last executing test programs: 4.286580192s ago: executing program 2 (id=2171): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x660, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 4.172839806s ago: executing program 2 (id=2173): r0 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 3.370551652s ago: executing program 4 (id=2185): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x8100, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 3.210721568s ago: executing program 2 (id=2187): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "cc5e65fb4e966cb6"}, 0x38) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x3}, 0x18) read(r2, 0x0, 0x0) write$ppp(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xf002c87f84008808, 0x9}, {0xf}, {0x5, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008850}, 0x4080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.089989791s ago: executing program 4 (id=2189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8014) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000300000000000004000000080002000500000006000b00"], 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r1, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYRES8=r9, @ANYRES8=r7, @ANYBLOB="010000000000000000000200000008000300d9d1a6549f270a62845890c95d23ed126833a39929d15529cdfc6a9103709f95d8ec55b963df92cbe79c0ee219b6d54630cba18e522747bfcd1de948f21d0b4a03092534347e3e1e810201ff60b63417ea8b80281b08817298c5da6c778bbd1c83bf21882a7a3878a9ba1b70b996eb6ba718203037b63c6b9372f747153d6216b62b8070509bd2fd3282e00aaa42e370dbb4dff4e77ebf7c0d874f7662f3e071d110545f5139581021f8e5153db6bd83c043e85acce9c88bf6ff346e39ac757b87b2c51b1f98a1d819f7e2573b0bb62c433cf3d9cc9d05adfdf3118b", @ANYBLOB="68d26010714f98d212dc4b005b32f48231c5e831697e1785e93a06e45ceb606f75447756727ba1951e23f6e5f4b47ff147e0ed322b01dcad11b27e758846cd9900e4789c342d2805d1db41c9b733006af623968d99efbedd8e62f3eb7faf4c02a7781697da2849c68d2dc03c03fcb8a4bd3a4d", @ANYBLOB="01af"], 0x28}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000004c0)="2dd5407f4fbafb751efb69e97fd18acaeace2c0e1098ee893110dab7a5fc9191ac1eb3a3bb95d396d567f16fb3cd50d35230f706242a07005e9fb54401d1bb1480c090eeeb51b8d1c1c0754562b238bcbb9623bf42fa509dd2add106913ec407a66ab600000000000000d07f0849bd367f3a16352f1140c670b5ddce7713f5d600", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x59) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="69e1c315c18154171fa2d95651543a94e6b9e230ff851f4e28480585af45cc4dbc1b7ac544721904783d5cf9feb59787fa0a28d7d35be6e2cbed5b6c382291e8a2868a98c420cbd448ca1ef0f267b8991bf1172ca45b63acd9acce34be720e251e092f15cc56ec4e3df8890796c54c6d6fdb917a88000000", @ANYRES16=r9, @ANYBLOB="140326bd7000fddbdf2501000000140005000000000000000000000000000000000008000c000300000008000700e0000002080004000300000008000800640101010a0001007770616e3000000008000800ac1414bb140005000000000000000000000000000000000008000c000100000008000c0001000000"], 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x15) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="24002d8005000100fe0000000800020003000000050004000100000008000300e7"], 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40002010}) 2.749765961s ago: executing program 4 (id=2196): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100"/60, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) 2.541278926s ago: executing program 4 (id=2200): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="080000e6", @ANYRES16=r1, @ANYBLOB="030f0000000000000000340000005700a8006f7a2e6ff5c3cf47428f6802268a24f9c44447b0b239407807a9ebdb83bfdd3bf3f956ef5b326d18871ab43098057e66035271210a3584e92992916585b5afbd50ad9e21d9535a489e6760dfd2ecabfbec1bfe00"], 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x24}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = epoll_create1(0x0) syz_emit_ethernet(0x186, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd687ad628015087ffff020000000000000000000000000001fc0000000000000000000000000000000802040106400960fe8000000000000000000000000000bb5c0c011a00000000fe880000000000000000000000000101fe8000000000000000000000000000aafe88000000000000f993000000000001fc01000000000000000000000000000000000000000000000000ffffac1414aafc0200000000000000000000000000003210029f00000000fc000000000000000000000000000000fc010000000000000000000000000000fc01000000000000000000000000000000000000000000000000000000000000fe800000000000000000000000000015fe8000000000000000000000000000aafe80000000000000000000000000001800000000000000000000ffff640101027ee095a7f19813958c59940c172eaa855fdfcdac3264546a2219349bd47dabd210d4eb40f34279f40eeee7b3969c038088108c94313b0af8d1269f4108a07ecd5e543de4a6cbf566"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d5f290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681000000140000800d000000c606f93f6b8199f926000000000000598b44e4a26e367e53d44eaac234a29be2289ec7c08bfe331964369452166404cef4bff8afb47e914cd6b9ab3c17a88a726dadfecb6a71d35b978324e9cc776af8702627d34ba7cacddf2b7ff5e1036883d8540724ad06f1acb0bc19def60e3a18e68580ec10e91296b0aa36004d9cee12e92f8ef3b758466014793a6444b64aa5a5d7778dce8f8b9137b6bb7905fe1b974287c158f18bad243b85c5ddbf3dc26fb47b6911fce5f96be3449be3c0f895c8ef4eda3775175f5aea4fcdbb11178a82b6d3b3576cbaf5320675a5da1b4fbb44ff1f27e67e3321f3087c851121def1c7f547326cc40c36e987"], 0xe0}], 0x1}, 0x40040) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff6e) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) close(0x3) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 2.278762556s ago: executing program 4 (id=2205): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) unshare(0x6a040000) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="f185f760a91e3e0b1f990d3b03a5517644baa879e267c0a69e1c5e25000d9a26fb228b4a847e4fafaadca19ca9c25d3f8bfc3d59fc6ddb5e80a5b0cc7bf233d9a137845aac398778c8860373c7892df743fbbc545053fd7d5c5113fafd59639bf83c76b65bca40c4c239cfc7ede32d32f49e02c2e20392a1e02ec58cc56671dc80ee432974f510712598a16f", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf2506000000080006001a7d0000080006000100000008000600011b000004000180"], 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0xfe4f907a138f28a) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) getsockopt(r3, 0xfffffffd, 0x3, 0x0, &(0x7f0000000140)) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) 2.275429608s ago: executing program 2 (id=2206): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write(r0, &(0x7f00000002c0), 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) 2.11182164s ago: executing program 2 (id=2208): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="453ca46242862db9c111920000010100007700000000000000bdec1ba4a58272fa886e33deef231e000600"/55], &(0x7f0000000000)='GPL\x00'}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x8}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af1ff0028"], 0x28}}, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aa000800490000240000000000009078ac1414bbac1414358907efffffffff8606000000000000004294998a4dd2a576eb785c5485e5fbd747c779282daf7cb8f439e89dc504b641ab5ac480e94872897fe8ae2253a2bbfc472164ae61da1de1b1881ff2cde1c34c081ff5892146c872b5339a75afaba3c31e611d16e83769a997c0f95af55714051a1ebc81e0c8be6c78c10de14f34ec47d8f06c1a3b0e78a373ae0822a67393aaa5a60a349d814317216a921ee702f8458aee0fa34c8cb1b145fa6685e985d9c5f98a342b4c62277e1c4666be37c5eb32aaefd427d0c94a694099c4b9"], 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000140)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.892818208s ago: executing program 1 (id=2210): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x24, 0x0, 0x1900000000000000}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}]}, 0x154}}, 0x0) 1.727202583s ago: executing program 3 (id=2212): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000004080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) close(r1) 1.541317756s ago: executing program 3 (id=2215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r8, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random="000000020007"}, 0x10) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) connect$llc(r9, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 1.469430538s ago: executing program 1 (id=2216): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "cc5e65fb4e966cb6"}, 0x38) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x3}, 0x18) read(r2, 0x0, 0x0) write$ppp(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xf002c87f84008808, 0x9}, {0xf}, {0x5, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008850}, 0x4080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.342233734s ago: executing program 0 (id=2217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e"], 0x70}}, 0x0) (fail_nth: 10) 1.309399755s ago: executing program 4 (id=2218): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}, {}], "44942d"}, @ptr, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "84"}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f00000014c0)=""/2, 0x6b, 0x2, 0x1}, 0x28) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) write(r3, &(0x7f0000003300)="ac", 0x1) write(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7, 0x0, 0x7f}, 0x18) r8 = socket$inet6(0xa, 0x3, 0x3c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x6, 0x6330, 0x110, 0xffffffffffffffff, 0x8000, '\x00', r9, r3, 0x3, 0x3, 0x5}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 978.281182ms ago: executing program 1 (id=2219): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000254000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 855.316025ms ago: executing program 0 (id=2220): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40080084) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500a1000000080004"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 723.139384ms ago: executing program 1 (id=2221): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777203d5b9538000000000300060000000000020000000000000000090000000000000200010000000000000002fcff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 722.595396ms ago: executing program 2 (id=2222): r0 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 462.127791ms ago: executing program 3 (id=2223): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100"/60, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) 380.190835ms ago: executing program 1 (id=2224): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x7c2}) socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='sched_switch\x00', r2, 0x0, 0xbcb}, 0x37) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="7fc3ba67a36f2b6e591ed23e48c22df5abd2d4aa9d2d5d203c4f3e63cec3d4f9338c79e192e7a10f03770feb4cdfc048cc3928a03cd358d1b97c1791e7f04a3de7f2edb97944e80eecd5f837758b58ad452f9d6f34b00b8bc46a2f5d302abdf0c93e4ad280e23f020849c56f1767059932e4e6e65800860f19325581e3c2e0b81b0c1f09b3f0771c50cbdf10f50778b628cd6df413c16f1a95f4a15192a664be6af9fd5f83a259922545c07de4e050b1c8f90d63cfbab32bd1938827e093ced5226587f33a532ccb10c0e9f99dfafba527c30ae3d1aa7044a76c"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket(0x2c, 0x3, 0xfffffffc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f1e5d8a1002d09ce0000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r8}, &(0x7f0000000a40), &(0x7f0000000a80)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x0) 317.528262ms ago: executing program 0 (id=2225): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 242.027871ms ago: executing program 3 (id=2226): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2c020400) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r7) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xfc, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@empty, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x3c}, @in=@local, {0x1fffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {0x10, 0x8}, 0x0, 0x0, 0xa, 0x1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x3}}]}, 0xfc}}, 0x0) 241.634846ms ago: executing program 0 (id=2227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000240ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0) 189.002202ms ago: executing program 0 (id=2228): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r2, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r1, r2, 0x2f, 0x2000, 0x4}, 0x20) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) r3 = socket$unix(0x1, 0x2, 0x0) r4 = accept4$unix(r3, 0x0, &(0x7f00000004c0), 0x80800) sendmsg$unix(r4, &(0x7f0000000480)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="39dc283f1e07cc9b7cbabe9f7b577bb2bad4599fac306532e5287cac3b9709f7e365f9d202a92e30799a6a5a41544da6ddc02b20c6604925feaad1c237b7b65cff284aa81366bedd2831267d0b79611e8cdf4d1cd0913d7e47ee130ff8853301f8789d27fd1c4cd84ff3e0bd2ff5fe359ce5e119fd71ab6c7dfd542dff2b", 0x7e}, {&(0x7f0000000180)="63e2e23c6545d49b0e2bf566afda7d", 0xf}, {&(0x7f00000001c0)="d232219cd6bdd798cf88ee99c3f860574f16a00252ac15687ce3c6a9125757cc70337a716451cc6db15375ff3b43dc7bed0f2e577363f3534262e8ef171f4bc7aeeb0011b60775f38fa06618afa197ce493d66e4b20bf6bf6003f927f759a872e97cb590975bd6456d1942", 0x6b}, {&(0x7f0000000300)="11b3d6466a1e3cf7fefb23120858b222c81968a58522e6c1bb0ade8b0e2c9d60190501ac157865315e78fdc7053c2b1e08c1be2b8097b99edf6a1b014a39c9ad259ffb8d198ff33bf169ab7f9a60bc6c7668b3e53979df51a0a05bfde74878c1f044b6e5b21f806973d1e3c9ee045a2b8b2e738201ee0119b9293db0fd59e8478dab446a9211d0d16d1a00fa85f0a4f5ad", 0x91}, {&(0x7f0000000940)="836a1c89ea69dd937d923884c70741188a347bd762e1e6aca22c52c48ce49ad116c7c5c76cd8398d1ce577c757f309c8c70ea59d921b01b55148cec29ae8e4203d4c334e59612b6f1cf45d134abeb17ac0f9e9a671aceca3522d1ef14989634848454e44d4b83a6dfc2d148ff3af875688725325c95b9827f4547885e81b8dccefb89e679c5d31f3d5472de9a2483431469b64c3bbf6712d70aa023c759f48932b6ccb5753a9f31af6f32c34374ef6f682", 0xb1}, {&(0x7f0000000b80)="44055f4230222ebef8ed71fc703ab041999173dabe19999995b686bab2d4f69a0f401bb27999034c1a90f0e64ae404a8e61f0d7ad2e6e7c0245d301cb132679b83136a92fda436a873ad72a4b4b70f7aa33052b8b0e2efcd3f56b6a07060934eaf677556f49c1f17d1e4d8d356087c6aea72d96ce0a424cb61b3e1b61eef17b9a72a072e8b51815da871f17b74338ba3f2c01b2de5025832a47c254a6512e8427a4fc7db4a991bac7e1df0d21797b7c03f4135da3d16257e48999f044b9af164ac519c00170f846c", 0xc8}], 0x6, 0x0, 0x0, 0x20004040}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="176b0db5d25446463f74d3740a70f6e0249ca79eab579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e39", 0x61}, {&(0x7f0000000700)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9b859dc1b8a2ecca66132bd68a90f03f10f1fb3b2d7c3ef20dc1074a4ab268b17ab3ea31489aead9ab69a3b779e83c259279904a6ef330e637c994178ffc1922e966353b6a48225198e98ae3e88940c", 0xbe}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) socket$inet6(0xa, 0x80003, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x4) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/88, 0x58}, {&(0x7f0000000a80)=""/198, 0xc6}, {&(0x7f0000000840)=""/228, 0xe4}], 0x3}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth1_vlan\x00') 139.350358ms ago: executing program 1 (id=2229): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "cc5e65fb4e966cb6"}, 0x38) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40047459, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x3}, 0x18) read(r2, 0x0, 0x0) write$ppp(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xf002c87f84008808, 0x9}, {0xf}, {0x5, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008850}, 0x4080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 54.289967ms ago: executing program 3 (id=2230): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xffffffffffffff74, 0x108}, @unspec=@IDLETIMER={0x30, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8, 0x0, {0x300}}, {0x28}}}}, 0x470) 53.96014ms ago: executing program 0 (id=2231): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a05000000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100ac00000008000140000008090800024000000001090001007379"], 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c0002800800050001"], 0x8c}, 0x1, 0x2000000, 0x0, 0x4000084}, 0x14) 0s ago: executing program 3 (id=2232): r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xac, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x78, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x6c, 0x1, [@m_ctinfo={0x68, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x3c, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88ee"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1400800}, 0xc, &(0x7f0000000540)={&(0x7f0000000b80)={0x120, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfbaf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @local, 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0xfffffffffffffe9f, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x11}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffeffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x53}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0xb886b04844d7fed7) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x15}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000180)={'veth1_to_hsr\x00', {0x2, 0x0, @private}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="44010000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2511000000140003800500080024000000060007004e2400004400028008000800ffffffff080007000800000008000400c70f000006000f000600000005000d0000000004000000000000000006000f00a8d5000008000400090000004c000380060007004e230000140002007663616e30000000000000000000000008000500ac1414aa0800030002000000060007004e220000140002006261746164765f736c6176655f300000600003800800030002000000140002006e657464657673696d300000000000000600040003000000140002007465616d5f736c6176655f30000000001400060000000000000000000000ffffac1e00010600040005000000060004000e0000002c00028006000b000a00000006000b000a000000060002004e2200000800060000000000080007000000000092d011a7b441af6c63d359dddca85f421bc47596c7fcb0a5d99d9d1a22eb69ddc3aee768"], 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x8000) kernel console output (not intermixed with test programs): 0x10 [ 174.984298][ T9825] ? do_syscall_64+0xbe/0xfa0 [ 174.984325][ T9825] do_syscall_64+0xfa/0xfa0 [ 174.984346][ T9825] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.984369][ T9825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.984387][ T9825] ? clear_bhb_loop+0x60/0xb0 [ 174.984410][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.984428][ T9825] RIP: 0033:0x7f8afa38d97f [ 174.984444][ T9825] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 174.984460][ T9825] RSP: 002b:00007f8afb1ed000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 174.984479][ T9825] RAX: ffffffffffffffda RBX: 00007f8afa5e5fa0 RCX: 00007f8afa38d97f [ 174.984494][ T9825] RDX: 000000000000004a RSI: 0000200000000080 RDI: 00000000000000c8 [ 174.984505][ T9825] RBP: 