: 00007fd2bbe15fa0 RCX: 00007fd2bbb9c629 [ 889.525781][ T3093] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 889.525792][ T3093] RBP: 00007fd2bc975090 R08: 0000000000000000 R09: 0000000000000000 [ 889.525803][ T3093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.525813][ T3093] R13: 00007fd2bbe16038 R14: 00007fd2bbe15fa0 R15: 00007fffb5a15378 [ 889.525844][ T3093] [ 890.030177][ T3093] vlan1: entered promiscuous mode [ 890.039210][ T3093] dummy0: entered promiscuous mode [ 890.155028][ T3110] FAULT_INJECTION: forcing a failure. [ 890.155028][ T3110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.183061][ T3110] CPU: 0 UID: 0 PID: 3110 Comm: syz.1.9524 Not tainted syzkaller #0 PREEMPT(full) [ 890.183085][ T3110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.183096][ T3110] Call Trace: [ 890.183104][ T3110] [ 890.183113][ T3110] dump_stack_lvl+0xe8/0x150 [ 890.183142][ T3110] should_fail_ex+0x412/0x560 [ 890.183167][ T3110] _copy_from_iter+0x1d3/0x1670 [ 890.183194][ T3110] ? rcu_is_watching+0x15/0xb0 [ 890.183223][ T3110] ? __pfx__copy_from_iter+0x10/0x10 [ 890.183253][ T3110] ? netlink_sendmsg+0x650/0xb40 [ 890.183273][ T3110] ? skb_put+0x11b/0x210 [ 890.183300][ T3110] netlink_sendmsg+0x6c0/0xb40 [ 890.183329][ T3110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.183354][ T3110] ? aa_sock_msg_perm+0xf1/0x1b0 [ 890.183376][ T3110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 890.183398][ T3110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.183417][ T3110] ____sys_sendmsg+0xa68/0xad0 [ 890.183451][ T3110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.183483][ T3110] ? import_iovec+0x73/0xa0 [ 890.183510][ T3110] ___sys_sendmsg+0x2a5/0x360 [ 890.183540][ T3110] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.183605][ T3110] ? __fget_files+0x2a/0x420 [ 890.183628][ T3110] ? __fget_files+0x3a0/0x420 [ 890.183659][ T3110] __x64_sys_sendmsg+0x1bd/0x2a0 [ 890.183687][ T3110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.183721][ T3110] ? __pfx_ksys_write+0x10/0x10 [ 890.183751][ T3110] do_syscall_64+0x14d/0xf80 [ 890.183776][ T3110] ? trace_irq_disable+0x3b/0x150 [ 890.183800][ T3110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.183818][ T3110] ? clear_bhb_loop+0x40/0x90 [ 890.183840][ T3110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.183857][ T3110] RIP: 0033:0x7f1ab239c629 [ 890.183874][ T3110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.183889][ T3110] RSP: 002b:00007f1ab329b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.183909][ T3110] RAX: ffffffffffffffda RBX: 00007f1ab2616090 RCX: 00007f1ab239c629 [ 890.183921][ T3110] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000003 [ 890.183933][ T3110] RBP: 00007f1ab329b090 R08: 0000000000000000 R09: 0000000000000000 [ 890.183947][ T3110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.183957][ T3110] R13: 00007f1ab2616128 R14: 00007f1ab2616090 R15: 00007ffe2824b108 [ 890.183984][ T3110] [ 890.585610][ T5837] Bluetooth: hci5: command tx timeout [ 890.728315][ T3129] netlink: 'syz.4.9530': attribute type 5 has an invalid length. [ 890.737627][ T3127] syzkaller0: entered promiscuous mode [ 890.743112][ T3127] syzkaller0: entered allmulticast mode [ 890.777359][ T3130] smc: net device wlan0 erased user defined pnetid SYZ0 [ 890.800088][ T3130] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 890.921511][ T3140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 890.929020][ T3143] netlink: 'syz.4.9535': attribute type 1 has an invalid length. [ 890.935443][ T3138] bond7: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 890.957289][ T3138] bond7 (unregistering): Released all slaves [ 890.966947][ T3145] FAULT_INJECTION: forcing a failure. [ 890.966947][ T3145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.991939][ T3146] Bluetooth: MGMT ver 1.23 [ 891.003092][ T3145] CPU: 1 UID: 0 PID: 3145 Comm: syz.1.9536 Not tainted syzkaller #0 PREEMPT(full) [ 891.003115][ T3145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.003127][ T3145] Call Trace: [ 891.003135][ T3145] [ 891.003143][ T3145] dump_stack_lvl+0xe8/0x150 [ 891.003171][ T3145] should_fail_ex+0x412/0x560 [ 891.003196][ T3145] _copy_from_user+0x2d/0xb0 [ 891.003221][ T3145] ___sys_recvmsg+0x175/0x590 [ 891.003245][ T3145] ? __lock_acquire+0x6b5/0x2cf0 [ 891.003272][ T3145] ? __pfx____sys_recvmsg+0x10/0x10 [ 891.003331][ T3145] do_recvmmsg+0x334/0x800 [ 891.003364][ T3145] ? __pfx_do_recvmmsg+0x10/0x10 [ 891.003400][ T3145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 891.003442][ T3145] __x64_sys_recvmmsg+0x198/0x250 [ 891.003470][ T3145] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 891.003506][ T3145] do_syscall_64+0x14d/0xf80 [ 891.003541][ T3145] ? trace_irq_disable+0x3b/0x150 [ 891.003565][ T3145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.003583][ T3145] ? clear_bhb_loop+0x40/0x90 [ 891.003605][ T3145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.003623][ T3145] RIP: 0033:0x7f1ab239c629 [ 891.003640][ T3145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.003655][ T3145] RSP: 002b:00007f1ab32bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 891.003674][ T3145] RAX: ffffffffffffffda RBX: 00007f1ab2615fa0 RCX: 00007f1ab239c629 [ 891.003687][ T3145] RDX: 000000000000049f RSI: 0000200000006100 RDI: 0000000000000004 [ 891.003698][ T3145] RBP: 00007f1ab32bc090 R08: 0000000000000000 R09: 0000000000000000 [ 891.003709][ T3145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.003719][ T3145] R13: 00007f1ab2616038 R14: 00007f1ab2615fa0 R15: 00007ffe2824b108 [ 891.003748][ T3145] [ 891.019296][ T3143] 8021q: adding VLAN 0 to HW filter on device bond11 [ 891.061581][ T3150] __nla_validate_parse: 4 callbacks suppressed [ 891.061595][ T3150] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9537'. [ 891.210742][ T3150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9537'. [ 891.370635][ T3169] netlink: 'syz.0.9542': attribute type 8 has an invalid length. [ 891.378673][ T3169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9542'. [ 891.533453][ T3182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9545'. [ 891.749360][ T3197] netlink: 41 bytes leftover after parsing attributes in process `syz.4.9548'. [ 891.760317][ T3197] netlink: 116 bytes leftover after parsing attributes in process `syz.4.9548'. [ 891.833553][ T3204] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9553'. [ 892.016848][ T3217] tipc: Enabling of bearer rejected, already enabled [ 892.146140][ T3222] netlink: 'syz.1.9560': attribute type 1 has an invalid length. [ 892.155892][ T3222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9560'. [ 892.344938][ T3228] netlink: 'syz.1.9563': attribute type 10 has an invalid length. [ 892.622136][ T3242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9569'. [ 892.667321][ T5837] Bluetooth: hci5: command tx timeout [ 892.706347][ T3244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9570'. [ 892.740517][ T3244] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 892.857138][ T3214] syz.4.9557 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 892.912144][ T3214] CPU: 0 UID: 0 PID: 3214 Comm: syz.4.9557 Not tainted syzkaller #0 PREEMPT(full) [ 892.912168][ T3214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 892.912178][ T3214] Call Trace: [ 892.912185][ T3214] [ 892.912193][ T3214] dump_stack_lvl+0xe8/0x150 [ 892.912221][ T3214] dump_header+0xd3/0x4c0 [ 892.912245][ T3214] oom_kill_process+0x3ab/0x970 [ 892.912266][ T3214] out_of_memory+0x106c/0x1410 [ 892.912282][ T3214] ? percpu_ref_put+0x19/0x180 [ 892.912304][ T3214] ? __pfx___mutex_lock+0x10/0x10 [ 892.912336][ T3214] ? __pfx_out_of_memory+0x10/0x10 [ 892.912360][ T3214] ? do_raw_spin_unlock+0xf5/0x210 [ 892.912387][ T3214] try_charge_memcg+0xc53/0x1560 [ 892.912408][ T3214] ? __lock_acquire+0x6b5/0x2cf0 [ 892.912441][ T3214] ? __pfx_try_charge_memcg+0x10/0x10 [ 892.912457][ T3214] ? xa_load+0x60/0x210 [ 892.912490][ T3214] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 892.912514][ T3214] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 892.912537][ T3214] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 892.912560][ T3214] __swap_cache_prepare_and_add+0x52a/0x700 [ 892.912601][ T3214] swap_cache_alloc_folio+0xf1/0x240 [ 892.912627][ T3214] swap_cluster_readahead+0x369/0x690 [ 892.912657][ T3214] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 892.912694][ T3214] ? get_vma_policy+0x27b/0x3c0 [ 892.912717][ T3214] swapin_readahead+0x196/0xc50 [ 892.912752][ T3214] ? __pfx_swapin_readahead+0x10/0x10 [ 892.912777][ T3214] ? swap_table_get+0x1e/0x260 [ 892.912798][ T3214] ? swap_table_get+0x1e/0x260 [ 892.912817][ T3214] ? swap_table_get+0x1e/0x260 [ 892.912839][ T3214] ? swap_table_get+0x216/0x260 [ 892.912862][ T3214] ? swap_cache_get_folio+0x513/0x520 [ 892.912890][ T3214] do_swap_page+0x54f/0x58d0 [ 892.912912][ T3214] ? __lock_acquire+0x6b5/0x2cf0 [ 892.912953][ T3214] ? do_swap_page+0x12c/0x58d0 [ 892.912972][ T3214] ? __pfx_do_swap_page+0x10/0x10 [ 892.912992][ T3214] ? __pte_offset_map+0x1ae/0x240 [ 892.913018][ T3214] ? pte_offset_map_rw_nolock+0xea/0x160 [ 892.913045][ T3214] handle_mm_fault+0x12d2/0x3310 [ 892.913083][ T3214] ? handle_mm_fault+0xee/0x3310 [ 892.913114][ T3214] ? __pfx_handle_mm_fault+0x10/0x10 [ 892.913135][ T3214] ? lock_vma_under_rcu+0x45a/0x500 [ 892.913179][ T3214] do_user_addr_fault+0xa73/0x1340 [ 892.913209][ T3214] ? rcu_is_watching+0x15/0xb0 [ 892.913232][ T3214] ? trace_page_fault_user+0x84/0x210 [ 892.913256][ T3214] exc_page_fault+0x6a/0xc0 [ 892.913280][ T3214] asm_exc_page_fault+0x26/0x30 [ 892.913297][ T3214] RIP: 0033:0x7f41691577c3 [ 892.913321][ T3214] Code: 25 00 03 00 00 e8 5d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 4e 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 892.913336][ T3214] RSP: 002b:00007ffe461d27a0 EFLAGS: 00010246 [ 892.913357][ T3214] RAX: 0000000000000000 RBX: 000055555ed62500 RCX: 0000000000000000 [ 892.913369][ T3214] RDX: 00007ffe461d27e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 892.913380][ T3214] RBP: 00007f4169417da0 R08: 0000000000000000 R09: 0000000000000000 [ 892.913390][ T3214] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000d9f71 [ 892.913401][ T3214] R13: 00007f416941609c R14: 00000000000d9ca2 R15: 00007f4169416090 [ 892.913432][ T3214] [ 892.913439][ T3214] memory: usage 307200kB, limit 307200kB, failcnt 678 [ 893.245633][ T3214] memory+swap: usage 291264kB, limit 9007199254740988kB, failcnt 0 [ 893.253598][ T3214] kmem: usage 290132kB, limit 9007199254740988kB, failcnt 0 [ 893.262391][ T3214] Memory cgroup stats for /syz4: [ 893.262627][ T3214] cache 0 [ 893.270606][ T3214] rss 0 [ 893.273415][ T3214] rss_huge 0 [ 893.276781][ T3214] shmem 0 [ 893.279774][ T3214] mapped_file 0 [ 893.283283][ T3214] dirty 0 [ 893.286342][ T3214] writeback 0 [ 893.290729][ T3214] workingset_refault_anon 6 [ 893.297616][ T3214] workingset_refault_file 0 [ 893.307647][ T3214] swap 188416 [ 893.314678][ T3214] swapcached 212992 [ 893.322930][ T3214] pgpgin 167530 [ 893.330888][ T3214] pgpgout 167524 [ 893.338692][ T3214] pgfault 341897 [ 893.346756][ T3214] pgmajfault 5 [ 893.353449][ T3214] inactive_anon 4096 [ 893.362065][ T3214] active_anon 20480 [ 893.373646][ T3214] inactive_file 0 [ 893.381688][ T3214] active_file 0 [ 893.394080][ T3214] unevictable 0 [ 893.400900][ T3214] hierarchical_memory_limit 314572800 [ 893.411948][ T3214] hierarchical_memsw_limit 9223372036854771712 [ 893.426304][ T3214] total_cache 0 [ 893.429891][ T3214] total_rss 0 [ 893.433227][ T3214] total_rss_huge 0 [ 893.437165][ T3214] total_shmem 0 [ 893.440692][ T3214] total_mapped_file 0 [ 893.445962][ T3214] total_dirty 0 [ 893.449484][ T3214] total_writeback 0 [ 893.453355][ T3214] total_workingset_refault_anon 6 [ 893.459042][ T3214] total_workingset_refault_file 0 [ 893.466853][ T3214] total_swap 188416 [ 893.470737][ T3214] total_swapcached 212992 [ 893.475502][ T3214] total_pgpgin 167530 [ 893.479552][ T3214] total_pgpgout 167524 [ 893.483671][ T3214] total_pgfault 341897 [ 893.488232][ T3214] total_pgmajfault 5 [ 893.492193][ T3214] total_inactive_anon 4096 [ 893.497048][ T3214] total_active_anon 20480 [ 893.501437][ T3214] total_inactive_file 0 [ 893.514196][ T3214] total_active_file 0 [ 893.520450][ T3214] total_unevictable 0 [ 893.528943][ T3214] anon_cost 0 [ 893.535766][ T3214] file_cost 0 [ 893.542406][ T3214] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9557,pid=3214,uid=0 [ 893.579278][ T3214] Memory cgroup out of memory: Killed process 3214 (syz.4.9557) total-vm:167820kB, anon-rss:1232kB, file-rss:22936kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 893.962065][ T3284] bond0: Device is already in use. [ 894.054157][ T3288] xt_CONNSECMARK: invalid mode: 65 [ 894.156935][T31117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.165741][T31117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.205590][ T3294] FAULT_INJECTION: forcing a failure. [ 894.205590][ T3294] name failslab, interval 1, probability 0, space 0, times 0 [ 894.240783][ T3291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.250687][ T3294] CPU: 0 UID: 0 PID: 3294 Comm: syz.0.9583 Not tainted syzkaller #0 PREEMPT(full) [ 894.250709][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 894.250719][ T3294] Call Trace: [ 894.250727][ T3294] [ 894.250734][ T3294] dump_stack_lvl+0xe8/0x150 [ 894.250763][ T3294] should_fail_ex+0x412/0x560 [ 894.250789][ T3294] should_failslab+0xa8/0x100 [ 894.250812][ T3294] __kmalloc_noprof+0xe8/0x760 [ 894.250831][ T3294] ? sock_kmalloc+0xd6/0x160 [ 894.250861][ T3294] sock_kmalloc+0xd6/0x160 [ 894.250888][ T3294] af_alg_get_rsgl+0x236/0x810 [ 894.250928][ T3294] skcipher_recvmsg+0x3a3/0x1140 [ 894.250969][ T3294] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 894.250996][ T3294] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 894.251014][ T3294] ? security_socket_recvmsg+0x7e/0x2c0 [ 894.251038][ T3294] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 894.251061][ T3294] sock_recvmsg+0x22c/0x270 [ 894.251097][ T3294] ____sys_recvmsg+0x1e6/0x4a0 [ 894.251129][ T3294] ? __pfx_____sys_recvmsg+0x10/0x10 [ 894.251166][ T3294] ? import_iovec+0x73/0xa0 [ 894.251192][ T3294] ___sys_recvmsg+0x215/0x590 [ 894.251213][ T3294] ? get_pid_task+0x20/0x1f0 [ 894.251234][ T3294] ? __pfx____sys_recvmsg+0x10/0x10 [ 894.251281][ T3294] ? __fget_files+0x3a0/0x420 [ 894.251315][ T3294] __x64_sys_recvmsg+0x1ba/0x2a0 [ 894.251341][ T3294] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 894.251375][ T3294] ? __pfx_ksys_write+0x10/0x10 [ 894.251406][ T3294] do_syscall_64+0x14d/0xf80 [ 894.251430][ T3294] ? trace_irq_disable+0x3b/0x150 [ 894.251453][ T3294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.251477][ T3294] ? clear_bhb_loop+0x40/0x90 [ 894.251499][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.251515][ T3294] RIP: 0033:0x7fd67319c629 [ 894.251532][ T3294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.251546][ T3294] RSP: 002b:00007fd673fb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 894.251565][ T3294] RAX: ffffffffffffffda RBX: 00007fd673415fa0 RCX: 00007fd67319c629 [ 894.251578][ T3294] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 894.251589][ T3294] RBP: 00007fd673fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 894.251600][ T3294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 894.251611][ T3294] R13: 00007fd673416038 R14: 00007fd673415fa0 R15: 00007fffa8ad92a8 [ 894.251639][ T3294] [ 894.660654][ T3303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 895.079160][ T3324] netlink: 'syz.1.9594': attribute type 7 has an invalid length. [ 895.092484][ T3324] netlink: 'syz.1.9594': attribute type 8 has an invalid length. [ 895.120492][ T3324] erspan0: entered promiscuous mode [ 895.151917][ T3324] erspan0: left promiscuous mode [ 895.226903][ T3333] netlink: 'syz.4.9597': attribute type 8 has an invalid length. [ 895.360114][ T3337] netlink: 'syz.1.9599': attribute type 4 has an invalid length. [ 895.395345][ T3337] netlink: 'syz.1.9599': attribute type 4 has an invalid length. [ 896.009255][ T3367] FAULT_INJECTION: forcing a failure. [ 896.009255][ T3367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.022482][ T3367] CPU: 0 UID: 0 PID: 3367 Comm: syz.0.9612 Not tainted syzkaller #0 PREEMPT(full) [ 896.022505][ T3367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 896.022516][ T3367] Call Trace: [ 896.022524][ T3367] [ 896.022532][ T3367] dump_stack_lvl+0xe8/0x150 [ 896.022561][ T3367] should_fail_ex+0x412/0x560 [ 896.022587][ T3367] _copy_from_user+0x2d/0xb0 [ 896.022613][ T3367] sock_do_ioctl+0x195/0x320 [ 896.022635][ T3367] ? __pfx_sock_do_ioctl+0x10/0x10 [ 896.022652][ T3367] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 896.022695][ T3367] sock_ioctl+0x5c6/0x7f0 [ 896.022716][ T3367] ? __pfx_sock_ioctl+0x10/0x10 [ 896.022735][ T3367] ? __fget_files+0x2a/0x420 [ 896.022758][ T3367] ? __fget_files+0x3a0/0x420 [ 896.022780][ T3367] ? __fget_files+0x2a/0x420 [ 896.022806][ T3367] ? bpf_lsm_file_ioctl+0x9/0x20 [ 896.022827][ T3367] ? __pfx_sock_ioctl+0x10/0x10 [ 896.022845][ T3367] __se_sys_ioctl+0xfc/0x170 [ 896.022867][ T3367] do_syscall_64+0x14d/0xf80 [ 896.022889][ T3367] ? trace_irq_disable+0x3b/0x150 [ 896.022913][ T3367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.022931][ T3367] ? clear_bhb_loop+0x40/0x90 [ 896.022954][ T3367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.022971][ T3367] RIP: 0033:0x7fd67319c629 [ 896.022988][ T3367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.023002][ T3367] RSP: 002b:00007fd673fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 896.023020][ T3367] RAX: ffffffffffffffda RBX: 00007fd673415fa0 RCX: 00007fd67319c629 [ 896.023031][ T3367] RDX: 0000200000000000 RSI: 0000000000008991 RDI: 000000000000000e [ 896.023043][ T3367] RBP: 00007fd673fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 896.023053][ T3367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.023064][ T3367] R13: 00007fd673416038 R14: 00007fd673415fa0 R15: 00007fffa8ad92a8 [ 896.023096][ T3367] [ 896.280452][ T3373] x_tables: duplicate underflow at hook 1 [ 896.290587][ T3373] x_tables: ip_tables: osf match: only valid for protocol 6 [ 896.376196][ T3379] __nla_validate_parse: 12 callbacks suppressed [ 896.376215][ T3379] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9617'. [ 896.432719][ T3379] netlink: Unknown conntrack attr (0) [ 896.510912][ T3399] batadv0: left allmulticast mode [ 896.530794][ T3399] batadv0: left promiscuous mode [ 896.683825][ T3415] netlink: 'syz.1.9626': attribute type 1 has an invalid length. [ 896.707507][ T3415] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9626'. [ 896.795039][ T3425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9629'. [ 896.847417][ T3428] netlink: 648 bytes leftover after parsing attributes in process `syz.1.9631'. [ 897.121259][ T3445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9637'. [ 897.450061][ T3472] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:0 [ 897.472348][ T3472] gretap2: entered promiscuous mode [ 897.579317][ T3474] xt_CT: No such helper "snmp_trap" [ 897.593708][ T3480] FAULT_INJECTION: forcing a failure. [ 897.593708][ T3480] name failslab, interval 1, probability 0, space 0, times 0 [ 897.654099][ T3480] CPU: 0 UID: 0 PID: 3480 Comm: syz.0.9649 Not tainted syzkaller #0 PREEMPT(full) [ 897.654122][ T3480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 897.654132][ T3480] Call Trace: [ 897.654140][ T3480] [ 897.654147][ T3480] dump_stack_lvl+0xe8/0x150 [ 897.654176][ T3480] should_fail_ex+0x412/0x560 [ 897.654202][ T3480] should_failslab+0xa8/0x100 [ 897.654222][ T3480] ? skb_clone+0x212/0x3a0 [ 897.654246][ T3480] kmem_cache_alloc_noprof+0x87/0x650 [ 897.654280][ T3480] skb_clone+0x212/0x3a0 [ 897.654307][ T3480] __netlink_deliver_tap+0x404/0x850 [ 897.654341][ T3480] ? netlink_deliver_tap+0x2e/0x1b0 [ 897.654362][ T3480] netlink_deliver_tap+0x19c/0x1b0 [ 897.654383][ T3480] netlink_sendskb+0x68/0x140 [ 897.654405][ T3480] netlink_unicast+0x3a3/0x9b0 [ 897.654431][ T3480] ? __pfx_netlink_unicast+0x10/0x10 [ 897.654460][ T3480] netlink_rcv_skb+0x2b6/0x4b0 [ 897.654480][ T3480] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 897.654504][ T3480] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 897.654535][ T3480] ? netlink_deliver_tap+0x2e/0x1b0 [ 897.654563][ T3480] netlink_unicast+0x80f/0x9b0 [ 897.654590][ T3480] ? __pfx_netlink_unicast+0x10/0x10 [ 897.654609][ T3480] ? netlink_sendmsg+0x650/0xb40 [ 897.654628][ T3480] ? skb_put+0x11b/0x210 [ 897.654653][ T3480] netlink_sendmsg+0x813/0xb40 [ 897.654683][ T3480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.654707][ T3480] ? aa_sock_msg_perm+0xf1/0x1b0 [ 897.654729][ T3480] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 897.654750][ T3480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.654769][ T3480] ____sys_sendmsg+0xa68/0xad0 [ 897.654801][ T3480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.654835][ T3480] ? import_iovec+0x73/0xa0 [ 897.654861][ T3480] ___sys_sendmsg+0x2a5/0x360 [ 897.654897][ T3480] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.654957][ T3480] ? __fget_files+0x2a/0x420 [ 897.654979][ T3480] ? __fget_files+0x3a0/0x420 [ 897.655012][ T3480] __x64_sys_sendmsg+0x1bd/0x2a0 [ 897.655039][ T3480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 897.655072][ T3480] ? __pfx_ksys_write+0x10/0x10 [ 897.655102][ T3480] do_syscall_64+0x14d/0xf80 [ 897.655125][ T3480] ? trace_irq_disable+0x3b/0x150 [ 897.655147][ T3480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.655165][ T3480] ? clear_bhb_loop+0x40/0x90 [ 897.655188][ T3480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.655205][ T3480] RIP: 0033:0x7fd67319c629 [ 897.655222][ T3480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.655237][ T3480] RSP: 002b:00007fd673f95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.655256][ T3480] RAX: ffffffffffffffda RBX: 00007fd673416090 RCX: 00007fd67319c629 [ 897.655269][ T3480] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000003 [ 897.655280][ T3480] RBP: 00007fd673f95090 R08: 0000000000000000 R09: 0000000000000000 [ 897.655291][ T3480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.655302][ T3480] R13: 00007fd673416128 R14: 00007fd673416090 R15: 00007fffa8ad92a8 [ 897.655333][ T3480] [ 898.143543][ T3494] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 898.262865][ T3503] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9659'. [ 898.334417][ T3508] netlink: 'syz.2.9661': attribute type 8 has an invalid length. [ 898.342298][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9661'. [ 898.374404][ T3513] tipc: Enabled bearer , priority 0 [ 898.384545][ T3513] tipc: Resetting bearer [ 898.476885][ T3521] netlink: 'syz.2.9665': attribute type 1 has an invalid length. [ 898.514524][ T3521] 8021q: adding VLAN 0 to HW filter on device bond11 [ 898.613487][ T3528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9667'. [ 898.622741][ T3528] FAULT_INJECTION: forcing a failure. [ 898.622741][ T3528] name failslab, interval 1, probability 0, space 0, times 0 [ 898.635783][ T3528] CPU: 1 UID: 0 PID: 3528 Comm: syz.1.9667 Not tainted syzkaller #0 PREEMPT(full) [ 898.635799][ T3528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 898.635805][ T3528] Call Trace: [ 898.635810][ T3528] [ 898.635815][ T3528] dump_stack_lvl+0xe8/0x150 [ 898.635834][ T3528] should_fail_ex+0x412/0x560 [ 898.635848][ T3528] ? alloc_inode+0x6a/0x1b0 [ 898.635861][ T3528] should_failslab+0xa8/0x100 [ 898.635875][ T3528] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 898.635890][ T3528] ? simple_start_creating+0xcc/0x110 [ 898.635908][ T3528] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 898.635922][ T3528] alloc_inode+0x6a/0x1b0 [ 898.635935][ T3528] new_inode+0x22/0x170 [ 898.635951][ T3528] __debugfs_create_file+0xb8/0x400 [ 898.635966][ T3528] debugfs_create_file_full+0x3f/0x60 [ 898.635981][ T3528] ref_tracker_dir_debugfs+0x197/0x360 [ 898.635994][ T3528] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 898.636020][ T3528] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 898.636037][ T3528] ? alloc_netdev_mqs+0xa6/0x11b0 [ 898.636050][ T3528] ? __raw_spin_lock_init+0x45/0x100 [ 898.636062][ T3528] alloc_netdev_mqs+0x272/0x11b0 [ 898.636071][ T3528] ? __pfx_vlan_setup+0x10/0x10 [ 898.636088][ T3528] rtnl_create_link+0x31f/0xd70 [ 898.636102][ T3528] rtnl_newlink_create+0x277/0xb70 [ 898.636116][ T3528] ? __pfx___nla_validate_parse+0x10/0x10 [ 898.636134][ T3528] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 898.636149][ T3528] ? __pfx___mutex_lock+0x10/0x10 [ 898.636170][ T3528] ? ns_capable+0x89/0xe0 [ 898.636184][ T3528] rtnl_newlink+0x1666/0x1be0 [ 898.636204][ T3528] ? __pfx_rtnl_newlink+0x10/0x10 [ 898.636222][ T3528] ? __lock_acquire+0x6b5/0x2cf0 [ 898.636238][ T3528] ? __lock_acquire+0x6b5/0x2cf0 [ 898.636251][ T3528] ? __lock_acquire+0x6b5/0x2cf0 [ 898.636269][ T3528] ? unwind_next_frame+0xa5/0x23c0 [ 898.636296][ T3528] ? __lock_acquire+0x6b5/0x2cf0 [ 898.636310][ T3528] ? is_bpf_text_address+0x26/0x2b0 [ 898.636322][ T3528] ? kernel_text_address+0xa5/0xe0 [ 898.636348][ T3528] ? __pfx_rtnl_newlink+0x10/0x10 [ 898.636359][ T3528] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 898.636373][ T3528] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 898.636385][ T3528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 898.636399][ T3528] ? __lock_acquire+0x6b5/0x2cf0 [ 898.636416][ T3528] netlink_rcv_skb+0x232/0x4b0 [ 898.636429][ T3528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 898.636442][ T3528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 898.636459][ T3528] ? netlink_deliver_tap+0x2e/0x1b0 [ 898.636475][ T3528] netlink_unicast+0x80f/0x9b0 [ 898.636489][ T3528] ? __pfx_netlink_unicast+0x10/0x10 [ 898.636501][ T3528] ? netlink_sendmsg+0x650/0xb40 [ 898.636511][ T3528] ? skb_put+0x11b/0x210 [ 898.636527][ T3528] netlink_sendmsg+0x813/0xb40 [ 898.636543][ T3528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.636556][ T3528] ? aa_sock_msg_perm+0xf1/0x1b0 [ 898.636569][ T3528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 898.636587][ T3528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.636606][ T3528] ____sys_sendmsg+0xa68/0xad0 [ 898.636646][ T3528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 898.636678][ T3528] ? import_iovec+0x73/0xa0 [ 898.636704][ T3528] ___sys_sendmsg+0x2a5/0x360 [ 898.636722][ T3528] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.636755][ T3528] ? __fget_files+0x2a/0x420 [ 898.636768][ T3528] ? __fget_files+0x3a0/0x420 [ 898.636794][ T3528] __x64_sys_sendmsg+0x1bd/0x2a0 [ 898.636820][ T3528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 898.636854][ T3528] ? __pfx_ksys_write+0x10/0x10 [ 898.636872][ T3528] do_syscall_64+0x14d/0xf80 [ 898.636885][ T3528] ? trace_irq_disable+0x3b/0x150 [ 898.636899][ T3528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.636909][ T3528] ? clear_bhb_loop+0x40/0x90 [ 898.636922][ T3528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.636931][ T3528] RIP: 0033:0x7f1ab239c629 [ 898.636941][ T3528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.636950][ T3528] RSP: 002b:00007f1ab32bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.636961][ T3528] RAX: ffffffffffffffda RBX: 00007f1ab2615fa0 RCX: 00007f1ab239c629 [ 898.636969][ T3528] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 898.636975][ T3528] RBP: 00007f1ab32bc090 R08: 0000000000000000 R09: 0000000000000000 [ 898.636981][ T3528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.636987][ T3528] R13: 00007f1ab2616038 R14: 00007f1ab2615fa0 R15: 00007ffe2824b108 [ 898.637003][ T3528] [ 898.637008][ T3528] debugfs: out of free dentries, can not create file 'netdev@ffff888061f1e620' [ 899.114103][ T3504] tipc: Disabling bearer [ 899.365043][ T3535] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9670'. [ 899.405129][ T3548] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9673'. [ 899.633804][ T3556] team_slave_0: entered promiscuous mode [ 899.639530][ T3556] team_slave_1: entered promiscuous mode [ 899.648989][ T3556] vlan2: entered promiscuous mode [ 899.674193][ T3556] team0: entered promiscuous mode [ 900.180498][ T3575] batadv0: entered promiscuous mode [ 900.187870][ T3575] macvtap1: entered promiscuous mode [ 900.193464][ T3575] macvtap1: entered allmulticast mode [ 900.201297][ T3575] batadv0: entered allmulticast mode [ 900.209452][ T3575] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 900.384944][ T3584] tipc: Enabled bearer , priority 0 [ 900.395318][ T3584] tipc: Resetting bearer [ 900.412393][ T3583] tipc: Disabling bearer [ 900.633931][ T3597] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 900.652379][ T3597] bond8 (unregistering): Released all slaves [ 900.736817][T12001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.749457][T12001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.773254][ T3600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.056081][ T3622] bond8: entered promiscuous mode [ 901.368097][ T3641] xt_CONNSECMARK: invalid mode: 65 [ 901.457959][ T3646] __nla_validate_parse: 6 callbacks suppressed [ 901.457976][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9706'. [ 901.477979][ T3647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9706'. [ 901.565396][ T3650] sock: sock_timestamping_bind_phc: sock not bind to device [ 901.838603][ T3659] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9711'. [ 901.935839][ T3664] netlink: 'syz.1.9713': attribute type 23 has an invalid length. [ 901.943720][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9713'. [ 901.982477][ T3665] mac80211_hwsim hwsim105 syzkaller0: left promiscuous mode [ 901.994080][ T3665] mac80211_hwsim hwsim105 syzkaller0: left allmulticast mode [ 902.002497][ T3665] tipc: Resetting bearer [ 902.121762][ T3674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 902.514594][T11994] tipc: Resetting bearer [ 902.945661][ T3697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9724'. [ 902.955246][ T3695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9724'. [ 903.088441][ T3695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.126159][ T3695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.235254][ T3705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9728'. [ 903.248662][ T3705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9728'. [ 903.308832][ T3695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.319563][ T3695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.445688][ T3695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.464949][ T3695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.505462][ T3716] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9733'. [ 903.522057][ T3716] netlink: Unknown conntrack attr (0) [ 903.595998][ T3695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 903.606568][ T3695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.732666][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9737'. [ 903.799660][T11994] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.830116][T11994] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.850032][ T3728] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 903.863865][ T3728] bond0: (slave sit0): Error -95 calling set_mac_address [ 903.894462][ T3730] bond0: Device is already in use. [ 903.900729][T11994] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.919572][T11994] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.985190][T31117] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.003584][T31117] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.032399][ T3740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 904.033060][T31117] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.050630][T31117] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.073049][ T3697] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.084218][ T3697] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.138941][ T3739] bond17: entered promiscuous mode [ 904.144556][ T3739] 8021q: adding VLAN 0 to HW filter on device bond17 [ 904.162864][ T3746] bridge6: entered promiscuous mode [ 904.169035][ T3746] bond17: (slave bridge6): Enslaving as an active interface with an up link [ 904.183270][ T3697] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.216206][ T3697] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.295209][ T3697] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.328700][ T3697] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.391911][ T3697] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.398726][ T3763] netlink: 'syz.1.9750': attribute type 10 has an invalid length. [ 904.414157][ T3697] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.748530][ T3772] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 905.087261][ T3786] FAULT_INJECTION: forcing a failure. [ 905.087261][ T3786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.101191][ T3786] CPU: 0 UID: 0 PID: 3786 Comm: syz.4.9757 Not tainted syzkaller #0 PREEMPT(full) [ 905.101214][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 905.101226][ T3786] Call Trace: [ 905.101234][ T3786] [ 905.101241][ T3786] dump_stack_lvl+0xe8/0x150 [ 905.101270][ T3786] should_fail_ex+0x412/0x560 [ 905.101297][ T3786] _copy_to_user+0x31/0xb0 [ 905.101323][ T3786] simple_read_from_buffer+0xe1/0x170 [ 905.101351][ T3786] proc_fail_nth_read+0x1bb/0x230 [ 905.101377][ T3786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 905.101409][ T3786] ? rw_verify_area+0x2a6/0x4d0 [ 905.101426][ T3786] ? __local_bh_enable_ip+0xd0/0x130 [ 905.101446][ T3786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 905.101470][ T3786] vfs_read+0x20c/0xa70 [ 905.101495][ T3786] ? __pfx_vfs_read+0x10/0x10 [ 905.101513][ T3786] ? bpf_lsm_socket_connect+0x9/0x20 [ 905.101535][ T3786] ? __sys_connect+0x335/0x450 [ 905.101560][ T3786] ? __pfx___sys_connect+0x10/0x10 [ 905.101587][ T3786] ksys_read+0x150/0x270 [ 905.101607][ T3786] ? __pfx_ksys_read+0x10/0x10 [ 905.101636][ T3786] do_syscall_64+0x14d/0xf80 [ 905.101660][ T3786] ? trace_irq_disable+0x3b/0x150 [ 905.101684][ T3786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.101702][ T3786] ? clear_bhb_loop+0x40/0x90 [ 905.101724][ T3786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.101743][ T3786] RIP: 0033:0x7f416915cece [ 905.101760][ T3786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 905.101775][ T3786] RSP: 002b:00007f416a04afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 905.101795][ T3786] RAX: ffffffffffffffda RBX: 00007f416a04b6c0 RCX: 00007f416915cece [ 905.101808][ T3786] RDX: 000000000000000f RSI: 00007f416a04b0a0 RDI: 0000000000000003 [ 905.101819][ T3786] RBP: 00007f416a04b090 R08: 0000000000000000 R09: 0000000000000000 [ 905.101830][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.101841][ T3786] R13: 00007f4169416038 R14: 00007f4169415fa0 R15: 00007ffe461d26a8 [ 905.101870][ T3786] [ 905.374035][ T3788] xt_recent: Unsupported userspace flags (000000b1) [ 905.487587][ T3797] netlink: 'syz.2.9762': attribute type 4 has an invalid length. [ 905.500213][ T3797] netlink: 'syz.2.9762': attribute type 4 has an invalid length. [ 905.512741][ T1863] lo speed is unknown, defaulting to 1000 [ 905.518963][ T1863] syz2: Port: 1 Link ACTIVE [ 905.806528][ T3808] bond12: entered promiscuous mode [ 905.811919][ T3808] 8021q: adding VLAN 0 to HW filter on device bond12 [ 906.752437][ T3825] __nla_validate_parse: 4 callbacks suppressed [ 906.752455][ T3825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9772'. [ 906.862134][ T3837] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9776'. [ 907.246818][ T3851] netlink: 'syz.4.9781': attribute type 4 has an invalid length. [ 907.258059][ T3851] netlink: 'syz.4.9781': attribute type 4 has an invalid length. [ 907.797977][ T3864] bond0: (slave vlan1): Opening slave failed [ 907.950837][ T3867] tipc: Enabling of bearer rejected, already enabled [ 907.974597][ T3867] tipc: Resetting bearer [ 908.165568][ T3880] netlink: 'syz.2.9791': attribute type 10 has an invalid length. [ 908.173618][ T3880] ipvlan1: entered promiscuous mode [ 908.183918][ T3880] team0: Device ipvlan1 failed to register rx_handler [ 908.434520][T12005] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.442720][T12005] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.477420][T12005] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.494553][T12005] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.519751][T12005] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.530503][T12005] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.557065][T12005] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.565681][T12005] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.673257][ T3898] tipc: Enabling of bearer rejected, failed to enable media [ 909.085268][ T3910] syzkaller0: entered promiscuous mode [ 909.097455][ T3910] syzkaller0: entered allmulticast mode [ 909.365765][ T3914] netlink: 41 bytes leftover after parsing attributes in process `syz.2.9802'. [ 909.390653][ T3914] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9802'. [ 909.404624][ T3914] netlink: 41 bytes leftover after parsing attributes in process `syz.2.9802'. [ 909.473657][ T3920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9804'. [ 909.496206][ T3920] vlan1: entered promiscuous mode [ 910.112389][ T3950] FAULT_INJECTION: forcing a failure. [ 910.112389][ T3950] name failslab, interval 1, probability 0, space 0, times 0 [ 910.125333][ T3950] CPU: 0 UID: 0 PID: 3950 Comm: syz.2.9815 Not tainted syzkaller #0 PREEMPT(full) [ 910.125356][ T3950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.125365][ T3950] Call Trace: [ 910.125372][ T3950] [ 910.125379][ T3950] dump_stack_lvl+0xe8/0x150 [ 910.125407][ T3950] should_fail_ex+0x412/0x560 [ 910.125433][ T3950] should_failslab+0xa8/0x100 [ 910.125456][ T3950] __kmalloc_noprof+0xe8/0x760 [ 910.125475][ T3950] ? sock_kmalloc+0xd6/0x160 [ 910.125498][ T3950] ? hash_recvmsg+0x130/0x840 [ 910.125524][ T3950] sock_kmalloc+0xd6/0x160 [ 910.125551][ T3950] hash_recvmsg+0x1d4/0x840 [ 910.125573][ T3950] ? hash_check_key+0x173/0x1e0 [ 910.125593][ T3950] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 910.125616][ T3950] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 910.125639][ T3950] sock_recvmsg_nosec+0x186/0x1c0 [ 910.125663][ T3950] ____sys_recvmsg+0x3e3/0x4a0 [ 910.125697][ T3950] ? __pfx_____sys_recvmsg+0x10/0x10 [ 910.125737][ T3950] ? import_iovec+0x73/0xa0 [ 910.125771][ T3950] ___sys_recvmsg+0x215/0x590 [ 910.125794][ T3950] ? __lock_acquire+0x6b5/0x2cf0 [ 910.125826][ T3950] ? __pfx____sys_recvmsg+0x10/0x10 [ 910.125889][ T3950] do_recvmmsg+0x334/0x800 [ 910.125923][ T3950] ? __pfx_do_recvmmsg+0x10/0x10 [ 910.125959][ T3950] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 910.126002][ T3950] __x64_sys_recvmmsg+0x198/0x250 [ 910.126029][ T3950] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 910.126066][ T3950] do_syscall_64+0x14d/0xf80 [ 910.126088][ T3950] ? trace_irq_disable+0x3b/0x150 [ 910.126111][ T3950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.126129][ T3950] ? clear_bhb_loop+0x40/0x90 [ 910.126151][ T3950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.126170][ T3950] RIP: 0033:0x7fd2bbb9c629 [ 910.126186][ T3950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.126201][ T3950] RSP: 002b:00007fd2bc975028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 910.126220][ T3950] RAX: ffffffffffffffda RBX: 00007fd2bbe15fa0 RCX: 00007fd2bbb9c629 [ 910.126233][ T3950] RDX: 000000000000049f RSI: 0000200000006100 RDI: 0000000000000004 [ 910.126245][ T3950] RBP: 00007fd2bc975090 R08: 0000000000000000 R09: 0000000000000000 [ 910.126260][ T3950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.126271][ T3950] R13: 00007fd2bbe16038 R14: 00007fd2bbe15fa0 R15: 00007fffb5a15378 [ 910.126302][ T3950] [ 910.627261][ T3958] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 910.828497][ T3962] netlink: 'syz.2.9819': attribute type 4 has an invalid length. [ 910.860164][ T10] lo speed is unknown, defaulting to 1000 [ 910.867499][ T3962] netlink: 'syz.2.9819': attribute type 4 has an invalid length. [ 910.875387][ T10] syz2: Port: 1 Link DOWN [ 910.888096][ T10] lo speed is unknown, defaulting to 1000 [ 910.893828][ T10] syz2: Port: 1 Link ACTIVE [ 910.984777][ T3966] syzkaller1: entered promiscuous mode [ 910.990268][ T3966] syzkaller1: entered allmulticast mode [ 911.012425][ T3966] netlink: 'syz.4.9821': attribute type 1 has an invalid length. [ 911.065716][ T3966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9821'. [ 911.087689][ T3966] bond12 (unregistering): Released all slaves [ 911.586295][ T3992] bond0: Device is already in use. [ 911.757834][ T4007] "syz.4.9837" (4007) uses obsolete ecb(arc4) skcipher [ 911.766159][ T4007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9837'. [ 911.828537][ T4009] xt_recent: Unsupported userspace flags (000000b1) [ 911.890990][ T4012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9839'. [ 911.900890][ T4011] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9839'. [ 911.914697][ T4013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9839'. [ 911.978707][ T4015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9840'. [ 912.285720][ T4004] lo speed is unknown, defaulting to 1000 [ 912.373117][ T4024] netlink: 'syz.1.9844': attribute type 1 has an invalid length. [ 912.402709][ T4030] netlink: 41 bytes leftover after parsing attributes in process `syz.4.9845'. [ 912.412769][ T4030] netlink: 116 bytes leftover after parsing attributes in process `syz.4.9845'. [ 912.500518][ T4031] bond18 (unregistering): Released all slaves [ 912.859727][ T4052] netlink: 'syz.4.9852': attribute type 1 has an invalid length. [ 913.026567][ T4052] 8021q: adding VLAN 0 to HW filter on device bond12 [ 913.193676][ T4069] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9858'. [ 913.206161][ T4066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9855'. [ 913.222975][ T4069] netlink: Unknown conntrack attr (0) [ 913.238987][ T4068] netlink: 41 bytes leftover after parsing attributes in process `syz.4.9856'. [ 913.585099][ T4076] FAULT_INJECTION: forcing a failure. [ 913.585099][ T4076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.643368][ T4076] CPU: 1 UID: 0 PID: 4076 Comm: syz.2.9860 Not tainted syzkaller #0 PREEMPT(full) [ 913.643394][ T4076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.643405][ T4076] Call Trace: [ 913.643412][ T4076] [ 913.643421][ T4076] dump_stack_lvl+0xe8/0x150 [ 913.643450][ T4076] should_fail_ex+0x412/0x560 [ 913.643476][ T4076] _copy_from_user+0x2d/0xb0 [ 913.643501][ T4076] kstrtouint_from_user+0xd6/0x180 [ 913.643525][ T4076] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 913.643551][ T4076] ? __pfx___mutex_trylock_common+0x10/0x10 [ 913.643591][ T4076] proc_fail_nth_write+0x8e/0x210 [ 913.643613][ T4076] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 913.643642][ T4076] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 913.643666][ T4076] vfs_write+0x29a/0xb90 [ 913.643693][ T4076] ? __pfx_vfs_write+0x10/0x10 [ 913.643712][ T4076] ? __fget_files+0x2a/0x420 [ 913.643739][ T4076] ? __fget_files+0x3a0/0x420 [ 913.643759][ T4076] ? __fget_files+0x2a/0x420 [ 913.643791][ T4076] ksys_write+0x150/0x270 [ 913.643812][ T4076] ? __pfx_ksys_write+0x10/0x10 [ 913.643842][ T4076] do_syscall_64+0x14d/0xf80 [ 913.643872][ T4076] ? trace_irq_disable+0x3b/0x150 [ 913.643895][ T4076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.643912][ T4076] ? clear_bhb_loop+0x40/0x90 [ 913.643936][ T4076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.643953][ T4076] RIP: 0033:0x7fd2bbb5cece [ 913.643969][ T4076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 913.643984][ T4076] RSP: 002b:00007fd2bc974fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 913.644002][ T4076] RAX: ffffffffffffffda RBX: 00007fd2bc9756c0 RCX: 00007fd2bbb5cece [ 913.644014][ T4076] RDX: 0000000000000001 RSI: 00007fd2bc9750a0 RDI: 0000000000000006 [ 913.644025][ T4076] RBP: 00007fd2bc975090 R08: 0000000000000000 R09: 0000000000000000 [ 913.644035][ T4076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 913.644045][ T4076] R13: 00007fd2bbe16038 R14: 00007fd2bbe15fa0 R15: 00007fffb5a15378 [ 913.644076][ T4076] [ 913.968018][ T4092] netlink: 'syz.4.9866': attribute type 18 has an invalid length. [ 913.977102][ T4092] netlink: 'syz.4.9866': attribute type 18 has an invalid length. [ 914.367411][ T4117] block nbd4: not configured, cannot reconfigure [ 914.426938][ T4119] netlink: 'syz.1.9873': attribute type 23 has an invalid length. [ 914.916120][ T4150] tipc: Enabling of bearer rejected, already enabled [ 914.925087][ T4150] mac80211_hwsim hwsim105 syzkaller0: entered promiscuous mode [ 914.932664][ T4150] mac80211_hwsim hwsim105 syzkaller0: entered allmulticast mode [ 914.955135][ T4150] tipc: Resetting bearer [ 914.982467][ T4151] syzkaller0: entered promiscuous mode [ 914.988054][ T4151] syzkaller0: entered allmulticast mode [ 914.999631][ T4151] 0: reclassify loop, rule prio 0, protocol 800 [ 915.128102][ T4157] netlink: 'syz.2.9888': attribute type 1 has an invalid length. [ 915.184674][ T4158] bond13: (slave bridge7): Enslaving as a backup interface with an up link [ 915.209561][ T4157] bond13: (slave bridge8): Enslaving as a backup interface with a down link [ 915.282955][ T4164] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 915.460688][ T4174] bond10: option mode: unable to set because the bond device has slaves [ 915.948071][ T4205] netlink: 'syz.0.9903': attribute type 3 has an invalid length. [ 916.065649][ T4215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.237568][ T4225] netlink: 'syz.0.9906': attribute type 1 has an invalid length. [ 916.309346][ T4225] 8021q: adding VLAN 0 to HW filter on device bond9 [ 916.326661][ T4232] bond9: (slave dummy0): making interface the new active one [ 916.337173][ T4232] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 916.348577][ T4233] FAULT_INJECTION: forcing a failure. [ 916.348577][ T4233] name failslab, interval 1, probability 0, space 0, times 0 [ 916.364342][ T4233] CPU: 0 UID: 0 PID: 4233 Comm: syz.2.9908 Not tainted syzkaller #0 PREEMPT(full) [ 916.364365][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.364376][ T4233] Call Trace: [ 916.364384][ T4233] [ 916.364392][ T4233] dump_stack_lvl+0xe8/0x150 [ 916.364421][ T4233] should_fail_ex+0x412/0x560 [ 916.364445][ T4233] should_failslab+0xa8/0x100 [ 916.364468][ T4233] __kmalloc_noprof+0xe8/0x760 [ 916.364485][ T4233] ? sock_kmalloc+0xd6/0x160 [ 916.364507][ T4233] ? hash_recvmsg+0x130/0x840 [ 916.364533][ T4233] sock_kmalloc+0xd6/0x160 [ 916.364557][ T4233] hash_recvmsg+0x1d4/0x840 [ 916.364577][ T4233] ? hash_check_key+0x173/0x1e0 [ 916.364596][ T4233] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 916.364619][ T4233] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 916.364641][ T4233] sock_recvmsg_nosec+0x186/0x1c0 [ 916.364665][ T4233] ____sys_recvmsg+0x3e3/0x4a0 [ 916.364697][ T4233] ? __pfx_____sys_recvmsg+0x10/0x10 [ 916.364734][ T4233] ? import_iovec+0x73/0xa0 [ 916.364759][ T4233] ___sys_recvmsg+0x215/0x590 [ 916.364779][ T4233] ? __lock_acquire+0x6b5/0x2cf0 [ 916.364804][ T4233] ? __pfx____sys_recvmsg+0x10/0x10 [ 916.364865][ T4233] do_recvmmsg+0x334/0x800 [ 916.364898][ T4233] ? __pfx_do_recvmmsg+0x10/0x10 [ 916.364933][ T4233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 916.364976][ T4233] __x64_sys_recvmmsg+0x198/0x250 [ 916.365004][ T4233] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 916.365049][ T4233] do_syscall_64+0x14d/0xf80 [ 916.365073][ T4233] ? trace_irq_disable+0x3b/0x150 [ 916.365095][ T4233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.365113][ T4233] ? clear_bhb_loop+0x40/0x90 [ 916.365135][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.365153][ T4233] RIP: 0033:0x7fd2bbb9c629 [ 916.365170][ T4233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.365185][ T4233] RSP: 002b:00007fd2bc975028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 916.365204][ T4233] RAX: ffffffffffffffda RBX: 00007fd2bbe15fa0 RCX: 00007fd2bbb9c629 [ 916.365216][ T4233] RDX: 000000000000049f RSI: 0000200000006100 RDI: 0000000000000004 [ 916.365227][ T4233] RBP: 00007fd2bc975090 R08: 0000000000000000 R09: 0000000000000000 [ 916.365237][ T4233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.365248][ T4233] R13: 00007fd2bbe16038 R14: 00007fd2bbe15fa0 R15: 00007fffb5a15378 [ 916.365279][ T4233] [ 916.777862][ T4245] tipc: Enabled bearer , priority 0 [ 916.804826][ T4245] syzkaller0: entered promiscuous mode [ 916.820486][ T4245] syzkaller0: entered allmulticast mode [ 916.910606][ T4245] tipc: Resetting bearer [ 916.939707][ T4242] tipc: Resetting bearer [ 916.962713][ T4242] tipc: Disabling bearer [ 916.969608][ T4256] __nla_validate_parse: 19 