last executing test programs: 3.394792024s ago: executing program 3 (id=9789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) 3.219928237s ago: executing program 3 (id=9792): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) 3.083580644s ago: executing program 3 (id=9796): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x698, 0x5, 0x380, 0x198, 0x198, 0xfeffffff, 0x198, 0x98, 0x2e8, 0x2e8, 0xffffffff, 0x2e8, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffff00, 0x0, 'netpci0\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x52}}, @common=@ah={{0x30}, {[0x10, 0x4e4], 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}, @icmp_id=0x65, @port=0x4e20}}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {0xff}, {}, 0x5c, 0x0, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @gre_key}}}}, {{@ip={@remote, @broadcast, 0xff, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x7, [@datasec={0x6, 0x0, 0x0, 0xf, 0x3, [], "a3a011"}, @func={0x8, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x61, 0xe, 0x30, 0x5f]}}, &(0x7f00000001c0)=""/147, 0x3b, 0x93, 0x1, 0x7}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000007f7f100007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000140)=""/23}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x62, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x3, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0xd, 0x3, 0x3, 0x8, 0xc, 0x5, 0x6, 0xd, 0xc, 0x4, 0xa, 0x8, 0x3, 0xa, 0x2, 0x2], 0x1, [0x7f, 0x6, 0x401, 0xff01, 0xd71a, 0x401, 0x2, 0x24, 0x92, 0x8, 0xa, 0x4, 0x0, 0x8, 0xd006, 0x8], [0xffff, 0x2, 0x10, 0x2, 0xab4, 0x1, 0x4, 0x8, 0xc5c, 0x3, 0x3ff, 0x138, 0x5, 0x9, 0x8, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xa, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @generic={0x4, 0x4, 0x3, 0x1, 0x8001}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x7, 0xa, 0x0, 0xffffffffffffffc0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000600)='syzkaller\x00', 0x7, 0x5c, &(0x7f0000000640)=""/92, 0x41100, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000006c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xe, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0xffffffffffffffff], &(0x7f0000000780)=[{0x3, 0x5, 0xb, 0xc}, {0x2, 0x5, 0x7, 0x4}, {0x5, 0x3, 0xa, 0xa}, {0x4, 0x2, 0x7, 0xc}, {0x3, 0x4, 0xa, 0x1}], 0x10, 0x8000}, 0x94) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x6, '\x00', 0x0, r1, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x7, 0x3, 0xffffffff, 0x200, 0xffffffffffffffff, 0xe, '\x00', 0x0, r1, 0x1}, 0x50) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x5, 0x5, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x19, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x69b}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x87, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x800}, 0x10, 0x56d2, r12, 0x1, &(0x7f0000000b80)=[r13, r14, r15, r16, r17], &(0x7f0000000bc0)=[{0x5, 0x5, 0x5, 0x1}], 0x10, 0x741}, 0x94) 2.875135784s ago: executing program 2 (id=9798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0d", 0x8c}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x805) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x8004) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000001080)={0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x40) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 2.494528747s ago: executing program 1 (id=9799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf5}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c815}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x16}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000c00)={@random='P\x00ElJY', @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x35, 0x24, 0x66, 0x0, 0x1, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @remote}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x5, "0457a7", 0x3, "9c9bd7"}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000500)=r4, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(r5, &(0x7f0000006280)=[{0x0}, {&(0x7f00000041c0)="d2cf43efec", 0x5}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x4, 0x4, "987c804f"}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000ffdbdf25120000001800018014000200626f6e645f736c6176655f310000000008000900ff030000080007000b000000857ee76e41bde95a41d25c6f66db8f67ad45f929fbe4ca91cfe3075a9c6d7d3bcbd460fc4c852db63acfb4f6c846ccf24744b00765e2399823f16a4a59cd7e91e172f61530727de5c7b0513498228cd7449ba226ebf26f8a94b01a1290b4a8"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2404c054) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000850}, 0x24044010) 2.284061511s ago: executing program 1 (id=9802): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (rerun: 64) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) (async, rerun: 64) unshare(0x2c060000) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={0x0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x401}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x8000}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.283879488s ago: executing program 4 (id=9803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) (fail_nth: 16) 2.282887479s ago: executing program 3 (id=9804): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4", 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b2c, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000001840)=@ll={0x11, 0x11, r2, 0x1, 0xf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000200)="9e4980a74259eb72822d03ab3ecf0cba7aadb12784638ed71a83198372048cd96bebf810e01f25bab41eceb5e6e1f1257a2018e29eb14141b6be49b2c53922c2b2add3c9c92319ea6901b9ddece3d1cbf954d5fb4ef44529e42c600e59718b34a865ab3596408d7b708d966ed56b57468d5231e51b7e90596848e87bd485f598cb61514f7adc52badd5f621ed3436f6134860674b6", 0x95}, {&(0x7f00000002c0)="b00fabf3a57aad5cd340bccb58820d2fbcaeec374f15895e4115f7ba57c199f98aa08013c26e3633e5ca0a46a659cd9fc6fed786e67303ed06122d1b0a8dcfdc0742bd604f12f45de16754cc6af5a762cd5d084a4bc4cbae66a564769b3318745cf80c576fdd2f244fb7ca649daf61e25738302e5591dce6ecfddce3f89d35963afe8f3cdf9135bf1ca93899b2c59221ccf769e83cb77c940232b6ed3b9de59422e62aa3c1a86dc33fd08be73014d558e98801d673201fd26336eece07c4214eda6d5827a942f4bd6bf5a03c72b1becd47941570bd445c5d247ba75b25e9d8c37e9c2674960896eb7ef3f4372b3875226ce5c5d51d3906bd8727e2b8ab", 0xfd}, {&(0x7f00000003c0)="dd3141b96c236ffa92c96ce45f1a1284f6fa3dd92018dfa383dbabe9be0317ed990aaff0ef7fd026eb749c6140e6947bb8ae22faac0c9a5e67d63eb5f256ca20c8278b57838bffbdcfd6150352638ffc4cfc768fa11ee6490d07d03b5601156738d56766e6bffb3cf5867733b565147ff6a6d554fbb92f04599c1f8d5abdb07e20e130bfdc770cd3e29f735626c2532deca8b1bdf6824e9daa3d1e1f30af9cc46605b5264c1ce930177afc", 0xab}, {&(0x7f0000000540)="53c4beced95264466e67f6aa86a3aaa9f028c3ab4203da3cb5bd1be4de3027f237a47bdd1996f7b5fd6f6b1d1c259f0189d951611888744a1ec7491d8c887a4aa38ce24c520c55872d110b96d593e96c7a2be0b5978a0e40fbb86b5bf1acdbc42673ad970e2d9d3eef684e68c4bbd9a543f7b05608974bab4d88082e1041294b7e877a2f78845b47c55d791d59b7dfd140fcc3a12af780a2a466bfb925b8924511a87f2b465e9bf2ec3444d54accf59c603f0bf8ef1c0a4f7aba8acad328be6330d216240db67c6f1e3c51ec40cef44f5f9f1f", 0xffffffffffffffa1}, {&(0x7f0000000640)="c331ed15ce64e2c6e7285c777cf8681733e06512e60fba7ee3f59f5b6fa90800d0eadf3004fe098915d7116a226e5001ea17cb50d57bf197660f48b0bccb254930946bbd1ec00e23530b8c4760f3da9795b622a2baf7c8d6ce5d8871a30a19f8282d751a18a3b7cfea322256d1ba4a5440f1de20faff0ac72560dfc6730cef14b5c34b6de1967d06a7bec564b4e28c0bab2e125fee592af8", 0x98}, {&(0x7f0000000700)="00e006beb77092fb5b5eeea4376d98728a8b", 0x12}], 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB="101000000000000015010000ef700000a40f8cf13243506d5584f054f3ace28977473086602c8ea271d0f49cf0efd9c0e5b3820aec7ffdb1baa9e60820563a49d11035eaf2fe9535b3922bd550cadcc514fd354d960ab0ed4d81b589ca174d427066a45e8f55eb0c19d51db248259f0850eba2329e34e9fb130de173f1eb57e639aa1eb634ed37d43a5f8a2b3e494089d436c1e554c0d74daea7fc7b8e3e56922021025f98c5593e4e69e00489ac2991b2b70fa28a04412e4eee98228a741954c8107b76ca1f5737c3e77f87f7895b86e097712a21f69bf632019b79249e954c5f545a242a4118673a28af97e68810f6e6664761eb2d43cc8a52eba8a18eddf99cb66d6e0167787b144439f672c3eca34e3b11f96e528f8f380580cf8ff24976aef997ba033eda26013ef06a80d462791486872b3fcb887f4e4d941a0f9e86e7ee82f171733ae7c26d944f29ffd0ad42e11cbc8372fb2da577ddddaa5dcbfa54497045fbaa10280aa52d52f5868eb9773af00948c54f0e10c5ac1a2f5ac851e566ebde8f67e20a33c809a942b2fde3470244f99970beb70bfdf8c3bbfd546e4d4051a6e022a5ac181ca3f65b1aaeb40f2ae352ef7466293c0535923d7b06a592a8e59774b57014fcac32e3377dfa1e225498fb5ba6ce1e61c0d9bf90f219f7ac88cbaf3c7af7718d8d9910e32ae169bb9590e9c6e14902268a8d333cdf477bea8d7b1d6a03a6250ba358af731a4499f7f2c5e3e2881a0a304aff765c4c437e37f88f2cef1a68529a575e65609502fe398a64bce227e4d5582da8fdb6ce34b6ee85bfb4998b2e24b278c04aa71af0a4459f5e14edccd1298bfada2cc1b48a967409bcc4c5f576abb7dba2dfeda6826d9e64d662773ffb7d7d8e968146a2681731bf6a76697553f180e1b9480b1e33893699e9f5ca0e6494c4ddaf11ca99ec47b557372eec9706f46b9d28ce1486d91a834a769e3debd393fa99d12cc17368f12476ce42e2456073431122e7db631a0ef57d4b1835a99e6c28098da5d523d5e057cd734e2f48dea358c04b04feda32a3cce34ab103fc514420358a149e21807389dc98f0818c3b8750906b91bde908d82ea19d1da86f45d474fa3b7a3ae8339962076e3bad01df51ce18c9866de5a8ca5fce69b94de5b65f849bf3d88afe2b4e5e8ee588e724404c1080dc40e43ede2a9d54cc20a0c7cefbaf046368ec36f8ea41fb0dcc1654454c3ecf33d19f85a12ee5af1ab633188505e4bc5c716edff0f81b98fb9165b619217ebc7f00011a04e12cb74696b534fdd340cd75d457a9a41b78b98b5a6805f52601592cd9109a462f28d213bba1e7c5ab6b487ad32ce0802e64f38f72494d13dd3927ecc7b2502ddf2b157f170732537038ef2c5142a3b40075e05cda7f18b3d13531b3cf57d3071ce39bc70cbfee00e9a051840701534980e41d8a2ad3a8a96961c42ce52f4dd6909d6d2f8865e8b5778c8522a80dc38e9a81143911d318834181a6dd73f8340656eefa02c9e27c204012a7d75a7986dc55532a7da534455744ec1dabd6026b68e6e4ef77ac69302666d79db419202bbac9b81872362346edda9e07b4d78331d0f0dd06dfef55305f76973d458f1de204d82774db0ad19c6a1f5d4222bc0770de29837f55deb94a8c724e27b935cf36d1f367eb6be021e359b04b01181dee484eeabbd6cd78273a2e8020db86ee8e9b31ba38e596d8b017937c870d28687aae4d1f923a5507b144cb906bcfa9336a1b685e9e968be88c5a24d351f2373770752dea9a5ed626e9e4ac78afe4437d69441bbc741bcab3a4c5e26c86c91f998ddb6dcccb5bbcc715a63ba30332f0ed58973efa066caf12cdc55bf989af6dfd0b28d28418cc2c6fbb7185ac4b0f4bb396ce155e2461493212c12078015dacd535ab2aa9389ddb80a2868a787977324af882dff1c27ddff838a5b777f7422f71022904e86b55361aa5691b61d4d982eebfb7ca32f74b428cf134822e8e61c4b274c6ad63a6902e29f087fbeeba501bacbb32bf3db769083c02f9969cf32b689e74ad606e48330c0ca7f0de08b5af6a0454e7328fe5c8a3e4cd6d866c5053ac25732fca1769529ccaf1351c7839e37f96476aa769b78dccbbbecb664a4debcfab4d6efd9415e52c411c8a2d64a1c7c68fe11591a5a325b93f2bde0aadd1dbbe5418af74438f88d66b9b69714db4019d4c790e09d1c05acd0614298375cbf0f9a33e85776a0f8583b644213694e8b501afa1bf29476575a7ac876e43badeffdfa3869debf8faeb6d092012aac1ca8664ae297e2c0ec7c2c8af294befeb3ca55c6197ce137d5ff20545e1ee1c44fd19eb3d3590c485fda4670a3329aa9d07b24d7b23c60db82cfa152409117594d666bb3d39511b008d2436626e47cbe80c66271d182318a42c2f16716c29606e3aa74488ca2e771987ba6a305295ca7c106986ed3524d70f95c4b8f8142de31eaa95e3ca087708f18c455c6d665b5579bb5ba0860726942be90c6b85054b3db57107209ee11f62648081c54e25753b7966b9e5b5d72fff4c7c719de0795a5f2b8957c94cf04a6aac29266186822fe6f85bdd6a17fac72d9c0c16627e4ae0baef44752363bea7e416009b6d101168f5888720ec7125ceaac3a53b9b909033e7f29f227c48e8a15a6013c59f12cf027e318bea1ff189964bf76a838add5665eef31d2d93b5f9d6c919e90e04d30a3de7a6f46a17f7650714dc522914227bb8d6f5ac5365e34a39243219762d27e52a8a76f1823bf0e964fa549d69a4d8e8f8bf445f3fb01fa0f814db210c284f1624a057b16a1947b1ce17e26fbed510996ef69e56935845a4ff56cf5ad851a92d965b717f6e485791b5dbae82ba6e4df4614a0fcad6085bb9c7634b94f1496e7f9ce830e1daa5944c428eaa978c8d6d3e047ef028d0bd399d09bee41420556b4dffc7af7f367d3d7bbb62d4ffc5f052bc9fa71fdcda73b181a130e52ad8d1214ab12a07da132070d2bb3bf9fc2ddd8a9b3ecd964f4db0ce86b6744ee85e7ac76f9be0b9cd5d7695f75ce5e9e8e9303b7b40503333283698ff92670c5237899e06dadabae317d0d13a7141d99f6dc549f441d2d05bf51ab8b68f4e7a52f9d69b91be72b4f48bf6ec8135311f1e877f4d3a90eb54fd5630646f1573c1176519cd23d8e4fbeabba148eeb37573cd2751093d33699e719ca84ed775531487d6c80839430bfd51a30e7c0cb2b883ca70fc5bbba22b31d73aab82a9adb668d3b91cdd94c04a5675f1f3217ed26c8f7bab63b598df0a23d8266270c2c45c166502bde00308818e5aafbdf35d741954a9cd186a98311e7145620085b584acee195c3356ad1119627b7c617bd715cc1af1965ed76c88679b0efbb20290351fbc7bc17b0200d6b83350350287fd8502f1bf863ff421cec76a1096a967e062090f104970b36a6139ab109d3f305f2d2f7422b4b6d47fc0c91e2f067b8f781e8742750d7ed6b1e9c959f148663f876152f4b5ed8a66ce78b011d671d3df8edc9645e4bd994e50b8c2763e1c48b9fbbb0ddd45a1436f3212cb02297d719a1fb8cd5e82d2fa5c4625d95d0888930e55ec52a63e9bf944c00f39b750b78759b530e4d2faf797e28545191db4132b95e7a30153d2779105d65405a9962611941993ae8d9ca3fa7ada3936bb8df16d143edaa7cbd53a12564ef9a7d821b3f461f3b444742cfb764600f3a29de08eba923b90332fa887a927b8f721e33884d71a433b61610b3a04dd7354b84976b48fff451fdfb749092fb9077ec7e0030d6e9f91bc6a171115f18cf4e97e46a08ed42522423609d5009b2c5311811585844fc1d19012594cf4d50086a9c8a43250774e4bb418836f529819157f8019a6a116edf6fcaf3a5330b4f902af317e6e4d07cb3b74c67e2f15f8158fa0ecf59e74b5484c63c75f14cf404a490ccdaf19fa4fac0c61926ccc481bee9d18f6355223414a9da467a49f14378a0233c42e4347a4098fe750025a7944d173709a1673e4789bab5a6519b9eb45b5ddba50ef65376fff488f077bb5edac37ae43d7a858363f458992ee2ea29e424c995af7f97b302f0013ab380ee4295632e92c257ad88b11643ff1f906e8c5653ee8034e97d42ca656edafcadd0c6ff09cbc7d77916fd82452c3a13544b906e932c2880d228fc101cc14ab1114e42a7f8abd125ac4a9a11489a9cf314f660857493e6d74fd92e70027d69eaa04efaacb4288ee45d79fe45308836b719445eb5598f0cdb3d04ea9291472f8ed6fc19224d6c8c91a423518b4e82d4584d6c89fc96377c84bfc93dda515757bd7ea14cba3bf0b122bfcb59589c8cb93a3077a4a1ecdd86671e87db962c9acef981c922a7b0603b3449b9f172733e5252c34bff4c7948a35e6d933bb9e7356b837aabafd5b78c8a9bc796cd6d28eb815ee8a4daf4af35d88a1e031eb449532dc382cca9be2035cd31248b00389e431f77e32057c0cdb780249d98e0321f8074145cc7d7acb3b92edade4bde5c0c0e99b3d678006e9cbd6f3390582ddec632d6a6d0b7ecc5c382c6a602ed58422f481581f3e0f5b70807d60af3a5264335019dcfedad7103010405f51ad816a02436238ffb63ff3883f964137bb8b2fe498276323ba9d75a55d17b8aeb7debc49bbd0dc10ff84b21f18bf4610bad1e93dd62b644e59d664cc1d75f8ded181e29e77a588d423deeacb2a68d4b65d4d2de4d57de317135a1264344c597f188994a658c55b2aeb4d47247db53431b3e9a7e262a7aba35b4ab8095634762a854ee803ebd61e184c79fb48a4859559d673bc83deef4a82bad2699ee70c54bdf4037236e1399980d8410125e5362001558f540c18cb82fad8ac4a4e7f4c1319bcbe079fcc526d5affb7c330a8f5e2dd121b2ce5084ff117f2542c3e970ead9b913bc22376f51b990faac118f6932363dc5f048535a0ba670367668e59aca3db87c663c8724113e2e79f3c4e18138ff626d927c0eff22d150b26309044bc0ed2a793b081a83a5da7dcc087a868e625da3e78df895d66e1f1f529033cdd2a1a0aba5be572e7a55cb3b5622dad0b8ae9f571b8810a7515508dc4ceaa2c5418adab5641a0356840ee785dfeb0ab55020029cec1b3a81951b3cbeb7d721dec47d07746cb9d8f10a82c816bfb131b801f7f73be63f3fd7966ae082c171dbb54b7b0920e6bfc844e719251fc05f136774e7d3c3bae663be2d1d2b61302bd0728987bbca16db687f23df8b6bacc73ded8b433ec4c785d7af6848a1715fd123bf952b25b4ae9edbb9d1e3d7b64a29e209c1fb08dcc7d7f5855522e4864aa8cc574c9a56b14e0e8e9b72d1eec6c807441065cf57c6a8be85bd0b387df60626b78e106c073b40c9ae7aa8a309496120ffb6638f61355858013ae12a76926a91cc0d4d24654afc29bd40ab6861f00519a83ba3dda555d1f8f358cc3a4368bc5923eee6adb9777dbbac56cae1407ccb857e9c3954f69368526395dcb63a815d3a30dc30db1b8088a0b6f78f662b24f9e9d8bdd33578a482f0974ba74f78658cfc7309179fd50f5a1026aa3013bd2e717e34724286e0de03c50d2013189a5ac0f692583d0ce96c6cf54bf013efbbe035a263bbd5dc92fa54850192f9ee1530172d5ca134fdfb83a357b4851149cd6911045b7c18fab88ce066cccaae8a1f84dce40862cf0dda4903fb36092efd3068a65d072fc95cbfbfb68ec01b53928f698b7cef38e1976b23b712bb4ae3e0e87972392146ec3e3d38fe1f1a3379ba223e9c250a70a14d4874e18a8f708caacb713e8c11353f83623b3b448d174c41e8a8766fde707ce73ba7340699d7b0bf3a8e7ef31e81368d65ae757dc52da7ab6f73d12e62da2f01a1728ace8867dd2bb7a6e6e0976ab7880f38effa091433760d2d3c44f8072b813f0a9e6a45cbabe2883fa9c5879776d11b409e63c767713828dd510fb42d861c25b204d4e158e56e993c39d1c2e32f5afff1cc9eeaecc996e7122baf4"], 