00007f8afb1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 174.984517][ T9825] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 174.984528][ T9825] R13: 00007f8afa5e6038 R14: 00007f8afa5e5fa0 R15: 00007ffe59df3dc8 [ 174.984566][ T9825] [ 175.161391][ T9836] openvswitch: netlink: IP tunnel dst address not specified [ 175.462432][ T9843] xt_addrtype: ipv6 does not support BROADCAST matching [ 175.694232][ T9848] lo speed is unknown, defaulting to 1000 [ 176.393534][ T9871] __nla_validate_parse: 11 callbacks suppressed [ 176.393552][ T9871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1218'. [ 176.663154][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 176.678648][ T9881] netlink: 'syz.3.1223': attribute type 20 has an invalid length. [ 176.731389][ T9882] bridge0: port 3(macvlan3) entered blocking state [ 176.738865][ T9882] bridge0: port 3(macvlan3) entered disabled state [ 176.746061][ T9882] macvlan3: entered allmulticast mode [ 176.760317][ T9885] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.768839][ T9882] bridge0: entered allmulticast mode [ 176.816832][ T9882] macvlan3: left allmulticast mode [ 176.822092][ T9882] bridge0: left allmulticast mode [ 176.887775][ T1162] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.896764][ T1162] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.918961][ T1162] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.939440][ T9886] netlink: 'syz.3.1223': attribute type 30 has an invalid length. [ 176.970386][ T1162] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.060964][ T9896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1228'. [ 177.094346][ T9900] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 177.236236][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'. [ 177.266980][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 177.535683][ T9918] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1233'. [ 177.556822][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'. [ 178.048978][ T9933] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 178.281973][ T9946] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 178.291376][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1245'. [ 178.303533][ T9946] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.344990][ T9942] tipc: Enabled bearer , priority 0 [ 178.376563][ T9942] syzkaller0: entered promiscuous mode [ 178.382056][ T9942] syzkaller0: entered allmulticast mode [ 178.452970][ T9942] tipc: Resetting bearer [ 178.481083][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 178.529256][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 178.549968][ T9941] tipc: Resetting bearer [ 178.578495][ T9941] tipc: Disabling bearer [ 178.711574][ T9961] netlink: 'syz.0.1251': attribute type 4 has an invalid length. [ 178.719480][ T9961] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 178.738900][ T9964] lo speed is unknown, defaulting to 1000 [ 178.809135][ T9972] netlink: 'syz.0.1251': attribute type 10 has an invalid length. [ 178.938734][ T9980] lo speed is unknown, defaulting to 1000 [ 179.307251][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.326089][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.546569][ T7257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.554410][ T7257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.555874][T10015] netlink: 'syz.1.1268': attribute type 9 has an invalid length. [ 179.598849][T10015] netlink: 'syz.1.1268': attribute type 7 has an invalid length. [ 179.630352][T10015] netlink: 'syz.1.1268': attribute type 8 has an invalid length. [ 179.653236][T10022] openvswitch: netlink: IP tunnel dst address not specified [ 179.864347][T10029] IPVS: Error connecting to the multicast addr [ 179.964063][T10034] xt_hashlimit: overflow, try lower: 3/0 [ 180.023880][T10042] smc: net device veth0_to_bond applied user defined pnetid SYZ0 [ 180.081694][T10041] lo speed is unknown, defaulting to 1000 [ 180.230739][T10033] lo speed is unknown, defaulting to 1000 [ 180.381766][T10055] lo speed is unknown, defaulting to 1000 [ 180.406686][T10063] netlink: 'syz.2.1281': attribute type 29 has an invalid length. [ 180.416533][T10063] netlink: 'syz.2.1281': attribute type 29 has an invalid length. [ 181.552820][T10104] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 181.611211][T10110] __nla_validate_parse: 12 callbacks suppressed [ 181.611229][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'. [ 181.774566][T10119] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1296'. [ 181.802643][T10120] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1298'. [ 181.839729][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.859116][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.896738][T10116] netlink: del zone limit has 8 unknown bytes [ 182.188292][T10129] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1299'. [ 182.190145][T10133] lo speed is unknown, defaulting to 1000 [ 182.608614][T10160] Cannot find del_set index 1 as target [ 182.704241][T10164] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1309'. [ 182.787198][T10164] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1309'. [ 182.798583][T10164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.842056][T10167] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1310'. [ 182.857599][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1311'. [ 182.861193][T10162] syzkaller1: entered promiscuous mode [ 182.872269][T10162] syzkaller1: entered allmulticast mode [ 182.877951][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1311'. [ 182.959519][T10164] dvmrp0: entered allmulticast mode [ 183.059020][T10177] netlink: 'syz.2.1314': attribute type 29 has an invalid length. [ 183.107357][T10177] netlink: 'syz.2.1314': attribute type 29 has an invalid length. [ 183.123815][T10177] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1314'. [ 183.190084][T10186] xt_bpf: check failed: parse error [ 183.392350][T10196] --map-set only usable from mangle table [ 184.122289][T10224] xt_TPROXY: Can be used only with -p tcp or -p udp [ 184.284024][T10231] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 184.734226][T10249] openvswitch: netlink: Message has 2615 unknown bytes. [ 184.744085][T10249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.878216][T10255] IPVS: Error connecting to the multicast addr [ 185.372848][T10287] openvswitch: netlink: IP tunnel dst address not specified [ 186.195311][T10331] xt_TPROXY: Can be used only with -p tcp or -p udp [ 186.459504][T10342] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 186.629086][T10350] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 186.739985][T10352] __nla_validate_parse: 14 callbacks suppressed [ 186.740003][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 186.990868][T10364] raw_sendmsg: syz.4.1384 forgot to set AF_INET. Fix it! [ 187.480007][T10380] netlink: 'syz.4.1389': attribute type 12 has an invalid length. [ 187.495616][T10384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1390'. [ 187.598605][T10389] netlink: 'syz.0.1391': attribute type 6 has an invalid length. [ 187.620364][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 187.828382][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 187.869647][T10407] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 188.173269][T10420] vlan3: entered promiscuous mode [ 188.310309][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'. [ 188.319476][T10423] netlink: 'syz.4.1403': attribute type 20 has an invalid length. [ 188.350211][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1403'. [ 188.350464][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.401055][T10423] netlink: 'syz.4.1403': attribute type 20 has an invalid length. [ 188.406054][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.428032][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.448021][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.520517][T10427] netlink: 'syz.4.1403': attribute type 30 has an invalid length. [ 188.782637][T10440] netlink: 'syz.4.1409': attribute type 4 has an invalid length. [ 188.799743][T10440] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 188.817111][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1409'. [ 188.860568][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 188.989633][T10447] lo speed is unknown, defaulting to 1000 [ 189.241871][T10462] netlink: 'syz.1.1415': attribute type 4 has an invalid length. [ 189.851072][T10491] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1423'. [ 190.072742][T10499] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1427'. [ 190.112139][T10502] 8021q: VLANs not supported on sit0 [ 190.386596][T10518] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 190.559981][T10522] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 190.766223][T10526] lo speed is unknown, defaulting to 1000 [ 190.928500][T10531] lo speed is unknown, defaulting to 1000 [ 191.491912][T10553] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 191.973253][T10575] __nla_validate_parse: 5 callbacks suppressed [ 191.973272][T10575] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1456'. [ 192.188825][T10582] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 192.314945][T10584] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 192.349323][T10584] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 192.432888][T10582] gretap1: entered promiscuous mode [ 192.451009][T10582] bond0: (slave gretap1): making interface the new active one [ 192.489156][T10582] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 192.576730][T10589] macvlan2: entered promiscuous mode [ 192.582200][T10589] macvlan2: entered allmulticast mode [ 192.588441][T10589] bond0: entered promiscuous mode [ 192.594631][T10589] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.611062][T10589] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 192.626207][T10589] bond0: left promiscuous mode [ 192.711981][T10596] lo speed is unknown, defaulting to 1000 [ 192.766853][T10602] dvmrp8: entered allmulticast mode [ 192.861251][T10602] lo speed is unknown, defaulting to 1000 [ 192.878095][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 193.215364][T10621] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1469'. [ 193.418010][T10629] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 193.617048][T10635] FAULT_INJECTION: forcing a failure. [ 193.617048][T10635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.651589][T10635] CPU: 0 UID: 0 PID: 10635 Comm: syz.0.1476 Not tainted syzkaller #0 PREEMPT(full) [ 193.651615][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.651627][T10635] Call Trace: [ 193.651634][T10635] [ 193.651642][T10635] dump_stack_lvl+0x189/0x250 [ 193.651666][T10635] ? __pfx____ratelimit+0x10/0x10 [ 193.651687][T10635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.651706][T10635] ? __pfx__printk+0x10/0x10 [ 193.651725][T10635] ? __might_fault+0xb0/0x130 [ 193.651761][T10635] should_fail_ex+0x414/0x560 [ 193.651788][T10635] _copy_from_user+0x2d/0xb0 [ 193.651806][T10635] ___sys_sendmsg+0x158/0x2a0 [ 193.651830][T10635] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.651886][T10635] ? __fget_files+0x2a/0x420 [ 193.651911][T10635] ? __fget_files+0x3a0/0x420 [ 193.651937][T10635] __x64_sys_sendmsg+0x19b/0x260 [ 193.651962][T10635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.651992][T10635] ? __pfx_ksys_write+0x10/0x10 [ 193.652020][T10635] ? do_syscall_64+0xbe/0xfa0 [ 193.652047][T10635] do_syscall_64+0xfa/0xfa0 [ 193.652069][T10635] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.652091][T10635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.652110][T10635] ? clear_bhb_loop+0x60/0xb0 [ 193.652134][T10635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.652153][T10635] RIP: 0033:0x7f8afa38eec9 [ 193.652170][T10635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.652191][T10635] RSP: 002b:00007f8afb1ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.652211][T10635] RAX: ffffffffffffffda RBX: 00007f8afa5e5fa0 RCX: 00007f8afa38eec9 [ 193.652226][T10635] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 193.652238][T10635] RBP: 00007f8afb1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 193.652250][T10635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.652261][T10635] R13: 00007f8afa5e6038 R14: 00007f8afa5e5fa0 R15: 00007ffe59df3dc8 [ 193.652295][T10635] [ 193.678898][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1479'. [ 193.788014][T10648] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1482'. [ 194.021657][T10656] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1486'. [ 194.024129][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 194.050617][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 194.084332][T10661] netlink: 'syz.4.1487': attribute type 3 has an invalid length. [ 194.092862][T10661] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1487'. [ 194.118774][T10663] FAULT_INJECTION: forcing a failure. [ 194.118774][T10663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.133320][T10663] CPU: 0 UID: 0 PID: 10663 Comm: syz.1.1488 Not tainted syzkaller #0 PREEMPT(full) [ 194.133345][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.133356][T10663] Call Trace: [ 194.133363][T10663] [ 194.133371][T10663] dump_stack_lvl+0x189/0x250 [ 194.133395][T10663] ? __pfx____ratelimit+0x10/0x10 [ 194.133418][T10663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.133438][T10663] ? __pfx__printk+0x10/0x10 [ 194.133458][T10663] ? __might_fault+0xb0/0x130 [ 194.133495][T10663] should_fail_ex+0x414/0x560 [ 194.133523][T10663] _copy_from_iter+0x1de/0x1790 [ 194.133556][T10663] ? rcu_is_watching+0x15/0xb0 [ 194.133580][T10663] ? kmalloc_reserve+0xbd/0x290 [ 194.133601][T10663] ? __pfx__copy_from_iter+0x10/0x10 [ 194.133630][T10663] ? __build_skb_around+0x262/0x3f0 [ 194.133653][T10663] ? netlink_sendmsg+0x642/0xb30 [ 194.133672][T10663] ? skb_put+0x11b/0x210 [ 194.133695][T10663] netlink_sendmsg+0x6b2/0xb30 [ 194.133725][T10663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.133747][T10663] ? __lock_acquire+0xab9/0xd20 [ 194.133764][T10663] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.133792][T10663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.133810][T10663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.133837][T10663] __sock_sendmsg+0x21c/0x270 [ 194.133868][T10663] sock_write_iter+0x279/0x360 [ 194.133896][T10663] ? __pfx_sock_write_iter+0x10/0x10 [ 194.133934][T10663] ? bpf_lsm_file_permission+0x9/0x20 [ 194.133953][T10663] ? security_file_permission+0x75/0x290 [ 194.133982][T10663] vfs_write+0x5c9/0xb30 [ 194.134012][T10663] ? __pfx_sock_write_iter+0x10/0x10 [ 194.134038][T10663] ? __pfx_vfs_write+0x10/0x10 [ 194.134075][T10663] ? __fget_files+0x2a/0x420 [ 194.134101][T10663] ksys_write+0x145/0x250 [ 194.134128][T10663] ? __pfx_ksys_write+0x10/0x10 [ 194.134153][T10663] ? do_syscall_64+0xbe/0xfa0 [ 194.134178][T10663] do_syscall_64+0xfa/0xfa0 [ 194.134198][T10663] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.134216][T10663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.134233][T10663] ? clear_bhb_loop+0x60/0xb0 [ 194.134253][T10663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.134275][T10663] RIP: 0033:0x7f3040f8eec9 [ 194.134292][T10663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.134307][T10663] RSP: 002b:00007f3041e41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.134326][T10663] RAX: ffffffffffffffda RBX: 00007f30411e5fa0 RCX: 00007f3040f8eec9 [ 194.134340][T10663] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000004 [ 194.134352][T10663] RBP: 00007f3041e41090 R08: 0000000000000000 R09: 0000000000000000 [ 194.134363][T10663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.134374][T10663] R13: 00007f30411e6038 R14: 00007f30411e5fa0 R15: 00007ffc42072428 [ 194.134402][T10663] [ 194.720610][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 194.744369][ T9497] IPVS: starting estimator thread 0... [ 194.845807][T10680] IPVS: using max 29 ests per chain, 69600 per kthread [ 195.150820][T10700] tipc: Enabling of bearer rejected, failed to enable media [ 195.171536][T10698] lo speed is unknown, defaulting to 1000 [ 195.185478][T10700] bridge_slave_0: left allmulticast mode [ 195.191231][T10700] bridge_slave_0: left promiscuous mode [ 195.197967][T10700] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.218843][T10700] bridge_slave_1: left allmulticast mode [ 195.224506][T10700] bridge_slave_1: left promiscuous mode [ 195.250177][T10700] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.266365][T10700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.281296][T10700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.302609][T10700] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.374011][T10704] veth0: entered promiscuous mode [ 195.382095][T10704] veth0: left promiscuous mode [ 195.425860][T10711] netlink: 'syz.0.1501': attribute type 30 has an invalid length. [ 195.458176][T10714] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 195.597781][T10717] bond1: entered promiscuous mode [ 195.602906][T10717] bond1: entered allmulticast mode [ 195.619960][T10717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.541090][T10736] lo speed is unknown, defaulting to 1000 [ 262.758591][T10752] tipc: Started in network mode [ 262.763492][T10752] tipc: Node identity 2e1dc7b078e5, cluster identity 8 [ 262.796211][T10752] tipc: Enabled bearer , priority 0 [ 262.832884][T10752] syzkaller0: entered promiscuous mode [ 262.852764][T10752] syzkaller0: entered allmulticast mode [ 262.865685][T10747] tipc: Enabled bearer , priority 0 [ 263.013133][T10749] tipc: Resetting bearer [ 263.080057][T10751] syzkaller0: entered promiscuous mode [ 263.102532][T10751] syzkaller0: entered allmulticast mode [ 263.130480][T10759] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 263.166849][T10749] tipc: Resetting bearer [ 263.262476][T10749] tipc: Disabling bearer [ 263.821523][T10770] tipc: Resetting bearer [ 263.895454][T10772] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 264.053642][T10781] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 264.086910][T10781] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 264.274204][T10734] tipc: Resetting bearer [ 264.365845][T10734] tipc: Disabling bearer [ 264.971481][T10795] bridge0: port 3(macvlan3) entered blocking state [ 265.010358][T10795] bridge0: port 3(macvlan3) entered disabled state [ 265.044281][T10795] macvlan3: entered allmulticast mode [ 265.065837][T10795] bridge0: entered allmulticast mode [ 265.077632][T10795] macvlan3: left allmulticast mode [ 265.088780][T10795] bridge0: left allmulticast mode [ 265.347182][T10811] syzkaller1: entered