callbacks suppressed [ 916.969624][ T4256] netlink: 41 bytes leftover after parsing attributes in process `syz.0.9918'. [ 916.986152][ T4256] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9918'. [ 917.002408][ T4256] netlink: 41 bytes leftover after parsing attributes in process `syz.0.9918'. [ 917.004534][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9919'. [ 917.237262][ T4270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.247187][T11994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.255291][T11994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.350521][ T4280] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9927'. [ 917.393504][ T4280] bond14: Removing last ns target with arp_interval on [ 917.555720][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9930'. [ 917.581553][ T4289] bond0: Device is already in use. [ 917.619418][ T4291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9932'. [ 917.714630][ T4296] tipc: Resetting bearer [ 917.769862][ T1862] lo speed is unknown, defaulting to 1000 [ 917.776080][ T1862] syz2: Port: 1 Link DOWN [ 917.785087][ T4296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9934'. [ 917.806635][ T4305] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 917.929882][ T4313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9941'. [ 917.966887][ T4313] bond10: entered promiscuous mode [ 917.972807][ T4313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 918.038858][ T4321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9941'. [ 918.141444][ T4313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 918.154480][ T4313] bond10: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 918.167056][ T4313] bond10: (slave ip6tnl3): Error -95 calling set_mac_address [ 918.301022][ T4333] netlink: 'syz.1.9945': attribute type 8 has an invalid length. [ 918.517603][ T4340] netlink: 'syz.0.9948': attribute type 29 has an invalid length. [ 918.593296][ T4346] netlink: 'syz.1.9949': attribute type 16 has an invalid length. [ 918.740093][ T4350] netlink: 'syz.0.9952': attribute type 2 has an invalid length. [ 918.755032][ T4350] m1Ie5nè‹Ò: entered promiscuous mode [ 919.028339][ T4372] netlink: 'syz.2.9960': attribute type 23 has an invalid length. [ 919.260560][ T4383] FAULT_INJECTION: forcing a failure. [ 919.260560][ T4383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.275007][ T4383] CPU: 1 UID: 0 PID: 4383 Comm: syz.2.9964 Not tainted syzkaller #0 PREEMPT(full) [ 919.275036][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 919.275047][ T4383] Call Trace: [ 919.275054][ T4383] [ 919.275062][ T4383] dump_stack_lvl+0xe8/0x150 [ 919.275098][ T4383] should_fail_ex+0x412/0x560 [ 919.275123][ T4383] _copy_from_user+0x2d/0xb0 [ 919.275148][ T4383] ___sys_recvmsg+0x175/0x590 [ 919.275172][ T4383] ? __lock_acquire+0x6b5/0x2cf0 [ 919.275199][ T4383] ? __pfx____sys_recvmsg+0x10/0x10 [ 919.275260][ T4383] do_recvmmsg+0x334/0x800 [ 919.275293][ T4383] ? __pfx_do_recvmmsg+0x10/0x10 [ 919.275329][ T4383] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 919.275370][ T4383] __x64_sys_recvmmsg+0x198/0x250 [ 919.275398][ T4383] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 919.275434][ T4383] do_syscall_64+0x14d/0xf80 [ 919.275457][ T4383] ? trace_irq_disable+0x3b/0x150 [ 919.275480][ T4383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.275498][ T4383] ? clear_bhb_loop+0x40/0x90 [ 919.275519][ T4383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.275537][ T4383] RIP: 0033:0x7fd2bbb9c629 [ 919.275554][ T4383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.275568][ T4383] RSP: 002b:00007fd2bc975028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 919.275588][ T4383] RAX: ffffffffffffffda RBX: 00007fd2bbe15fa0 RCX: 00007fd2bbb9c629 [ 919.275601][ T4383] RDX: 000000000000049f RSI: 0000200000006100 RDI: 0000000000000004 [ 919.275612][ T4383] RBP: 00007fd2bc975090 R08: 0000000000000000 R09: 0000000000000000 [ 919.275622][ T4383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.275632][ T4383] R13: 00007fd2bbe16038 R14: 00007fd2bbe15fa0 R15: 00007fffb5a15378 [ 919.275659][ T4383] [ 919.542546][ T4387] tipc: Enabling of bearer rejected, already enabled [ 919.670978][ T4374] lo speed is unknown, defaulting to 1000 [ 919.929899][ T4413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 921.026340][ T4423] lo speed is unknown, defaulting to 1000 [ 921.881129][ T4459] bond3: option mode: unable to set because the bond device has slaves [ 922.075542][ T4474] __nla_validate_parse: 8 callbacks suppressed [ 922.075563][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9997'. [ 922.085749][ T4476] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9998'. [ 922.174219][ T4482] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 922.195827][ T4487] FAULT_INJECTION: forcing a failure. [ 922.195827][ T4487] name failslab, interval 1, probability 0, space 0, times 0 [ 922.214493][ T4487] CPU: 0 UID: 0 PID: 4487 Comm: syz.2.10000 Not tainted syzkaller #0 PREEMPT(full) [ 922.214516][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 922.214527][ T4487] Call Trace: [ 922.214535][ T4487] [ 922.214544][ T4487] dump_stack_lvl+0xe8/0x150 [ 922.214573][ T4487] should_fail_ex+0x412/0x560 [ 922.214599][ T4487] should_failslab+0xa8/0x100 [ 922.214624][ T4487] __kmalloc_noprof+0xe8/0x760 [ 922.214642][ T4487] ? sock_kmalloc+0xd6/0x160 [ 922.214665][ T4487] ? hash_recvmsg+0x130/0x840 [ 922.214692][ T4487] sock_kmalloc+0xd6/0x160 [ 922.214720][ T4487] hash_recvmsg+0x1d4/0x840 [ 922.214749][ T4487] ? hash_check_key+0x173/0x1e0 [ 922.214769][ T4487] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 922.214793][ T4487] ? __pfx_hash_recvmsg_nokey+0x10/0x10 [ 922.214816][ T4487] sock_recvmsg_nosec+0x186/0x1c0 [ 922.214839][ T4487] ____sys_recvmsg+0x3e3/0x4a0 [ 922.214871][ T4487] ? __pfx_____sys_recvmsg+0x10/0x10 [ 922.214913][ T4487] ? import_iovec+0x73/0xa0 [ 922.214941][ T4487] ___sys_recvmsg+0x215/0x590 [ 922.214963][ T4487] ? __lock_acquire+0x6b5/0x2cf0 [ 922.214991][ T4487] ? __pfx____sys_recvmsg+0x10/0x10 [ 922.215055][ T4487] do_recvmmsg+0x334/0x800 [ 922.215090][ T4487] ? __pfx_do_recvmmsg+0x10/0x10 [ 922.215127][ T4487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 922.215178][ T4487] __x64_sys_recvmmsg+0x198/0x250 [ 922.215207][ T4487] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 922.215244][ T4487] do_syscall_64+0x14d/0xf80 [ 922.215267][ T4487] ? trace_irq_disable+0x3b/0x150 [ 922.215291][ T4487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.215309][ T4487] ? clear_bhb_loop+0x40/0x90 [ 922.215337][ T4487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.215355][ T4487] RIP: 0033:0x7fd2bbb9c629 [ 922.215372][ T4487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.215387][ T4487] RSP: 002b:00007fd2bc975028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 922.215407][ T4487] RAX: ffffffffffffffda RBX: 00007fd2bbe15fa0 RCX: 00007fd2bbb9c629 [ 922.215420][ T4487] RDX: 000000000000049f RSI: 0000200000006100 RDI: 0000000000000004 [ 922.215432][ T4487] RBP: 00007fd2bc975090 R08: 0000000000000000 R09: 0000000000000000 [ 922.215443][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 922.215454][ T4487] R13: 00007fd2bbe16038 R14: 00007fd2bbe15fa0 R15: 00007fffb5a15378 [ 922.215485][ T4487] [ 922.903278][ T4513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10007'. [ 922.924117][ T4513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10007'. [ 922.943829][ T4513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10007'. [ 922.994227][ T4513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10007'. [ 923.206434][ T4526] netlink: 'syz.4.10008': attribute type 4 has an invalid length. [ 923.230732][ T4529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10010'. [ 923.236402][ T4526] netlink: 'syz.4.10008': attribute type 4 has an invalid length. [ 923.249747][ T4530] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10009'. [ 923.260677][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10010'. [ 923.261199][ T4530] netlink: 116 bytes leftover after parsing attributes in process `syz.2.10009'. [ 924.328059][ T4572] openvswitch: netlink: Message has 572 unknown bytes. [ 924.349013][ T4572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.762292][ T4586] netlink: 'syz.4.10027': attribute type 10 has an invalid length. [ 924.903139][ T4590] macvtap5: entered promiscuous mode [ 924.908588][ T4590] batadv0: entered promiscuous mode [ 924.914592][ T4590] macvtap5: entered allmulticast mode [ 924.920059][ T4590] batadv0: entered allmulticast mode [ 924.930825][ T4590] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 924.955776][ T4597] vti0: entered promiscuous mode [ 925.199191][ T4610] netlink: 'syz.4.10036': attribute type 4 has an invalid length. [ 925.219730][ T4610] netlink: 'syz.4.10036': attribute type 4 has an invalid length. [ 925.573639][ T4626] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 925.802972][ T4639] netlink: 'syz.4.10045': attribute type 8 has an invalid length. [ 926.056469][ T4650] xt_CONNSECMARK: invalid mode: 65 [ 926.079198][ T4653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.522096][ T4677] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 926.553488][T31115] bridge_slave_1: left allmulticast mode [ 926.567614][T31115] bridge_slave_1: left promiscuous mode [ 926.581676][T31115] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.605316][T31115] bridge_slave_0: left allmulticast mode [ 926.612945][T31115] bridge_slave_0: left promiscuous mode [ 926.622612][T31115] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.630526][ T4679] netlink: 'syz.0.10060': attribute type 4 has an invalid length. [ 926.936638][T31115] bond2 (unregistering): (slave ip6gretap2): Releasing active interface [ 926.945871][T31115] ip6gretap2 (unregistering): left allmulticast mode [ 927.092490][T31115] gretap0 (unregistering): left promiscuous mode [ 927.149022][T31115] bond6 (unregistering): (slave gretap2): Releasing active interface [ 927.203555][T31115] bond4 (unregistering): (slave geneve3): Releasing active interface [ 927.224368][T31115] bond3 (unregistering): (slave geneve2): Releasing active interface [ 927.459975][T31115] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 927.687162][T31115] bond0 (unregistering): left promiscuous mode [ 927.693328][T31115] bond_slave_0: left promiscuous mode [ 927.698984][T31115] bond_slave_1: left promiscuous mode [ 927.709266][T31115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.720119][T31115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.730524][T31115] bond0 (unregistering): Released all slaves [ 927.742269][T31115] bond1 (unregistering): Released all slaves [ 927.763454][T31115] bond2 (unregistering): left allmulticast mode [ 927.769876][T31115] bond2 (unregistering): left promiscuous mode [ 927.778903][T31115] team0: Port device macvlan2 removed [ 927.789173][T31115] bond2 (unregistering): Released all slaves [ 927.804629][T31115] bond3 (unregistering): Released all slaves [ 927.817559][T31115] bond4 (unregistering): Released all slaves [ 927.829554][T31115] bond5 (unregistering): Released all slaves [ 927.842138][T31115] bond6 (unregistering): Released all slaves [ 927.855323][T31115] bond7 (unregistering): Released all slaves [ 927.881478][T31115] bond8 (unregistering): Released all slaves [ 927.896587][ T4683] tipc: Enabling of bearer rejected, already enabled [ 928.008989][T31115] : left promiscuous mode [ 928.082017][ T4703] __nla_validate_parse: 11 callbacks suppressed [ 928.082035][ T4703] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10066'. [ 928.100586][ T4703] netlink: 116 bytes leftover after parsing attributes in process `syz.2.10066'. [ 928.110393][ T4703] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10066'. [ 928.134663][T31115] hmac(sha224: left promiscuous mode [ 928.198037][T31115] tipc: Left network mode [ 928.231845][T31115] IPVS: stopping backup sync thread 17420 ... [ 928.319338][ T4713] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10068'. [ 928.371174][ T4715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10069'. [ 928.402810][ T4713] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10068'. [ 928.698334][ T4729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10073'. [ 928.733616][ T4729] bond3: option mode: unable to set because the bond device has slaves [ 929.003532][ T4694] lo speed is unknown, defaulting to 1000 [ 929.047736][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10075'. [ 929.056911][ T4737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10075'. [ 929.255892][ T4740] atomic_op ffff88807b83a998 conn xmit_atomic 0000000000000000 [ 929.389845][ T4719] lo speed is unknown, defaulting to 1000 [ 929.463527][ T4745] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10077'. [ 929.687539][ T4751] tipc: Enabling of bearer rejected, failed to enable media [ 929.698396][ T4753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 929.838427][ T4758] FAULT_INJECTION: forcing a failure. [ 929.838427][ T4758] name failslab, interval 1, probability 0, space 0, times 0 [ 929.851204][ T4758] CPU: 0 UID: 0 PID: 4758 Comm: syz.2.10081 Not tainted syzkaller #0 PREEMPT(full) [ 929.851222][ T4758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 929.851231][ T4758] Call Trace: [ 929.851237][ T4758] [ 929.851244][ T4758] dump_stack_lvl+0xe8/0x150 [ 929.851267][ T4758] should_fail_ex+0x412/0x560 [ 929.851287][ T4758] should_failslab+0xa8/0x100 [ 929.851306][ T4758] __kmalloc_cache_noprof+0x88/0x660 [ 929.851320][ T4758] ? __asan_memset+0x22/0x50 [ 929.851338][ T4758] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 929.851351][ T4758] ? __kmalloc_cache_noprof+0x15b/0x660 [ 929.851367][ T4758] alloc_netdev_mqs+0xbf8/0x11b0 [ 929.851386][ T4758] rtnl_create_link+0x31f/0xd70 [ 929.851405][ T4758] rtnl_newlink_create+0x277/0xb70 [ 929.851423][ T4758] ? __pfx___nla_validate_parse+0x10/0x10 [ 929.851448][ T4758] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 929.851468][ T4758] ? __pfx___mutex_lock+0x10/0x10 [ 929.851494][ T4758] ? ns_capable+0x89/0xe0 [ 929.851513][ T4758] rtnl_newlink+0x1666/0x1be0 [ 929.851542][ T4758] ? __pfx_rtnl_newlink+0x10/0x10 [ 929.851565][ T4758] ? __lock_acquire+0x6b5/0x2cf0 [ 929.851588][ T4758] ? __lock_acquire+0x6b5/0x2cf0 [ 929.851607][ T4758] ? __lock_acquire+0x6b5/0x2cf0 [ 929.851632][ T4758] ? unwind_next_frame+0xa5/0x23c0 [ 929.851669][ T4758] ? __lock_acquire+0x6b5/0x2cf0 [ 929.851690][ T4758] ? is_bpf_text_address+0x26/0x2b0 [ 929.851708][ T4758] ? kernel_text_address+0xa5/0xe0 [ 929.851770][ T4758] ? __pfx_rtnl_newlink+0x10/0x10 [ 929.851786][ T4758] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 929.851806][ T4758] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 929.851820][ T4758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 929.851840][ T4758] ? __lock_acquire+0x6b5/0x2cf0 [ 929.851866][ T4758] netlink_rcv_skb+0x232/0x4b0 [ 929.851885][ T4758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 929.851903][ T4758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 929.851928][ T4758] ? netlink_deliver_tap+0x2e/0x1b0 [ 929.851950][ T4758] netlink_unicast+0x80f/0x9b0 [ 929.851970][ T4758] ? __pfx_netlink_unicast+0x10/0x10 [ 929.851986][ T4758] ? netlink_sendmsg+0x650/0xb40 [ 929.852001][ T4758] ? skb_put+0x11b/0x210 [ 929.852022][ T4758] netlink_sendmsg+0x813/0xb40 [ 929.852046][ T4758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.852066][ T4758] ? aa_sock_msg_perm+0xf1/0x1b0 [ 929.852083][ T4758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 929.852100][ T4758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.852115][ T4758] ____sys_sendmsg+0xa68/0xad0 [ 929.852144][ T4758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.852173][ T4758] ? import_iovec+0x73/0xa0 [ 929.852197][ T4758] ___sys_sendmsg+0x2a5/0x360 [ 929.852221][ T4758] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.852270][ T4758] ? __fget_files+0x2a/0x420 [ 929.852290][ T4758] ? __fget_files+0x3a0/0x420 [ 929.852320][ T4758] __x64_sys_sendmsg+0x1bd/0x2a0 [ 929.852344][ T4758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 929.852375][ T4758] ? __pfx_ksys_write+0x10/0x10 [ 929.852404][ T4758] do_syscall_64+0x14d/0xf80 [ 929.852427][ T4758] ? trace_irq_disable+0x3b/0x150 [ 929.852449][ T4758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.852467][ T4758] ? clear_bhb_loop+0x40/0x90 [ 929.852489][ T4758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.852506][ T4758] RIP: 0033:0x7fd2bbb9c629 [ 929.852524][ T4758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.852538][ T4758] RSP: 002b:00007fd2bc975028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.852557][ T4758] RAX: ffffffffffffffda RBX: 00007fd2bbe15fa0 RCX: 00007fd2bbb9c629 [ 929.852569][ T4758] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 929.852580][ T4758] RBP: 00007fd2bc975090 R08: 0000000000000000 R09: 0000000000000000 [ 929.852591][ T4758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 929.852601][ T4758] R13: 00007fd2bbe16038 R14: 00007fd2bbe15fa0 R15: 00007fffb5a15378 [ 929.852633][ T4758] [ 931.363815][T31115] hsr_slave_0: left promiscuous mode [ 931.373351][T31115] hsr_slave_1: left promiscuous mode [ 931.387360][T31115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.404087][T31115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.412118][T31115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.424141][T31115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.434801][T31115] batman_adv: batadv0: Removing interface: ipvlan2 [ 931.456110][T31115] team0: left allmulticast mode [ 931.460974][T31115] team_slave_0: left allmulticast mode [ 931.472354][T31115] team_slave_1: left allmulticast mode [ 931.563202][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.834570][T31115] team_slave_1 (unregistering): left promiscuous mode [ 931.848156][T31115] team0 (unregistering): Port device team_slave_1 removed [ 931.885004][T31115] team_slave_0 (unregistering): left promiscuous mode [ 931.956340][ T4799] netlink: 'syz.1.10093': attribute type 1 has an invalid length. [ 931.987348][T31115] team0 (unregistering): Port device team_slave_0 removed [ 932.151151][ T4797] ipvlan2: entered allmulticast mode [ 932.164023][ T4797] batadv_slave_1: entered allmulticast mode [ 932.277228][ T4811] netlink: 'syz.2.10097': attribute type 10 has an invalid length. [ 932.312014][ T4811] team0: Device ipvlan1 failed to register rx_handler [ 932.354448][ T4813] netlink: 'syz.0.10098': attribute type 4 has an invalid length. [ 932.386512][ T4813] netlink: 'syz.0.10098': attribute type 4 has an invalid length. [ 932.460407][ T4819] batadv_slave_0: entered promiscuous mode [ 932.527688][T31115] IPVS: stop unused estimator thread 0... [ 932.546563][ T4819] batadv_slave_0: left promiscuous mode [ 932.691099][ T4829] syzkaller0: entered promiscuous mode [ 932.709191][ T4829] syzkaller0: entered allmulticast mode [ 932.716574][ T4833] bridge0: entered allmulticast mode [ 932.722075][ T4833] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 932.818891][ T4839] tipc: Enabling of bearer rejected, already enabled [ 932.950301][ T4847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 933.089867][ T4860] netlink: 'syz.2.10116': attribute type 19 has an invalid length. [ 933.104267][ T4860] __nla_validate_parse: 5 callbacks suppressed [ 933.104282][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10116'. [ 933.133235][ T4860] netlink: 'syz.2.10116': attribute type 19 has an invalid length. [ 933.144160][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10116'. [ 933.229672][ T4869] tipc: Enabling of bearer rejected, already enabled [ 933.321384][ T4875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10125'. [ 933.337644][ T4875] bridge0: port 1(batadv0) entered blocking state [ 933.347494][ T4875] bridge0: port 1(batadv0) entered disabled state [ 933.354186][ T4875] batadv0: entered allmulticast mode [ 933.361459][ T4875] batadv0: entered promiscuous mode [ 933.580070][ T4892] tipc: Enabling of bearer rejected, already enabled [ 933.646007][ T4900] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10136'. [ 933.710064][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10137'. [ 933.837138][T31116] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 933.846931][T31116] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 933.935510][ T4914] tipc: Enabling of bearer rejected, already enabled [ 933.953868][ T4918] bond0: Device is already in use. [ 933.962562][ T4917] x_tables: duplicate underflow at hook 1 [ 934.166269][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10149'. [ 934.174984][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10153'. [ 934.217210][ T4939] netlink: 'syz.2.10154': attribute type 1 has an invalid length. [ 934.311310][ T4939] 8021q: adding VLAN 0 to HW filter on device bond15 [ 934.418687][ T4954] netlink: 'syz.0.10159': attribute type 1 has an invalid length. [ 934.476662][ T4959] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10161'. [ 934.487907][ T4959] netlink: Unknown conntrack attr (0) [ 934.533292][ T4954] bond11: entered promiscuous mode [ 934.539462][ T4954] 8021q: adding VLAN 0 to HW filter on device bond11 [ 934.540885][ T4965] IPv6: Can't replace route, no match found [ 934.595156][ T4965] IPv6: Can't replace route, no match found [ 934.638911][ T4960] 8021q: adding VLAN 0 to HW filter on device bond11 [ 934.646979][ T4960] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 934.660352][ T4960] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 934.680493][ T4960] bond11: (slave wireguard0): making interface the new active one [ 934.688588][ T4960] wireguard0: entered promiscuous mode [ 934.695814][ T4960] bond11: (slave wireguard0): Enslaving as an active interface with an up link [ 934.712697][ T4965] bond11: (slave wireguard1): The slave device specified does not support setting the MAC address [ 934.737758][ T4965] bond11: (slave wireguard1): Enslaving as a backup interface with an up link [ 934.749097][ T4978] RDS: rds_bind could not find a transport for ::1c00:1400:0:0:0, load rds_tcp or rds_rdma? [ 934.781490][ T4981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10167'. [ 936.228245][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10168'. [ 936.375162][ T4992] bond12: option mode: invalid value (254) [ 936.386563][ T4992] bond12 (unregistering): Released all slaves [ 936.724627][ T5012] syzkaller1: entered promiscuous mode [ 936.734917][ T5012] syzkaller1: entered allmulticast mode [ 936.739264][ T5005] FAULT_INJECTION: forcing a failure. [ 936.739264][ T5005] name failslab, interval 1, probability 0, space 0, times 0 [ 936.757469][ T5005] CPU: 0 UID: 0 PID: 5005 Comm: syz.1.10176 Not tainted syzkaller #0 PREEMPT(full) [ 936.757490][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 936.757501][ T5005] Call Trace: [ 936.757509][ T5005] [ 936.757516][ T5005] dump_stack_lvl+0xe8/0x150 [ 936.757545][ T5005] should_fail_ex+0x412/0x560 [ 936.757571][ T5005] should_failslab+0xa8/0x100 [ 936.757592][ T5005] ? __pmd_alloc+0xc0/0x860 [ 936.757615][ T5005] kmem_cache_alloc_noprof+0x87/0x650 [ 936.757639][ T5005] ? set_page_refcounted+0xa0/0x1e0 [ 936.757666][ T5005] __pmd_alloc+0xc0/0x860 [ 936.757695][ T5005] huge_pte_alloc+0x517/0x610 [ 936.757714][ T5005] ? hugetlb_fault+0x45a/0x1670 [ 936.757737][ T5005] hugetlb_fault+0x51d/0x1670 [ 936.757768][ T5005] ? __pfx_hugetlb_fault+0x10/0x10 [ 936.757799][ T5005] ? mtree_range_walk+0x6a7/0x840 [ 936.757822][ T5005] handle_mm_fault+0x202b/0x3310 [ 936.757863][ T5005] ? mt_find+0x186/0x630 [ 936.757886][ T5005] ? handle_mm_fault+0xee/0x3310 [ 936.757908][ T5005] ? __pfx_mt_find+0x10/0x10 [ 936.757938][ T5005] ? __pfx_handle_mm_fault+0x10/0x10 [ 936.757964][ T5005] ? __up_read+0x291/0x6b0 [ 936.757987][ T5005] ? __pfx___up_read+0x10/0x10 [ 936.758015][ T5005] __get_user_pages+0x165b/0x29d0 [ 936.758077][ T5005] populate_vma_page_range+0x2be/0x3c0 [ 936.758104][ T5005] ? __pfx_populate_vma_page_range+0x10/0x10 [ 936.758132][ T5005] ? down_read+0x272/0x2e0 [ 936.758147][ T5005] ? __mm_populate+0x173/0x390 [ 936.758173][ T5005] __mm_populate+0x25f/0x390 [ 936.758198][ T5005] ? __pfx___mm_populate+0x10/0x10 [ 936.758231][ T5005] vm_mmap_pgoff+0x3aa/0x4f0 [ 936.758261][ T5005] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 936.758280][ T5005] ? rcu_is_watching+0x15/0xb0 [ 936.758313][ T5005] ? hugetlbfs_get_inode+0x448/0x690 [ 936.758341][ T5005] ? hugetlb_file_setup+0x42c/0x630 [ 936.758363][ T5005] ksys_mmap_pgoff+0x586/0x760 [ 936.758399][ T5005] do_syscall_64+0x14d/0xf80 [ 936.758422][ T5005] ? trace_irq_disable+0x3b/0x150 [ 936.758446][ T5005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.758464][ T5005] ? clear_bhb_loop+0x40/0x90 [ 936.758485][ T5005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.758504][ T5005] RIP: 0033:0x7f1ab239c629 [ 936.758520][ T5005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.758535][ T5005] RSP: 002b:00007f1ab32bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 936.758555][ T5005] RAX: ffffffffffffffda RBX: 00007f1ab2615fa0 RCX: 00007f1ab239c629 [ 936.758568][ T5005] RDX: 0000000000000005 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 936.758579][ T5005] RBP: 00007f1ab32bc090 R08: ffffffffffffffff R09: 0000000000000000 [ 936.758590][ T5005] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000002 [ 936.758601][ T5005] R13: 00007f1ab2616038 R14: 00007f1ab2615fa0 R15: 00007ffe2824b108 [ 936.758634][ T5005] [ 937.480067][ T4996] lo speed is unknown, defaulting to 1000 [ 938.234651][ T5023] lo speed is unknown, defaulting to 1000 [ 938.509732][ T5067] __nla_validate_parse: 5 callbacks suppressed [ 938.509750][ T5067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10194'. [ 938.586887][ T5067] macvtap2: entered promiscuous mode [ 938.614252][ T5067] macvtap2: entered allmulticast mode [ 938.619642][ T5067] batadv0: entered allmulticast mode [ 938.653653][ T5067] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 938.934098][ T5083] hsr0: entered promiscuous mode [ 938.945179][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10198'. [ 938.970759][ T5083] hsr_slave_0: left promiscuous mode [ 938.985279][ T5083] hsr_slave_1: left promiscuous mode [ 939.007376][ T5083] hsr0 (unregistering): left promiscuous mode [ 939.351407][ T5100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10205'. [ 939.513564][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10208'. [ 939.522868][ T5107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10208'. [ 939.570542][ T5079] lo speed is unknown, defaulting to 1000 [ 939.620249][ T5102] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 940.371244][ T5117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 940.432504][ T5119] netlink: 41 bytes leftover after parsing attributes in process `syz.1.10212'. [ 940.449963][ T5119] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10212'. [ 941.550979][ T5124] netlink: 'syz.1.10214': attribute type 1 has an invalid length. [ 941.687991][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10217'. [ 941.769897][ T5142] netlink: 'syz.4.10219': attribute type 29 has an invalid length. [ 941.923341][ T5151] netlink: 'syz.0.10223': attribute type 23 has an invalid length. [ 941.952167][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10223'. [ 942.027335][ T5150] netlink: 41 bytes leftover after parsing attributes in process `syz.4.10222'. [ 942.502188][ T5186] netlink: 'syz.4.10228': attribute type 10 has an invalid length. [ 942.676575][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.684255][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.043139][ T5210] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 943.116292][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.134294][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.240146][ T5168] tipc: Resetting bearer [ 943.372976][ T5168] batadv0: left allmulticast mode [ 943.430215][T11994] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.447227][T11994] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.458518][T11994] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.468023][T11994] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.552387][T11994] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.584431][T11994] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.592797][T11994] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.604878][T11994] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.637846][ T5218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.746735][ T5218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.754559][ T5218] batman_adv: batadv0: Removing interface: ipvlan3 [ 943.761681][ T5218] batman_adv: batadv0: Removing interface: ipvlan4 [ 943.774440][ T5218] batadv0 (unregistering): left allmulticast mode [ 943.781031][ T5218] batadv0 (unregistering): left promiscuous mode [ 943.869661][ T5231] __nla_validate_parse: 1 callbacks suppressed [ 943.869678][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10235'. [ 943.913577][ T5231] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 944.090653][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 944.101063][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 944.109607][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 944.118234][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 944.127364][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 944.312925][ T5246] xt_CT: No such helper "snmp_trap" [ 944.389519][ T5252] netlink: 'syz.1.10238': attribute type 96 has an invalid length. [ 944.524395][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10240'. [ 944.735728][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10242'. [ 944.770902][ T5273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10241'. [ 945.037709][ T5237] lo speed is unknown, defaulting to 1000 [ 945.131123][ T5289] netlink: 'syz.2.10246': attribute type 4 has an invalid length. [ 945.164627][ T5289] netlink: 'syz.2.10246': attribute type 4 has an invalid length. [ 945.193388][T17645] lo speed is unknown, defaulting to 1000 [ 945.205664][T17645] syz2: Port: 1 Link ACTIVE [ 945.313900][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 945.524982][ T5310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10250'. [ 945.586172][ T5310] bond1: option mode: unable to set because the bond device has slaves [ 945.608771][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.644230][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.665325][ T5237] bridge_slave_0: entered allmulticast mode [ 945.684117][ T5237] bridge_slave_0: entered promiscuous mode [ 945.696319][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.731028][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.744162][ T5237] bridge_slave_1: entered allmulticast mode [ 945.755757][ T5237] bridge_slave_1: entered promiscuous mode [ 945.823665][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.846696][ T5328] netlink: 'syz.1.10255': attribute type 8 has an invalid length. [ 945.870504][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.879999][ T5328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10255'. [ 945.909998][ T5330] netlink: 'syz.0.10257': attribute type 1 has an invalid length. [ 945.985334][ T5330] 8021q: adding VLAN 0 to HW filter on device bond12 [ 945.994740][ T5237] team0: Port device team_slave_0 added [ 946.002987][ T5237] team0: Port device team_slave_1 added [ 946.060354][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.069713][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.070296][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10259'. [ 946.095675][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.097429][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.123157][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.152039][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.184013][ T51] Bluetooth: hci6: command tx timeout [ 946.215523][ T5237] hsr_slave_0: entered promiscuous mode [ 946.222163][ T5237] hsr_slave_1: entered promiscuous mode [ 946.228669][ T5237] debugfs: 'hsr0' already exists in 'hsr' [ 946.234656][ T5237] Cannot create hsr debugfs directory [ 946.327290][ T5344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 946.596159][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10265'. [ 946.831282][ T5368] syzkaller0: entered promiscuous mode [ 946.850055][ T5368] syzkaller0: entered allmulticast mode [ 946.890901][ T5376] netlink: 'syz.1.10273': attribute type 21 has an invalid length. [ 946.902391][ T5376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10273'. [ 947.073689][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10274'. [ 947.077595][ T5383] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 947.639196][ T5409] netlink: 'syz.2.10286': attribute type 23 has an invalid length. [ 948.264252][ T51] Bluetooth: hci6: command tx timeout [ 948.394439][ T5452] tipc: Enabling of bearer rejected, already enabled [ 948.626340][ T5467] macvtap2: entered promiscuous mode [ 948.631820][ T5467] macvtap2: entered allmulticast mode [ 948.653445][ T5467] batadv0: entered allmulticast mode [ 948.661170][ T5467] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 948.886256][ T5491] __nla_validate_parse: 14 callbacks suppressed [ 948.886271][ T5491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10303'. [ 948.903771][ T5478] sctp: [Deprecated]: syz.0.10302 (pid 5478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 948.903771][ T5478] Use struct sctp_sack_info instead [ 948.975861][ T5495] netlink: 41 bytes leftover after parsing attributes in process `syz.4.10305'. [ 948.985493][ T5495] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10305'. [ 949.090754][ T5503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10307'. [ 949.141082][ T5503] 8021q: adding VLAN 0 to HW filter on device bond18 [ 949.160327][ T5510] netlink: 'syz.2.10308': attribute type 1 has an invalid length. [ 949.180326][ T5506] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10309'. [ 949.260384][ T5510] 8021q: adding VLAN 0 to HW filter on device bond16 [ 949.285285][ T5524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10312'. [ 949.327134][ T5526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10313'. [ 949.433045][ T5530] mac80211_hwsim hwsim105 syzkaller0: left promiscuous mode [ 949.440823][ T5530] mac80211_hwsim hwsim105 syzkaller0: left allmulticast mode [ 949.448825][ T5530] tipc: Resetting bearer [ 949.498117][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10317'. [ 949.611995][ T5540] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10319'. [ 950.160930][ T5513] lo speed is unknown, defaulting to 1000 [ 950.265345][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10322'. [ 950.328818][ T5549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 950.348953][ T51] Bluetooth: hci6: command tx timeout [ 950.551021][ T5566] netlink: 'syz.1.10325': attribute type 1 has an invalid length. [ 950.562859][ T5566] netlink: 'syz.1.10325': attribute type 2 has an invalid length. [ 950.966197][ T5553] lo speed is unknown, defaulting to 1000 [ 951.550819][ T5593] netlink: 'syz.4.10331': attribute type 10 has an invalid length. [ 951.750797][ T5577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 952.041333][ T5610] xt_CT: No such helper "snmp_trap" [ 952.047395][ T5614] netlink: 'syz.4.10341': attribute type 6 has an invalid length. [ 952.073717][ T5614] netlink: 'syz.4.10341': attribute type 5 has an invalid length. [ 952.142227][ T5620] netlink: 'syz.1.10344': attribute type 3 has an invalid length. [ 952.424484][ T51] Bluetooth: hci6: command tx timeout [ 952.745229][ T5666] syzkaller0: left promiscuous mode [ 952.750467][ T5666] syzkaller0: left allmulticast mode [ 952.756766][ T5666] tipc: Resetting bearer [ 952.898316][ T5678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 953.043113][ T5684] syzkaller1: entered promiscuous mode [ 953.054027][ T5684] syzkaller1: entered allmulticast mode [ 953.247706][ T5698] pimreg: entered allmulticast mode [ 953.265888][ T5698] pimreg: left allmulticast mode [ 953.430509][ T5705] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 953.497128][ T5709] netlink: 'syz.0.10375': attribute type 4 has an invalid length. [ 953.512660][ T5709] netlink: 'syz.0.10375': attribute type 4 has an invalid length. [ 953.928640][ T5737] __nla_validate_parse: 14 callbacks suppressed [ 953.928661][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10382'. [ 953.948008][ T5739] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10384'. [ 954.016536][ T5744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10385'. [ 954.050327][ T5744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10385'. [ 