0x1010}}], 0x1, 0x40000) bind(r0, &(0x7f00000000c0)=@can={0x1d, r2}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) unshare(0x20400) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x40, r4, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x34}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfb}]}]}]}, 0x40}}, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) write$cgroup_int(r3, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x401, 0x8, 0x5}]}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r9 = openat$cgroup(r8, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) close(r9) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) 2.252221711s ago: executing program 4 (id=9805): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x80, &(0x7f0000000140)=""/128, 0x40f00}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2.057025901s ago: executing program 1 (id=9806): r0 = socket$inet6(0xa, 0x800000000000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r4, 0x1f4d2000) write$tun(r4, 0x0, 0x22) close(r4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, 0x0, 0x0) 1.817380716s ago: executing program 2 (id=9808): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x2b, 0xe4, @void}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r1, 0x58, &(0x7f0000002040)}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x2b, 0xe4, @void}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r1, 0x58, &(0x7f0000002040)}, 0x6d) (async) 1.703951282s ago: executing program 1 (id=9809): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x50, r0, 0x1, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1500}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) 1.640950155s ago: executing program 4 (id=9811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1.636035499s ago: executing program 2 (id=9812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.545644264s ago: executing program 0 (id=9813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r2, 0x0, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) close(0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x40, 0x20, 0x57, 0x99, {{0x37, 0x4, 0x2, 0x3, 0xdc, 0x65, 0x0, 0xf9, 0x4, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0xf, 0x91, [@multicast1, @broadcast, @rand_addr=0x64010100]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x7, 0x8, "10d3b859906b"}, {0x2, 0xc, "7f1d25081f5d108b88d3"}, {0x7, 0xb, "5e3c62dbfd623d6362"}, {0x0, 0xb, "ca63e8f3d7016116ad"}, {0x5, 0xa, "5054933fdf4e6433"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0x68, 0x0, 0x5, [0xfffffff1, 0x10001, 0x200, 0xc000000, 0x1, 0xd, 0x9f3]}, @generic={0x94, 0x12, "1dba79188dc0abce0ab76d1ce70ba176"}, @noop, @ssrr={0x89, 0x27, 0xe5, [@local, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010102]}, @ssrr={0x89, 0x1f, 0x9b, [@multicast1, @broadcast, @local, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x21}, @dev]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000540)=@mpls_getnetconf={0x34, 0x52, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffffffff}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7c3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.538281797s ago: executing program 3 (id=9814): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x100, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1.537373611s ago: executing program 4 (id=9815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r1}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[], 0x0) 1.451948031s ago: executing program 1 (id=9816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (fail_nth: 16) 1.269177496s ago: executing program 2 (id=9817): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x440, 0x100000c, 0x208, 0x0, 0x2d8, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x208, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller0\x00', {0x0, 0x4, 0x23, 0x100081, 0xfffffffb, 0x3, 0x84, 0xfff, 0x18}, {0x2}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x40, 0x2, 0x7, 0x8, 0x9, 0x3, 0x8, 0x8]}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xff, 'syz_tun\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x6, [0x1c, 0x2c, 0xb, 0x3c, 0x2e, 0x20, 0x24, 0x29, 0x36, 0xd, 0x1a, 0x2, 0x1f, 0xd, 0x80f, 0x21], 0x0, 0x4, 0x4}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xc72aaf435dc5921a, 0xffffffff], 0x4e23, 0x4e23, 0x4e23, 0x4e20, 0x3, 0x3, 0x2, 0x3, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) syz_emit_ethernet(0x1e, &(0x7f0000000780)={@remote, @empty, @void, {@can={0xc, {{0x0, 0x0, 0x1}, 0xfd, 0x1, 0x0, 0x0, "8daa99d5c9c8e770"}}}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x840000, &(0x7f0000000040)={@align, {0x40, 0xb6ab, 0xfffffffd, 0x5}}, 0xfff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xff}, {[0x10, 0xb095, 0x0, 0x8]}, 0x2, 0xb6, &(0x7f0000000100)=""/182}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071102b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000003070001000000000000000001000004611b45ec7fb1c3780000032a"], 0x20}, 0x1, 0x0, 0x0, 0x4008040}, 0x8) 1.171227957s ago: executing program 0 (id=9818): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="300000000700000029000000040000008402300400030000040200030401"], 0x30}, 0x0) 1.056198252s ago: executing program 1 (id=9819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r6, 0x3) accept4(r6, 0x0, 0x0, 0x0) bind$can_raw(r4, &(0x7f0000000040)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x1}}, {{0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x3}}], 0x20) bind$can_raw(r4, &(0x7f00000000c0), 0x8) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=@newqdisc={0xac, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x5b, 0x2, 0x8000, 0x2, 0x6, 0x6, 0x8}}, {0x14, 0x2, [0x7, 0x1, 0xfff7, 0x6, 0x6136, 0x8, 0xc, 0x1]}}, {{0x1c, 0x1, {0xfd, 0x5, 0x4, 0x9, 0x1, 0x400, 0xffffffff, 0x4}}, {0xc, 0x2, [0x6, 0x7, 0x3, 0x5]}}, {{0x1c, 0x1, {0x24, 0xf7, 0x3, 0x0, 0x1, 0x3ff, 0x6, 0x6}}, {0x10, 0x2, [0xb, 0x3, 0x6, 0x5, 0x8, 0xd]}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x400dc}, 0x2) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) 1.05575352s ago: executing program 0 (id=9820): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000006d000110c8bc6b8f74a90027bd7000fd", @ANYRES32=0x0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000003100000000000000000000009500000000000000b66c9acfeaafe3dc9bf60f1f4f2e3a1022eefab0d666e99c5cdb8f1cace893717ce77385aeb37daa6132b3093c135e16a5c0b5d09df3528359a53f090af1e660a5465d7d505daccb91443f4c23ee2386029cb142e931f1a52f"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xe, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[{0x4, 0x2, 0x8, 0x7}, {0x3, 0x2, 0x0, 0x7}, {0x5, 0x5, 0x0, 0xb}, {0x1, 0x5, 0x4, 0xb}, {0x4, 0x3, 0xd, 0xa}, {0x1, 0x1, 0x7, 0x5}], 0x10, 0x3}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008590000b704000000000000850000000300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r5, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) 993.652185ms ago: executing program 2 (id=9821): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x80, &(0x7f0000000140)=""/128, 0x40f00}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 947.071547ms ago: executing program 4 (id=9822): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r6 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x110000014}) sendmmsg(r6, &(0x7f0000000580), 0x0, 0x8) bind$inet(r6, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718", @ANYRES32=r2, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x1d000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r9, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8041) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) 874.340744ms ago: executing program 0 (id=9823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (fail_nth: 8) 722.561453ms ago: executing program 3 (id=9824): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r5) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000dc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/139, 0x8b}, {&(0x7f00000001c0)=""/177, 0xb1}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/15, 0xf}, {&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/118, 0x76}, {&(0x7f0000000700)=""/189, 0xbd}], 0x4, &(0x7f0000000800)=""/113, 0x71}, 0xfff}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/153, 0x99}, {&(0x7f0000000940)=""/106, 0x6a}, {&(0x7f00000009c0)=""/143, 0x8f}, {&(0x7f0000000a80)=""/38, 0x26}, {&(0x7f0000000ac0)=""/78, 0x4e}], 0x5, &(0x7f0000000bc0)=""/165, 0xa5}, 0x6}], 0x3, 0x40000100, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 721.571826ms ago: executing program 0 (id=9825): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000480)={0xa, 0x4e20, 0x7a, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0x30}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000040000000000000000cbd3f5303e3f324689ed79da891aabed09402b8046cb5afbfbfa5f578df76e403473d35d25b8a9c1d221bfc94e92c7a573f8f3c28563fa8187c326f61681035dfc9934b4b8a0ff6e7faeaec86ef0f8a947aa7c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6(0xa, 0x80000, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=0x0], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, 0x0, &(0x7f0000000100)=""/7}, 0x20) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @local}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/153, 0x99}, 0xdb31}], 0x1, 0x40002102, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket(0x2, 0x0, 0x804) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001780)={'ip6_vti0\x00', &(0x7f0000001700)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xe, 0x9, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x20, 0x20, 0x1ff}}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000280)={0x84, @loopback, 0x4e22, 0x3, 'rr\x00', 0x34, 0x80001, 0x70}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="7d2a55dd73c1832200d9492ac06d91e7a7a806e6cc09c13c8c649950d85bc4c26a58f131894245", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r6], 0x50) close(0x3) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c) socket$kcm(0x2d, 0x2, 0x0) 417.667382ms ago: executing program 2 (id=9826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x5, 0x4, 0x2, 0x25, 0x14, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101}}}}) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x70, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x2004010) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@getsa={0x104, 0x12, 0x10, 0x70bd29, 0x25dfdbff, {@in6=@empty, 0x4d4, 0x2, 0x6c}, [@algo_aead={0xd2, 0x12, {{'authenc(sha1-ni,xchacha12-generic)\x00'}, 0x430, 0x180, "7312076fd990d9149d17ad8f6f157f81bd88b52de9d59aa5cb82b7ca0b0bcb2b5648dfe0f7ae7360ec184749fea3148b6f21a7bbe7249460521f34f8fba2239bf42f59f54f2269912d7c4c3348f2a81515f842dc2e2e1346b94f449f4a5ee45184b3570dd369a98e19bc76473a98a7d586541b4c43469e6bdb94c6d66164fa6b23e1ac0f78d7"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x104}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 222.384874ms ago: executing program 0 (id=9827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x38, r3, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xfffffffffffffe0f, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4001}]}, 0x38}}, 0x40) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) 0s ago: executing program 4 (id=9828): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10408}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="e80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008a00000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400186800000800070000000000"], 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff00000000000000008513e09e7b00000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffff5b9d05dcd82072e8b72605af93c083bb8c2effcf270949da67"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ff00005c0000000000119078000000000200000000001b590048907803000000000000004b3f7633015aff9fa5e73369ed3ed4f938752184f1af202914ef0f501fe8f4fc0d232b48a86ef0222fb6364766977f81d03ed6a44ebec10200"/106], 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) close(r7) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001a40)=""/4170, 0x103b}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f0000000700)=""/60, 0x3c}], 0x3, 0x0, 0x5}, 0x6}], 0x400000000000113, 0x40002102, 0x0) kernel console output (not intermixed with test programs): 224.499161][ T5389] RIP: 0033:0x7f18a639e0d9 [ 1224.499180][ T5389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.499197][ T5389] RSP: 002b:00007f18a45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1224.499217][ T5389] RAX: ffffffffffffffda RBX: 00007f18a6625fa0 RCX: 00007f18a639e0d9 [ 1224.499232][ T5389] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 1224.499243][ T5389] RBP: 00007f18a45f6090 R08: 0000000000000440 R09: 0000000000000000 [ 1224.499256][ T5389] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 1224.499269][ T5389] R13: 00007f18a6626038 R14: 00007f18a6625fa0 R15: 00007fff9f8475b8 [ 1224.499298][ T5389] [ 1224.647434][ T5390] tipc: Enabled bearer , priority 0 [ 1225.012912][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9110'. [ 1225.169399][ T5409] FAULT_INJECTION: forcing a failure. [ 1225.169399][ T5409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1225.182765][ T5409] CPU: 0 UID: 0 PID: 5409 Comm: syz.1.9112 Not tainted syzkaller #0 PREEMPT(full) [ 1225.182789][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1225.182801][ T5409] Call Trace: [ 1225.182809][ T5409] [ 1225.182817][ T5409] dump_stack_lvl+0xe8/0x150 [ 1225.182851][ T5409] should_fail_ex+0x40c/0x560 [ 1225.182880][ T5409] _copy_from_user+0x2d/0xb0 [ 1225.182900][ T5409] ___sys_recvmsg+0x173/0x5a0 [ 1225.182932][ T5409] ? __pfx____sys_recvmsg+0x10/0x10 [ 1225.182961][ T5409] ? __fget_files+0x2a/0x420 [ 1225.183023][ T5409] do_recvmmsg+0x31a/0x7f0 [ 1225.183056][ T5409] ? __pfx_do_recvmmsg+0x10/0x10 [ 1225.183092][ T5409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1225.183122][ T5409] ? __fget_files+0x3a2/0x420 [ 1225.183157][ T5409] __x64_sys_recvmmsg+0x198/0x250 [ 1225.183185][ T5409] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1225.183219][ T5409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.183240][ T5409] do_syscall_64+0x174/0x580 [ 1225.183265][ T5409] ? trace_irq_disable+0x3b/0x140 [ 1225.183290][ T5409] ? clear_bhb_loop+0x40/0x90 [ 1225.183313][ T5409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.183332][ T5409] RIP: 0033:0x7f18a639e0d9 [ 1225.183351][ T5409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.183368][ T5409] RSP: 002b:00007f18a45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1225.183389][ T5409] RAX: ffffffffffffffda RBX: 00007f18a6625fa0 RCX: 00007f18a639e0d9 [ 1225.183404][ T5409] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000003 [ 1225.183417][ T5409] RBP: 00007f18a45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.183429][ T5409] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 1225.183441][ T5409] R13: 00007f18a6626038 R14: 00007f18a6625fa0 R15: 00007fff9f8475b8 [ 1225.183472][ T5409] [ 1225.823084][ T5426] netlink: 'syz.0.9117': attribute type 1 has an invalid length. [ 1225.825455][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9118'. [ 1225.838038][ T5431] FAULT_INJECTION: forcing a failure. [ 1225.838038][ T5431] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.853310][ T5431] CPU: 0 UID: 0 PID: 5431 Comm: syz.1.9116 Not tainted syzkaller #0 PREEMPT(full) [ 1225.853336][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1225.853347][ T5431] Call Trace: [ 1225.853356][ T5431] [ 1225.853364][ T5431] dump_stack_lvl+0xe8/0x150 [ 1225.853398][ T5431] should_fail_ex+0x40c/0x560 [ 1225.853427][ T5431] should_failslab+0xa8/0x100 [ 1225.853458][ T5431] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1225.853485][ T5431] ? skb_clone+0x212/0x3a0 [ 1225.853509][ T5431] ? skb_clone+0x212/0x3a0 [ 1225.853540][ T5431] skb_clone+0x212/0x3a0 [ 1225.853568][ T5431] __netlink_deliver_tap+0x413/0x860 [ 1225.853605][ T5431] ? netlink_deliver_tap+0x2e/0x1b0 [ 1225.853632][ T5431] netlink_deliver_tap+0x19c/0x1b0 [ 1225.853658][ T5431] netlink_sendskb+0x68/0x140 [ 1225.853683][ T5431] netlink_rcv_skb+0x2a4/0x4a0 [ 1225.853708][ T5431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1225.853737][ T5431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1225.853775][ T5431] ? netlink_deliver_tap+0x2e/0x1b0 [ 1225.853798][ T5431] ? netlink_deliver_tap+0x2e/0x1b0 [ 1225.853829][ T5431] netlink_unicast+0x7bb/0x940 [ 1225.853862][ T5431] netlink_sendmsg+0x813/0xb40 [ 1225.853897][ T5431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.853933][ T5431] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1225.853960][ T5431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.853984][ T5431] sock_sendmsg_nosec+0x13a/0x180 [ 1225.854016][ T5431] ____sys_sendmsg+0x54e/0x850 [ 1225.854046][ T5431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.854079][ T5431] ? import_iovec+0x73/0xa0 [ 1225.854102][ T5431] ___sys_sendmsg+0x2a5/0x360 [ 1225.854125][ T5431] ? __lock_acquire+0x683/0x2cf0 [ 1225.854156][ T5431] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.854215][ T5431] ? __fget_files+0x2a/0x420 [ 1225.854241][ T5431] ? __fget_files+0x3a2/0x420 [ 1225.854277][ T5431] __x64_sys_sendmsg+0x1b1/0x290 [ 1225.854304][ T5431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1225.854347][ T5431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.854369][ T5431] do_syscall_64+0x174/0x580 [ 1225.854395][ T5431] ? trace_irq_disable+0x3b/0x140 [ 1225.854419][ T5431] ? clear_bhb_loop+0x40/0x90 [ 1225.854443][ T5431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.854462][ T5431] RIP: 0033:0x7f18a639e0d9 [ 1225.854480][ T5431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.854497][ T5431] RSP: 002b:00007f18a45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.854518][ T5431] RAX: ffffffffffffffda RBX: 00007f18a6625fa0 RCX: 00007f18a639e0d9 [ 1225.854533][ T5431] RDX: 0000000000044894 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1225.854546][ T5431] RBP: 00007f18a45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.854558][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.854570][ T5431] R13: 00007f18a6626038 R14: 00007f18a6625fa0 R15: 00007fff9f8475b8 [ 1225.854601][ T5431] [ 1225.869129][ T5430] FAULT_INJECTION: forcing a failure. [ 1225.869129][ T5430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.216662][ T5430] CPU: 1 UID: 0 PID: 5430 Comm: syz.2.9118 Not tainted syzkaller #0 PREEMPT(full) [ 1226.216689][ T5430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1226.216700][ T5430] Call Trace: [ 1226.216708][ T5430] [ 1226.216716][ T5430] dump_stack_lvl+0xe8/0x150 [ 1226.216750][ T5430] should_fail_ex+0x40c/0x560 [ 1226.216779][ T5430] _copy_to_user+0x31/0xb0 [ 1226.216801][ T5430] simple_read_from_buffer+0xe1/0x170 [ 1226.216842][ T5430] proc_fail_nth_read+0x1bb/0x230 [ 1226.216874][ T5430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.216904][ T5430] ? rw_verify_area+0x24a/0x4c0 [ 1226.216925][ T5430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.216952][ T5430] vfs_read+0x213/0xa80 [ 1226.216979][ T5430] ? __pfx___mutex_lock+0x10/0x10 [ 1226.217008][ T5430] ? __pfx_vfs_read+0x10/0x10 [ 1226.217028][ T5430] ? __fget_files+0x2a/0x420 [ 1226.217058][ T5430] ? __fget_files+0x3a2/0x420 [ 1226.217083][ T5430] ? __fget_files+0x2a/0x420 [ 1226.217117][ T5430] ksys_read+0x150/0x270 [ 1226.217138][ T5430] ? __pfx_ksys_read+0x10/0x10 [ 1226.217165][ T5430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.217187][ T5430] do_syscall_64+0x174/0x580 [ 1226.217212][ T5430] ? trace_irq_disable+0x3b/0x140 [ 1226.217237][ T5430] ? clear_bhb_loop+0x40/0x90 [ 1226.217261][ T5430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.217280][ T5430] RIP: 0033:0x7f0c5dd5e90e [ 1226.217298][ T5430] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1226.217315][ T5430] RSP: 002b:00007f0c5ed3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1226.217335][ T5430] RAX: ffffffffffffffda RBX: 00007f0c5ed3f6c0 RCX: 00007f0c5dd5e90e [ 1226.217349][ T5430] RDX: 000000000000000f RSI: 00007f0c5ed3f0a0 RDI: 0000000000000004 [ 1226.217362][ T5430] RBP: 00007f0c5ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.217374][ T5430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1226.217386][ T5430] R13: 00007f0c5e026038 R14: 00007f0c5e025fa0 R15: 00007ffdcae5f258 [ 1226.217424][ T5430] [ 1226.268079][ T5445] netlink: 'syz.2.9121': attribute type 1 has an invalid length. [ 1226.503577][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1226.512465][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1226.560885][ T5451] x_tables: duplicate underflow at hook 2 [ 1226.594801][ T5324] Set syz1 is full, maxelem 65536 reached [ 1226.605261][ T5445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1226.656884][ T5449] bond2: (slave veth0_to_bond): Releasing active interface [ 1226.685302][ T5449] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1226.757596][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1226.771164][ T5463] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9125'. [ 1226.935562][ T5469] netlink: 'syz.1.9129': attribute type 1 has an invalid length. [ 1226.980420][ T5469] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1227.360235][ T4939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1227.373367][ T4939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1227.383764][ T4939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1227.391768][ T4939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1227.399792][ T4939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1227.565043][ T5492] syzkaller0: entered promiscuous mode [ 1227.579055][ T5492] syzkaller0: entered allmulticast mode [ 1227.964333][ T5518] tipc: Started in network mode [ 1227.973669][ T5518] tipc: Node identity 46d6e7376b5e, cluster identity 4711 [ 1227.987755][ T5518] tipc: Enabled bearer , priority 0 [ 1227.994889][ T5517] tipc: Enabling of bearer rejected, already enabled [ 1228.007408][ T5518] syzkaller0: entered promiscuous mode [ 1228.012903][ T5518] syzkaller0: entered allmulticast mode [ 1228.055096][ T5517] tipc: Resetting bearer [ 1228.080720][ T5485] wg2 speed is unknown, defaulting to 1000 [ 1228.133499][ T5515] tipc: Resetting bearer [ 1228.154149][ T5515] tipc: Disabling bearer [ 1228.362442][ T30] audit: type=1800 audit(1785983609.833:20): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9146" name="blkio.bfq.time_recursive" dev="tmpfs" ino=327 res=0 errno=0 [ 1228.462756][ T5539] netlink: 'syz.3.9150': attribute type 1 has an invalid length. [ 1228.521528][ T5539] erspan1: entered allmulticast mode [ 1228.689145][ T5485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.696388][ T5485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.703601][ T5485] bridge_slave_0: entered allmulticast mode [ 1228.711397][ T5485] bridge_slave_0: entered promiscuous mode [ 1228.720123][ T5485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.727318][ T5485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.777025][ T5485] bridge_slave_1: entered allmulticast mode [ 1228.784992][ T5485] bridge_slave_1: entered promiscuous mode [ 1228.843283][ T5485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.872456][ T5485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.877356][ T5555] FAULT_INJECTION: forcing a failure. [ 1228.877356][ T5555] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.906420][ T5555] CPU: 0 UID: 0 PID: 5555 Comm: syz.0.9152 Not tainted syzkaller #0 PREEMPT(full) [ 1228.906444][ T5555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1228.906454][ T5555] Call Trace: [ 1228.906461][ T5555] [ 1228.906469][ T5555] dump_stack_lvl+0xe8/0x150 [ 1228.906498][ T5555] should_fail_ex+0x40c/0x560 [ 1228.906522][ T5555] should_failslab+0xa8/0x100 [ 1228.906549][ T5555] __kmalloc_noprof+0xfe/0x720 [ 1228.906572][ T5555] ? tomoyo_encode+0x2ad/0x570 [ 1228.906589][ T5555] ? tomoyo_encode+0x2ad/0x570 [ 1228.906622][ T5555] tomoyo_encode+0x2ad/0x570 [ 1228.906645][ T5555] tomoyo_realpath_from_path+0x5fa/0x640 [ 1228.906672][ T5555] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1228.906698][ T5555] tomoyo_path_number_perm+0x246/0x5f0 [ 1228.906725][ T5555] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1228.906749][ T5555] ? __lock_acquire+0x683/0x2cf0 [ 1228.906784][ T5555] ? hook_file_ioctl+0x1f0/0x5f0 [ 1228.906818][ T5555] ? __fget_files+0x2a/0x420 [ 1228.906841][ T5555] ? __fget_files+0x2a/0x420 [ 1228.906862][ T5555] ? __fget_files+0x3a2/0x420 [ 1228.906883][ T5555] ? __fget_files+0x2a/0x420 [ 1228.906907][ T5555] security_file_ioctl+0xc3/0x2a0 [ 1228.906933][ T5555] __se_sys_ioctl+0x47/0x170 [ 1228.906950][ T5555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.906968][ T5555] do_syscall_64+0x174/0x580 [ 1228.906991][ T5555] ? trace_irq_disable+0x3b/0x140 [ 1228.907021][ T5555] ? clear_bhb_loop+0x40/0x90 [ 1228.907041][ T5555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.907057][ T5555] RIP: 0033:0x7f949b99e0d9 [ 1228.907074][ T5555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.907088][ T5555] RSP: 002b:00007f9499bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.907107][ T5555] RAX: ffffffffffffffda RBX: 00007f949bc26090 RCX: 00007f949b99e0d9 [ 1228.907119][ T5555] RDX: 0000200000000a00 RSI: 0000000000008916 RDI: 0000000000000006 [ 1228.907129][ T5555] RBP: 00007f9499bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.907140][ T5555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.907150][ T5555] R13: 00007f949bc26128 R14: 00007f949bc26090 R15: 00007ffed9e75e78 [ 1228.907175][ T5555] [ 1228.907195][ T5555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1228.910848][ T5485] team0: Port device team_slave_0 added [ 1229.194911][ T5485] team0: Port device team_slave_1 added [ 1229.249951][ T5485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.256935][ T5485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.283144][ T5485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.296362][ T5485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.303642][ T5485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.463104][ T5485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.564908][ T4939] Bluetooth: hci5: command tx timeout [ 1229.573897][ T5563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1229.673763][ T5485] hsr_slave_0: entered promiscuous mode [ 1229.697451][ T5485] hsr_slave_1: entered promiscuous mode [ 1229.715382][ T5485] debugfs: 'hsr0' already exists in 'hsr' [ 1229.722798][ T5485] Cannot create hsr debugfs directory [ 1229.808484][ T5565] __nla_validate_parse: 4 callbacks suppressed [ 1229.808502][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9155'. [ 1230.887275][ T5596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9164'. [ 1231.450903][ T5613] syzkaller0: entered promiscuous mode [ 1231.456413][ T5613] syzkaller0: entered allmulticast mode [ 1231.463957][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9169'. [ 1231.663940][ T4939] Bluetooth: hci5: command tx timeout [ 1231.665318][ T5617] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9171'. [ 1231.824609][ T5541] Set syz1 is full, maxelem 65536 reached [ 1232.009110][ T5625] tunl0: entered promiscuous mode [ 1232.017322][ T5625] netlink: 'syz.3.9174': attribute type 4 has an invalid length. [ 1232.025332][ T5625] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9174'. [ 1232.265408][ T5633] netlink: 'syz.2.9176': attribute type 13 has an invalid length. [ 1232.288953][ T5633] netlink: 'syz.2.9176': attribute type 17 has an invalid length. [ 1232.297685][ T5485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1232.315932][ T5485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1232.326297][ T5485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1232.335292][ T5485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1232.371882][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.390525][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.419803][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.464576][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9180'. [ 1232.486402][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.496763][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.513313][ T5633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1232.525374][ T5633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1232.543713][ T5633] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1232.564997][ T5634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9179'. [ 1232.581591][ T5638] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1232.594870][ T5638] bond0: (slave lo): Error: Device can not be enslaved while up [ 1232.603853][ T5485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1232.625455][ T5485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1232.637856][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.645007][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.654178][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.661315][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.678886][ T5646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9181'. [ 1232.688829][ T5485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1232.698321][ T5485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1232.781781][ T5654] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1232.809572][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1232.825705][ T5656] syzkaller0: entered promiscuous mode [ 1232.832097][ T5656] syzkaller0: entered allmulticast mode [ 1232.876330][ T5485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.917246][ T5485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.931640][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.938793][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.952757][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.972592][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.978337][ T5660] netlink: 'syz.3.9184': attribute type 10 has an invalid length. [ 1233.003422][ T5660] team0: Port device dummy0 added [ 1233.236990][ T5672] FAULT_INJECTION: forcing a failure. [ 1233.236990][ T5672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.270573][ T5673] syzkaller0: left promiscuous mode [ 1233.276042][ T5673] syzkaller0: left allmulticast mode [ 1233.285255][ T5672] CPU: 1 UID: 0 PID: 5672 Comm: syz.3.9188 Not tainted syzkaller #0 PREEMPT(full) [ 1233.285299][ T5672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1233.285322][ T5672] Call Trace: [ 1233.285338][ T5672] [ 1233.285354][ T5672] dump_stack_lvl+0xe8/0x150 [ 1233.285415][ T5672] should_fail_ex+0x40c/0x560 [ 1233.285478][ T5672] _copy_to_user+0x31/0xb0 [ 1233.285525][ T5672] simple_read_from_buffer+0xe1/0x170 [ 1233.285597][ T5672] proc_fail_nth_read+0x1bb/0x230 [ 1233.285664][ T5672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1233.285710][ T5672] ? rw_verify_area+0x24a/0x4c0 [ 1233.285731][ T5672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1233.285758][ T5672] vfs_read+0x213/0xa80 [ 1233.285782][ T5672] ? __pfx___mutex_lock+0x10/0x10 [ 1233.285809][ T5672] ? __pfx_vfs_read+0x10/0x10 [ 1233.285828][ T5672] ? __fget_files+0x2a/0x420 [ 1233.285854][ T5672] ? __fget_files+0x3a2/0x420 [ 1233.285877][ T5672] ? __fget_files+0x2a/0x420 [ 1233.285908][ T5672] ksys_read+0x150/0x270 [ 1233.285930][ T5672] ? __pfx_ksys_read+0x10/0x10 [ 1233.285958][ T5672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.285981][ T5672] do_syscall_64+0x174/0x580 [ 1233.286008][ T5672] ? trace_irq_disable+0x3b/0x140 [ 1233.286032][ T5672] ? clear_bhb_loop+0x40/0x90 [ 1233.286056][ T5672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.286074][ T5672] RIP: 0033:0x7f765975e90e [ 1233.286092][ T5672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1233.286106][ T5672] RSP: 002b:00007f765a715fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1233.286124][ T5672] RAX: ffffffffffffffda RBX: 00007f765a7166c0 RCX: 00007f765975e90e [ 1233.286137][ T5672] RDX: 000000000000000f RSI: 00007f765a7160a0 RDI: 0000000000000007 [ 1233.286148][ T5672] RBP: 00007f765a716090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.286158][ T5672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1233.286169][ T5672] R13: 00007f7659a26038 R14: 00007f7659a25fa0 R15: 00007ffe3a0fa8e8 [ 1233.286205][ T5672] [ 1233.736903][ T4939] Bluetooth: hci5: command tx timeout [ 1233.828905][ T5485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.093007][ T5705] batman_adv: batadv0: Adding interface: wlan0 [ 1234.099218][ T5705] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.126397][ T5705] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 1234.193862][ T5485] veth0_vlan: entered promiscuous mode [ 1234.219588][ T5713] FAULT_INJECTION: forcing a failure. [ 1234.219588][ T5713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1234.226307][ T5485] veth1_vlan: entered promiscuous mode [ 1234.241906][ T5713] CPU: 1 UID: 0 PID: 5713 Comm: syz.1.9196 Not tainted syzkaller #0 PREEMPT(full) [ 1234.241930][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1234.241942][ T5713] Call Trace: [ 1234.241950][ T5713] [ 1234.241959][ T5713] dump_stack_lvl+0xe8/0x150 [ 1234.241992][ T5713] should_fail_ex+0x40c/0x560 [ 1234.242022][ T5713] _copy_from_iter+0x1d3/0x1660 [ 1234.242047][ T5713] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 1234.242083][ T5713] ? rcu_is_watching+0x15/0xb0 [ 1234.242103][ T5713] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1234.242129][ T5713] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1234.242153][ T5713] ? __pfx__copy_from_iter+0x10/0x10 [ 1234.242177][ T5713] ? __alloc_skb+0x276/0x7a0 [ 1234.242197][ T5713] ? __alloc_skb+0x276/0x7a0 [ 1234.242222][ T5713] ? netlink_sendmsg+0x650/0xb40 [ 1234.242247][ T5713] ? skb_put+0x112/0x210 [ 1234.242271][ T5713] netlink_sendmsg+0x6c0/0xb40 [ 1234.242304][ T5713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.242332][ T5713] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1234.242357][ T5713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.242380][ T5713] sock_sendmsg_nosec+0x13a/0x180 [ 1234.242410][ T5713] ____sys_sendmsg+0x54e/0x850 [ 1234.242439][ T5713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1234.242471][ T5713] ? import_iovec+0x73/0xa0 [ 1234.242492][ T5713] ___sys_sendmsg+0x2a5/0x360 [ 1234.242514][ T5713] ? __lock_acquire+0x683/0x2cf0 [ 1234.242544][ T5713] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.242597][ T5713] ? __fget_files+0x2a/0x420 [ 1234.242622][ T5713] ? __fget_files+0x3a2/0x420 [ 1234.242654][ T5713] __x64_sys_sendmsg+0x1b1/0x290 [ 1234.242679][ T5713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1234.242715][ T5713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.242734][ T5713] do_syscall_64+0x174/0x580 [ 1234.242756][ T5713] ? trace_irq_disable+0x3b/0x140 [ 1234.242779][ T5713] ? clear_bhb_loop+0x40/0x90 [ 1234.242802][ T5713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.242819][ T5713] RIP: 0033:0x7f18a639e0d9 [ 1234.242837][ T5713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.242852][ T5713] RSP: 002b:00007f18a45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1234.242872][ T5713] RAX: ffffffffffffffda RBX: 00007f18a6625fa0 RCX: 00007f18a639e0d9 [ 1234.242886][ T5713] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 1234.242899][ T5713] RBP: 00007f18a45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.242910][ T5713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.242922][ T5713] R13: 00007f18a6626038 R14: 00007f18a6625fa0 R15: 00007fff9f8475b8 [ 1234.242951][ T5713] [ 1234.282337][ T5485] veth0_macvtap: entered promiscuous mode [ 1234.589569][ T5485] veth1_macvtap: entered promiscuous mode [ 1234.678576][ T5485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.698285][ T5485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.851323][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.896793][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.964631][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.018113][ T1178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.274994][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.292689][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.355683][ T5763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1235.425952][ T5772] IPv6: sit2: Disabled Multicast RS [ 1235.457049][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.464899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.708127][ T5787] syzkaller0: entered promiscuous mode [ 1235.717523][ T5787] syzkaller0: entered allmulticast mode [ 1235.717626][ T5780] __nla_validate_parse: 1 callbacks suppressed [ 1235.717640][ T5780] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9211'. [ 1235.739192][ T5787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9212'. [ 1235.769773][ T5788] netlink: 'syz.4.9128': attribute type 1 has an invalid length. [ 1235.780454][ T5785] syzkaller0: entered promiscuous mode [ 1235.797159][ T5785] syzkaller0: entered allmulticast mode [ 1235.847453][ T4939] Bluetooth: hci5: command tx timeout [ 1236.288447][T27058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1236.327687][T27058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1236.349613][T27058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1236.368343][T27058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1236.378741][T27058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1236.487252][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9219'. [ 1236.500290][ T5810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9217'. [ 1236.534559][ T5810] netlink: 'syz.0.9217': attribute type 1 has an invalid length. [ 1236.553131][ T5810] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9217'. [ 1236.565932][ T5816] x_tables: unsorted entry at hook 2 [ 1236.575077][ T5810] NCSI netlink: No device for ifindex 0 [ 1236.766777][ T5832] netlink: 'syz.4.9224': attribute type 4 has an invalid length. [ 1236.832509][ T5835] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9225'. [ 1236.889912][ T5835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9225'. [ 1237.039412][ T5845] netlink: 'syz.2.9228': attribute type 1 has an invalid length. [ 1237.079805][ T5802] wg2 speed is unknown, defaulting to 1000 [ 1237.174538][ T5854] netlink: 'syz.0.9231': attribute type 11 has an invalid length. [ 1237.220743][ T5854] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1237.432264][ T5866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9232'. [ 1237.457374][ T5866] bond0: entered promiscuous mode [ 1237.462524][ T5866] bond_slave_0: entered promiscuous mode [ 1237.469479][ T5866] bond_slave_1: entered promiscuous mode [ 1237.525457][ T5866] bond0: left promiscuous mode [ 1237.535524][ T5866] bond_slave_0: left promiscuous mode [ 1237.543717][ T5866] bond_slave_1: left promiscuous mode [ 1237.592654][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.599921][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.607187][ T5802] bridge_slave_0: entered allmulticast mode [ 1237.614942][ T5802] bridge_slave_0: entered promiscuous mode [ 1237.623565][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.630814][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.638425][ T5802] bridge_slave_1: entered allmulticast mode [ 1237.646734][ T5802] bridge_slave_1: entered promiscuous mode [ 1237.683178][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.695599][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.739866][ T5802] team0: Port device team_slave_0 added [ 1237.768631][ T5802] team0: Port device team_slave_1 added [ 1237.805143][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.812114][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.838327][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.850717][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.870720][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.896632][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.911355][ T5873] tipc: Enabled bearer , priority 10 [ 1237.919296][ T5876] xt_cluster: node mask cannot exceed total number of nodes [ 1237.928010][ T5873] netlink: 'syz.3.9236': attribute type 58 has an invalid length. [ 1237.976474][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9236'. [ 1238.065812][ T5802] hsr_slave_0: entered promiscuous mode [ 1238.072522][ T5802] hsr_slave_1: entered promiscuous mode [ 1238.097378][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 1238.103256][ T5802] Cannot create hsr debugfs directory [ 1238.435127][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.482827][ T4939] Bluetooth: hci4: command tx timeout [ 1238.706280][ T5911] tipc: Started in network mode [ 1238.711357][ T5911] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1238.723623][ T5911] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1238.732685][ T5911] tipc: Enabled bearer , priority 10 [ 1239.028831][ T5921] syzkaller0: entered promiscuous mode [ 1239.058920][ T5921] syzkaller0: entered allmulticast mode [ 1239.094234][ T187] tipc: Node number set to 763946807 [ 1239.447751][ T5924] xt_hashlimit: size too large, truncated to 1048576 [ 1239.577330][ T5939] ip_tables: iptables: counters copy to user failed while replacing table [ 1239.801365][ T7885] tipc: Node number set to 1 [ 1239.840845][ T5934] geneve2: entered promiscuous mode [ 1239.846105][ T5934] geneve2: entered allmulticast mode [ 1239.960648][ T5948] netlink: 'syz.0.9260': attribute type 62 has an invalid length. [ 1240.217433][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.235827][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.576420][ T4939] Bluetooth: hci4: command tx timeout [ 1240.665241][ T5967] netlink: 'syz.2.9269': attribute type 4 has an invalid length. [ 1240.676537][ T5967] netlink: 'syz.2.9269': attribute type 4 has an invalid length. [ 1240.723837][ T5969] openvswitch: netlink: Message has 54 unknown bytes. [ 1240.823981][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1240.832962][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1240.840858][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1240.907489][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1240.915478][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1240.937609][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1240.945772][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1240.978155][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1241.132031][ T5972] __nla_validate_parse: 13 callbacks suppressed [ 1241.132050][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9271'. [ 1241.147244][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9271'. [ 1241.167395][ T5972] geneve2: entered promiscuous mode [ 1241.172637][ T5972] geneve2: entered allmulticast mode [ 1241.223506][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.245984][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.259417][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.266569][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.282306][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.289459][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.302717][ T5977] Set syz1 is full, maxelem 65536 reached [ 1241.421068][ T3363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.438094][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.446854][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.534280][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.560761][ T5992] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9274'. [ 1241.878842][ T6005] FAULT_INJECTION: forcing a failure. [ 1241.878842][ T6005] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.891836][ T6005] CPU: 1 UID: 0 PID: 6005 Comm: syz.2.9277 Not tainted syzkaller #0 PREEMPT(full) [ 1241.891862][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1241.891874][ T6005] Call Trace: [ 1241.891881][ T6005] [ 1241.891888][ T6005] dump_stack_lvl+0xe8/0x150 [ 1241.891921][ T6005] should_fail_ex+0x40c/0x560 [ 1241.891950][ T6005] should_failslab+0xa8/0x100 [ 1241.891979][ T6005] __kmalloc_cache_noprof+0xa8/0x660 [ 1241.892006][ T6005] ? nf_tables_newchain+0x1e10/0x28b0 [ 1241.892027][ T6005] ? nf_tables_newchain+0x1e10/0x28b0 [ 1241.892053][ T6005] nf_tables_newchain+0x1e10/0x28b0 [ 1241.892090][ T6005] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1241.892140][ T6005] ? nfnl_pernet+0x23/0x240 [ 1241.892162][ T6005] ? nfnl_pernet+0x23/0x240 [ 1241.892193][ T6005] ? __nla_parse+0x40/0x60 [ 1241.892224][ T6005] nfnetlink_rcv+0x1288/0x28c0 [ 1241.892281][ T6005] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1241.892320][ T6005] ? ref_tracker_free+0x689/0x830 [ 1241.892363][ T6005] ? skb_clone+0x246/0x3a0 [ 1241.892391][ T6005] ? __netlink_deliver_tap+0x811/0x860 [ 1241.892424][ T6005] ? netlink_deliver_tap+0x2e/0x1b0 [ 1241.892448][ T6005] ? netlink_deliver_tap+0x2e/0x1b0 [ 1241.892473][ T6005] netlink_unicast+0x7bb/0x940 [ 1241.892505][ T6005] netlink_sendmsg+0x813/0xb40 [ 1241.892538][ T6005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1241.892569][ T6005] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1241.892595][ T6005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1241.892616][ T6005] sock_sendmsg_nosec+0x13a/0x180 [ 1241.892647][ T6005] ____sys_sendmsg+0x54e/0x850 [ 1241.892677][ T6005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1241.892708][ T6005] ? import_iovec+0x73/0xa0 [ 1241.892732][ T6005] ___sys_sendmsg+0x2a5/0x360 [ 1241.892756][ T6005] ? __lock_acquire+0x683/0x2cf0 [ 1241.892787][ T6005] ? __pfx____sys_sendmsg+0x10/0x10 [ 1241.892852][ T6005] ? __fget_files+0x2a/0x420 [ 1241.892877][ T6005] ? __fget_files+0x3a2/0x420 [ 1241.892911][ T6005] __x64_sys_sendmsg+0x1b1/0x290 [ 1241.892937][ T6005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1241.892976][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.892997][ T6005] do_syscall_64+0x174/0x580 [ 1241.893021][ T6005] ? trace_irq_disable+0x3b/0x140 [ 1241.893045][ T6005] ? clear_bhb_loop+0x40/0x90 [ 1241.893072][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.893090][ T6005] RIP: 0033:0x7f0c5dd9e0d9 [ 1241.893106][ T6005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.893127][ T6005] RSP: 002b:00007f0c5ed3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1241.893147][ T6005] RAX: ffffffffffffffda RBX: 00007f0c5e025fa0 RCX: 00007f0c5dd9e0d9 [ 1241.893160][ T6005] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1241.893170][ T6005] RBP: 00007f0c5ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.893181][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1241.893192][ T6005] R13: 00007f0c5e026038 R14: 00007f0c5e025fa0 R15: 00007ffdcae5f258 [ 1241.893222][ T6005] [ 1242.472259][ T6016] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9280'. [ 1242.502406][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9280'. [ 1242.543277][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9280'. [ 1242.555625][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.608270][ T4939] Bluetooth: hci4: command tx timeout [ 1242.695303][ T5802] veth0_vlan: entered