promiscuous mode [ 265.365297][T10811] syzkaller1: entered allmulticast mode [ 265.694592][T10825] bridge0: port 3(macvlan3) entered blocking state [ 265.719297][T10825] bridge0: port 3(macvlan3) entered disabled state [ 265.728099][T10825] macvlan3: entered allmulticast mode [ 265.733817][T10825] bridge0: entered allmulticast mode [ 265.749615][T10825] macvlan3: left allmulticast mode [ 265.756634][T10825] bridge0: left allmulticast mode [ 266.065999][T10829] __nla_validate_parse: 2 callbacks suppressed [ 266.066016][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 266.133069][T10829] veth0: entered promiscuous mode [ 266.174402][T10829] veth0: left promiscuous mode [ 266.340401][T10833] lo speed is unknown, defaulting to 1000 [ 266.542681][T10839] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1539'. [ 266.678692][T10844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.983757][T10855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1546'. [ 267.050050][T10859] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1546'. [ 267.068712][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 267.104981][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 267.116325][T10858] bridge0: port 3(macvlan2) entered blocking state [ 267.130874][T10858] bridge0: port 3(macvlan2) entered disabled state [ 267.138416][T10858] macvlan2: entered allmulticast mode [ 267.143955][T10858] bridge0: entered allmulticast mode [ 267.154481][T10858] macvlan2: left allmulticast mode [ 267.167364][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 267.176834][T10858] bridge0: left allmulticast mode [ 267.814295][T10882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.979263][T10890] netlink: 'syz.1.1557': attribute type 2 has an invalid length. [ 268.345804][T10908] Bluetooth: hci0: invalid length 39, exp 2 for type 10 [ 268.473868][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 268.551282][T10908] team0 (unregistering): Port device team_slave_0 removed [ 268.561426][T10908] team0 (unregistering): Port device team_slave_1 removed [ 268.574144][T10908] team0 (unregistering): Port device dummy0 removed [ 268.773408][T10912] netlink: 'syz.2.1565': attribute type 30 has an invalid length. [ 269.024546][T10934] lo speed is unknown, defaulting to 1000 [ 269.040047][T10932] netlink: 'syz.2.1567': attribute type 4 has an invalid length. [ 269.064248][T10932] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 269.102474][T10932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1567'. [ 269.191278][T10940] vxcan1: entered allmulticast mode [ 269.210615][T10940] vxcan1: left allmulticast mode [ 269.211908][T10939] netlink: 'syz.2.1567': attribute type 10 has an invalid length. [ 269.313966][T10946] FAULT_INJECTION: forcing a failure. [ 269.313966][T10946] name failslab, interval 1, probability 0, space 0, times 0 [ 269.326790][T10946] CPU: 1 UID: 0 PID: 10946 Comm: syz.4.1571 Not tainted syzkaller #0 PREEMPT(full) [ 269.326815][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.326834][T10946] Call Trace: [ 269.326842][T10946] [ 269.326851][T10946] dump_stack_lvl+0x189/0x250 [ 269.326877][T10946] ? __pfx____ratelimit+0x10/0x10 [ 269.326900][T10946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.326920][T10946] ? __pfx__printk+0x10/0x10 [ 269.326946][T10946] ? __pfx___might_resched+0x10/0x10 [ 269.326966][T10946] ? fs_reclaim_acquire+0x7d/0x100 [ 269.327000][T10946] should_fail_ex+0x414/0x560 [ 269.327028][T10946] should_failslab+0xa8/0x100 [ 269.327048][T10946] kmem_cache_alloc_node_noprof+0x77/0x710 [ 269.327080][T10946] ? __alloc_skb+0x112/0x2d0 [ 269.327098][T10946] ? netlink_autobind+0xdb/0x300 [ 269.327124][T10946] __alloc_skb+0x112/0x2d0 [ 269.327148][T10946] netlink_sendmsg+0x5c6/0xb30 [ 269.327179][T10946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.327203][T10946] ? aa_sock_msg_perm+0xf1/0x1d0 [ 269.327231][T10946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.327249][T10946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.327271][T10946] __sock_sendmsg+0x21c/0x270 [ 269.327307][T10946] ____sys_sendmsg+0x505/0x830 [ 269.327335][T10946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.327368][T10946] ? import_iovec+0x74/0xa0 [ 269.327390][T10946] ___sys_sendmsg+0x21f/0x2a0 [ 269.327415][T10946] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.327477][T10946] ? __fget_files+0x2a/0x420 [ 269.327493][T10946] ? __fget_files+0x3a0/0x420 [ 269.327522][T10946] __x64_sys_sendmsg+0x19b/0x260 [ 269.327548][T10946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.327581][T10946] ? __pfx_ksys_write+0x10/0x10 [ 269.327611][T10946] ? do_syscall_64+0xbe/0xfa0 [ 269.327639][T10946] do_syscall_64+0xfa/0xfa0 [ 269.327661][T10946] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.327683][T10946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.327702][T10946] ? clear_bhb_loop+0x60/0xb0 [ 269.327725][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.327743][T10946] RIP: 0033:0x7fecae58eec9 [ 269.327760][T10946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.327776][T10946] RSP: 002b:00007fecaf4c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.327797][T10946] RAX: ffffffffffffffda RBX: 00007fecae7e5fa0 RCX: 00007fecae58eec9 [ 269.327811][T10946] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 269.327823][T10946] RBP: 00007fecaf4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 269.327834][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.327845][T10946] R13: 00007fecae7e6038 R14: 00007fecae7e5fa0 R15: 00007fffaab06698 [ 269.327879][T10946] [ 269.843639][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 269.888815][T10956] netlink: 'syz.3.1574': attribute type 4 has an invalid length. [ 269.915753][T10964] netlink: 'syz.4.1577': attribute type 20 has an invalid length. [ 269.927008][T10964] netlink: 'syz.4.1577': attribute type 20 has an invalid length. [ 269.936330][T10956] netlink: 'syz.3.1574': attribute type 1 has an invalid length. [ 270.015504][T10969] netlink: 'syz.3.1574': attribute type 10 has an invalid length. [ 270.026095][T10964] netlink: 'syz.4.1577': attribute type 30 has an invalid length. [ 270.090742][T10961] lo speed is unknown, defaulting to 1000 [ 270.191098][T10974] veth0: entered allmulticast mode [ 270.772148][T11004] lo speed is unknown, defaulting to 1000 [ 271.070008][T11014] FAULT_INJECTION: forcing a failure. [ 271.070008][T11014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.103939][T11014] CPU: 0 UID: 0 PID: 11014 Comm: syz.4.1590 Not tainted syzkaller #0 PREEMPT(full) [ 271.103964][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.103974][T11014] Call Trace: [ 271.103981][T11014] [ 271.103989][T11014] dump_stack_lvl+0x189/0x250 [ 271.104012][T11014] ? __pfx____ratelimit+0x10/0x10 [ 271.104032][T11014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.104051][T11014] ? __pfx__printk+0x10/0x10 [ 271.104071][T11014] ? __might_fault+0xb0/0x130 [ 271.104108][T11014] should_fail_ex+0x414/0x560 [ 271.104137][T11014] _copy_from_iter+0x1de/0x1790 [ 271.104172][T11014] ? rcu_is_watching+0x15/0xb0 [ 271.104198][T11014] ? kmalloc_reserve+0xbd/0x290 [ 271.104218][T11014] ? __pfx__copy_from_iter+0x10/0x10 [ 271.104245][T11014] ? __build_skb_around+0x262/0x3f0 [ 271.104273][T11014] ? netlink_sendmsg+0x642/0xb30 [ 271.104291][T11014] ? skb_put+0x11b/0x210 [ 271.104314][T11014] netlink_sendmsg+0x6b2/0xb30 [ 271.104341][T11014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.104364][T11014] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.104392][T11014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.104410][T11014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.104432][T11014] __sock_sendmsg+0x21c/0x270 [ 271.104463][T11014] ____sys_sendmsg+0x505/0x830 [ 271.104492][T11014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.104524][T11014] ? import_iovec+0x74/0xa0 [ 271.104546][T11014] ___sys_sendmsg+0x21f/0x2a0 [ 271.104571][T11014] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.104632][T11014] ? __fget_files+0x2a/0x420 [ 271.104648][T11014] ? __fget_files+0x3a0/0x420 [ 271.104683][T11014] __x64_sys_sendmsg+0x19b/0x260 [ 271.104709][T11014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.104744][T11014] ? __pfx_ksys_write+0x10/0x10 [ 271.104775][T11014] ? do_syscall_64+0xbe/0xfa0 [ 271.104804][T11014] do_syscall_64+0xfa/0xfa0 [ 271.104826][T11014] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.104849][T11014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.104869][T11014] ? clear_bhb_loop+0x60/0xb0 [ 271.104893][T11014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.104917][T11014] RIP: 0033:0x7fecae58eec9 [ 271.104934][T11014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.104952][T11014] RSP: 002b:00007fecaf4c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.104973][T11014] RAX: ffffffffffffffda RBX: 00007fecae7e5fa0 RCX: 00007fecae58eec9 [ 271.104988][T11014] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 271.105002][T11014] RBP: 00007fecaf4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 271.105015][T11014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.105026][T11014] R13: 00007fecae7e6038 R14: 00007fecae7e5fa0 R15: 00007fffaab06698 [ 271.105062][T11014] [ 271.407564][T11018] __nla_validate_parse: 8 callbacks suppressed [ 271.407583][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 271.682078][T11023] netlink: 'syz.4.1593': attribute type 29 has an invalid length. [ 271.692127][T11028] netlink: 'syz.4.1593': attribute type 29 has an invalid length. [ 271.704406][T11023] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1593'. [ 271.968199][T11043] syzkaller0: entered promiscuous mode [ 271.983968][T11043] syzkaller0: entered allmulticast mode [ 271.993260][T11038] lo speed is unknown, defaulting to 1000 [ 272.137993][T11050] xt_addrtype: ipv6 does not support BROADCAST matching [ 272.351135][T11056] tipc: Enabled bearer , priority 0 [ 272.370297][T11056] syzkaller0: entered promiscuous mode [ 272.382946][T11056] syzkaller0: entered allmulticast mode [ 272.402729][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 272.422217][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 272.442001][T11056] geneve2: entered promiscuous mode [ 272.447841][T11056] geneve2: entered allmulticast mode [ 272.455808][ T8475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 272.465025][ T8475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 272.475427][ T8475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 272.479340][T11061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1602'. [ 272.511932][T11056] tipc: Resetting bearer [ 272.521160][ T8475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 272.577077][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 272.586723][T11055] tipc: Resetting bearer [ 272.657700][T11055] tipc: Disabling bearer [ 272.905445][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 273.005243][T11079] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 273.232978][T11091] lo speed is unknown, defaulting to 1000 [ 273.244494][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 273.311511][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 273.583222][T11107] lo speed is unknown, defaulting to 1000 [ 273.652285][T11111] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 273.759537][T11115] lo speed is unknown, defaulting to 1000 [ 273.844416][T11119] lo speed is unknown, defaulting to 1000 [ 274.205728][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1622'. [ 274.367407][T11134] validate_nla: 2 callbacks suppressed [ 274.367424][T11134] netlink: 'syz.4.1624': attribute type 12 has an invalid length. [ 275.034283][T11155] lo speed is unknown, defaulting to 1000 [ 275.429168][T11167] syzkaller1: entered promiscuous mode [ 275.438664][T11167] syzkaller1: entered allmulticast mode [ 275.481716][T11173] lo speed is unknown, defaulting to 1000 [ 276.235699][T11198] lo speed is unknown, defaulting to 1000 [ 276.376085][T11205] netlink: 'syz.2.1647': attribute type 9 has an invalid length. [ 276.821167][T11236] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 276.954078][T11240] FAULT_INJECTION: forcing a failure. [ 276.954078][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 277.004489][T11240] CPU: 1 UID: 0 PID: 11240 Comm: syz.0.1655 Not tainted syzkaller #0 PREEMPT(full) [ 277.004516][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.004527][T11240] Call Trace: [ 277.004534][T11240] [ 277.004541][T11240] dump_stack_lvl+0x189/0x250 [ 277.004565][T11240] ? __pfx____ratelimit+0x10/0x10 [ 277.004587][T11240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.004611][T11240] ? __pfx__printk+0x10/0x10 [ 277.004635][T11240] ? __lock_acquire+0xab9/0xd20 [ 277.004661][T11240] should_fail_ex+0x414/0x560 [ 277.004691][T11240] should_failslab+0xa8/0x100 [ 277.004712][T11240] kmem_cache_alloc_noprof+0x74/0x6e0 [ 277.004739][T11240] ? skb_clone+0x212/0x3a0 [ 277.004775][T11240] skb_clone+0x212/0x3a0 [ 277.004803][T11240] __netlink_deliver_tap+0x404/0x850 [ 277.004839][T11240] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.004862][T11240] netlink_deliver_tap+0x19c/0x1b0 [ 277.004884][T11240] netlink_unicast+0x7fa/0x9e0 [ 277.004924][T11240] ? __pfx_netlink_unicast+0x10/0x10 [ 277.004956][T11240] ? netlink_sendmsg+0x642/0xb30 [ 277.004975][T11240] ? skb_put+0x11b/0x210 [ 277.005000][T11240] netlink_sendmsg+0x805/0xb30 [ 277.005032][T11240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.005058][T11240] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.005087][T11240] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.005104][T11240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.005124][T11240] __sock_sendmsg+0x21c/0x270 [ 277.005156][T11240] ____sys_sendmsg+0x505/0x830 [ 277.005194][T11240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.005227][T11240] ? import_iovec+0x74/0xa0 [ 277.005250][T11240] ___sys_sendmsg+0x21f/0x2a0 [ 277.005276][T11240] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.005342][T11240] ? __fget_files+0x2a/0x420 [ 277.005359][T11240] ? __fget_files+0x3a0/0x420 [ 277.005388][T11240] __x64_sys_sendmsg+0x19b/0x260 [ 277.005415][T11240] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.005448][T11240] ? __pfx_ksys_write+0x10/0x10 [ 277.005479][T11240] ? do_syscall_64+0xbe/0xfa0 [ 277.005508][T11240] do_syscall_64+0xfa/0xfa0 [ 277.005528][T11240] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.005550][T11240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.005569][T11240] ? clear_bhb_loop+0x60/0xb0 [ 277.005593][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.005612][T11240] RIP: 0033:0x7f8afa38eec9 [ 277.005629][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.005646][T11240] RSP: 002b:00007f8afb1ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.005668][T11240] RAX: ffffffffffffffda RBX: 00007f8afa5e5fa0 RCX: 00007f8afa38eec9 [ 277.005682][T11240] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 277.005695][T11240] RBP: 00007f8afb1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 277.005707][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.005718][T11240] R13: 00007f8afa5e6038 R14: 00007f8afa5e5fa0 R15: 00007ffe59df3dc8 [ 277.005753][T11240] [ 277.483910][T11250] __nla_validate_parse: 4 callbacks suppressed [ 277.483929][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'. [ 277.513834][T11253] netlink: 'syz.4.1661': attribute type 29 has an invalid length. [ 277.523101][T11253] netlink: 'syz.4.1661': attribute type 29 has an invalid length. [ 277.532864][T11253] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1661'. [ 277.583167][T11251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1659'. [ 277.595671][T11250] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 277.698286][T11255] lo speed is unknown, defaulting to 1000 [ 277.705663][T11251] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1659'. [ 277.773793][T11259] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1662'. [ 277.810887][T11259] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1662'. [ 277.840655][T11259] netlink: 'syz.4.1662': attribute type 6 has an invalid length. [ 277.872758][T11259] netlink: 'syz.4.1662': attribute type 5 has an invalid length. [ 277.902466][T11259] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1662'. [ 278.056710][T11276] xt_addrtype: ipv6 does not support BROADCAST matching [ 278.155144][T11286] FAULT_INJECTION: forcing a failure. [ 278.155144][T11286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.168695][T11286] CPU: 1 UID: 0 PID: 11286 Comm: syz.2.1669 Not tainted syzkaller #0 PREEMPT(full) [ 278.168720][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.168731][T11286] Call Trace: [ 278.168739][T11286] [ 278.168747][T11286] dump_stack_lvl+0x189/0x250 [ 278.168772][T11286] ? __pfx____ratelimit+0x10/0x10 [ 278.168795][T11286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.168815][T11286] ? __pfx__printk+0x10/0x10 [ 278.168849][T11286] should_fail_ex+0x414/0x560 [ 278.168877][T11286] _copy_to_user+0x31/0xb0 [ 278.168899][T11286] simple_read_from_buffer+0xe1/0x170 [ 278.168932][T11286] proc_fail_nth_read+0x1b3/0x220 [ 278.168959][T11286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.168986][T11286] ? rw_verify_area+0x2a6/0x4d0 [ 278.169010][T11286] ? __lock_acquire+0xab9/0xd20 [ 278.169027][T11286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.169049][T11286] vfs_read+0x200/0xa30 [ 278.169074][T11286] ? fdget_pos+0x247/0x320 [ 278.169095][T11286] ? __pfx___mutex_lock+0x10/0x10 [ 278.169121][T11286] ? __pfx_vfs_read+0x10/0x10 [ 278.169148][T11286] ? __fget_files+0x2a/0x420 [ 278.169170][T11286] ? __fget_files+0x3a0/0x420 [ 278.169186][T11286] ? __fget_files+0x2a/0x420 [ 278.169213][T11286] ksys_read+0x145/0x250 [ 278.169241][T11286] ? __pfx_ksys_read+0x10/0x10 [ 278.169271][T11286] ? do_syscall_64+0xbe/0xfa0 [ 278.169305][T11286] do_syscall_64+0xfa/0xfa0 [ 278.169327][T11286] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.169350][T11286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.169369][T11286] ? clear_bhb_loop+0x60/0xb0 [ 278.169392][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.169410][T11286] RIP: 0033:0x7feb73b8d8dc [ 278.169428][T11286] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 278.169444][T11286] RSP: 002b:00007feb74a61030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.169465][T11286] RAX: ffffffffffffffda RBX: 00007feb73de5fa0 RCX: 00007feb73b8d8dc [ 278.169480][T11286] RDX: 000000000000000f RSI: 00007feb74a610a0 RDI: 0000000000000007 [ 278.169492][T11286] RBP: 00007feb74a61090 R08: 0000000000000000 R09: 0000000000000000 [ 278.169504][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.169516][T11286] R13: 