954.086681][ T5730] delete_channel: no stack [ 954.135189][ T5749] netlink: 'syz.2.10387': attribute type 1 has an invalid length. [ 954.170262][ T5749] 8021q: adding VLAN 0 to HW filter on device bond17 [ 954.207232][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10389'. [ 954.238635][ T5752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10389'. [ 954.326307][ T5763] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10394'. [ 954.412099][ T5769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10396'. [ 954.534216][ T5779] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10400'. [ 955.306661][ T5797] syzkaller0: entered promiscuous mode [ 955.312165][ T5797] syzkaller0: entered allmulticast mode [ 955.317971][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10407'. [ 955.500259][ T5809] netlink: 'syz.1.10410': attribute type 8 has an invalid length. [ 955.646031][ T5820] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 955.652299][ T5820] syzkaller1: linktype set to 778 [ 955.831228][ T5830] syzkaller0: entered promiscuous mode [ 955.837151][ T5830] syzkaller0: entered allmulticast mode [ 956.598292][ T5869] netlink: 'syz.1.10429': attribute type 31 has an invalid length. [ 957.106309][ T5890] macvtap3: entered promiscuous mode [ 957.130089][ T5890] macvtap3: entered allmulticast mode [ 957.147949][ T5890] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 957.453736][ T5911] netlink: 'syz.1.10442': attribute type 4 has an invalid length. [ 957.475576][ T5911] netlink: 'syz.1.10442': attribute type 4 has an invalid length. [ 957.680419][ T5918] syzkaller0: entered promiscuous mode [ 957.702929][ T5918] syzkaller0: entered allmulticast mode [ 959.141528][ T5948] __nla_validate_parse: 6 callbacks suppressed [ 959.141546][ T5948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10451'. [ 960.009931][ T5899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 960.021313][ T5964] netlink: 'syz.4.10454': attribute type 23 has an invalid length. [ 960.029734][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10454'. [ 960.164207][ T5977] netlink: 'syz.1.10456': attribute type 8 has an invalid length. [ 960.229989][ T5982] xt_TCPMSS: Only works on TCP SYN packets [ 960.378362][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10464'. [ 960.413750][ T6001] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10466'. [ 960.423025][ T6001] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10466'. [ 960.443836][ T6003] syzkaller0: entered promiscuous mode [ 960.450451][ T6003] syzkaller0: entered allmulticast mode [ 960.456549][ T6003] tipc: Resetting bearer [ 960.497447][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10468'. [ 960.827853][ T6024] sctp: [Deprecated]: syz.4.10473 (pid 6024) Use of int in maxseg socket option. [ 960.827853][ T6024] Use struct sctp_assoc_value instead [ 960.843194][ T6024] x_tables: duplicate underflow at hook 3 [ 961.092738][ T6039] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10477'. [ 961.102015][ T6039] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10477'. [ 961.405474][ T6033] lo speed is unknown, defaulting to 1000 [ 961.459607][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10482'. [ 961.703173][ T6064] syzkaller1: entered promiscuous mode [ 961.717667][ T6064] syzkaller1: entered allmulticast mode [ 961.822574][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10491'. [ 961.881682][ T6068] bond1: option mode: unable to set because the bond device has slaves [ 962.369902][ T6091] : entered promiscuous mode [ 962.476443][ T6100] vlan3: entered promiscuous mode [ 962.611260][ T6110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 962.851788][ T6125] C: renamed from team_slave_0 [ 962.899420][ T6125] netlink: 'syz.4.10513': attribute type 1 has an invalid length. [ 962.908291][ T6125] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 963.226346][ T6143] netlink: 'syz.4.10518': attribute type 4 has an invalid length. [ 963.257768][ T6143] netlink: 'syz.4.10518': attribute type 4 has an invalid length. [ 963.911238][ T6160] netlink: 'syz.1.10525': attribute type 5 has an invalid length. [ 964.272005][ T6189] xt_CONNSECMARK: invalid mode: 65 [ 964.527321][ T6206] netlink: 'syz.2.10541': attribute type 10 has an invalid length. [ 964.540832][ T6206] team0: Port device dummy0 added [ 964.551043][ T6206] netlink: 'syz.2.10541': attribute type 10 has an invalid length. [ 964.573839][ T6206] team0: Port device dummy0 removed [ 964.587925][ T6206] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 965.018941][ T6213] __nla_validate_parse: 12 callbacks suppressed [ 965.018961][ T6213] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10543'. [ 965.072027][ T6215] netlink: 'syz.2.10544': attribute type 23 has an invalid length. [ 965.080208][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10544'. [ 965.420686][ T6231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.491605][ T6237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10554'. [ 965.658338][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10559'. [ 965.736804][ T6251] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 965.945606][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10565'. [ 966.137287][ T6268] netlink: 'syz.1.10569': attribute type 3 has an invalid length. [ 966.156673][ T6268] nbd: nbd1 already in use [ 966.162161][ T6268] block nbd1: NBD_DISCONNECT [ 966.167841][ T6268] block nbd1: Send disconnect failed -32 [ 966.175911][ T6268] block nbd1: shutting down sockets [ 966.390091][T31115] gretap0 (unregistering): left promiscuous mode [ 966.425469][T31115] bond1 (unregistering): (slave gretap1): Releasing active interface [ 966.434160][T31115] gretap1 (unregistering): left allmulticast mode [ 966.454796][T31115] bond4 (unregistering): (slave gretap2): Releasing active interface [ 966.479605][T31115] bond11 (unregistering): (slave gretap3): Releasing active interface [ 966.523172][T31115] geneve0 (unregistering): left promiscuous mode [ 966.537557][T31115] geneve0 (unregistering): left allmulticast mode [ 966.546167][T31115] team0: Port device geneve0 removed [ 966.740430][T31115] team0: Port device bridge5 removed [ 966.909253][T31115] bond0 (unregistering): left promiscuous mode [ 966.915614][T31115] bond_slave_0: left promiscuous mode [ 966.921181][T31115] bond_slave_1: left promiscuous mode [ 966.930760][T31115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.942341][T31115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.952406][T31115] bond0 (unregistering): Released all slaves [ 966.962727][T31115] bond1 (unregistering): Released all slaves [ 966.975231][T31115] bond2 (unregistering): left allmulticast mode [ 966.981471][T31115] bond2 (unregistering): left promiscuous mode [ 966.990264][T31115] team0: Port device macvlan2 removed [ 966.999878][T31115] bond2 (unregistering): Released all slaves [ 967.016360][T31115] bond3 (unregistering): left allmulticast mode [ 967.022737][T31115] bond3 (unregistering): left promiscuous mode [ 967.030505][T31115] team0: Port device macvlan3 removed [ 967.039106][T31115] bond3 (unregistering): Released all slaves [ 967.052394][T31115] bond4 (unregistering): Released all slaves [ 967.070054][T31115] bond5 (unregistering): Released all slaves [ 967.082289][T31115] bond6 (unregistering): Released all slaves [ 967.097729][T31115] bond7 (unregistering): (slave veth5): Releasing backup interface [ 967.107185][T31115] bond7 (unregistering): Released all slaves [ 967.120403][T31115] bond8 (unregistering): Released all slaves [ 967.132654][T31115] bond9 (unregistering): Released all slaves [ 967.145926][T31115] bond10 (unregistering): Released all slaves [ 967.167854][T31115] bond11 (unregistering): Released all slaves [ 967.183205][T31115] bond12 (unregistering): Released all slaves [ 967.195923][T31115] bond13 (unregistering): Released all slaves [ 967.209351][ T6277] pimreg: left allmulticast mode [ 967.246386][ T6279] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 967.303357][ T6280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.318145][ T6220] Bluetooth: hci6: command 0x0405 tx timeout [ 967.333852][ T6280] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.352751][ T6280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 967.420382][ T6307] gtp0: entered promiscuous mode [ 967.433015][ T6307] team0: Device gtp0 is of different type [ 967.543814][ T6313] netlink: 'syz.4.10579': attribute type 142 has an invalid length. [ 967.664042][ T6317] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10581'. [ 967.904809][ T6323] : entered promiscuous mode [ 967.935823][ T6325] gretap1: entered promiscuous mode [ 968.560573][ T6351] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10591'. [ 968.638209][ T6336] lo speed is unknown, defaulting to 1000 [ 968.729390][ T6355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 968.921247][ T6373] tipc: Enabling of bearer rejected, failed to enable media [ 968.978340][ T6378] syzkaller0: entered promiscuous mode [ 968.983823][ T6378] syzkaller0: entered allmulticast mode [ 969.020384][T31115] : left promiscuous mode [ 969.107795][T31115] tipc: Disabling bearer [ 969.128178][T31115] tipc: Left network mode [ 969.197603][ T6383] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 969.465842][ T6402] syzkaller0: left promiscuous mode [ 969.490834][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10609'. [ 969.504090][ T6402] syzkaller0: left allmulticast mode [ 969.509592][ T6402] tipc: Resetting bearer [ 969.522523][ T6404] netlink: 'syz.0.10609': attribute type 4 has an invalid length. [ 969.614557][ T600] unregister_netdevice: waiting for netdevsim0 to become free. Usage count = 2 [ 969.620818][ T6411] netlink: 'syz.0.10611': attribute type 23 has an invalid length. [ 969.625316][ T600] ref_tracker: netdev@ffff88807b970620 has 1/1 users at [ 969.625316][ T600] xfrm_dev_state_add+0x6e7/0xc30 [ 969.625316][ T600] xfrm_add_sa+0x34ca/0x4230 [ 969.625316][ T600] xfrm_user_rcv_msg+0x746/0xb20 [ 969.625316][ T600] netlink_rcv_skb+0x232/0x4b0 [ 969.625316][ T600] xfrm_netlink_rcv+0x79/0x90 [ 969.625316][ T600] netlink_unicast+0x80f/0x9b0 [ 969.625316][ T600] netlink_sendmsg+0x813/0xb40 [ 969.625316][ T600] ____sys_sendmsg+0xa68/0xad0 [ 969.625316][ T600] ___sys_sendmsg+0x2a5/0x360 [ 969.625316][ T600] __x64_sys_sendmsg+0x1bd/0x2a0 [ 969.625316][ T600] do_syscall_64+0x14d/0xf80 [ 969.625316][ T600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.625316][ T600] [ 969.632050][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10611'. [ 969.870460][ T6357] lo speed is unknown, defaulting to 1000 [ 970.118107][ T6371] lo speed is unknown, defaulting to 1000 [ 970.899964][ T6220] block nbd1: Receive control failed (result -32) [ 971.040391][T31115] hsr_slave_0: left promiscuous mode [ 971.047669][T31115] hsr_slave_1: left promiscuous mode [ 971.053430][T31115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.061285][T31115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.069458][T31115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.077078][T31115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.084802][T31115] batman_adv: batadv0: Removing interface: ipvlan2 [ 971.091760][T31115] batman_adv: batadv0: Removing interface: ipvlan0 [ 971.103798][T31115] veth1_to_hsr: left allmulticast mode [ 971.109588][T31115] veth1_to_hsr: left promiscuous mode [ 971.115226][T31115] veth1_macvtap: left promiscuous mode [ 971.120700][T31115] veth0_macvtap: left promiscuous mode [ 971.265100][T31115] team_slave_1 (unregistering): left promiscuous mode [ 971.271880][T31115] team_slave_1 (unregistering): left allmulticast mode [ 971.279497][T31115] team0 (unregistering): Port device team_slave_1 removed [ 971.292160][T31115] team_slave_0 (unregistering): left promiscuous mode [ 971.299248][T31115] team_slave_0 (unregistering): left allmulticast mode [ 971.307109][T31115] team0 (unregistering): Port device team_slave_0 removed [ 971.377831][T31115] dummy0 (unregistering): left promiscuous mode [ 971.384616][T31115] dummy0 (unregistering): left allmulticast mode [ 971.391513][T31115] team0 (unregistering): Port device dummy0 removed [ 971.692626][T31115] IPVS: stop unused estimator thread 0...