00007feb73de6038 R14: 00007feb73de5fa0 R15: 00007ffc9dd28ff8 [ 278.169551][T11286] [ 278.435554][T11289] openvswitch: netlink: IP tunnel dst address not specified [ 278.453269][T11289] openvswitch: netlink: IP tunnel dst address not specified [ 278.482709][T11289] openvswitch: netlink: IP tunnel dst address not specified [ 278.490722][T11289] openvswitch: netlink: IP tunnel dst address not specified [ 278.492502][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1671'. [ 278.498432][T11289] openvswitch: netlink: IP tunnel dst address not specified [ 278.498642][T11289] openvswitch: netlink: IP tunnel dst address not specified [ 278.522600][T11289] openvswitch: netlink: IP tunnel dst address not specified [ 278.541537][T11289] openvswitch: netlink: IP tunnel dst address not specified [ 278.571197][T11289] openvswitch: netlink: IP tunnel dst address not specified [ 278.676322][T11291] netlink: 'syz.0.1672': attribute type 30 has an invalid length. [ 278.780052][T11300] bond3: entered promiscuous mode [ 278.785212][T11300] bond3: entered allmulticast mode [ 278.790728][T11300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.791149][T11304] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1674'. [ 278.816996][T11288] lo speed is unknown, defaulting to 1000 [ 278.819078][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 279.292181][T11320] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 279.362000][T11328] lo speed is unknown, defaulting to 1000 [ 279.500814][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 279.510702][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 279.524088][T11338] netlink: 'syz.2.1685': attribute type 30 has an invalid length. [ 279.562868][T11336] lo speed is unknown, defaulting to 1000 [ 279.569298][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 279.581985][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 279.634943][ T1162] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.715122][ T1162] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.751653][ T1162] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.787652][ T1162] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.973476][T11366] FAULT_INJECTION: forcing a failure. [ 279.973476][T11366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.987817][T11366] CPU: 0 UID: 0 PID: 11366 Comm: syz.0.1693 Not tainted syzkaller #0 PREEMPT(full) [ 279.987844][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.987856][T11366] Call Trace: [ 279.987871][T11366] [ 279.987879][T11366] dump_stack_lvl+0x189/0x250 [ 279.987904][T11366] ? __pfx____ratelimit+0x10/0x10 [ 279.987927][T11366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.987948][T11366] ? __pfx__printk+0x10/0x10 [ 279.987968][T11366] ? __might_fault+0xb0/0x130 [ 279.988006][T11366] should_fail_ex+0x414/0x560 [ 279.988034][T11366] _copy_from_iter+0x1de/0x1790 [ 279.988068][T11366] ? rcu_is_watching+0x15/0xb0 [ 279.988095][T11366] ? kmalloc_reserve+0xbd/0x290 [ 279.988115][T11366] ? __pfx__copy_from_iter+0x10/0x10 [ 279.988144][T11366] ? __build_skb_around+0x262/0x3f0 [ 279.988168][T11366] ? netlink_sendmsg+0x642/0xb30 [ 279.988187][T11366] ? skb_put+0x11b/0x210 [ 279.988211][T11366] netlink_sendmsg+0x6b2/0xb30 [ 279.988242][T11366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.988266][T11366] ? aa_sock_msg_perm+0xf1/0x1d0 [ 279.988295][T11366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.988313][T11366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.988335][T11366] __sock_sendmsg+0x21c/0x270 [ 279.988366][T11366] ____sys_sendmsg+0x505/0x830 [ 279.988395][T11366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.988428][T11366] ? import_iovec+0x74/0xa0 [ 279.988450][T11366] ___sys_sendmsg+0x21f/0x2a0 [ 279.988476][T11366] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.988537][T11366] ? __fget_files+0x2a/0x420 [ 279.988554][T11366] ? __fget_files+0x3a0/0x420 [ 279.988583][T11366] __x64_sys_sendmsg+0x19b/0x260 [ 279.988608][T11366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.988643][T11366] ? __pfx_ksys_write+0x10/0x10 [ 279.988674][T11366] ? do_syscall_64+0xbe/0xfa0 [ 279.988702][T11366] do_syscall_64+0xfa/0xfa0 [ 279.988723][T11366] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.988746][T11366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.988766][T11366] ? clear_bhb_loop+0x60/0xb0 [ 279.988788][T11366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.988806][T11366] RIP: 0033:0x7f8afa38eec9 [ 279.988823][T11366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.988844][T11366] RSP: 002b:00007f8afb1ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.988869][T11366] RAX: ffffffffffffffda RBX: 00007f8afa5e5fa0 RCX: 00007f8afa38eec9 [ 279.988882][T11366] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 279.988896][T11366] RBP: 00007f8afb1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 279.988910][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.988921][T11366] R13: 00007f8afa5e6038 R14: 00007f8afa5e5fa0 R15: 00007ffe59df3dc8 [ 279.988952][T11366] [ 280.398771][T11376] FAULT_INJECTION: forcing a failure. [ 280.398771][T11376] name failslab, interval 1, probability 0, space 0, times 0 [ 280.447327][T11376] CPU: 0 UID: 0 PID: 11376 Comm: syz.1.1695 Not tainted syzkaller #0 PREEMPT(full) [ 280.447353][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.447364][T11376] Call Trace: [ 280.447372][T11376] [ 280.447380][T11376] dump_stack_lvl+0x189/0x250 [ 280.447404][T11376] ? __pfx____ratelimit+0x10/0x10 [ 280.447425][T11376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.447444][T11376] ? __pfx__printk+0x10/0x10 [ 280.447469][T11376] ? __pfx___might_resched+0x10/0x10 [ 280.447488][T11376] ? fs_reclaim_acquire+0x7d/0x100 [ 280.447518][T11376] should_fail_ex+0x414/0x560 [ 280.447546][T11376] should_failslab+0xa8/0x100 [ 280.447567][T11376] kmem_cache_alloc_node_noprof+0x77/0x710 [ 280.447593][T11376] ? __alloc_skb+0x112/0x2d0 [ 280.447612][T11376] ? netlink_autobind+0xdb/0x300 [ 280.447639][T11376] __alloc_skb+0x112/0x2d0 [ 280.447663][T11376] netlink_sendmsg+0x5c6/0xb30 [ 280.447694][T11376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.447719][T11376] ? aa_sock_msg_perm+0xf1/0x1d0 [ 280.447747][T11376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.447766][T11376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.447788][T11376] __sock_sendmsg+0x21c/0x270 [ 280.447819][T11376] ____sys_sendmsg+0x505/0x830 [ 280.447847][T11376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.447881][T11376] ? import_iovec+0x74/0xa0 [ 280.447904][T11376] ___sys_sendmsg+0x21f/0x2a0 [ 280.447930][T11376] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.447992][T11376] ? __fget_files+0x2a/0x420 [ 280.448008][T11376] ? __fget_files+0x3a0/0x420 [ 280.448036][T11376] __x64_sys_sendmsg+0x19b/0x260 [ 280.448068][T11376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.448102][T11376] ? __pfx_ksys_write+0x10/0x10 [ 280.448132][T11376] ? do_syscall_64+0xbe/0xfa0 [ 280.448160][T11376] do_syscall_64+0xfa/0xfa0 [ 280.448181][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.448205][T11376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.448225][T11376] ? clear_bhb_loop+0x60/0xb0 [ 280.448249][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.448268][T11376] RIP: 0033:0x7f3040f8eec9 [ 280.448286][T11376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.448303][T11376] RSP: 002b:00007f3041e20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.448325][T11376] RAX: ffffffffffffffda RBX: 00007f30411e6090 RCX: 00007f3040f8eec9 [ 280.448340][T11376] RDX: 0000000020000004 RSI: 0000200000000480 RDI: 0000000000000004 [ 280.448353][T11376] RBP: 00007f3041e20090 R08: 0000000000000000 R09: 0000000000000000 [ 280.448365][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.448377][T11376] R13: 00007f30411e6128 R14: 00007f30411e6090 R15: 00007ffc42072428 [ 280.448411][T11376] [ 280.736781][T11382] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 281.213796][ T30] audit: type=1800 audit(1760547777.497:2): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1701" name="memory.events" dev="tmpfs" ino=1665 res=0 errno=0 [ 281.269011][T11407] lo speed is unknown, defaulting to 1000 [ 281.307505][T11420] tipc: Enabled bearer , priority 0 [ 281.401292][T11420] tipc: Disabling bearer [ 281.547062][T11430] veth0: entered promiscuous mode [ 281.565806][T11430] veth0: left promiscuous mode [ 281.598322][T11432] syzkaller1: entered promiscuous mode [ 281.603819][T11432] syzkaller1: entered allmulticast mode [ 281.633520][T11434] lo speed is unknown, defaulting to 1000 [ 282.068470][T11449] lo speed is unknown, defaulting to 1000 [ 282.335593][T11459] lo speed is unknown, defaulting to 1000 [ 282.417909][T11464] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 282.749904][T11483] __nla_validate_parse: 11 callbacks suppressed [ 282.749921][T11483] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1722'. [ 282.948763][T11492] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1728'. [ 283.170895][T11494] lo speed is unknown, defaulting to 1000 [ 283.176724][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 283.199985][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 283.255908][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 283.327261][T11504] bond5: entered promiscuous mode [ 283.339944][T11504] bond5: entered allmulticast mode [ 283.345555][T11504] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.376958][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 283.496068][T11518] FAULT_INJECTION: forcing a failure. [ 283.496068][T11518] name failslab, interval 1, probability 0, space 0, times 0 [ 283.510746][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.0.1737 Not tainted syzkaller #0 PREEMPT(full) [ 283.510772][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.510790][T11518] Call Trace: [ 283.510798][T11518] [ 283.510806][T11518] dump_stack_lvl+0x189/0x250 [ 283.510831][T11518] ? __pfx____ratelimit+0x10/0x10 [ 283.510855][T11518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.510875][T11518] ? __pfx__printk+0x10/0x10 [ 283.510898][T11518] ? __lock_acquire+0xab9/0xd20 [ 283.510923][T11518] should_fail_ex+0x414/0x560 [ 283.510951][T11518] should_failslab+0xa8/0x100 [ 283.510971][T11518] kmem_cache_alloc_noprof+0x74/0x6e0 [ 283.510998][T11518] ? skb_clone+0x212/0x3a0 [ 283.511026][T11518] skb_clone+0x212/0x3a0 [ 283.511055][T11518] __netlink_deliver_tap+0x404/0x850 [ 283.511090][T11518] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.511112][T11518] netlink_deliver_tap+0x19c/0x1b0 [ 283.511134][T11518] netlink_unicast+0x7fa/0x9e0 [ 283.511174][T11518] ? __pfx_netlink_unicast+0x10/0x10 [ 283.511206][T11518] ? netlink_sendmsg+0x642/0xb30 [ 283.511224][T11518] ? skb_put+0x11b/0x210 [ 283.511248][T11518] netlink_sendmsg+0x805/0xb30 [ 283.511278][T11518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.511303][T11518] ? aa_sock_msg_perm+0xf1/0x1d0 [ 283.511330][T11518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.511349][T11518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.511370][T11518] __sock_sendmsg+0x21c/0x270 [ 283.511401][T11518] ____sys_sendmsg+0x505/0x830 [ 283.511430][T11518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.511463][T11518] ? import_iovec+0x74/0xa0 [ 283.511486][T11518] ___sys_sendmsg+0x21f/0x2a0 [ 283.511512][T11518] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.511573][T11518] ? __fget_files+0x2a/0x420 [ 283.511590][T11518] ? __fget_files+0x3a0/0x420 [ 283.511619][T11518] __x64_sys_sendmsg+0x19b/0x260 [ 283.511646][T11518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.511680][T11518] ? __pfx_ksys_write+0x10/0x10 [ 283.511710][T11518] ? do_syscall_64+0xbe/0xfa0 [ 283.511737][T11518] do_syscall_64+0xfa/0xfa0 [ 283.511758][T11518] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.511781][T11518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.511806][T11518] ? clear_bhb_loop+0x60/0xb0 [ 283.511830][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.511848][T11518] RIP: 0033:0x7f8afa38eec9 [ 283.511865][T11518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.511882][T11518] RSP: 002b:00007f8afb1ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.511903][T11518] RAX: ffffffffffffffda RBX: 00007f8afa5e5fa0 RCX: 00007f8afa38eec9 [ 283.511918][T11518] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 283.511930][T11518] RBP: 00007f8afb1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 283.511942][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.511954][T11518] R13: 00007f8afa5e6038 R14: 00007f8afa5e5fa0 R15: 00007ffe59df3dc8 [ 283.511987][T11518] [ 283.512034][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1737'. [ 283.525433][T11522] netlink: 'syz.2.1739': attribute type 16 has an invalid length. [ 283.759870][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'. [ 283.795382][T11522] netlink: 'syz.2.1739': attribute type 17 has an invalid length. [ 283.942288][ T1162] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.952513][ T1162] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.983338][T11538] netlink: 'syz.0.1741': attribute type 12 has an invalid length. [ 284.029206][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 284.045357][ T1162] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.053753][ T1162] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.217966][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 284.250798][T11553] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 284.253411][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 284.295726][T11560] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1748'. [ 284.506414][T11568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1751'. [ 284.529417][T11572] FAULT_INJECTION: forcing a failure. [ 284.529417][T11572] name failslab, interval 1, probability 0, space 0, times 0 [ 284.545157][T11566] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1750'. [ 284.565528][T11572] CPU: 0 UID: 0 PID: 11572 Comm: syz.1.1752 Not tainted syzkaller #0 PREEMPT(full) [ 284.565556][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.565568][T11572] Call Trace: [ 284.565575][T11572] [ 284.565583][T11572] dump_stack_lvl+0x189/0x250 [ 284.565609][T11572] ? __pfx____ratelimit+0x10/0x10 [ 284.565632][T11572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.565653][T11572] ? __pfx__printk+0x10/0x10 [ 284.565680][T11572] ? __pfx___might_resched+0x10/0x10 [ 284.565699][T11572] ? fs_reclaim_acquire+0x7d/0x100 [ 284.565733][T11572] should_fail_ex+0x414/0x560 [ 284.565762][T11572] should_failslab+0xa8/0x100 [ 284.565782][T11572] __kmalloc_noprof+0xcb/0x7f0 [ 284.565807][T11572] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 284.565842][T11572] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 284.565878][T11572] genl_family_rcv_msg_doit+0xb8/0x300 [ 284.565913][T11572] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 284.565949][T11572] ? apparmor_capable+0x137/0x1b0 [ 284.565978][T11572] ? bpf_lsm_capable+0x9/0x20 [ 284.566000][T11572] ? security_capable+0x7e/0x2e0 [ 284.566032][T11572] genl_rcv_msg+0x60e/0x790 [ 284.566065][T11572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.566090][T11572] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 284.566131][T11572] netlink_rcv_skb+0x205/0x470 [ 284.566148][T11572] ? __lock_acquire+0xab9/0xd20 [ 284.566168][T11572] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.566196][T11572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.566238][T11572] ? down_read+0x1ad/0x2e0 [ 284.566267][T11572] genl_rcv+0x28/0x40 [ 284.566290][T11572] netlink_unicast+0x82f/0x9e0 [ 284.566330][T11572] ? __pfx_netlink_unicast+0x10/0x10 [ 284.566361][T11572] ? netlink_sendmsg+0x642/0xb30 [ 284.566380][T11572] ? skb_put+0x11b/0x210 [ 284.566405][T11572] netlink_sendmsg+0x805/0xb30 [ 284.566438][T11572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.566486][T11572] ? aa_sock_msg_perm+0xf1/0x1d0 [ 284.566515][T11572] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.566534][T11572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.566555][T11572] __sock_sendmsg+0x21c/0x270 [ 284.566585][T11572] ____sys_sendmsg+0x505/0x830 [ 284.566613][T11572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.566647][T11572] ? import_iovec+0x74/0xa0 [ 284.566671][T11572] ___sys_sendmsg+0x21f/0x2a0 [ 284.566696][T11572] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.566760][T11572] ? __fget_files+0x2a/0x420 [ 284.566776][T11572] ? __fget_files+0x3a0/0x420 [ 284.566806][T11572] __x64_sys_sendmsg+0x19b/0x260 [ 284.566832][T11572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.566866][T11572] ? __pfx_ksys_write+0x10/0x10 [ 284.566897][T11572] ? do_syscall_64+0xbe/0xfa0 [ 284.566925][T11572] do_syscall_64+0xfa/0xfa0 [ 284.566946][T11572] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.566969][T11572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.566988][T11572] ? clear_bhb_loop+0x60/0xb0 [ 284.567012][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.567030][T11572] RIP: 0033:0x7f3040f8eec9 [ 284.567048][T11572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.567064][T11572] RSP: 002b:00007f3041e41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.567084][T11572] RAX: ffffffffffffffda RBX: 00007f30411e5fa0 RCX: 00007f3040f8eec9 [ 284.567099][T11572] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 284.567111][T11572] RBP: 00007f3041e41090 R08: 0000000000000000 R09: 0000000000000000 [ 284.567124][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.567135][T11572] R13: 00007f30411e6038 R14: 00007f30411e5fa0 R15: 00007ffc42072428 [ 284.567170][T11572] [ 284.642095][T11575] lo speed is unknown, defaulting to 1000 [ 284.776487][ T7257] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.957771][ T7257] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.966614][ T7257] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 285.009283][ T7257] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 285.017703][T11586] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 285.157516][T11589] veth0_to_hsr: entered promiscuous mode [ 285.172471][T11589] veth0_to_hsr: entered allmulticast mode [ 285.318434][T11598] netlink: 'syz.3.1762': attribute type 20 has an invalid length. [ 285.326677][T11590] lo speed is unknown, defaulting to 1000 [ 285.546721][T11611] syzkaller1: entered promiscuous mode [ 285.553162][T11611] syzkaller1: entered allmulticast mode [ 285.570711][T11614] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 285.764528][T11627] FAULT_INJECTION: forcing a failure. [ 285.764528][T11627] name failslab, interval 1, probability 0, space 0, times 0 [ 285.781741][T11627] CPU: 1 UID: 0 PID: 11627 Comm: syz.4.1774 Not tainted syzkaller #0 PREEMPT(full) [ 285.781768][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.781781][T11627] Call Trace: [ 285.781788][T11627] [ 285.781796][T11627] dump_stack_lvl+0x189/0x250 [ 285.781821][T11627] ? __pfx____ratelimit+0x10/0x10 [ 285.781843][T11627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.781869][T11627] ? __pfx__printk+0x10/0x10 [ 285.781891][T11627] ? __pfx___might_resched+0x10/0x10 [ 285.781912][T11627] ? fs_reclaim_acquire+0x7d/0x100 [ 285.781951][T11627] should_fail_ex+0x414/0x560 [ 285.781980][T11627] should_failslab+0xa8/0x100 [ 285.782000][T11627] __kmalloc_cache_noprof+0x6f/0x6f0 [ 285.782032][T11627] ? nfnetlink_rcv+0xf97/0x2590 [ 285.782067][T11627] nfnetlink_rcv+0xf97/0x2590 [ 285.782134][T11627] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 285.782181][T11627] ? ref_tracker_free+0x63a/0x7d0 [ 285.782206][T11627] ? __asan_memcpy+0x40/0x70 [ 285.782229][T11627] ? __pfx_ref_tracker_free+0x10/0x10 [ 285.782271][T11627] ? skb_clone+0x246/0x3a0 [ 285.782300][T11627] ? __netlink_deliver_tap+0x807/0x850 [ 285.782320][T11627] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.782367][T11627] netlink_unicast+0x82f/0x9e0 [ 285.782406][T11627] ? __pfx_netlink_unicast+0x10/0x10 [ 285.782437][T11627] ? netlink_sendmsg+0x642/0xb30 [ 285.782455][T11627] ? skb_put+0x11b/0x210 [ 285.782479][T11627] netlink_sendmsg+0x805/0xb30 [ 285.782510][T11627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.782535][T11627] ? aa_sock_msg_perm+0xf1/0x1d0 [ 285.782563][T11627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.782581][T11627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.782602][T11627] __sock_sendmsg+0x21c/0x270 [ 285.782634][T11627] ____sys_sendmsg+0x505/0x830 [ 285.782663][T11627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.782696][T11627] ? import_iovec+0x74/0xa0 [ 285.782719][T11627] ___sys_sendmsg+0x21f/0x2a0 [ 285.782745][T11627] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.782808][T11627] ? __fget_files+0x2a/0x420 [ 285.782825][T11627] ? __fget_files+0x3a0/0x420 [ 285.782855][T11627] __x64_sys_sendmsg+0x19b/0x260 [ 285.782881][T11627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.782915][T11627] ? __pfx_ksys_write+0x10/0x10 [ 285.782944][T11627] ? do_syscall_64+0xbe/0xfa0 [ 285.782971][T11627] do_syscall_64+0xfa/0xfa0 [ 285.782991][T11627] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.783014][T11627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.783032][T11627] ? clear_bhb_loop+0x60/0xb0 [ 285.783056][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.783074][T11627] RIP: 0033:0x7fecae58eec9 [ 285.783091][T11627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.783108][T11627] RSP: 002b:00007fecaf4c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.783128][T11627] RAX: ffffffffffffffda RBX: 00007fecae7e5fa0 RCX: 00007fecae58eec9 [ 285.783143][T11627] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 285.783156][T11627] RBP: 00007fecaf4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 285.783168][T11627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.783179][T11627] R13: 00007fecae7e6038 R14: 00007fecae7e5fa0 R15: 00007fffaab06698 [ 285.783215][T11627] [ 286.391346][T11637] netlink: 'syz.0.1778': attribute type 20 has an invalid length. [ 286.459650][ T8475] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.479766][ T8475] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.518346][ T8475] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.546179][ T8475] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.569687][T11640] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 286.616076][T11640] net_ratelimit: 24 callbacks suppressed [ 286.616095][T11640] IPVS: lc: UDP 224.0.0.1:0 - no destination available [ 286.623183][T11646] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 286.953512][T11653] lo speed is unknown, defaulting to 1000 [ 287.134781][T11674] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.416764][T11692] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 287.779466][T11704] __nla_validate_parse: 10 callbacks suppressed [ 287.779484][T11704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1799'. [ 288.199140][T11720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1804'. [ 288.301075][T11725] bond6: entered promiscuous mode [ 288.306242][T11725] bond6: entered allmulticast mode [ 288.311893][T11725] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.407178][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 288.416610][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 288.448203][T11733] netlink: 'syz.1.1807': attribute type 20 has an invalid length. [ 288.465344][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1812'. [ 288.568716][T11739] tipc: Enabled bearer , priority 0 [ 288.576782][T11739] syzkaller0: entered promiscuous mode [ 288.586643][T11739] syzkaller0: entered allmulticast mode [ 288.596913][T11740] netlink: 'syz.1.1807': attribute type 30 has an invalid length. [ 288.623602][T11739] tipc: Resetting bearer [ 288.673381][T11747] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 288.705467][T11739] tipc: Resetting bearer [ 288.773177][T11739] tipc: Disabling bearer [ 288.791108][T11756] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1818'. [ 288.805872][T11756] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1818'. [ 288.859120][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 288.897698][T11765] --map-set only usable from mangle table [ 288.934310][T11767] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1822'. [ 289.050796][T11776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1825'. [ 289.202323][T11783] veth0: entered promiscuous mode [ 289.219738][T11783] veth0: left promiscuous mode [ 289.360119][T11790] netlink: 'syz.1.1827': attribute type 30 has an invalid length. [ 289.479442][T11801] FAULT_INJECTION: forcing a failure. [ 289.479442][T11801] name failslab, interval 1, probability 0, space 0, times 0 [ 289.522315][T11801] CPU: 0 UID: 0 PID: 11801 Comm: syz.4.1832 Not tainted syzkaller #0 PREEMPT(full) [ 289.522343][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.522356][T11801] Call Trace: [ 289.522363][T11801] [ 289.522372][T11801] dump_stack_lvl+0x189/0x250 [ 289.522397][T11801] ? __pfx____ratelimit+0x10/0x10 [ 289.522421][T11801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.522441][T11801] ? __pfx__printk+0x10/0x10 [ 289.522466][T11801] ? __pfx___might_resched+0x10/0x10 [ 289.522486][T11801] ? fs_reclaim_acquire+0x7d/0x100 [ 289.522520][T11801] should_fail_ex+0x414/0x560 [ 289.522550][T11801] should_failslab+0xa8/0x100 [ 289.522570][T11801] __kmalloc_noprof+0xcb/0x7f0 [ 289.522596][T11801] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 289.522623][T11801] ? __local_bh_enable_ip+0x12d/0x1c0 [ 289.522649][T11801] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 289.522685][T11801] genl_family_rcv_msg_doit+0xb8/0x300 [ 289.522718][T11801] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 289.522754][T11801] ? apparmor_capable+0x137/0x1b0 [ 289.522776][T11801] ? bpf_lsm_capable+0x9/0x20 [ 289.522801][T11801] ? security_capable+0x7e/0x2e0 [ 289.522831][T11801] genl_rcv_msg+0x60e/0x790 [ 289.522864][T11801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.522888][T11801] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 289.522914][T11801] ? __asan_memcpy+0x40/0x70 [ 289.522938][T11801] ? __pfx_ref_tracker_free+0x10/0x10 [ 289.522970][T11801] netlink_rcv_skb+0x205/0x470 [ 289.522987][T11801] ? __lock_acquire+0xab9/0xd20 [ 289.523005][T11801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.523030][T11801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.523078][T11801] ? down_read+0x1ad/0x2e0 [ 289.523106][T11801] genl_rcv+0x28/0x40 [ 289.523128][T11801] netlink_unicast+0x82f/0x9e0 [ 289.523165][T11801] ? __pfx_netlink_unicast+0x10/0x10 [ 289.523194][T11801] ? netlink_sendmsg+0x642/0xb30 [ 289.523211][T11801] ? skb_put+0x11b/0x210 [ 289.523235][T11801] netlink_sendmsg+0x805/0xb30 [ 289.523266][T11801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.523290][T11801] ? aa_sock_msg_perm+0xf1/0x1d0 [ 289.523317][T11801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.523336][T11801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.523358][T11801] __sock_sendmsg+0x21c/0x270 [ 289.523393][T11801] ____sys_sendmsg+0x505/0x830 [ 289.523422][T11801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.523455][T11801] ? import_iovec+0x74/0xa0 [ 289.523480][T11801] ___sys_sendmsg+0x21f/0x2a0 [ 289.523506][T11801] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.523565][T11801] ? __fget_files+0x2a/0x420 [ 289.523586][T11801] ? __fget_files+0x3a0/0x420 [ 289.523613][T11801] __x64_sys_sendmsg+0x19b/0x260 [ 289.523639][T11801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.523672][T11801] ? __pfx_ksys_write+0x10/0x10 [ 289.523703][T11801] ? do_syscall_64+0xbe/0xfa0 [ 289.523730][T11801] do_syscall_64+0xfa/0xfa0 [ 289.523752][T11801] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.523775][T11801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.523795][T11801] ? clear_bhb_loop+0x60/0xb0 [ 289.523819][T11801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.523837][T11801] RIP: 0033:0x7fecae58eec9 [ 289.523854][T11801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.523871][T11801] RSP: 002b:00007fecaf4c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.523892][T11801] RAX: ffffffffffffffda RBX: 00007fecae7e5fa0 RCX: 00007fecae58eec9 [ 289.523907][T11801] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 289.523919][T11801] RBP: 00007fecaf4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 289.523931][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.523943][T11801] R13: 00007fecae7e6038 R14: 00007fecae7e5fa0 R15: 00007fffaab06698 [ 289.523977][T11801] [ 289.916884][T11804] netlink: 'syz.1.1834': attribute type 1 has an invalid length. [ 290.047974][T11807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.169238][T11827] FAULT_INJECTION: forcing a failure. [ 290.169238][T11827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.215506][T11827] CPU: 1 UID: 0 PID: 11827 Comm: syz.3.1840 Not tainted syzkaller #0 PREEMPT(full) [ 290.215533][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.215545][T11827] Call Trace: [ 290.215552][T11827] [ 290.215560][T11827] dump_stack_lvl+0x189/0x250 [ 290.215584][T11827] ? __pfx____ratelimit+0x10/0x10 [ 290.215612][T11827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.215632][T11827] ? __pfx__printk+0x10/0x10 [ 290.215651][T11827] ? __might_fault+0xb0/0x130 [ 290.215688][T11827] should_fail_ex+0x414/0x560 [ 290.215716][T11827] _copy_from_iter+0x1de/0x1790 [ 290.215748][T11827] ? rcu_is_watching+0x15/0xb0 [ 290.215773][T11827] ? kmalloc_reserve+0xbd/0x290 [ 290.215794][T11827] ? __pfx__copy_from_iter+0x10/0x10 [ 290.215823][T11827] ? __build_skb_around+0x262/0x3f0 [ 290.215845][T11827] ? netlink_sendmsg+0x642/0xb30 [ 290.215863][T11827] ? skb_put+0x11b/0x210 [ 290.215885][T11827] netlink_sendmsg+0x6b2/0xb30 [ 290.215916][T11827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.215939][T11827] ? aa_sock_msg_perm+0xf1/0x1d0 [ 290.215966][T11827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.215983][T11827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.216005][T11827] __sock_sendmsg+0x21c/0x270 [ 290.216036][T11827] ____sys_sendmsg+0x505/0x830 [ 290.216065][T11827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.216098][T11827] ? import_iovec+0x74/0xa0 [ 290.216118][T11827] ___sys_sendmsg+0x21f/0x2a0 [ 290.216144][T11827] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.216211][T11827] ? __fget_files+0x2a/0x420 [ 290.216228][T11827] ? __fget_files+0x3a0/0x420 [ 290.216257][T11827] __x64_sys_sendmsg+0x19b/0x260 [ 290.216284][T11827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.216317][T11827] ? __pfx_ksys_write+0x10/0x10 [ 290.216349][T11827] ? do_syscall_64+0xbe/0xfa0 [ 290.216378][T11827] do_syscall_64+0xfa/0xfa0 [ 290.216398][T11827] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.216421][T11827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.216440][T11827] ? clear_bhb_loop+0x60/0xb0 [ 290.216464][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.216483][T11827] RIP: 0033:0x7f495358eec9 [ 290.216500][T11827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.216518][T11827] RSP: 002b:00007f4954349038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.216539][T11827] RAX: ffffffffffffffda RBX: 00007f49537e6090 RCX: 00007f495358eec9 [ 290.216554][T11827] RDX: 0000000020000004 RSI: 0000200000000480 RDI: 0000000000000004 [ 290.216567][T11827] RBP: 00007f4954349090 R08: 0000000000000000 R09: 0000000000000000 [ 290.216579][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.216590][T11827] R13: 00007f49537e6128 R14: 00007f49537e6090 R15: 00007fff94109698 [ 290.216624][T11827] [ 290.680680][T11842] netlink: 'syz.3.1847': attribute type 29 has an invalid length. [ 290.720706][T11842] netlink: 'syz.3.1847': attribute type 29 has an invalid length. [ 290.777744][T11846] lo speed is unknown, defaulting to 1000 [ 290.850129][T11850] pimreg: entered allmulticast mode [ 290.933742][T11855] xt_addrtype: ipv6 does not support BROADCAST matching [ 290.933865][T11850] pimreg: left allmulticast mode [ 291.374591][T11879] lo speed is unknown, defaulting to 1000 [ 291.932215][T11913] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 292.009176][T11916] bond4: entered promiscuous mode [ 292.014314][T11916] bond4: entered allmulticast mode [ 292.021642][T11916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.130198][T11928] lo speed is unknown, defaulting to 1000 [ 292.280600][T11940] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 292.302230][T11942] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 292.313654][T11929] lo speed is unknown, defaulting to 1000 [ 292.421642][T11940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 292.458566][T11943] bond2: (slave veth5): Enslaving as an active interface with a down link [ 292.819300][T11964] netlink: 'syz.1.1888': attribute type 12 has an invalid length. [ 292.839619][T11965] __nla_validate_parse: 11 callbacks suppressed [ 292.839639][T11965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1885'. [ 292.937041][T11967] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1889'. [ 293.378710][T11984] lo speed is unknown, defaulting to 1000 [ 293.440177][T11999] FAULT_INJECTION: forcing a failure. [ 293.440177][T11999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.457077][T11999] CPU: 1 UID: 0 PID: 11999 Comm: syz.2.1896 Not tainted syzkaller #0 PREEMPT(full) [ 293.457105][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.457117][T11999] Call Trace: [ 293.457124][T11999] [ 293.457133][T11999] dump_stack_lvl+0x189/0x250 [ 293.457159][T11999] ? __pfx____ratelimit+0x10/0x10 [ 293.457183][T11999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.457202][T11999] ? __pfx__printk+0x10/0x10 [ 293.457222][T11999] ? __might_fault+0xb0/0x130 [ 293.457261][T11999] should_fail_ex+0x414/0x560 [ 293.457289][T11999] _copy_from_user+0x2d/0xb0 [ 293.457309][T11999] wext_handle_ioctl+0xba/0x1c0 [ 293.457342][T11999] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 293.457387][T11999] sock_ioctl+0x15f/0x790 [ 293.457417][T11999] ? __pfx_sock_ioctl+0x10/0x10 [ 293.457446][T11999] ? __fget_files+0x3a0/0x420 [ 293.457463][T11999] ? __fget_files+0x2a/0x420 [ 293.457484][T11999] ? bpf_lsm_file_ioctl+0x9/0x20 [ 293.457506][T11999] ? __pfx_sock_ioctl+0x10/0x10 [ 293.457531][T11999] __se_sys_ioctl+0xfc/0x170 [ 293.457557][T11999] do_syscall_64+0xfa/0xfa0 [ 293.457580][T11999] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.457602][T11999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.457621][T11999] ? clear_bhb_loop+0x60/0xb0 [ 293.457646][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.457663][T11999] RIP: 0033:0x7feb73b8eec9 [ 293.457687][T11999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.457704][T11999] RSP: 002b:00007feb74a61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.457724][T11999] RAX: ffffffffffffffda RBX: 00007feb73de5fa0 RCX: 00007feb73b8eec9 [ 293.457739][T11999] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000004 [ 293.457752][T11999] RBP: 00007feb74a61090 R08: 0000000000000000 R09: 0000000000000000 [ 293.457764][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.457775][T11999] R13: 00007feb73de6038 R14: 00007feb73de5fa0 R15: 00007ffc9dd28ff8 [ 293.457810][T11999] [ 293.687444][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 293.868934][T12006] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1900'. [ 294.065530][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 294.153636][T12016] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1904'. [ 294.419612][T12034] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 294.519303][T12037] @0Ù: renamed from bond_slave_1 [ 294.542776][T12039] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 294.656614][T12045] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 294.918654][T12064] syzkaller1: entered promiscuous mode [ 294.924288][T12064] syzkaller1: entered allmulticast mode [ 295.100891][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 295.130866][T12075] netlink: 'syz.4.1924': attribute type 2 has an invalid length. [ 295.870685][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 295.879703][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 295.890933][T12115] netlink: 'syz.2.1935': attribute type 20 has an invalid length. [ 295.933096][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 295.956158][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.981292][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.998176][T12115] netlink: 'syz.2.1935': attribute type 20 has an invalid length. [ 296.030801][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.071101][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.460880][T12121] netlink: 'syz.2.1935': attribute type 30 has an invalid length. [ 296.870019][T12150] bridge0: port 3(macvlan3) entered blocking state [ 296.877305][T12150] bridge0: port 3(macvlan3) entered disabled state [ 296.884107][T12150] macvlan3: entered allmulticast mode [ 296.911816][T12150] bridge0: entered allmulticast mode [ 296.929967][T12150] macvlan3: left allmulticast mode [ 296.954682][T12150] bridge0: left allmulticast mode [ 297.302494][T12164] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 297.830396][T12185] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 297.832368][T12189] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 297.961891][T12195] __nla_validate_parse: 4 callbacks suppressed [ 297.961909][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1961'. [ 297.983871][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 297.996429][T12195] netlink: 'syz.4.1961': attribute type 19 has an invalid length. [ 298.004312][T12195] netlink: 'syz.4.1961': attribute type 20 has an invalid length. [ 298.074043][T12194] bond3: entered promiscuous mode [ 298.090597][T12194] bond3: entered allmulticast mode [ 298.102943][T12194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.152699][T12202] lo speed is unknown, defaulting to 1000 [ 298.186111][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'. [ 298.463817][T12217] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1967'. [ 298.679610][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 298.690881][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1970'. [ 298.700568][T12224] netlink: 'syz.2.1970': attribute type 20 has an invalid length. [ 298.709920][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 298.719765][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1970'. [ 298.729196][T12224] netlink: 'syz.2.1970': attribute type 20 has an invalid length. [ 298.825028][T12224] netlink: 'syz.2.1970': attribute type 30 has an invalid length. [ 299.215348][T12243] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 299.244449][T12248] Cannot find del_set index 1 as target [ 299.362741][T12252] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1979'. [ 299.416731][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'. [ 299.574308][T12260] netlink: 'syz.0.1983': attribute type 12 has an invalid length. [ 299.845401][T12270] lo speed is unknown, defaulting to 1000 [ 300.172547][T12290] FAULT_INJECTION: forcing a failure. [ 300.172547][T12290] name failslab, interval 1, probability 0, space 0, times 0 [ 300.188324][T12290] CPU: 0 UID: 0 PID: 12290 Comm: syz.3.1992 Not tainted syzkaller #0 PREEMPT(full) [ 300.188351][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.188363][T12290] Call Trace: [ 300.188371][T12290] [ 300.188378][T12290] dump_stack_lvl+0x189/0x250 [ 300.188403][T12290] ? __pfx____ratelimit+0x10/0x10 [ 300.188427][T12290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.188447][T12290] ? __pfx__printk+0x10/0x10 [ 300.188473][T12290] ? __pfx___might_resched+0x10/0x10 [ 300.188493][T12290] ? fs_reclaim_acquire+0x7d/0x100 [ 300.188527][T12290] should_fail_ex+0x414/0x560 [ 300.188554][T12290] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 300.188581][T12290] should_failslab+0xa8/0x100 [ 300.188600][T12290] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 300.188624][T12290] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 300.188649][T12290] ? alloc_inode+0x67/0x1b0 [ 300.188675][T12290] ? __pfx_simple_start_creating+0x10/0x10 [ 300.188697][T12290] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 300.188722][T12290] alloc_inode+0x67/0x1b0 [ 300.188750][T12290] new_inode+0x22/0x170 [ 300.188770][T12290] __debugfs_create_file+0x14d/0x4f0 [ 300.188803][T12290] debugfs_create_file_full+0x3f/0x60 [ 300.188831][T12290] ref_tracker_dir_debugfs+0x14e/0x270 [ 300.188855][T12290] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 300.188906][T12290] ? trace_kmalloc+0x1f/0xd0 [ 300.188925][T12290] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 300.188958][T12290] ? __raw_spin_lock_init+0x45/0x100 [ 300.188987][T12290] alloc_netdev_mqs+0x272/0x11b0 [ 300.189012][T12290] ? __pfx_geneve_setup+0x10/0x10 [ 300.189053][T12290] rtnl_create_link+0x31f/0xd10 [ 300.189088][T12290] rtnl_newlink_create+0x25c/0xb00 [ 300.189115][T12290] ? __lock_acquire+0xab9/0xd20 [ 300.189139][T12290] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 300.189166][T12290] ? __pfx___mutex_lock+0x10/0x10 [ 300.189202][T12290] ? ns_capable+0x8a/0xf0 [ 300.189226][T12290] rtnl_newlink+0x16e4/0x1c80 [ 300.189266][T12290] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.189289][T12290] ? is_bpf_text_address+0x26/0x2b0 [ 300.189321][T12290] ? is_bpf_text_address+0x292/0x2b0 [ 300.189341][T12290] ? is_bpf_text_address+0x26/0x2b0 [ 300.189366][T12290] ? __lock_acquire+0xab9/0xd20 [ 300.189399][T12290] ? __lock_acquire+0xab9/0xd20 [ 300.189439][T12290] ? is_bpf_text_address+0x26/0x2b0 [ 300.189464][T12290] ? is_bpf_text_address+0x292/0x2b0 [ 300.189483][T12290] ? is_bpf_text_address+0x26/0x2b0 [ 300.189514][T12290] ? __lock_acquire+0xab9/0xd20 [ 300.189562][T12290] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.189580][T12290] rtnetlink_rcv_msg+0x7cf/0xb70 [ 300.189599][T12290] ? __lock_acquire+0xab9/0xd20 [ 300.189620][T12290] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 300.189639][T12290] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.189682][T12290] netlink_rcv_skb+0x205/0x470 [ 300.189699][T12290] ? __lock_acquire+0xab9/0xd20 [ 300.189719][T12290] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.189739][T12290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.189772][T12290] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.189804][T12290] netlink_unicast+0x82f/0x9e0 [ 300.189841][T12290] ? __pfx_netlink_unicast+0x10/0x10 [ 300.189868][T12290] ? netlink_sendmsg+0x642/0xb30 [ 300.189882][T12290] ? skb_put+0x11b/0x210 [ 300.189906][T12290] netlink_sendmsg+0x805/0xb30 [ 300.189936][T12290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.189958][T12290] ? aa_sock_msg_perm+0xf1/0x1d0 [ 300.189986][T12290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.190003][T12290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.190024][T12290] __sock_sendmsg+0x21c/0x270 [ 300.190053][T12290] ____sys_sendmsg+0x505/0x830 [ 300.190081][T12290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.190112][T12290] ? import_iovec+0x74/0xa0 [ 300.190134][T12290] ___sys_sendmsg+0x21f/0x2a0 [ 300.190159][T12290] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.190219][T12290] ? __fget_files+0x2a/0x420 [ 300.190235][T12290] ? __fget_files+0x3a0/0x420 [ 300.190263][T12290] __x64_sys_sendmsg+0x19b/0x260 [ 300.190288][T12290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.190327][T12290] ? __pfx_ksys_write+0x10/0x10 [ 300.190356][T12290] ? do_syscall_64+0xbe/0xfa0 [ 300.190385][T12290] do_syscall_64+0xfa/0xfa0 [ 300.190407][T12290] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.190430][T12290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.190448][T12290] ? clear_bhb_loop+0x60/0xb0 [ 300.190471][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.190489][T12290] RIP: 0033:0x7f495358eec9 [ 300.190506][T12290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.190521][T12290] RSP: 002b:00007f495436a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.190539][T12290] RAX: ffffffffffffffda RBX: 00007f49537e5fa0 RCX: 00007f495358eec9 [ 300.190552][T12290] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 300.190565][T12290] RBP: 00007f495436a090 R08: 0000000000000000 R09: 0000000000000000 [ 300.190576][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.190587][T12290] R13: 00007f49537e6038 R14: 00007f49537e5fa0 R15: 00007fff94109698 [ 300.190621][T12290] [ 300.190753][T12290] debugfs: out of free dentries, can not create file 'netdev@ffff8880328dc610' [ 300.970450][T12306] FAULT_INJECTION: forcing a failure. [ 300.970450][T12306] name failslab, interval 1, probability 0, space 0, times 0 [ 300.997178][T12306] CPU: 0 UID: 0 PID: 12306 Comm: syz.0.1999 Not tainted syzkaller #0 PREEMPT(full) [ 300.997206][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.997218][T12306] Call Trace: [ 300.997226][T12306] [ 300.997235][T12306] dump_stack_lvl+0x189/0x250 [ 300.997260][T12306] ? __pfx____ratelimit+0x10/0x10 [ 300.997284][T12306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.997304][T12306] ? __pfx__printk+0x10/0x10 [ 300.997331][T12306] ? __pfx___might_resched+0x10/0x10 [ 300.997358][T12306] should_fail_ex+0x414/0x560 [ 300.997387][T12306] should_failslab+0xa8/0x100 [ 300.997408][T12306] __kmalloc_noprof+0xcb/0x7f0 [ 300.997433][T12306] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 300.997462][T12306] ? rcu_is_watching+0x15/0xb0 [ 300.997489][T12306] ioctl_standard_iw_point+0x4d5/0xd40 [ 300.997532][T12306] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 300.997558][T12306] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 300.997587][T12306] ? __pfx___mutex_lock+0x10/0x10 [ 300.997619][T12306] ? full_name_hash+0x92/0xe0 [ 300.997641][T12306] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 300.997666][T12306] ioctl_standard_call+0xaf/0x1b0 [ 300.997697][T12306] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 300.997720][T12306] wext_ioctl_dispatch+0xeb/0x410 [ 300.997745][T12306] ? __pfx_ioctl_standard_call+0x10/0x10 [ 300.997776][T12306] wext_handle_ioctl+0x100/0x1c0 [ 300.997805][T12306] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 300.997850][T12306] sock_ioctl+0x15f/0x790 [ 300.997879][T12306] ? __pfx_sock_ioctl+0x10/0x10 [ 300.997909][T12306] ? __fget_files+0x3a0/0x420 [ 300.997926][T12306] ? __fget_files+0x2a/0x420 [ 300.997948][T12306] ? bpf_lsm_file_ioctl+0x9/0x20 [ 300.997976][T12306] ? __pfx_sock_ioctl+0x10/0x10 [ 300.998001][T12306] __se_sys_ioctl+0xfc/0x170 [ 300.998028][T12306] do_syscall_64+0xfa/0xfa0 [ 300.998051][T12306] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.998074][T12306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.998093][T12306] ? clear_bhb_loop+0x60/0xb0 [ 300.998117][T12306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.998136][T12306] RIP: 0033:0x7f8afa38eec9 [ 300.998154][T12306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.998171][T12306] RSP: 002b:00007f8afb1ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.998192][T12306] RAX: ffffffffffffffda RBX: 00007f8afa5e5fa0 RCX: 00007f8afa38eec9 [ 300.998207][T12306] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000004 [ 300.998219][T12306] RBP: 00007f8afb1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 300.998232][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.998243][T12306] R13: 00007f8afa5e6038 R14: 00007f8afa5e5fa0 R15: 00007ffe59df3dc8 [ 300.998279][T12306] [ 301.453914][T12320] netlink: 'syz.4.2014': attribute type 20 has an invalid length. [ 301.520896][T12320] netlink: 'syz.4.2014': attribute type 20 has an invalid length. [ 301.541438][T12322] netlink: 'syz.0.2004': attribute type 4 has an invalid length. [ 301.566451][ T9499] IPVS: starting estimator thread 0... [ 301.606869][T12322] netlink: 'syz.0.2004': attribute type 1 has an invalid length. [ 301.652367][T12321] lo speed is unknown, defaulting to 1000 [ 301.668644][T12324] IPVS: using max 25 ests per chain, 60000 per kthread [ 301.715452][T12325] netlink: 'syz.4.2014': attribute type 30 has an invalid length. [ 301.833678][T12328] lo speed is unknown, defaulting to 1000 [ 302.062866][T12336] veth0: entered promiscuous mode [ 302.080883][T12336] veth0: left promiscuous mode [ 302.323270][T12356] netlink: 'syz.2.2013': attribute type 4 has an invalid length. [ 302.429914][T12361] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 302.788750][T12377] FAULT_INJECTION: forcing a failure. [ 302.788750][T12377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.804399][T12377] CPU: 0 UID: 0 PID: 12377 Comm: syz.3.2024 Not tainted syzkaller #0 PREEMPT(full) [ 302.804424][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.804434][T12377] Call Trace: [ 302.804442][T12377] [ 302.804449][T12377] dump_stack_lvl+0x189/0x250 [ 302.804473][T12377] ? __pfx____ratelimit+0x10/0x10 [ 302.804494][T12377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.804513][T12377] ? __pfx__printk+0x10/0x10 [ 302.804545][T12377] should_fail_ex+0x414/0x560 [ 302.804571][T12377] _copy_from_user+0x2d/0xb0 [ 302.804592][T12377] __copy_msghdr+0x3c5/0x5b0 [ 302.804618][T12377] ___sys_sendmsg+0x1a5/0x2a0 [ 302.804640][T12377] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.804697][T12377] ? __fget_files+0x2a/0x420 [ 302.804712][T12377] ? __fget_files+0x3a0/0x420 [ 302.804739][T12377] __x64_sys_sendmsg+0x19b/0x260 [ 302.804762][T12377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.804793][T12377] ? __pfx_ksys_write+0x10/0x10 [ 302.804819][T12377] ? do_syscall_64+0xbe/0xfa0 [ 302.804844][T12377] do_syscall_64+0xfa/0xfa0 [ 302.804863][T12377] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.804884][T12377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.804901][T12377] ? clear_bhb_loop+0x60/0xb0 [ 302.804923][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.804940][T12377] RIP: 0033:0x7f495358eec9 [ 302.804956][T12377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.804971][T12377] RSP: 002b:00007f495436a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.804990][T12377] RAX: ffffffffffffffda RBX: 00007f49537e5fa0 RCX: 00007f495358eec9 [ 302.805004][T12377] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003 [ 302.805015][T12377] RBP: 00007f495436a090 R08: 0000000000000000 R09: 0000000000000000 [ 302.805027][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.805036][T12377] R13: 00007f49537e6038 R14: 00007f49537e5fa0 R15: 00007fff94109698 [ 302.805159][T12377] [ 303.139143][T12383] netlink: 'syz.2.2028': attribute type 2 has an invalid length. [ 303.145992][T12381] syzkaller1: entered promiscuous mode [ 303.159960][T12381] syzkaller1: entered allmulticast mode [ 303.168101][T12383] netlink: 'syz.2.2028': attribute type 12 has an invalid length. [ 303.289393][T12387] __nla_validate_parse: 13 callbacks suppressed [ 303.289414][T12387] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2030'. [ 303.419154][T12398] team0: Port device dummy0 removed [ 303.442802][T12398] bridge_slave_0: left allmulticast mode [ 303.462785][T12398] bridge_slave_0: left promiscuous mode [ 303.480939][T12398] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.493232][T12398] bridge_slave_1: left allmulticast mode [ 303.499266][T12398] bridge_slave_1: left promiscuous mode [ 303.505838][T12398] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.526497][T12398] team0: Port device team_slave_0 removed [ 303.533471][T12398] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 303.573420][T12397] lo speed is unknown, defaulting to 1000 [ 303.680988][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 303.691611][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2036'. [ 303.700805][T12408] netlink: 'syz.1.2036': attribute type 20 has an invalid length. [ 303.728782][T12398] team0: No ports can be present during mode change [ 303.816675][T12410] netlink: 'syz.1.2036': attribute type 30 has an invalid length. [ 304.028173][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 304.038661][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 304.116030][T12426] bridge0: port 3(macvlan2) entered blocking state [ 304.122671][T12426] bridge0: port 3(macvlan2) entered disabled state [ 304.145276][T12426] macvlan2: entered allmulticast mode [ 304.150674][T12426] bridge0: entered allmulticast mode [ 304.162471][T12426] macvlan2: left allmulticast mode [ 304.199880][T12426] bridge0: left allmulticast mode [ 304.276264][T12438] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2042'. [ 304.376196][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 304.403564][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2048'. [ 304.767819][T12464] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2052'. [ 304.803393][T12467] lo speed is unknown, defaulting to 1000 [ 305.224163][T12496] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 305.237367][T12489] lo speed is unknown, defaulting to 1000 [ 305.398123][T12501] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 305.545703][T12510] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2067'. [ 305.700637][T12512] lo speed is unknown, defaulting to 1000 [ 305.890098][T12520] lo speed is unknown, defaulting to 1000 [ 306.119495][T12534] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 306.580005][T12557] validate_nla: 4 callbacks suppressed [ 306.580023][T12557] netlink: 'syz.1.2082': attribute type 20 has an invalid length. [ 306.603067][T12557] netlink: 'syz.1.2082': attribute type 20 has an invalid length. [ 306.673195][T12561] Cannot find del_set index 1 as target [ 306.753554][T12558] netlink: 'syz.1.2082': attribute type 30 has an invalid length. [ 306.884282][T12572] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 306.911732][T12575] FAULT_INJECTION: forcing a failure. [ 306.911732][T12575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.929619][T12575] CPU: 1 UID: 0 PID: 12575 Comm: syz.1.2090 Not tainted syzkaller #0 PREEMPT(full) [ 306.929647][T12575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.929658][T12575] Call Trace: [ 306.929666][T12575] [ 306.929674][T12575] dump_stack_lvl+0x189/0x250 [ 306.929700][T12575] ? __pfx____ratelimit+0x10/0x10 [ 306.929722][T12575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.929743][T12575] ? __pfx__printk+0x10/0x10 [ 306.929763][T12575] ? __might_fault+0xb0/0x130 [ 306.929800][T12575] should_fail_ex+0x414/0x560 [ 306.929828][T12575] _copy_from_user+0x2d/0xb0 [ 306.929848][T12575] ___sys_sendmsg+0x158/0x2a0 [ 306.929874][T12575] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.929935][T12575] ? __fget_files+0x2a/0x420 [ 306.929952][T12575] ? __fget_files+0x3a0/0x420 [ 306.929980][T12575] __sys_sendmmsg+0x227/0x430 [ 306.930009][T12575] ? __pfx___sys_sendmmsg+0x10/0x10 [ 306.930041][T12575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 306.930085][T12575] ? ksys_write+0x22a/0x250 [ 306.930114][T12575] ? __pfx_ksys_write+0x10/0x10 [ 306.930145][T12575] __x64_sys_sendmmsg+0xa0/0xc0 [ 306.930170][T12575] do_syscall_64+0xfa/0xfa0 [ 306.930192][T12575] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.930215][T12575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.930233][T12575] ? clear_bhb_loop+0x60/0xb0 [ 306.930257][T12575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.930276][T12575] RIP: 0033:0x7f3040f8eec9 [ 306.930293][T12575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.930310][T12575] RSP: 002b:00007f3041e41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 306.930331][T12575] RAX: ffffffffffffffda RBX: 00007f30411e5fa0 RCX: 00007f3040f8eec9 [ 306.930346][T12575] RDX: 0000000000000006 RSI: 000020000000ac80 RDI: 0000000000000007 [ 306.930358][T12575] RBP: 00007f3041e41090 R08: 0000000000000000 R09: 0000000000000000 [ 306.930371][T12575] R10: 0000000004000801 R11: 0000000000000246 R12: 0000000000000001 [ 306.930383][T12575] R13: 00007f30411e6038 R14: 00007f30411e5fa0 R15: 00007ffc42072428 [ 306.930417][T12575] [ 307.233398][T12581] lo speed is unknown, defaulting to 1000 [ 307.618598][T12602] netlink: 'syz.4.2098': attribute type 9 has an invalid length. [ 308.074274][T12632] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 308.305459][T12636] FAULT_INJECTION: forcing a failure. [ 308.305459][T12636] name failslab, interval 1, probability 0, space 0, times 0 [ 308.357345][T12636] CPU: 1 UID: 0 PID: 12636 Comm: syz.4.2107 Not tainted syzkaller #0 PREEMPT(full) [ 308.357371][T12636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.357382][T12636] Call Trace: [ 308.357390][T12636] [ 308.357398][T12636] dump_stack_lvl+0x189/0x250 [ 308.357424][T12636] ? __pfx____ratelimit+0x10/0x10 [ 308.357448][T12636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.357469][T12636] ? __pfx__printk+0x10/0x10 [ 308.357497][T12636] ? __pfx___might_resched+0x10/0x10 [ 308.357516][T12636] ? fs_reclaim_acquire+0x7d/0x100 [ 308.357558][T12636] should_fail_ex+0x414/0x560 [ 308.357585][T12636] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 308.357613][T12636] should_failslab+0xa8/0x100 [ 308.357633][T12636] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 308.357658][T12636] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 308.357685][T12636] ? alloc_inode+0x67/0x1b0 [ 308.357712][T12636] ? __pfx_simple_start_creating+0x10/0x10 [ 308.357736][T12636] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 308.357762][T12636] alloc_inode+0x67/0x1b0 [ 308.357791][T12636] new_inode+0x22/0x170 [ 308.357814][T12636] __debugfs_create_file+0x14d/0x4f0 [ 308.357848][T12636] debugfs_create_file_full+0x3f/0x60 [ 308.357879][T12636] ref_tracker_dir_debugfs+0x14e/0x270 [ 308.357905][T12636] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 308.357964][T12636] ? trace_kmalloc+0x1f/0xd0 [ 308.357986][T12636] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 308.358021][T12636] ? __raw_spin_lock_init+0x45/0x100 [ 308.358049][T12636] alloc_netdev_mqs+0x272/0x11b0 [ 308.358073][T12636] ? __pfx_geneve_setup+0x10/0x10 [ 308.358099][T12636] rtnl_create_link+0x31f/0xd10 [ 308.358134][T12636] rtnl_newlink_create+0x25c/0xb00 [ 308.358163][T12636] ? __mutex_lock+0x5bb/0x1350 [ 308.358194][T12636] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 308.358221][T12636] ? __pfx___mutex_lock+0x10/0x10 [ 308.358258][T12636] ? ns_capable+0x8a/0xf0 [ 308.358284][T12636] rtnl_newlink+0x16e4/0x1c80 [ 308.358306][T12636] ? netlink_deliver_tap+0x19c/0x1b0 [ 308.358341][T12636] ? __pfx_rtnl_newlink+0x10/0x10 [ 308.358391][T12636] ? kasan_quarantine_put+0xdd/0x220 [ 308.358418][T12636] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.358449][T12636] ? nlmon_xmit+0xb0/0x100 [ 308.358476][T12636] ? kmem_cache_free+0x19b/0x690 [ 308.358514][T12636] ? __local_bh_enable_ip+0x12d/0x1c0 [ 308.358536][T12636] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.358566][T12636] ? __local_bh_enable_ip+0x12d/0x1c0 [ 308.358587][T12636] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 308.358613][T12636] ? __dev_queue_xmit+0x27b/0x3b50 [ 308.358638][T12636] ? __dev_queue_xmit+0x27b/0x3b50 [ 308.358661][T12636] ? __dev_queue_xmit+0x27b/0x3b50 [ 308.358687][T12636] ? __dev_queue_xmit+0x1d79/0x3b50 [ 308.358710][T12636] ? kasan_save_track+0x3e/0x80 [ 308.358735][T12636] ? __kasan_slab_alloc+0x6c/0x80 [ 308.358768][T12636] ? __lock_acquire+0xab9/0xd20 [ 308.358818][T12636] ? __pfx_rtnl_newlink+0x10/0x10 [ 308.358837][T12636] rtnetlink_rcv_msg+0x7cf/0xb70 [ 308.358861][T12636] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 308.358879][T12636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.358897][T12636] ? ref_tracker_free+0x63a/0x7d0 [ 308.358923][T12636] ? __asan_memcpy+0x40/0x70 [ 308.358948][T12636] ? __pfx_ref_tracker_free+0x10/0x10 [ 308.358986][T12636] netlink_rcv_skb+0x205/0x470 [ 308.359008][T12636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.359031][T12636] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.359065][T12636] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.359096][T12636] netlink_unicast+0x82f/0x9e0 [ 308.359134][T12636] ? __pfx_netlink_unicast+0x10/0x10 [ 308.359165][T12636] ? netlink_sendmsg+0x642/0xb30 [ 308.359183][T12636] ? skb_put+0x11b/0x210 [ 308.359209][T12636] netlink_sendmsg+0x805/0xb30 [ 308.359241][T12636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.359267][T12636] ? aa_sock_msg_perm+0xf1/0x1d0 [ 308.359296][T12636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.359315][T12636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.359338][T12636] __sock_sendmsg+0x21c/0x270 [ 308.359370][T12636] ____sys_sendmsg+0x505/0x830 [ 308.359403][T12636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.359438][T12636] ? import_iovec+0x74/0xa0 [ 308.359462][T12636] ___sys_sendmsg+0x21f/0x2a0 [ 308.359488][T12636] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.359562][T12636] ? __fget_files+0x2a/0x420 [ 308.359578][T12636] ? __fget_files+0x3a0/0x420 [ 308.359609][T12636] __x64_sys_sendmsg+0x19b/0x260 [ 308.359636][T12636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.359676][T12636] ? __pfx_ksys_write+0x10/0x10 [ 308.359707][T12636] ? do_syscall_64+0xbe/0xfa0 [ 308.359736][T12636] do_syscall_64+0xfa/0xfa0 [ 308.359758][T12636] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.359780][T12636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.359800][T12636] ? clear_bhb_loop+0x60/0xb0 [ 308.359825][T12636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.359844][T12636] RIP: 0033:0x7fecae58eec9 [ 308.359862][T12636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.359879][T12636] RSP: 002b:00007fecaf4c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.359900][T12636] RAX: ffffffffffffffda RBX: 00007fecae7e5fa0 RCX: 00007fecae58eec9 [ 308.359915][T12636] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 308.359928][T12636] RBP: 00007fecaf4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 308.359940][T12636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.359952][T12636] R13: 00007fecae7e6038 R14: 00007fecae7e5fa0 R15: 00007fffaab06698 [ 308.359989][T12636] [ 308.908487][T12636] debugfs: out of free dentries, can not create file 'netdev@ffff88807cf34610' [ 308.927764][T12643] __nla_validate_parse: 13 callbacks suppressed [ 308.927782][T12643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2110'. [ 308.971509][T12645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2111'. [ 309.003017][T12651] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2113'. [ 309.023836][T12638] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2108'. [ 309.116151][T12654] FAULT_INJECTION: forcing a failure. [ 309.116151][T12654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.137305][T12654] CPU: 1 UID: 0 PID: 12654 Comm: syz.4.2114 Not tainted syzkaller #0 PREEMPT(full) [ 309.137333][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.137345][T12654] Call Trace: [ 309.137352][T12654] [ 309.137360][T12654] dump_stack_lvl+0x189/0x250 [ 309.137385][T12654] ? __pfx____ratelimit+0x10/0x10 [ 309.137408][T12654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.137429][T12654] ? __pfx__printk+0x10/0x10 [ 309.137449][T12654] ? __might_fault+0xb0/0x130 [ 309.137488][T12654] should_fail_ex+0x414/0x560 [ 309.137517][T12654] _copy_from_user+0x2d/0xb0 [ 309.137543][T12654] ioctl_standard_iw_point+0x59d/0xd40 [ 309.137587][T12654] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 309.137612][T12654] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 309.137640][T12654] ? __pfx___mutex_lock+0x10/0x10 [ 309.137672][T12654] ? full_name_hash+0x92/0xe0 [ 309.137694][T12654] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 309.137719][T12654] ioctl_standard_call+0xaf/0x1b0 [ 309.137749][T12654] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 309.137771][T12654] wext_ioctl_dispatch+0xeb/0x410 [ 309.137793][T12654] ? __pfx_ioctl_standard_call+0x10/0x10 [ 309.137820][T12654] wext_handle_ioctl+0x100/0x1c0 [ 309.137850][T12654] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 309.137892][T12654] sock_ioctl+0x15f/0x790 [ 309.137920][T12654] ? __pfx_sock_ioctl+0x10/0x10 [ 309.137944][T12654] ? __fget_files+0x3a0/0x420 [ 309.137960][T12654] ? __fget_files+0x2a/0x420 [ 309.137980][T12654] ? bpf_lsm_file_ioctl+0x9/0x20 [ 309.138002][T12654] ? __pfx_sock_ioctl+0x10/0x10 [ 309.138026][T12654] __se_sys_ioctl+0xfc/0x170 [ 309.138051][T12654] do_syscall_64+0xfa/0xfa0 [ 309.138072][T12654] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.138093][T12654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.138111][T12654] ? clear_bhb_loop+0x60/0xb0 [ 309.138135][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.138153][T12654] RIP: 0033:0x7fecae58eec9 [ 309.138170][T12654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.138187][T12654] RSP: 002b:00007fecaf4c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.138209][T12654] RAX: ffffffffffffffda RBX: 00007fecae7e5fa0 RCX: 00007fecae58eec9 [ 309.138224][T12654] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000004 [ 309.138237][T12654] RBP: 00007fecaf4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 309.138249][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.138261][T12654] R13: 00007fecae7e6038 R14: 00007fecae7e5fa0 R15: 00007fffaab06698 [ 309.138295][T12654] [ 309.473553][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'. [ 309.502208][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2118'. [ 309.768161][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'. [ 309.777597][T12680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2121'. [ 309.786628][T12680] netlink: 'syz.0.2121': attribute type 20 has an invalid length. [ 309.821652][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 310.067476][T12702] netlink: 'syz.4.2125': attribute type 4 has an invalid length. [ 310.110741][T12702] netlink: 'syz.4.2125': attribute type 1 has an invalid length. [ 310.135259][T12699] lo speed is unknown, defaulting to 1000 [ 310.141949][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2125'. [ 310.153067][T12701] lo speed is unknown, defaulting to 1000 [ 310.986091][T12745] FAULT_INJECTION: forcing a failure. [ 310.986091][T12745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.035178][T12745] CPU: 0 UID: 0 PID: 12745 Comm: syz.3.2140 Not tainted syzkaller #0 PREEMPT(full) [ 311.035207][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.035219][T12745] Call Trace: [ 311.035227][T12745] [ 311.035235][T12745] dump_stack_lvl+0x189/0x250 [ 311.035261][T12745] ? __pfx____ratelimit+0x10/0x10 [ 311.035283][T12745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.035304][T12745] ? __pfx__printk+0x10/0x10 [ 311.035325][T12745] ? __might_fault+0xb0/0x130 [ 311.035368][T12745] should_fail_ex+0x414/0x560 [ 311.035398][T12745] _copy_from_user+0x2d/0xb0 [ 311.035418][T12745] kstrtouint_from_user+0xc4/0x170 [ 311.035448][T12745] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 311.035494][T12745] proc_fail_nth_write+0x88/0x200 [ 311.035518][T12745] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 311.035549][T12745] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 311.035575][T12745] vfs_write+0x27b/0xb30 [ 311.035612][T12745] ? __pfx_vfs_write+0x10/0x10 [ 311.035641][T12745] ? __fget_files+0x2a/0x420 [ 311.035664][T12745] ? __fget_files+0x3a0/0x420 [ 311.035680][T12745] ? __fget_files+0x2a/0x420 [ 311.035709][T12745] ksys_write+0x145/0x250 [ 311.035739][T12745] ? __pfx_ksys_write+0x10/0x10 [ 311.035770][T12745] ? do_syscall_64+0xbe/0xfa0 [ 311.035798][T12745] do_syscall_64+0xfa/0xfa0 [ 311.035818][T12745] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.035840][T12745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.035859][T12745] ? clear_bhb_loop+0x60/0xb0 [ 311.035883][T12745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.035902][T12745] RIP: 0033:0x7f495358d97f [ 311.035919][T12745] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 311.035936][T12745] RSP: 002b:00007f495436a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 311.035956][T12745] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f495358d97f [ 311.035969][T12745] RDX: 0000000000000001 RSI: 00007f495436a0a0 RDI: 0000000000000004 [ 311.035981][T12745] RBP: 00007f495436a090 R08: 0000000000000000 R09: 0000000000000000 [ 311.035993][T12745] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 311.036004][T12745] R13: 00007f49537e6038 R14: 00007f49537e5fa0 R15: 00007fff94109698 [ 311.036039][T12745] [ 311.060672][T12749] syzkaller1: entered promiscuous mode [ 311.289366][T12749] syzkaller1: entered allmulticast mode [ 312.003792][T12795] netlink: 'syz.0.2155': attribute type 24 has an invalid length. [ 312.027883][T12803] netlink: 'syz.1.2157': attribute type 29 has an invalid length. [ 312.051783][T12803] netlink: 'syz.1.2157': attribute type 29 has an invalid length. [ 312.450866][T12826] xt_addrtype: ipv6 does not support BROADCAST matching [ 312.647827][T12837] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 312.669406][T12835] netlink: 'syz.4.2170': attribute type 24 has an invalid length. [ 313.046787][T12851] lo speed is unknown, defaulting to 1000 [ 313.212309][T12856] xt_CT: No such helper "snmp_trap" [ 313.232594][T12860] lo speed is unknown, defaulting to 1000 [ 313.521593][T12874] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 313.583064][T12877] bridge0: port 1(macvlan2) entered blocking state [ 313.590933][T12877] bridge0: port 1(macvlan2) entered disabled state [ 313.598708][T12877] macvlan2: entered allmulticast mode [ 313.604191][T12877] bridge0: entered allmulticast mode [ 313.612990][T12877] macvlan2: left allmulticast mode [ 313.618931][T12877] bridge0: left allmulticast mode [ 313.672318][T12878] bond2: entered promiscuous mode [ 313.678006][T12878] bond2: entered allmulticast mode [ 313.683593][T12878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.827607][T12890] Cannot find del_set index 1 as target [ 314.172734][T12909] --map-set only usable from mangle table [ 314.217662][T12910] __nla_validate_parse: 20 callbacks suppressed [ 314.217681][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 314.256319][T12912] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2196'. [ 314.417420][T12921] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 314.529729][ T13] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 314.706401][T12939] netlink: 'syz.2.2206': attribute type 12 has an invalid length. [ 314.719298][T12932] lo speed is unknown, defaulting to 1000 [ 314.781797][T12937] lo speed is unknown, defaulting to 1000 [ 314.995252][T12947] syzkaller0: entered promiscuous mode [ 315.000878][T12947] syzkaller0: entered allmulticast mode [ 315.023896][T12943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.050364][ T9497] lo speed is unknown, defaulting to 1000 [ 315.065947][ T9497] syz1: Port: 1 Link ACTIVE [ 315.192043][T12961] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2211'. [ 315.415824][T12972] bond7: (slave bond_slave_1): Device is not bonding slave [ 315.423058][T12972] bond7: option active_slave: invalid value (bond_slave_1) [ 315.436813][T12972] bond7 (unregistering): Released all slaves [ 315.484576][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 315.699958][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2217'. [ 315.827467][T12992] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.837914][T12992] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.866042][T12990] FAULT_INJECTION: forcing a failure. [ 315.866042][T12990] name failslab, interval 1, probability 0, space 0, times 0 [ 315.880637][T12990] CPU: 1 UID: 0 PID: 12990 Comm: syz.0.2217 Not tainted syzkaller #0 PREEMPT(full) [ 315.880662][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.880673][T12990] Call Trace: [ 315.880680][T12990] [ 315.880687][T12990] dump_stack_lvl+0x189/0x250 [ 315.880710][T12990] ? __pfx____ratelimit+0x10/0x10 [ 315.880731][T12990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.880749][T12990] ? __pfx__printk+0x10/0x10 [ 315.880770][T12990] ? __pfx___might_resched+0x10/0x10 [ 315.880789][T12990] ? fs_reclaim_acquire+0x7d/0x100 [ 315.880821][T12990] should_fail_ex+0x414/0x560 [ 315.880848][T12990] should_failslab+0xa8/0x100 [ 315.880875][T12990] kmem_cache_alloc_noprof+0x74/0x6e0 [ 315.880900][T12990] ? security_inode_alloc+0x39/0x330 [ 315.880931][T12990] security_inode_alloc+0x39/0x330 [ 315.880958][T12990] inode_init_always_gfp+0x9ed/0xdc0 [ 315.880991][T12990] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 315.881020][T12990] alloc_inode+0x82/0x1b0 [ 315.881046][T12990] new_inode+0x22/0x170 [ 315.881066][T12990] __debugfs_create_file+0x14d/0x4f0 [ 315.881096][T12990] debugfs_create_file_full+0x3f/0x60 [ 315.881124][T12990] ref_tracker_dir_debugfs+0x14e/0x270 [ 315.881148][T12990] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 315.881201][T12990] ? trace_kmalloc+0x1f/0xd0 [ 315.881221][T12990] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 315.881253][T12990] ? __raw_spin_lock_init+0x45/0x100 [ 315.881281][T12990] alloc_netdev_mqs+0x272/0x11b0 [ 315.881303][T12990] ? __pfx_geneve_setup+0x10/0x10 [ 315.881328][T12990] rtnl_create_link+0x31f/0xd10 [ 315.881360][T12990] rtnl_newlink_create+0x25c/0xb00 [ 315.881386][T12990] ? __mutex_lock+0x5bb/0x1350 [ 315.881415][T12990] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 315.881439][T12990] ? __pfx___mutex_lock+0x10/0x10 [ 315.881472][T12990] ? ns_capable+0x8a/0xf0 [ 315.881496][T12990] rtnl_newlink+0x16e4/0x1c80 [ 315.881515][T12990] ? netlink_deliver_tap+0x19c/0x1b0 [ 315.881548][T12990] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.881593][T12990] ? kasan_quarantine_put+0xdd/0x220 [ 315.881617][T12990] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.881646][T12990] ? nlmon_xmit+0xb0/0x100 [ 315.881670][T12990] ? kmem_cache_free+0x19b/0x690 [ 315.881706][T12990] ? __local_bh_enable_ip+0x12d/0x1c0 [ 315.881726][T12990] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.881749][T12990] ? __local_bh_enable_ip+0x12d/0x1c0 [ 315.881767][T12990] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 315.881791][T12990] ? __dev_queue_xmit+0x27b/0x3b50 [ 315.881814][T12990] ? __dev_queue_xmit+0x27b/0x3b50 [ 315.881834][T12990] ? __dev_queue_xmit+0x27b/0x3b50 [ 315.881858][T12990] ? __dev_queue_xmit+0x1d79/0x3b50 [ 315.881886][T12990] ? kasan_save_track+0x3e/0x80 [ 315.881909][T12990] ? __kasan_slab_alloc+0x6c/0x80 [ 315.881939][T12990] ? __lock_acquire+0xab9/0xd20 [ 315.881986][T12990] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.882003][T12990] rtnetlink_rcv_msg+0x7cf/0xb70 [ 315.882026][T12990] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 315.882043][T12990] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.882058][T12990] ? ref_tracker_free+0x63a/0x7d0 [ 315.882082][T12990] ? __asan_memcpy+0x40/0x70 [ 315.882104][T12990] ? __pfx_ref_tracker_free+0x10/0x10 [ 315.882138][T12990] netlink_rcv_skb+0x205/0x470 [ 315.882159][T12990] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.882179][T12990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.882210][T12990] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.882238][T12990] netlink_unicast+0x82f/0x9e0 [ 315.882275][T12990] ? __pfx_netlink_unicast+0x10/0x10 [ 315.882304][T12990] ? netlink_sendmsg+0x642/0xb30 [ 315.882321][T12990] ? skb_put+0x11b/0x210 [ 315.882344][T12990] netlink_sendmsg+0x805/0xb30 [ 315.882375][T12990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.882399][T12990] ? aa_sock_msg_perm+0xf1/0x1d0 [ 315.882426][T12990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.882443][T12990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.882463][T12990] __sock_sendmsg+0x21c/0x270 [ 315.882493][T12990] ____sys_sendmsg+0x505/0x830 [ 315.882520][T12990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.882552][T12990] ? import_iovec+0x74/0xa0 [ 315.882574][T12990] ___sys_sendmsg+0x21f/0x2a0 [ 315.882599][T12990] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.882661][T12990] ? __fget_files+0x2a/0x420 [ 315.882679][T12990] ? __fget_files+0x3a0/0x420 [ 315.882706][T12990] __x64_sys_sendmsg+0x19b/0x260 [ 315.882732][T12990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.882765][T12990] ? __pfx_ksys_write+0x10/0x10 [ 315.882794][T12990] ? do_syscall_64+0xbe/0xfa0 [ 315.882821][T12990] do_syscall_64+0xfa/0xfa0 [ 315.882841][T12990] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.882862][T12990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.882888][T12990] ? clear_bhb_loop+0x60/0xb0 [ 315.882911][T12990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.882928][T12990] RIP: 0033:0x7f8afa38eec9 [ 315.882945][T12990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.882961][T12990] RSP: 002b:00007f8afb1ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.882981][T12990] RAX: ffffffffffffffda RBX: 00007f8afa5e5fa0 RCX: 00007f8afa38eec9 [ 315.882995][T12990] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 315.883007][T12990] RBP: 00007f8afb1ed090 R08: 0000000000000000 R09: 0000000000000000 [ 315.883018][T12990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.883029][T12990] R13: 00007f8afa5e6038 R14: 00007f8afa5e5fa0 R15: 00007ffe59df3dc8 [ 315.883063][T12990] [ 315.915344][T12990] debugfs: out of free dentries, can not create file 'netdev@ffff88807931e610' [ 315.956028][T12994] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2219'. [ 316.109713][T12996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2220'. [ 316.488803][T12992] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.501845][T12992] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.536257][T13004] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2223'. [ 316.616188][T12992] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.635237][T12992] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.717466][T12992] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.748131][T12992] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.850887][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 316.936507][ T8471] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.957261][ T8471] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.999828][T13025] netlink: 'syz.0.2231': attribute type 4 has an invalid length. [ 317.000942][T12992] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.020129][T13025] netlink: 'syz.0.2231': attribute type 1 has an invalid length. [ 317.021252][T12992] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.050740][T13025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2231'. [ 317.052178][ T8471] ================================================================== [ 317.067758][ T8471] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 317.075325][ T8471] Read of size 8 at addr ffff88807f52c0b0 by task kworker/u8:22/8471 [ 317.083387][ T8471] [ 317.085703][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 317.085723][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.085734][ T8471] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 317.085759][ T8471] Call Trace: [ 317.085770][ T8471] [ 317.085777][ T8471] dump_stack_lvl+0x189/0x250 [ 317.085794][ T8471] ? __kasan_check_byte+0x12/0x40 [ 317.085819][ T8471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.085835][ T8471] ? lock_release+0x4b/0x3e0 [ 317.085854][ T8471] ? __virt_addr_valid+0x4a5/0x5c0 [ 317.085877][ T8471] print_report+0xca/0x240 [ 317.085896][ T8471] ? __mutex_lock+0x147/0x1350 [ 317.085916][ T8471] kasan_report+0x118/0x150 [ 317.085929][ T8471] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 317.085948][ T8471] ? __mutex_lock+0x147/0x1350 [ 317.085971][ T8471] __mutex_lock+0x147/0x1350 [ 317.085993][ T8471] ? __mutex_lock+0x5bb/0x1350 [ 317.086014][ T8471] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 317.086034][ T8471] ? __pfx___mutex_lock+0x10/0x10 [ 317.086056][ T8471] ? __lock_acquire+0xab9/0xd20 [ 317.086075][ T8471] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 317.086096][ T8471] ? process_scheduled_works+0x9ef/0x17b0 [ 317.086113][ T8471] ? process_scheduled_works+0x9ef/0x17b0 [ 317.086130][ T8471] process_scheduled_works+0xae1/0x17b0 [ 317.086159][ T8471] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.086182][ T8471] worker_thread+0x8a0/0xda0 [ 317.086210][ T8471] kthread+0x711/0x8a0 [ 317.086232][ T8471] ? __pfx_worker_thread+0x10/0x10 [ 317.086249][ T8471] ? __pfx_kthread+0x10/0x10 [ 317.086270][ T8471] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.086286][ T8471] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.086304][ T8471] ? __pfx_kthread+0x10/0x10 [ 317.086324][ T8471] ret_from_fork+0x4bc/0x870 [ 317.086342][ T8471] ? __pfx_ret_from_fork+0x10/0x10 [ 317.086360][ T8471] ? __switch_to_asm+0x39/0x70 [ 317.086377][ T8471] ? __switch_to_asm+0x33/0x70 [ 317.086395][ T8471] ? __pfx_kthread+0x10/0x10 [ 317.086415][ T8471] ret_from_fork_asm+0x1a/0x30 [ 317.086441][ T8471] [ 317.086446][ T8471] [ 317.289126][ T8471] Allocated by task 12992: [ 317.293526][ T8471] kasan_save_track+0x3e/0x80 [ 317.298199][ T8471] __kasan_kmalloc+0x93/0xb0 [ 317.302783][ T8471] __kmalloc_noprof+0x411/0x7f0 [ 317.307624][ T8471] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 317.313768][ T8471] notifier_call_chain+0x1b6/0x3e0 [ 317.318868][ T8471] register_netdevice+0x1608/0x1ae0 [ 317.324052][ T8471] nsim_create+0xae8/0xf10 [ 317.328451][ T8471] __nsim_dev_port_add+0x6b6/0xb10 [ 317.333549][ T8471] nsim_dev_port_add_all+0x37/0xf0 [ 317.338647][ T8471] nsim_dev_reload_up+0x451/0x780 [ 317.343658][ T8471] devlink_reload+0x4e9/0x8d0 [ 317.348320][ T8471] devlink_nl_reload_doit+0xb35/0xd50 [ 317.353677][ T8471] genl_family_rcv_msg_doit+0x212/0x300 [ 317.359212][ T8471] genl_rcv_msg+0x60e/0x790 [ 317.363707][ T8471] netlink_rcv_skb+0x205/0x470 [ 317.368455][ T8471] genl_rcv+0x28/0x40 [ 317.372422][ T8471] netlink_unicast+0x82f/0x9e0 [ 317.377177][ T8471] netlink_sendmsg+0x805/0xb30 [ 317.381925][ T8471] __sock_sendmsg+0x21c/0x270 [ 317.386591][ T8471] ____sys_sendmsg+0x505/0x830 [ 317.391341][ T8471] ___sys_sendmsg+0x21f/0x2a0 [ 317.396004][ T8471] __x64_sys_sendmsg+0x19b/0x260 [ 317.400931][ T8471] do_syscall_64+0xfa/0xfa0 [ 317.405419][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.411292][ T8471] [ 317.413597][ T8471] Freed by task 12992: [ 317.417641][ T8471] kasan_save_track+0x3e/0x80 [ 317.422308][ T8471] __kasan_save_free_info+0x46/0x50 [ 317.427502][ T8471] __kasan_slab_free+0x5c/0x80 [ 317.432254][ T8471] kfree+0x19a/0x6d0 [ 317.436136][ T8471] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 317.442362][ T8471] notifier_call_chain+0x1b6/0x3e0 [ 317.447465][ T8471] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 317.453908][ T8471] unregister_netdevice_queue+0x33c/0x380 [ 317.459615][ T8471] nsim_destroy+0x1dd/0x670 [ 317.464104][ T8471] __nsim_dev_port_del+0x14d/0x1b0 [ 317.469199][ T8471] nsim_dev_port_add_all+0xae/0xf0 [ 317.474296][ T8471] nsim_dev_reload_up+0x451/0x780 [ 317.479304][ T8471] devlink_reload+0x4e9/0x8d0 [ 317.483964][ T8471] devlink_nl_reload_doit+0xb35/0xd50 [ 317.489321][ T8471] genl_family_rcv_msg_doit+0x212/0x300 [ 317.494853][ T8471] genl_rcv_msg+0x60e/0x790 [ 317.499343][ T8471] netlink_rcv_skb+0x205/0x470 [ 317.504086][ T8471] genl_rcv+0x28/0x40 [ 317.508052][ T8471] netlink_unicast+0x82f/0x9e0 [ 317.512803][ T8471] netlink_sendmsg+0x805/0xb30 [ 317.517547][ T8471] __sock_sendmsg+0x21c/0x270 [ 317.522215][ T8471] ____sys_sendmsg+0x505/0x830 [ 317.526962][ T8471] ___sys_sendmsg+0x21f/0x2a0 [ 317.531621][ T8471] __x64_sys_sendmsg+0x19b/0x260 [ 317.536542][ T8471] do_syscall_64+0xfa/0xfa0 [ 317.541032][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.546907][ T8471] [ 317.549215][ T8471] Last potentially related work creation: [ 317.554906][ T8471] kasan_save_stack+0x3e/0x60 [ 317.559570][ T8471] kasan_record_aux_stack+0xbd/0xd0 [ 317.564755][ T8471] insert_work+0x3d/0x330 [ 317.569065][ T8471] __queue_work+0xbaf/0xfb0 [ 317.573551][ T8471] queue_work_on+0x181/0x270 [ 317.578125][ T8471] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 317.583753][ T8471] udp_tunnel_push_rx_port+0x17d/0x200 [ 317.589209][ T8471] geneve_offload_rx_ports+0xd7/0x160 [ 317.594614][ T8471] geneve_netdevice_event+0x6a/0x80 [ 317.599814][ T8471] notifier_call_chain+0x1b6/0x3e0 [ 317.604919][ T8471] call_netdevice_notifiers+0x88/0xc0 [ 317.610284][ T8471] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 317.616426][ T8471] notifier_call_chain+0x1b6/0x3e0 [ 317.621524][ T8471] register_netdevice+0x1608/0x1ae0 [ 317.626719][ T8471] nsim_create+0xae8/0xf10 [ 317.631126][ T8471] __nsim_dev_port_add+0x6b6/0xb10 [ 317.636229][ T8471] nsim_dev_port_add_all+0x37/0xf0 [ 317.641329][ T8471] nsim_dev_reload_up+0x451/0x780 [ 317.646350][ T8471] devlink_reload+0x4e9/0x8d0 [ 317.651031][ T8471] devlink_nl_reload_doit+0xb35/0xd50 [ 317.656407][ T8471] genl_family_rcv_msg_doit+0x212/0x300 [ 317.661962][ T8471] genl_rcv_msg+0x60e/0x790 [ 317.666458][ T8471] netlink_rcv_skb+0x205/0x470 [ 317.671207][ T8471] genl_rcv+0x28/0x40 [ 317.675178][ T8471] netlink_unicast+0x82f/0x9e0 [ 317.679931][ T8471] netlink_sendmsg+0x805/0xb30 [ 317.684682][ T8471] __sock_sendmsg+0x21c/0x270 [ 317.689369][ T8471] ____sys_sendmsg+0x505/0x830 [ 317.694120][ T8471] ___sys_sendmsg+0x21f/0x2a0 [ 317.698784][ T8471] __x64_sys_sendmsg+0x19b/0x260 [ 317.703716][ T8471] do_syscall_64+0xfa/0xfa0 [ 317.708205][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.714083][ T8471] [ 317.716389][ T8471] Second to last potentially related work creation: [ 317.722950][ T8471] kasan_save_stack+0x3e/0x60 [ 317.727614][ T8471] kasan_record_aux_stack+0xbd/0xd0 [ 317.732797][ T8471] insert_work+0x3d/0x330 [ 317.737110][ T8471] __queue_work+0xcd2/0xfb0 [ 317.741599][ T8471] queue_work_on+0x181/0x270 [ 317.746173][ T8471] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 317.751793][ T8471] udp_tunnel_push_rx_port+0x17d/0x200 [ 317.757234][ T8471] vxlan_offload_rx_ports+0x139/0x200 [ 317.762593][ T8471] vxlan_netdevice_event+0x111/0x470 [ 317.767864][ T8471] notifier_call_chain+0x1b6/0x3e0 [ 317.772964][ T8471] call_netdevice_notifiers+0x88/0xc0 [ 317.778333][ T8471] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 317.784493][ T8471] notifier_call_chain+0x1b6/0x3e0 [ 317.789592][ T8471] register_netdevice+0x1608/0x1ae0 [ 317.794779][ T8471] nsim_create+0xae8/0xf10 [ 317.799181][ T8471] __nsim_dev_port_add+0x6b6/0xb10 [ 317.804284][ T8471] nsim_dev_port_add_all+0x37/0xf0 [ 317.809383][ T8471] nsim_dev_reload_up+0x451/0x780 [ 317.814397][ T8471] devlink_reload+0x4e9/0x8d0 [ 317.819058][ T8471] devlink_nl_reload_doit+0xb35/0xd50 [ 317.824413][ T8471] genl_family_rcv_msg_doit+0x212/0x300 [ 317.829954][ T8471] genl_rcv_msg+0x60e/0x790 [ 317.834447][ T8471] netlink_rcv_skb+0x205/0x470 [ 317.839193][ T8471] genl_rcv+0x28/0x40 [ 317.843161][ T8471] netlink_unicast+0x82f/0x9e0 [ 317.847913][ T8471] netlink_sendmsg+0x805/0xb30 [ 317.852658][ T8471] __sock_sendmsg+0x21c/0x270 [ 317.857323][ T8471] ____sys_sendmsg+0x505/0x830 [ 317.862073][ T8471] ___sys_sendmsg+0x21f/0x2a0 [ 317.866739][ T8471] __x64_sys_sendmsg+0x19b/0x260 [ 317.871678][ T8471] do_syscall_64+0xfa/0xfa0 [ 317.876173][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.882053][ T8471] [ 317.884368][ T8471] The buggy address belongs to the object at ffff88807f52c000 [ 317.884368][ T8471] which belongs to the cache kmalloc-256 of size 256 [ 317.898409][ T8471] The buggy address is located 176 bytes inside of [ 317.898409][ T8471] freed 256-byte region [ffff88807f52c000, ffff88807f52c100) [ 317.912202][ T8471] [ 317.914510][ T8471] The buggy address belongs to the physical page: [ 317.920917][ T8471] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f52c [ 317.929667][ T8471] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 317.938148][ T8471] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 317.946113][ T8471] page_type: f5(slab) [ 317.950079][ T8471] raw: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 317.958645][ T8471] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 317.967212][ T8471] head: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 317.975863][ T8471] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 317.984515][ T8471] head: 00fff00000000001 ffffea0001fd4b01 00000000ffffffff 00000000ffffffff [ 317.993167][ T8471] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 318.001815][ T8471] page dumped because: kasan: bad access detected [ 318.008213][ T8471] page_owner tracks the page as allocated [ 318.013911][ T8471] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5835, tgid 5835 (syz-executor), ts 82665745922, free_ts 82327345632 [ 318.035263][ T8471] post_alloc_hook+0x240/0x2a0 [ 318.040032][ T8471] get_page_from_freelist+0x2365/0x2440 [ 318.045563][ T8471] __alloc_frozen_pages_noprof+0x181/0x370 [ 318.051353][ T8471] alloc_pages_mpol+0x232/0x4a0 [ 318.056200][ T8471] allocate_slab+0x96/0x3a0 [ 318.060694][ T8471] ___slab_alloc+0xe94/0x18a0 [ 318.065355][ T8471] __slab_alloc+0x65/0x100 [ 318.069752][ T8471] __kmalloc_noprof+0x471/0x7f0 [ 318.074589][ T8471] fib_create_info+0x172d/0x3210 [ 318.079516][ T8471] fib_table_insert+0xc6/0x1b50 [ 318.084354][ T8471] fib_magic+0x2c4/0x390 [ 318.088583][ T8471] fib_add_ifaddr+0x38d/0x5f0 [ 318.093245][ T8471] fib_netdev_event+0x382/0x490 [ 318.098077][ T8471] notifier_call_chain+0x1b6/0x3e0 [ 318.103175][ T8471] __dev_notify_flags+0x18d/0x2e0 [ 318.108193][ T8471] netif_change_flags+0xe8/0x1a0 [ 318.113127][ T8471] page last free pid 5835 tgid 5835 stack trace: [ 318.119435][ T8471] __free_frozen_pages+0xbc4/0xd30 [ 318.124542][ T8471] __slab_free+0x2e7/0x390 [ 318.128947][ T8471] qlist_free_all+0x97/0x140 [ 318.133528][ T8471] kasan_quarantine_reduce+0x148/0x160 [ 318.138979][ T8471] __kasan_slab_alloc+0x22/0x80 [ 318.143827][ T8471] kmem_cache_alloc_lru_noprof+0x35d/0x6d0 [ 318.149631][ T8471] alloc_inode+0x67/0x1b0 [ 318.153951][ T8471] new_inode+0x22/0x170 [ 318.158087][ T8471] debugfs_create_dir+0xfb/0x420 [ 318.163012][ T8471] nsim_ethtool_init+0x2c4/0x4d0 [ 318.167940][ T8471] nsim_create+0x245/0xf10 [ 318.172338][ T8471] __nsim_dev_port_add+0x6b6/0xb10 [ 318.177435][ T8471] nsim_dev_port_add_all+0x37/0xf0 [ 318.182533][ T8471] nsim_drv_probe+0x88e/0xba0 [ 318.187200][ T8471] really_probe+0x26a/0x9e0 [ 318.191686][ T8471] __driver_probe_device+0x18c/0x2f0 [ 318.196954][ T8471] [ 318.199260][ T8471] Memory state around the buggy address: [ 318.204868][ T8471] ffff88807f52bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.212914][ T8471] ffff88807f52c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.220958][ T8471] >ffff88807f52c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 318.228996][ T8471] ^ [ 318.234606][ T8471] ffff88807f52c100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.242649][ T8471] ffff88807f52c180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 318.250690][ T8471] ================================================================== [ 318.271476][ T8471] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 318.278697][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 318.288231][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 318.298273][ T8471] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 318.305554][ T8471] Call Trace: [ 318.308820][ T8471] [ 318.311742][ T8471] dump_stack_lvl+0x99/0x250 [ 318.316320][ T8471] ? __asan_memcpy+0x40/0x70 [ 318.320906][ T8471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.326094][ T8471] ? __pfx__printk+0x10/0x10 [ 318.330678][ T8471] vpanic+0x237/0x6d0 [ 318.334656][ T8471] ? __pfx_vpanic+0x10/0x10 [ 318.339153][ T8471] ? preempt_schedule+0xae/0xc0 [ 318.343992][ T8471] ? __pfx_preempt_schedule+0x10/0x10 [ 318.349353][ T8471] panic+0xb9/0xc0 [ 318.353067][ T8471] ? __pfx_panic+0x10/0x10 [ 318.357478][ T8471] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 318.363363][ T8471] ? __mutex_lock+0x147/0x1350 [ 318.368121][ T8471] check_panic_on_warn+0x89/0xb0 [ 318.373054][ T8471] ? __mutex_lock+0x147/0x1350 [ 318.377813][ T8471] end_report+0x78/0x160 [ 318.382051][ T8471] kasan_report+0x129/0x150 [ 318.386540][ T8471] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 318.392424][ T8471] ? __mutex_lock+0x147/0x1350 [ 318.397192][ T8471] __mutex_lock+0x147/0x1350 [ 318.401774][ T8471] ? __mutex_lock+0x5bb/0x1350 [ 318.406530][ T8471] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 318.412765][ T8471] ? __pfx___mutex_lock+0x10/0x10 [ 318.417784][ T8471] ? __lock_acquire+0xab9/0xd20 [ 318.422626][ T8471] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 318.428687][ T8471] ? process_scheduled_works+0x9ef/0x17b0 [ 318.434397][ T8471] ? process_scheduled_works+0x9ef/0x17b0 [ 318.440107][ T8471] process_scheduled_works+0xae1/0x17b0 [ 318.445654][ T8471] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.451715][ T8471] worker_thread+0x8a0/0xda0 [ 318.456314][ T8471] kthread+0x711/0x8a0 [ 318.460377][ T8471] ? __pfx_worker_thread+0x10/0x10 [ 318.465475][ T8471] ? __pfx_kthread+0x10/0x10 [ 318.470058][ T8471] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.475252][ T8471] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.480443][ T8471] ? __pfx_kthread+0x10/0x10 [ 318.485022][ T8471] ret_from_fork+0x4bc/0x870 [ 318.489600][ T8471] ? __pfx_ret_from_fork+0x10/0x10 [ 318.494699][ T8471] ? __switch_to_asm+0x39/0x70 [ 318.499455][ T8471] ? __switch_to_asm+0x33/0x70 [ 318.504204][ T8471] ? __pfx_kthread+0x10/0x10 [ 318.508788][ T8471] ret_from_fork_asm+0x1a/0x30 [ 318.513548][ T8471] [ 318.516807][ T8471] Kernel Offset: disabled [ 318.521107][ T8471] Rebooting in 86400 seconds..