promiscuous mode [ 1242.719003][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1242.753203][ T5802] veth1_vlan: entered promiscuous mode [ 1242.803128][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1242.806494][ T5802] veth0_macvtap: entered promiscuous mode [ 1242.823893][ T5802] veth1_macvtap: entered promiscuous mode [ 1242.830311][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1242.902313][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.942924][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.008159][ T6040] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9285'. [ 1243.045603][ T6010] Set syz1 is full, maxelem 65536 reached [ 1243.175441][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.190885][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.200205][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.226073][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.240718][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.256923][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.321049][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.329585][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.360355][ T6028] Set syz1 is full, maxelem 65536 reached [ 1244.293330][ T6092] FAULT_INJECTION: forcing a failure. [ 1244.293330][ T6092] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.314235][ T6091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1244.319499][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: syz.1.9303 Not tainted syzkaller #0 PREEMPT(full) [ 1244.319525][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1244.319536][ T6092] Call Trace: [ 1244.319544][ T6092] [ 1244.319552][ T6092] dump_stack_lvl+0xe8/0x150 [ 1244.319586][ T6092] should_fail_ex+0x40c/0x560 [ 1244.319628][ T6092] should_failslab+0xa8/0x100 [ 1244.319660][ T6092] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1244.319684][ T6092] ? dst_alloc+0x105/0x170 [ 1244.319710][ T6092] ? dst_alloc+0x105/0x170 [ 1244.319735][ T6092] ? fib_lookup+0x76/0x440 [ 1244.319761][ T6092] dst_alloc+0x105/0x170 [ 1244.319791][ T6092] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1244.319813][ T6092] ? ip_route_output_key_hash_rcu+0x1341/0x2720 [ 1244.319842][ T6092] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1244.319866][ T6092] ip_route_output_key_hash+0x18d/0x2a0 [ 1244.319891][ T6092] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1244.319920][ T6092] ? __lock_acquire+0x683/0x2cf0 [ 1244.319949][ T6092] ? dst_release+0x72/0x1b0 [ 1244.319977][ T6092] __ip4_datagram_connect+0x89a/0x1220 [ 1244.320013][ T6092] __ip6_datagram_connect+0x1bf/0x10e0 [ 1244.320126][ T6092] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 1244.320146][ T6092] ? ip6_datagram_connect_v6_only+0x56/0xa0 [ 1244.320169][ T6092] ? __local_bh_enable_ip+0xd0/0x130 [ 1244.320197][ T6092] ip6_datagram_connect_v6_only+0x63/0xa0 [ 1244.320218][ T6092] __sys_connect+0x323/0x460 [ 1244.320242][ T6092] ? __pfx___sys_connect+0x10/0x10 [ 1244.320275][ T6092] ? __pfx_ksys_write+0x10/0x10 [ 1244.320299][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.320319][ T6092] __x64_sys_connect+0x7a/0x90 [ 1244.320341][ T6092] do_syscall_64+0x174/0x580 [ 1244.320367][ T6092] ? trace_irq_disable+0x3b/0x140 [ 1244.320394][ T6092] ? clear_bhb_loop+0x40/0x90 [ 1244.320416][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.320434][ T6092] RIP: 0033:0x7fe87d59e0d9 [ 1244.320452][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.320468][ T6092] RSP: 002b:00007fe87e42a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1244.320488][ T6092] RAX: ffffffffffffffda RBX: 00007fe87d825fa0 RCX: 00007fe87d59e0d9 [ 1244.320501][ T6092] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1244.320513][ T6092] RBP: 00007fe87e42a090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.320525][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.320536][ T6092] R13: 00007fe87d826038 R14: 00007fe87d825fa0 R15: 00007fffc85bf968 [ 1244.320567][ T6092] [ 1244.743160][ T4939] Bluetooth: hci4: command tx timeout [ 1244.907598][ T6088] Set syz1 is full, maxelem 65536 reached [ 1244.927161][ T6110] netlink: 'syz.1.9306': attribute type 1 has an invalid length. [ 1245.331433][ T6127] syzkaller0: entered promiscuous mode [ 1245.336951][ T6127] syzkaller0: entered allmulticast mode [ 1245.383163][ T1178] IPVS: starting estimator thread 0... [ 1245.479315][ T6131] wg2 speed is unknown, defaulting to 1000 [ 1245.559580][ T6141] tc_dump_action: action bad kind [ 1245.576466][ T6135] IPVS: using max 28 ests per chain, 67200 per kthread [ 1246.213957][ T6162] FAULT_INJECTION: forcing a failure. [ 1246.213957][ T6162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.227040][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.3.9323 Not tainted syzkaller #0 PREEMPT(full) [ 1246.227065][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1246.227077][ T6162] Call Trace: [ 1246.227085][ T6162] [ 1246.227094][ T6162] dump_stack_lvl+0xe8/0x150 [ 1246.227129][ T6162] should_fail_ex+0x40c/0x560 [ 1246.227158][ T6162] _copy_from_iter+0x1d3/0x1660 [ 1246.227183][ T6162] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 1246.227209][ T6162] ? rcu_is_watching+0x15/0xb0 [ 1246.227229][ T6162] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1246.227255][ T6162] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1246.227279][ T6162] ? __pfx__copy_from_iter+0x10/0x10 [ 1246.227304][ T6162] ? __alloc_skb+0x276/0x7a0 [ 1246.227325][ T6162] ? __alloc_skb+0x276/0x7a0 [ 1246.227351][ T6162] ? netlink_sendmsg+0x650/0xb40 [ 1246.227382][ T6162] ? skb_put+0x112/0x210 [ 1246.227406][ T6162] netlink_sendmsg+0x6c0/0xb40 [ 1246.227440][ T6162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1246.227470][ T6162] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1246.227497][ T6162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1246.227521][ T6162] sock_sendmsg_nosec+0x13a/0x180 [ 1246.227553][ T6162] ____sys_sendmsg+0x54e/0x850 [ 1246.227583][ T6162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1246.227616][ T6162] ? import_iovec+0x73/0xa0 [ 1246.227638][ T6162] ___sys_sendmsg+0x2a5/0x360 [ 1246.227661][ T6162] ? __lock_acquire+0x683/0x2cf0 [ 1246.227691][ T6162] ? __pfx____sys_sendmsg+0x10/0x10 [ 1246.227749][ T6162] ? __fget_files+0x2a/0x420 [ 1246.227774][ T6162] ? __fget_files+0x3a2/0x420 [ 1246.227810][ T6162] __x64_sys_sendmsg+0x1b1/0x290 [ 1246.227837][ T6162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1246.227878][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.227900][ T6162] do_syscall_64+0x174/0x580 [ 1246.227926][ T6162] ? trace_irq_disable+0x3b/0x140 [ 1246.227951][ T6162] ? clear_bhb_loop+0x40/0x90 [ 1246.227975][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.227995][ T6162] RIP: 0033:0x7f765979e0d9 [ 1246.228013][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.228030][ T6162] RSP: 002b:00007f765a716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1246.228050][ T6162] RAX: ffffffffffffffda RBX: 00007f7659a25fa0 RCX: 00007f765979e0d9 [ 1246.228064][ T6162] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1246.228077][ T6162] RBP: 00007f765a716090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.228089][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.228100][ T6162] R13: 00007f7659a26038 R14: 00007f7659a25fa0 R15: 00007ffe3a0fa8e8 [ 1246.228131][ T6162] [ 1246.229212][ T6160] __nla_validate_parse: 8 callbacks suppressed [ 1246.229228][ T6160] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9322'. [ 1246.571162][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9322'. [ 1246.588396][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9322'. [ 1246.978731][ T6167] netlink: 'syz.0.9325': attribute type 15 has an invalid length. [ 1248.117955][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9337'. [ 1248.403061][ T6207] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9338'. [ 1248.441750][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9338'. [ 1248.450733][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9338'. [ 1249.070780][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9343'. [ 1249.123071][ T6231] block nbd0: must specify backend [ 1249.174211][ T6230] syzkaller0: entered promiscuous mode [ 1249.191779][ T6230] syzkaller0: entered allmulticast mode [ 1249.704847][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9349'. [ 1249.875199][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9351'. [ 1249.951619][ T6258] tipc: Enabling of bearer rejected, already enabled [ 1250.019081][ T6261] netlink: 'syz.4.9353': attribute type 11 has an invalid length. [ 1250.113891][ T6261] syzkaller0: entered promiscuous mode [ 1250.157340][ T6261] syzkaller0: entered allmulticast mode [ 1250.422403][ T6144] Set syz1 is full, maxelem 65536 reached [ 1250.578801][ T30] audit: type=1107 audit(1785983632.003:21): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1251.365569][ T6300] netlink: 'syz.2.9364': attribute type 1 has an invalid length. [ 1251.784797][ T6306] block nbd1: server does not support multiple connections per device. [ 1251.826940][ T6306] block nbd1: shutting down sockets [ 1253.709217][ T6301] erspan1: entered allmulticast mode [ 1253.759585][ T6300] bond5: entered promiscuous mode [ 1253.764802][ T6300] bond5: entered allmulticast mode [ 1253.770483][ T6300] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1253.833344][ T6319] __nla_validate_parse: 5 callbacks suppressed [ 1253.833364][ T6319] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9367'. [ 1253.877840][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9368'. [ 1254.007612][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9369'. [ 1254.019252][ T6323] bridge0: entered allmulticast mode [ 1254.026306][ T6322] bridge0: left allmulticast mode [ 1254.565146][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9379'. [ 1254.862339][ T6370] netlink: 'syz.3.9385': attribute type 12 has an invalid length. [ 1254.977858][ T6376] tipc: Enabling of bearer rejected, failed to enable media [ 1255.228617][ T6385] netlink: 'syz.3.9390': attribute type 1 has an invalid length. [ 1255.275779][ T6385] bond1: entered promiscuous mode [ 1255.281224][ T6385] bond1: entered allmulticast mode [ 1255.286791][ T6385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1255.390585][ T6385] erspan1: entered allmulticast mode [ 1255.416010][ T6385] bond1: (slave erspan1): making interface the new active one [ 1255.423533][ T6385] erspan1: entered promiscuous mode [ 1255.431829][ T6385] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1255.443382][ T6395] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9392'. [ 1255.457984][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9392'. [ 1255.470018][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9392'. [ 1255.622347][ T6403] FAULT_INJECTION: forcing a failure. [ 1255.622347][ T6403] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.635303][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: syz.2.9395 Not tainted syzkaller #0 PREEMPT(full) [ 1255.635329][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1255.635340][ T6403] Call Trace: [ 1255.635348][ T6403] [ 1255.635357][ T6403] dump_stack_lvl+0xe8/0x150 [ 1255.635390][ T6403] should_fail_ex+0x40c/0x560 [ 1255.635421][ T6403] should_failslab+0xa8/0x100 [ 1255.635452][ T6403] __kmalloc_cache_noprof+0xa8/0x660 [ 1255.635478][ T6403] ? nft_pernet+0x23/0x240 [ 1255.635499][ T6403] ? nf_tables_newflowtable+0x92b/0x25b0 [ 1255.635520][ T6403] ? nf_tables_newflowtable+0x92b/0x25b0 [ 1255.635550][ T6403] nf_tables_newflowtable+0x92b/0x25b0 [ 1255.635589][ T6403] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 1255.635613][ T6403] ? nfnl_pernet+0x23/0x240 [ 1255.635649][ T6403] ? __nla_parse+0x40/0x60 [ 1255.635680][ T6403] nfnetlink_rcv+0x1288/0x28c0 [ 1255.635739][ T6403] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1255.635779][ T6403] ? ref_tracker_free+0x689/0x830 [ 1255.635830][ T6403] ? skb_clone+0x246/0x3a0 [ 1255.635862][ T6403] ? __netlink_deliver_tap+0x811/0x860 [ 1255.635897][ T6403] ? netlink_deliver_tap+0x2e/0x1b0 [ 1255.635921][ T6403] ? netlink_deliver_tap+0x2e/0x1b0 [ 1255.635951][ T6403] netlink_unicast+0x7bb/0x940 [ 1255.635985][ T6403] netlink_sendmsg+0x813/0xb40 [ 1255.636021][ T6403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1255.636050][ T6403] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1255.636079][ T6403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1255.636110][ T6403] sock_sendmsg_nosec+0x13a/0x180 [ 1255.636142][ T6403] ____sys_sendmsg+0x54e/0x850 [ 1255.636172][ T6403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1255.636206][ T6403] ? import_iovec+0x73/0xa0 [ 1255.636230][ T6403] ___sys_sendmsg+0x2a5/0x360 [ 1255.636253][ T6403] ? __lock_acquire+0x683/0x2cf0 [ 1255.636284][ T6403] ? __pfx____sys_sendmsg+0x10/0x10 [ 1255.636342][ T6403] ? __fget_files+0x2a/0x420 [ 1255.636366][ T6403] ? __fget_files+0x3a2/0x420 [ 1255.636401][ T6403] __x64_sys_sendmsg+0x1b1/0x290 [ 1255.636428][ T6403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1255.636472][ T6403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.636494][ T6403] do_syscall_64+0x174/0x580 [ 1255.636520][ T6403] ? trace_irq_disable+0x3b/0x140 [ 1255.636545][ T6403] ? clear_bhb_loop+0x40/0x90 [ 1255.636569][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.636589][ T6403] RIP: 0033:0x7f0c5dd9e0d9 [ 1255.636607][ T6403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.636623][ T6403] RSP: 002b:00007f0c5ed3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1255.636644][ T6403] RAX: ffffffffffffffda RBX: 00007f0c5e025fa0 RCX: 00007f0c5dd9e0d9 [ 1255.636658][ T6403] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1255.636671][ T6403] RBP: 00007f0c5ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.636684][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1255.636713][ T6403] R13: 00007f0c5e026038 R14: 00007f0c5e025fa0 R15: 00007ffdcae5f258 [ 1255.636745][ T6403] [ 1256.070621][ T6409] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9398'. [ 1256.079562][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9398'. [ 1256.090875][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9398'. [ 1256.113779][ T6408] netlink: zone id is out of range [ 1256.118945][ T6408] netlink: zone id is out of range [ 1256.124063][ T6408] netlink: zone id is out of range [ 1256.149525][ T6408] netlink: zone id is out of range [ 1256.154682][ T6408] netlink: zone id is out of range [ 1256.159868][ T6408] netlink: zone id is out of range [ 1256.165019][ T6408] netlink: zone id is out of range [ 1256.170214][ T6408] netlink: zone id is out of range [ 1256.175323][ T6408] netlink: zone id is out of range [ 1256.181434][ T6408] netlink: zone id is out of range [ 1256.206344][ T6408] syzkaller1: entered promiscuous mode [ 1256.211857][ T6408] syzkaller1: entered allmulticast mode [ 1256.642933][ T6436] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1256.686299][ T1178] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.709685][ T3363] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.710238][ T6440] netlink: 'syz.3.9407': attribute type 16 has an invalid length. [ 1256.718688][ T3363] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.735050][ T3363] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.759173][ T6436] netlink: 'syz.4.9409': attribute type 11 has an invalid length. [ 1256.813852][ T6443] netlink: 'syz.0.9410': attribute type 1 has an invalid length. [ 1256.877164][ T6443] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1256.943705][ T6447] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1256.975531][ T6443] tipc: Disabling bearer [ 1257.127905][ T6458] netlink: 'syz.3.9417': attribute type 1 has an invalid length. [ 1257.191716][ T6458] bond2: entered promiscuous mode [ 1257.196891][ T6458] bond2: entered allmulticast mode [ 1257.203284][ T6458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1257.383860][ T6470] syzkaller1: entered promiscuous mode [ 1257.397319][ T6470] syzkaller1: entered allmulticast mode [ 1258.451135][ T6520] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1258.478775][ T6522] netlink: 'syz.0.9433': attribute type 1 has an invalid length. [ 1258.526301][ T6522] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1258.554483][ T6522] bond11: (slave veth0_to_bond): Releasing active interface [ 1258.592862][ T6522] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1258.662860][ T6532] syzkaller1: entered promiscuous mode [ 1258.668373][ T6532] syzkaller1: entered allmulticast mode [ 1258.769983][ T6536] netlink: 'syz.3.9435': attribute type 1 has an invalid length. [ 1258.813639][ T6536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1258.892379][ T6536] bond3: (slave veth0_to_bond): making interface the new active one [ 1258.901996][ T6536] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1258.944921][ T6536] __nla_validate_parse: 15 callbacks suppressed [ 1258.944938][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9435'. [ 1259.143996][ T4939] block nbd1: Receive control failed (result -32) [ 1259.147455][ T6542] netlink: 'syz.0.9437': attribute type 1 has an invalid length. [ 1259.158866][ T6542] netlink: 'syz.0.9437': attribute type 1 has an invalid length. [ 1259.407260][ T6559] netlink: 'syz.2.9443': attribute type 1 has an invalid length. [ 1259.487412][ T6559] bond6: entered promiscuous mode [ 1259.494210][ T6559] bond6: entered allmulticast mode [ 1259.499880][ T6559] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1259.518594][ T6559] erspan1: entered allmulticast mode [ 1259.561217][ T6559] bond6: (slave erspan1): making interface the new active one [ 1259.597348][ T6566] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9446'. [ 1259.608719][ T6559] erspan1: entered promiscuous mode [ 1259.645720][ T6559] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 1259.714599][ T6564] bond12: (slave veth0_to_bond): Releasing active interface [ 1259.877015][ T6582] syzkaller1: entered promiscuous mode [ 1259.882546][ T6582] syzkaller1: entered allmulticast mode [ 1260.118097][ T6588] tc_dump_action: action bad kind [ 1260.254764][ T6588] netlink: 'syz.0.9451': attribute type 3 has an invalid length. [ 1260.262540][ T6588] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9451'. [ 1260.271579][ T6588] NCSI netlink: No device for ifindex 0 [ 1260.386912][ T4939] Bluetooth: hci4: command tx timeout [ 1260.893403][ T6627] syzkaller1: entered promiscuous mode [ 1260.898931][ T6627] syzkaller1: entered allmulticast mode [ 1263.963695][ T6637] syzkaller0: entered promiscuous mode [ 1263.996011][ T6637] syzkaller0: entered allmulticast mode [ 1264.028410][ T6642] validate_nla: 1 callbacks suppressed [ 1264.028428][ T6642] netlink: 'syz.1.9466': attribute type 6 has an invalid length. [ 1264.035429][ T6645] FAULT_INJECTION: forcing a failure. [ 1264.035429][ T6645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.092177][ T6645] CPU: 1 UID: 0 PID: 6645 Comm: syz.3.9465 Not tainted syzkaller #0 PREEMPT(full) [ 1264.092205][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1264.092217][ T6645] Call Trace: [ 1264.092225][ T6645] [ 1264.092233][ T6645] dump_stack_lvl+0xe8/0x150 [ 1264.092268][ T6645] should_fail_ex+0x40c/0x560 [ 1264.092298][ T6645] _copy_from_user+0x2d/0xb0 [ 1264.092318][ T6645] __copy_msghdr+0x390/0x590 [ 1264.092349][ T6645] ___sys_sendmsg+0x213/0x360 [ 1264.092370][ T6645] ? __lock_acquire+0x683/0x2cf0 [ 1264.092401][ T6645] ? __pfx____sys_sendmsg+0x10/0x10 [ 1264.092455][ T6645] ? __fget_files+0x2a/0x420 [ 1264.092478][ T6645] ? __fget_files+0x3a2/0x420 [ 1264.092511][ T6645] __x64_sys_sendmsg+0x1b1/0x290 [ 1264.092534][ T6645] ? net_tx_action+0x5bb/0xc30 [ 1264.092555][ T6645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1264.092586][ T6645] ? handle_softirqs+0x70f/0x840 [ 1264.092616][ T6645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.092637][ T6645] do_syscall_64+0x174/0x580 [ 1264.092663][ T6645] ? clear_bhb_loop+0x40/0x90 [ 1264.092685][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.092702][ T6645] RIP: 0033:0x7f765979e0d9 [ 1264.092720][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.092735][ T6645] RSP: 002b:00007f765a6f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.092755][ T6645] RAX: ffffffffffffffda RBX: 00007f7659a26090 RCX: 00007f765979e0d9 [ 1264.092768][ T6645] RDX: 0000000000000804 RSI: 0000200000000440 RDI: 0000000000000007 [ 1264.092779][ T6645] RBP: 00007f765a6f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.092790][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.092801][ T6645] R13: 00007f7659a26128 R14: 00007f7659a26090 R15: 00007ffe3a0fa8e8 [ 1264.092830][ T6645] [ 1264.425901][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9466'. [ 1264.758370][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9477'. [ 1264.803893][ T6682] FAULT_INJECTION: forcing a failure. [ 1264.803893][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.818458][ T6682] CPU: 1 UID: 0 PID: 6682 Comm: syz.3.9476 Not tainted syzkaller #0 PREEMPT(full) [ 1264.818485][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1264.818496][ T6682] Call Trace: [ 1264.818504][ T6682] [ 1264.818513][ T6682] dump_stack_lvl+0xe8/0x150 [ 1264.818547][ T6682] should_fail_ex+0x40c/0x560 [ 1264.818575][ T6682] _copy_to_user+0x31/0xb0 [ 1264.818597][ T6682] __htab_map_lookup_and_delete_batch+0x13c1/0x1890 [ 1264.818692][ T6682] ? 0xffffffffff600000 [ 1264.818711][ T6682] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 1264.818748][ T6682] ? __pfx_htab_lru_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 1264.818779][ T6682] bpf_map_do_batch+0x445/0x630 [ 1264.818812][ T6682] __sys_bpf+0x906/0xd90 [ 1264.818845][ T6682] ? __pfx___sys_bpf+0x10/0x10 [ 1264.818882][ T6682] ? __fget_files+0x2a/0x420 [ 1264.818909][ T6682] ? 0xffffffffff600000 [ 1264.818937][ T6682] ? ksys_write+0x242/0x270 [ 1264.818958][ T6682] ? __pfx_ksys_write+0x10/0x10 [ 1264.818982][ T6682] __x64_sys_bpf+0xba/0xd0 [ 1264.819006][ T6682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.819028][ T6682] do_syscall_64+0x174/0x580 [ 1264.819061][ T6682] ? trace_irq_disable+0x3b/0x140 [ 1264.819085][ T6682] ? clear_bhb_loop+0x40/0x90 [ 1264.819109][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.819132][ T6682] RIP: 0033:0x7f765979e0d9 [ 1264.819149][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.819167][ T6682] RSP: 002b:00007f765a716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1264.819187][ T6682] RAX: ffffffffffffffda RBX: 00007f7659a25fa0 RCX: 00007f765979e0d9 [ 1264.819202][ T6682] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 0000000000000019 [ 1264.819214][ T6682] RBP: 00007f765a716090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.819227][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.819238][ T6682] R13: 00007f7659a26038 R14: 00007f7659a25fa0 R15: 00007ffe3a0fa8e8 [ 1264.819269][ T6682] [ 1265.165508][ T6700] net_ratelimit: 8566 callbacks suppressed [ 1265.165536][ T6700] netlink: zone id is out of range [ 1265.185913][ T6700] netlink: zone id is out of range [ 1265.192081][ T6700] netlink: zone id is out of range [ 1265.203679][ T6700] netlink: zone id is out of range [ 1265.209414][ T6700] netlink: zone id is out of range [ 1265.214545][ T6700] netlink: zone id is out of range [ 1265.230043][ T6690] syzkaller1: entered promiscuous mode [ 1265.230066][ T6690] syzkaller1: entered allmulticast mode [ 1265.243543][ T6700] netlink: zone id is out of range [ 1265.248682][ T6700] netlink: zone id is out of range [ 1265.254265][ T6700] netlink: zone id is out of range [ 1265.259945][ T6700] netlink: zone id is out of range [ 1265.340934][ T6711] netlink: 'syz.1.9478': attribute type 1 has an invalid length. [ 1265.371696][ T6711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1265.393728][ T6711] bond1: (slave ip6erspan0): making interface the new active one [ 1265.404542][ T6711] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1265.525007][ T6716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1266.215347][ T6723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9486'. [ 1266.280876][ T6725] syzkaller0: entered promiscuous mode [ 1266.292839][ T6725] syzkaller0: entered allmulticast mode [ 1267.861330][ T6689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1268.041661][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9495'. [ 1268.073434][ T6738] bridge0: port 2(wlan1) entered blocking state [ 1268.100580][ T6738] bridge0: port 2(wlan1) entered disabled state [ 1268.116074][ T6738] mac80211_hwsim hwsim248 wlan1: entered allmulticast mode [ 1268.128175][ T6745] Bluetooth: MGMT ver 1.23 [ 1268.168519][ T6738] mac80211_hwsim hwsim248 wlan1: entered promiscuous mode [ 1268.177439][ T6754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9497'. [ 1268.299196][ T6760] netlink: 'syz.3.9500': attribute type 1 has an invalid length. [ 1268.348318][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9492'. [ 1268.563379][ T6771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9504'. [ 1268.593225][ T6771] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9504'. [ 1268.594095][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9503'. [ 1268.722704][ T6777] FAULT_INJECTION: forcing a failure. [ 1268.722704][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.736566][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.2.9507 Not tainted syzkaller #0 PREEMPT(full) [ 1268.736591][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1268.736602][ T6777] Call Trace: [ 1268.736610][ T6777] [ 1268.736619][ T6777] dump_stack_lvl+0xe8/0x150 [ 1268.736652][ T6777] should_fail_ex+0x40c/0x560 [ 1268.736682][ T6777] _copy_to_iter+0x59c/0x1810 [ 1268.736706][ T6777] ? arch_stack_walk+0xfb/0x150 [ 1268.736740][ T6777] ? __pfx__copy_to_iter+0x10/0x10 [ 1268.736767][ T6777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1268.736793][ T6777] ? lockdep_hardirqs_on+0x7a/0x110 [ 1268.736819][ T6777] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1268.736843][ T6777] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 1268.736874][ T6777] __skb_datagram_iter+0xf8/0x980 [ 1268.736904][ T6777] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1268.736938][ T6777] skb_copy_datagram_iter+0xb5/0x240 [ 1268.736968][ T6777] netlink_recvmsg+0x2b9/0xa50 [ 1268.737002][ T6777] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1268.737033][ T6777] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1268.737056][ T6777] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1268.737077][ T6777] ? security_socket_recvmsg+0x7e/0x2c0 [ 1268.737102][ T6777] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1268.737127][ T6777] sock_recvmsg+0x196/0x1e0 [ 1268.737160][ T6777] ____sys_recvmsg+0x1e6/0x4a0 [ 1268.737183][ T6777] ? iovec_from_user+0x87/0x250 [ 1268.737208][ T6777] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1268.737255][ T6777] ? import_iovec+0x73/0xa0 [ 1268.737277][ T6777] ___sys_recvmsg+0x213/0x5a0 [ 1268.737308][ T6777] ? ktime_get_ts64+0xa9/0x410 [ 1268.737337][ T6777] ? __pfx____sys_recvmsg+0x10/0x10 [ 1268.737366][ T6777] ? __fget_files+0x2a/0x420 [ 1268.737409][ T6777] ? __fget_files+0x3a2/0x420 [ 1268.737444][ T6777] do_recvmmsg+0x31a/0x7f0 [ 1268.737476][ T6777] ? __pfx_do_recvmmsg+0x10/0x10 [ 1268.737514][ T6777] ? get_timespec64+0x119/0x1b0 [ 1268.737541][ T6777] ? __pfx_get_timespec64+0x10/0x10 [ 1268.737578][ T6777] __x64_sys_recvmmsg+0x1b7/0x250 [ 1268.737607][ T6777] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1268.737641][ T6777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.737662][ T6777] do_syscall_64+0x174/0x580 [ 1268.737688][ T6777] ? trace_irq_disable+0x3b/0x140 [ 1268.737713][ T6777] ? clear_bhb_loop+0x40/0x90 [ 1268.737743][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.737763][ T6777] RIP: 0033:0x7f0c5dd9e0d9 [ 1268.737781][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.737797][ T6777] RSP: 002b:00007f0c5ed3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1268.737817][ T6777] RAX: ffffffffffffffda RBX: 00007f0c5e025fa0 RCX: 00007f0c5dd9e0d9 [ 1268.737832][ T6777] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1268.737845][ T6777] RBP: 00007f0c5ed3f090 R08: 0000200000003700 R09: 0000000000000000 [ 1268.737858][ T6777] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.737870][ T6777] R13: 00007f0c5e026038 R14: 00007f0c5e025fa0 R15: 00007ffdcae5f258 [ 1268.737899][ T6777] [ 1269.237052][ T6791] netlink: 'syz.2.9512': attribute type 1 has an invalid length. [ 1269.278889][ T6791] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1269.302097][ T6791] bond4: (slave veth0_to_bond): Releasing active interface [ 1269.324858][ T6791] bond7: (slave veth0_to_bond): making interface the new active one [ 1269.335328][ T6791] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1269.355751][ T6794] netlink: 'syz.4.9514': attribute type 1 has an invalid length. [ 1269.385823][ T6794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.470841][ T6794] bond1: (slave veth0_to_bond): making interface the new active one [ 1269.479589][ T6791] __nla_validate_parse: 1 callbacks suppressed [ 1269.479606][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9512'. [ 1269.507472][ T6794] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1269.533934][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9515'. [ 1269.581547][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9514'. [ 1269.680441][ T6809] netlink: 'syz.3.9518': attribute type 1 has an invalid length. [ 1269.703901][ T6812] FAULT_INJECTION: forcing a failure. [ 1269.703901][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.716916][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.0.9517 Not tainted syzkaller #0 PREEMPT(full) [ 1269.716939][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1269.716950][ T6812] Call Trace: [ 1269.716958][ T6812] [ 1269.716967][ T6812] dump_stack_lvl+0xe8/0x150 [ 1269.717000][ T6812] should_fail_ex+0x40c/0x560 [ 1269.717029][ T6812] should_failslab+0xa8/0x100 [ 1269.717059][ T6812] __kmalloc_cache_noprof+0xa8/0x660 [ 1269.717085][ T6812] ? nfnetlink_rcv+0x242e/0x28c0 [ 1269.717105][ T6812] ? nfnetlink_rcv+0x242e/0x28c0 [ 1269.717143][ T6812] nfnetlink_rcv+0x242e/0x28c0 [ 1269.717192][ T6812] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1269.717254][ T6812] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.717289][ T6812] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.717313][ T6812] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.717344][ T6812] netlink_unicast+0x7bb/0x940 [ 1269.717373][ T6812] netlink_sendmsg+0x813/0xb40 [ 1269.717405][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.717435][ T6812] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1269.717462][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.717484][ T6812] sock_sendmsg_nosec+0x13a/0x180 [ 1269.717514][ T6812] ____sys_sendmsg+0x54e/0x850 [ 1269.717543][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.717576][ T6812] ? import_iovec+0x73/0xa0 [ 1269.717599][ T6812] ___sys_sendmsg+0x2a5/0x360 [ 1269.717620][ T6812] ? __lock_acquire+0x683/0x2cf0 [ 1269.717650][ T6812] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.717704][ T6812] ? __fget_files+0x2a/0x420 [ 1269.717729][ T6812] ? __fget_files+0x3a2/0x420 [ 1269.717761][ T6812] __x64_sys_sendmsg+0x1b1/0x290 [ 1269.717787][ T6812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1269.717823][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.717844][ T6812] do_syscall_64+0x174/0x580 [ 1269.717869][ T6812] ? trace_irq_disable+0x3b/0x140 [ 1269.717891][ T6812] ? clear_bhb_loop+0x40/0x90 [ 1269.717913][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.717931][ T6812] RIP: 0033:0x7f949b99e0d9 [ 1269.717947][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.717963][ T6812] RSP: 002b:00007f9499bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.717984][ T6812] RAX: ffffffffffffffda RBX: 00007f949bc25fa0 RCX: 00007f949b99e0d9 [ 1269.717997][ T6812] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1269.718008][ T6812] RBP: 00007f9499bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.718019][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1269.718030][ T6812] R13: 00007f949bc26038 R14: 00007f949bc25fa0 R15: 00007ffed9e75e78 [ 1269.718058][ T6812] [ 1270.047592][ T6809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1270.282069][ T6827] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9525'. [ 1270.373702][T27058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1270.387623][T27058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1270.397955][T27058] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1270.407670][T27058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1270.417343][T27058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1270.592965][ T6842] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9529'. [ 1270.602017][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9529'. [ 1270.611496][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9529'. [ 1270.788077][ T6846] netlink: 'syz.4.9530': attribute type 1 has an invalid length. [ 1270.984865][ T6846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1271.052252][ T6852] bond1: (slave veth0_to_bond): Releasing active interface [ 1271.069859][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9530'. [ 1271.078867][ T6852] bond2: (slave veth0_to_bond): making interface the new active one [ 1271.087198][ T6852] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1271.114509][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9531'. [ 1271.175497][ T6855] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1271.181454][ T6855] syzkaller1: linktype set to 518 [ 1271.233668][ T6869] FAULT_INJECTION: forcing a failure. [ 1271.233668][ T6869] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.234764][ T6857] batadv0: entered promiscuous mode [ 1271.246298][ T6869] CPU: 1 UID: 0 PID: 6869 Comm: syz.2.9535 Not tainted syzkaller #0 PREEMPT(full) [ 1271.246323][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1271.246332][ T6869] Call Trace: [ 1271.246342][ T6869] [ 1271.246350][ T6869] dump_stack_lvl+0xe8/0x150 [ 1271.246381][ T6869] should_fail_ex+0x40c/0x560 [ 1271.246405][ T6869] ? vmemdup_user+0x2b/0xd0 [ 1271.246431][ T6869] should_failslab+0xa8/0x100 [ 1271.246461][ T6869] __kvmalloc_node_noprof+0x176/0x860 [ 1271.246490][ T6869] ? __fget_files+0x2a/0x420 [ 1271.246522][ T6869] ? vmemdup_user+0x2b/0xd0 [ 1271.246552][ T6869] vmemdup_user+0x2b/0xd0 [ 1271.246578][ T6869] map_get_next_key+0x1c3/0x610 [ 1271.246605][ T6869] ? bpf_lsm_bpf+0x9/0x20 [ 1271.246626][ T6869] ? security_bpf+0x7e/0x2d0 [ 1271.246648][ T6869] __sys_bpf+0xb83/0xd90 [ 1271.246680][ T6869] ? __pfx___sys_bpf+0x10/0x10 [ 1271.246714][ T6869] ? __fget_files+0x2a/0x420 [ 1271.246754][ T6869] ? ksys_write+0x242/0x270 [ 1271.246776][ T6869] ? __pfx_ksys_write+0x10/0x10 [ 1271.246799][ T6869] __x64_sys_bpf+0xba/0xd0 [ 1271.246821][ T6869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.246842][ T6869] do_syscall_64+0x174/0x580 [ 1271.246868][ T6869] ? trace_irq_disable+0x3b/0x140 [ 1271.246892][ T6869] ? clear_bhb_loop+0x40/0x90 [ 1271.246914][ T6869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.246932][ T6869] RIP: 0033:0x7f0c5dd9e0d9 [ 1271.246951][ T6869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.246967][ T6869] RSP: 002b:00007f0c5ed3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1271.246987][ T6869] RAX: ffffffffffffffda RBX: 00007f0c5e025fa0 RCX: 00007f0c5dd9e0d9 [ 1271.247001][ T6869] RDX: 0000000000000020 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1271.247013][ T6869] RBP: 00007f0c5ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.247024][ T6869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.247036][ T6869] R13: 00007f0c5e026038 R14: 00007f0c5e025fa0 R15: 00007ffdcae5f258 [ 1271.247066][ T6869] [ 1271.510951][ T6848] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 1271.671231][ T6884] netlink: 'syz.3.9541': attribute type 3 has an invalid length. [ 1271.680742][ T6884] netlink: 'syz.3.9541': attribute type 1 has an invalid length. [ 1271.689006][ T6884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9541'. [ 1271.711959][ T6884] NCSI netlink: No device for ifindex 0 [ 1272.020594][ T6896] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 (while UP) [ 1272.057768][ T6832] wg2 speed is unknown, defaulting to 1000 [ 1272.322290][ T6911] netlink: 'syz.2.9550': attribute type 1 has an invalid length. [ 1272.340188][ T6910] netlink: 'syz.4.9551': attribute type 1 has an invalid length. [ 1272.436709][ T6911] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1272.498247][ T6910] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1272.535485][ T6911] bond8: entered promiscuous mode [ 1272.540917][ T6911] bond8: entered allmulticast mode [ 1272.556407][ T4939] Bluetooth: hci3: command tx timeout [ 1272.573340][ T6922] bond2: (slave veth0_to_bond): Releasing active interface [ 1272.587584][ T6922] bond3: (slave veth0_to_bond): making interface the new active one [ 1272.596788][ T6922] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1272.655532][ T6921] bond7: (slave veth0_to_bond): Releasing active interface [ 1272.670564][ T6921] bond8: (slave veth0_to_bond): making interface the new active one [ 1272.679850][ T6921] veth0_to_bond: entered promiscuous mode [ 1272.686354][ T6921] veth0_to_bond: entered allmulticast mode [ 1272.692833][ T6921] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1272.795739][ T6910] bond3: entered promiscuous mode [ 1272.800980][ T6910] veth0_to_bond: entered promiscuous mode [ 1272.807495][ T6910] bond3: entered allmulticast mode [ 1272.813298][ T6910] veth0_to_bond: entered allmulticast mode [ 1272.984316][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.009285][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.016487][ T6832] bridge_slave_0: entered allmulticast mode [ 1273.025091][ T6832] bridge_slave_0: entered promiscuous mode [ 1273.038908][ T6941] netdevsim netdevsim2 ªªªªª»: renamed from netdevsim0 [ 1273.074036][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.081201][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.088392][ T6832] bridge_slave_1: entered allmulticast mode [ 1273.116310][ T6832] bridge_slave_1: entered promiscuous mode [ 1273.195985][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.208890][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.247311][ T6832] team0: Port device team_slave_0 added [ 1273.255704][ T6832] team0: Port device team_slave_1 added [ 1273.353039][ T6955] tipc: Enabled bearer , priority 10 [ 1273.361020][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.367978][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.463531][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.474669][ T6959] netlink: 'syz.3.9564': attribute type 3 has an invalid length. [ 1273.484324][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.491288][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.531259][ T6959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1273.575223][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.653937][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.674385][ T6962] batman_adv: batadv0: Interface activated: wlan0 [ 1273.682160][ T6962] net_ratelimit: 1705 callbacks suppressed [ 1273.682172][ T6962] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1273.743751][ T6832] hsr_slave_0: entered promiscuous mode [ 1273.758271][ T6832] hsr_slave_1: entered promiscuous mode [ 1273.764945][ T6832] debugfs: 'hsr0' already exists in 'hsr' [ 1273.771347][ T6832] Cannot create hsr debugfs directory [ 1273.948800][ T6976] netdevsim netdevsim4 ªªªªª»: renamed from netdevsim0 (while UP) [ 1274.187447][ T6984] IPv6: Can't replace route, no match found [ 1274.270840][ T6832] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1274.637677][ T4939] Bluetooth: hci3: command tx timeout [ 1274.731720][ T7007] netdevsim netdevsim1 ªªªªª»: renamed from netdevsim0 (while UP) [ 1274.774027][ T6832] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.213078][ T7024] FAULT_INJECTION: forcing a failure. [ 1275.213078][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.227260][ T7024] CPU: 1 UID: 0 PID: 7024 Comm: syz.1.9582 Not tainted syzkaller #0 PREEMPT(full) [ 1275.227285][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1275.227297][ T7024] Call Trace: [ 1275.227305][ T7024] [ 1275.227313][ T7024] dump_stack_lvl+0xe8/0x150 [ 1275.227345][ T7024] should_fail_ex+0x40c/0x560 [ 1275.227375][ T7024] _copy_from_user+0x2d/0xb0 [ 1275.227395][ T7024] do_ipv6_setsockopt+0x249/0x3180 [ 1275.227427][ T7024] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1275.227450][ T7024] ? aa_label_sk_perm+0x532/0x6e0 [ 1275.227470][ T7024] ? get_pid_task+0x20/0x1f0 [ 1275.227505][ T7024] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1275.227525][ T7024] ? get_pid_task+0x20/0x1f0 [ 1275.227549][ T7024] ? get_pid_task+0x20/0x1f0 [ 1275.227571][ T7024] ? get_pid_task+0x20/0x1f0 [ 1275.227607][ T7024] ? __lock_acquire+0x683/0x2cf0 [ 1275.227652][ T7024] ? aa_sk_perm+0x6d5/0x900 [ 1275.227674][ T7024] ipv6_setsockopt+0x59/0x170 [ 1275.227700][ T7024] rawv6_setsockopt+0x276/0x5e0 [ 1275.227725][ T7024] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1275.227746][ T7024] ? aa_sock_opt_perm+0xff/0x1a0 [ 1275.227768][ T7024] ? sock_common_setsockopt+0x36/0xc0 [ 1275.227788][ T7024] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1275.227809][ T7024] do_sock_setsockopt+0x17c/0x1b0 [ 1275.227838][ T7024] __x64_sys_setsockopt+0x13d/0x1b0 [ 1275.227863][ T7024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.227885][ T7024] do_syscall_64+0x174/0x580 [ 1275.227914][ T7024] ? clear_bhb_loop+0x40/0x90 [ 1275.227937][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.227957][ T7024] RIP: 0033:0x7fe87d59e0d9 [ 1275.227975][ T7024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.227992][ T7024] RSP: 002b:00007fe87e42a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1275.228013][ T7024] RAX: ffffffffffffffda RBX: 00007fe87d825fa0 RCX: 00007fe87d59e0d9 [ 1275.228027][ T7024] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1275.228039][ T7024] RBP: 00007fe87e42a090 R08: 00000000000004f8 R09: 0000000000000000 [ 1275.228052][ T7024] R10: 0000200000001300 R11: 0000000000000246 R12: 0000000000000001 [ 1275.228072][ T7024] R13: 00007fe87d826038 R14: 00007fe87d825fa0 R15: 00007fffc85bf968 [ 1275.228104][ T7024] [ 1275.560810][ T7030] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1275.714452][ T7035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1275.721763][ T7035] IPv6: NLM_F_CREATE should be set when creating new route [ 1275.857738][ T7037] __nla_validate_parse: 2 callbacks suppressed [ 1275.857756][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9588'. [ 1275.914920][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9588'. [ 1275.927763][ T6832] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.946039][ T7043] netlink: 'syz.1.9590': attribute type 11 has an invalid length. [ 1276.249284][ T6832] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.587802][ T6832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1276.678977][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1276.686925][ T6832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1276.704195][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1276.712387][ T7065] netlink: 'syz.3.9597': attribute type 4 has an invalid length. [ 1276.721145][ T6832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1276.727864][T27058] Bluetooth: hci3: command tx timeout [ 1276.745950][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1276.819976][ T7065] netlink: 'syz.3.9597': attribute type 4 has an invalid length. [ 1276.833501][ T6832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1276.845011][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1277.162922][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.183966][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.258265][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.265438][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.274605][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.281730][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.702931][ T7109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9606'. [ 1277.709965][ T7112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9605'. [ 1277.974688][ T7117] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9607'. [ 1278.077728][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9609'. [ 1278.299195][ T7121] team0: Port device team_slave_0 removed [ 1278.523407][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.733755][ T6832] veth0_vlan: entered promiscuous mode [ 1278.747018][ T6832] veth1_vlan: entered promiscuous mode [ 1278.787659][T27058] Bluetooth: hci3: command tx timeout [ 1278.801847][ T7148] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9614'. [ 1278.858090][ T6832] veth0_macvtap: entered promiscuous mode [ 1278.896487][ T6832] veth1_macvtap: entered promiscuous mode [ 1278.920106][ T7153] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9616'. [ 1278.922970][ T7149] netlink: 'syz.3.9613': attribute type 1 has an invalid length. [ 1279.045542][ T7149] netlink: 200 bytes leftover after parsing attributes in process `syz.3.9613'. [ 1279.069513][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.078920][ T7149] netlink: 'syz.3.9613': attribute type 1 has an invalid length. [ 1279.091349][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.132297][ T7149] netlink: 29 bytes leftover after parsing attributes in process `syz.3.9613'. [ 1279.462566][ T6865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.501890][ T6865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.610133][ T1112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.637807][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.664900][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.666664][ T3363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.690732][ T1112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.721212][ T1112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.196240][ T7177] netlink: 'syz.0.9623': attribute type 1 has an invalid length. [ 1280.283731][ T7181] erspan1: entered allmulticast mode [ 1280.949099][ T7203] FAULT_INJECTION: forcing a failure. [ 1280.949099][ T7203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1280.970404][ T7203] CPU: 1 UID: 0 PID: 7203 Comm: syz.2.9631 Not tainted syzkaller #0 PREEMPT(full) [ 1280.970430][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1280.970441][ T7203] Call Trace: [ 1280.970448][ T7203] [ 1280.970456][ T7203] dump_stack_lvl+0xe8/0x150 [ 1280.970489][ T7203] should_fail_ex+0x40c/0x560 [ 1280.970517][ T7203] _copy_from_user+0x2d/0xb0 [ 1280.970537][ T7203] ___sys_recvmsg+0x173/0x5a0 [ 1280.970569][ T7203] ? __pfx____sys_recvmsg+0x10/0x10 [ 1280.970599][ T7203] ? __fget_files+0x2a/0x420 [ 1280.970650][ T7203] do_recvmmsg+0x31a/0x7f0 [ 1280.970684][ T7203] ? __pfx_do_recvmmsg+0x10/0x10 [ 1280.970721][ T7203] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1280.970751][ T7203] ? __fget_files+0x3a2/0x420 [ 1280.970784][ T7203] __x64_sys_recvmmsg+0x198/0x250 [ 1280.970811][ T7203] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1280.970845][ T7203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.970866][ T7203] do_syscall_64+0x174/0x580 [ 1280.970891][ T7203] ? trace_irq_disable+0x3b/0x140 [ 1280.970916][ T7203] ? clear_bhb_loop+0x40/0x90 [ 1280.970939][ T7203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.970958][ T7203] RIP: 0033:0x7f0c5dd9e0d9 [ 1280.970984][ T7203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.971001][ T7203] RSP: 002b:00007f0c5ed3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1280.971020][ T7203] RAX: ffffffffffffffda RBX: 00007f0c5e025fa0 RCX: 00007f0c5dd9e0d9 [ 1280.971034][ T7203] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000003 [ 1280.971047][ T7203] RBP: 00007f0c5ed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.971059][ T7203] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 1280.971071][ T7203] R13: 00007f0c5e026038 R14: 00007f0c5e025fa0 R15: 00007ffdcae5f258 [ 1280.971102][ T7203] [ 1281.292476][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.505960][ T7192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.774912][ T7192] geneve2: left promiscuous mode [ 1281.795038][ T7192] geneve2: left allmulticast mode [ 1281.834479][ T7192] bond3: left promiscuous mode [ 1281.840582][ T7210] __nla_validate_parse: 4 callbacks suppressed [ 1281.840601][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9633'. [ 1281.903609][ T7192] veth0_to_bond: left promiscuous mode [ 1281.919628][ T7192] bond3: left allmulticast mode [ 1281.929863][ T7192] veth0_to_bond: left allmulticast mode [ 1281.977897][ T6865] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.990354][ T1178] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.027005][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9632'. [ 1282.117077][ T7216] syzkaller0: entered promiscuous mode [ 1282.122603][ T7216] syzkaller0: entered allmulticast mode [ 1282.185838][ T7225] netlink: 'syz.1.9635': attribute type 1 has an invalid length. [ 1282.207655][ T7225] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9635'. [ 1282.460321][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9638'. [ 1282.469233][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9638'. [ 1282.478565][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9638'. [ 1282.487432][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9638'. [ 1285.726405][ T3303] netdevsim netdevsim4 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.764393][ T3303] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.831667][ T7257] netlink: 'syz.1.9644': attribute type 1 has an invalid length. [ 1285.865044][ T7259] FAULT_INJECTION: forcing a failure. [ 1285.865044][ T7259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.901965][ T7259] CPU: 0 UID: 0 PID: 7259 Comm: syz.3.9646 Not tainted syzkaller #0 PREEMPT(full) [ 1285.901992][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1285.902003][ T7259] Call Trace: [ 1285.902012][ T7259] [ 1285.902020][ T7259] dump_stack_lvl+0xe8/0x150 [ 1285.902053][ T7259] should_fail_ex+0x40c/0x560 [ 1285.902082][ T7259] _copy_from_iter+0x1d3/0x1660 [ 1285.902107][ T7259] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 1285.902130][ T7259] ? rcu_is_watching+0x15/0xb0 [ 1285.902149][ T7259] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1285.902173][ T7259] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1285.902196][ T7259] ? __pfx__copy_from_iter+0x10/0x10 [ 1285.902220][ T7259] ? __alloc_skb+0x276/0x7a0 [ 1285.902239][ T7259] ? __alloc_skb+0x276/0x7a0 [ 1285.902263][ T7259] ? netlink_sendmsg+0x650/0xb40 [ 1285.902287][ T7259] ? skb_put+0x112/0x210 [ 1285.902309][ T7259] netlink_sendmsg+0x6c0/0xb40 [ 1285.902341][ T7259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.902370][ T7259] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1285.902395][ T7259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.902417][ T7259] sock_sendmsg_nosec+0x13a/0x180 [ 1285.902449][ T7259] ____sys_sendmsg+0x54e/0x850 [ 1285.902477][ T7259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1285.902508][ T7259] ? import_iovec+0x73/0xa0 [ 1285.902528][ T7259] ___sys_sendmsg+0x2a5/0x360 [ 1285.902560][ T7259] ? __lock_acquire+0x683/0x2cf0 [ 1285.902589][ T7259] ? __pfx____sys_sendmsg+0x10/0x10 [ 1285.902641][ T7259] ? __fget_files+0x2a/0x420 [ 1285.902665][ T7259] ? __fget_files+0x3a2/0x420 [ 1285.902697][ T7259] __x64_sys_sendmsg+0x1b1/0x290 [ 1285.902723][ T7259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1285.902764][ T7259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.902783][ T7259] do_syscall_64+0x174/0x580 [ 1285.902808][ T7259] ? trace_irq_disable+0x3b/0x140 [ 1285.902832][ T7259] ? clear_bhb_loop+0x40/0x90 [ 1285.902854][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.902872][ T7259] RIP: 0033:0x7f765979e0d9 [ 1285.902891][ T7259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.902908][ T7259] RSP: 002b:00007f765a716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.902929][ T7259] RAX: ffffffffffffffda RBX: 00007f7659a25fa0 RCX: 00007f765979e0d9 [ 1285.902943][ T7259] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1285.902955][ T7259] RBP: 00007f765a716090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.902967][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.902978][ T7259] R13: 00007f7659a26038 R14: 00007f7659a25fa0 R15: 00007ffe3a0fa8e8 [ 1285.903007][ T7259] [ 1286.363978][ T7265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9649'. [ 1286.375279][ T7265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9649'. [ 1286.385539][ T7265] FAULT_INJECTION: forcing a failure. [ 1286.385539][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.398817][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.1.9649 Not tainted syzkaller #0 PREEMPT(full) [ 1286.398843][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.398855][ T7265] Call Trace: [ 1286.398863][ T7265] [ 1286.398871][ T7265] dump_stack_lvl+0xe8/0x150 [ 1286.398904][ T7265] should_fail_ex+0x40c/0x560 [ 1286.398934][ T7265] _copy_to_user+0x31/0xb0 [ 1286.398964][ T7265] simple_read_from_buffer+0xe1/0x170 [ 1286.398996][ T7265] proc_fail_nth_read+0x1bb/0x230 [ 1286.399027][ T7265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1286.399057][ T7265] ? rw_verify_area+0x24a/0x4c0 [ 1286.399075][ T7265] ? __fget_files+0x2a/0x420 [ 1286.399101][ T7265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1286.399132][ T7265] vfs_read+0x213/0xa80 [ 1286.399156][ T7265] ? __pfx___mutex_lock+0x10/0x10 [ 1286.399186][ T7265] ? __pfx_vfs_read+0x10/0x10 [ 1286.399206][ T7265] ? __fget_files+0x2a/0x420 [ 1286.399236][ T7265] ? __fget_files+0x3a2/0x420 [ 1286.399261][ T7265] ? __fget_files+0x2a/0x420 [ 1286.399294][ T7265] ksys_read+0x150/0x270 [ 1286.399316][ T7265] ? __pfx_ksys_read+0x10/0x10 [ 1286.399344][ T7265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.399363][ T7265] do_syscall_64+0x174/0x580 [ 1286.399386][ T7265] ? trace_irq_disable+0x3b/0x140 [ 1286.399411][ T7265] ? clear_bhb_loop+0x40/0x90 [ 1286.399432][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.399451][ T7265] RIP: 0033:0x7fe87d55e90e [ 1286.399468][ T7265] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1286.399483][ T7265] RSP: 002b:00007fe87e429fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1286.399502][ T7265] RAX: ffffffffffffffda RBX: 00007fe87e42a6c0 RCX: 00007fe87d55e90e [ 1286.399515][ T7265] RDX: 000000000000000f RSI: 00007fe87e42a0a0 RDI: 0000000000000004 [ 1286.399525][ T7265] RBP: 00007fe87e42a090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.399536][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.399547][ T7265] R13: 00007fe87d826038 R14: 00007fe87d825fa0 R15: 00007fffc85bf968 [ 1286.399577][ T7265] [ 1286.718262][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9647'. [ 1286.942778][ T7279] FAULT_INJECTION: forcing a failure. [ 1286.942778][ T7279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.969287][ T7279] CPU: 0 UID: 0 PID: 7279 Comm: syz.1.9652 Not tainted syzkaller #0 PREEMPT(full) [ 1286.969313][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.969325][ T7279] Call Trace: [ 1286.969333][ T7279] [ 1286.969340][ T7279] dump_stack_lvl+0xe8/0x150 [ 1286.969374][ T7279] should_fail_ex+0x40c/0x560 [ 1286.969403][ T7279] _copy_from_user+0x2d/0xb0 [ 1286.969423][ T7279] ___sys_recvmsg+0x173/0x5a0 [ 1286.969446][ T7279] ? ktime_get_ts64+0xa9/0x410 [ 1286.969476][ T7279] ? __pfx____sys_recvmsg+0x10/0x10 [ 1286.969505][ T7279] ? __fget_files+0x2a/0x420 [ 1286.969546][ T7279] ? __fget_files+0x3a2/0x420 [ 1286.969581][ T7279] do_recvmmsg+0x31a/0x7f0 [ 1286.969613][ T7279] ? __pfx_do_recvmmsg+0x10/0x10 [ 1286.969652][ T7279] ? get_timespec64+0x119/0x1b0 [ 1286.969679][ T7279] ? __pfx_get_timespec64+0x10/0x10 [ 1286.969716][ T7279] __x64_sys_recvmmsg+0x1b7/0x250 [ 1286.969744][ T7279] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1286.969779][ T7279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.969801][ T7279] do_syscall_64+0x174/0x580 [ 1286.969827][ T7279] ? trace_irq_disable+0x3b/0x140 [ 1286.969853][ T7279] ? clear_bhb_loop+0x40/0x90 [ 1286.969877][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.969897][ T7279] RIP: 0033:0x7fe87d59e0d9 [ 1286.969915][ T7279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.969939][ T7279] RSP: 002b:00007fe87e409028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1286.969960][ T7279] RAX: ffffffffffffffda RBX: 00007fe87d826090 RCX: 00007fe87d59e0d9 [ 1286.969974][ T7279] RDX: 0000000000000001 RSI: 0000200000001580 RDI: 0000000000000004 [ 1286.969987][ T7279] RBP: 00007fe87e409090 R08: 00002000000015c0 R09: 0000000000000000 [ 1286.970000][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.970012][ T7279] R13: 00007fe87d826128 R14: 00007fe87d826090 R15: 00007fffc85bf968 [ 1286.970046][ T7279] [ 1287.238488][ T7288] syzkaller1: entered promiscuous mode [ 1287.244000][ T7288] syzkaller1: entered allmulticast mode [ 1287.935413][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9662'. [ 1288.286505][ T7324] bond9: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 1288.300245][ T7324] bond9: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1288.310352][ T7324] bond9: entered allmulticast mode [ 1288.462511][ T7329] netlink: 'syz.2.9670': attribute type 1 has an invalid length. [ 1288.552466][ T7329] bond10: entered promiscuous mode [ 1288.557690][ T7329] bond10: entered allmulticast mode [ 1288.563368][ T7329] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1289.384195][ T7365] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1289.698813][ T7370] syzkaller0: entered promiscuous mode [ 1289.719478][ T7370] syzkaller0: entered allmulticast mode [ 1289.760534][ T7379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1289.888708][ T7385] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9692'. [ 1289.897794][ T7385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9692'. [ 1289.916361][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9692'. [ 1293.179872][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9696'. [ 1293.489575][ T7423] netlink: 'syz.0.9702': attribute type 10 has an invalid length. [ 1293.617052][ T7423] team0 (unregistering): Port device team_slave_0 removed [ 1293.644317][ T7423] team0 (unregistering): Port device team_slave_1 removed [ 1293.685046][ T7426] dummy0: entered promiscuous mode [ 1293.693468][ T7426] gretap0: entered promiscuous mode [ 1293.699808][ T7426] debugfs: 'hsr1' already exists in 'hsr' [ 1293.714328][ T7434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9708'. [ 1293.733712][ T7426] Cannot create hsr debugfs directory [ 1293.740855][ T7426] hsr1: entered allmulticast mode [ 1293.746087][ T7426] dummy0: entered allmulticast mode [ 1293.751350][ T7426] gretap0: entered allmulticast mode [ 1293.764465][ T7434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9708'. [ 1294.102074][ T7449] syzkaller0: entered promiscuous mode [ 1294.107600][ T7449] syzkaller0: entered allmulticast mode [ 1297.323781][ T7456] netdevsim netdevsim0 ªªªªª»: renamed from netdevsim0 (while UP) [ 1297.336456][ T7457] syzkaller0: entered promiscuous mode [ 1297.341947][ T7457] syzkaller0: entered allmulticast mode [ 1297.456795][ T7469] netlink: 'syz.0.9719': attribute type 1 has an invalid length. [ 1297.566799][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9721'. [ 1297.585931][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9721'. [ 1297.608032][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9721'. [ 1297.641589][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9721'. [ 1297.801423][ T7490] netlink: 'syz.2.9726': attribute type 1 has an invalid length. [ 1297.847078][ T7490] bond11: entered promiscuous mode [ 1297.852942][ T7490] bond11: entered allmulticast mode [ 1297.861180][ T7490] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1299.184166][ T7531] rdma_rxe: rxe_newlink: failed to add lo [ 1299.494375][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9742'. [ 1299.659371][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9743'. [ 1299.810447][ T7552] team0: Port device team_slave_0 removed [ 1300.002149][ T7566] netlink: 'syz.1.9748': attribute type 39 has an invalid length. [ 1301.409310][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9759'. [ 1302.481856][ T7634] sctp: [Deprecated]: syz.1.9765 (pid 7634) Use of int in max_burst socket option. [ 1302.481856][ T7634] Use struct sctp_assoc_value instead [ 1303.114147][ T7644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1303.137090][ T7644] FAULT_INJECTION: forcing a failure. [ 1303.137090][ T7644] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.167514][ T7644] CPU: 0 UID: 0 PID: 7644 Comm: syz.4.9769 Not tainted syzkaller #0 PREEMPT(full) [ 1303.167540][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1303.167552][ T7644] Call Trace: [ 1303.167559][ T7644] [ 1303.167568][ T7644] dump_stack_lvl+0xe8/0x150 [ 1303.167602][ T7644] should_fail_ex+0x40c/0x560 [ 1303.167628][ T7644] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 1303.167659][ T7644] should_failslab+0xa8/0x100 [ 1303.167689][ T7644] __kvmalloc_node_noprof+0x176/0x860 [ 1303.167722][ T7644] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 1303.167756][ T7644] __nf_hook_entries_try_shrink+0x34e/0x720 [ 1303.167797][ T7644] __nf_unregister_net_hook+0x4be/0x6d0 [ 1303.167834][ T7644] nf_unregister_net_hooks+0xcb/0x140 [ 1303.167865][ T7644] nf_ct_netns_put+0x3b9/0x520 [ 1303.167889][ T7644] xt_ct_tg_check+0x73e/0xa00 [ 1303.167915][ T7644] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 1303.167937][ T7644] ? xt_ct_tg_check_v0+0x184/0x2c0 [ 1303.167961][ T7644] xt_ct_tg_check_v0+0x191/0x2c0 [ 1303.167980][ T7644] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1303.168003][ T7644] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 1303.168042][ T7644] xt_check_target+0x619/0xca0 [ 1303.168073][ T7644] ? __pfx_xt_check_target+0x10/0x10 [ 1303.168096][ T7644] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1303.168130][ T7644] ? xt_find_target+0x20f/0x260 [ 1303.168158][ T7644] translate_table+0x1789/0x1f80 [ 1303.168206][ T7644] ? __pfx_translate_table+0x10/0x10 [ 1303.168230][ T7644] ? __might_fault+0xaf/0x130 [ 1303.168254][ T7644] ? __might_fault+0xaf/0x130 [ 1303.168295][ T7644] ? _copy_from_user+0x94/0xb0 [ 1303.168319][ T7644] do_ipt_set_ctl+0xa53/0xe20 [ 1303.168360][ T7644] ? rcu_is_watching+0x15/0xb0 [ 1303.168381][ T7644] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1303.168423][ T7644] ? __mutex_unlock_slowpath+0x731/0x900 [ 1303.168455][ T7644] ? aa_sk_perm+0x6d5/0x900 [ 1303.168477][ T7644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1303.168509][ T7644] ? __pfx_aa_sk_perm+0x10/0x10 [ 1303.168535][ T7644] nf_setsockopt+0x26f/0x290 [ 1303.168557][ T7644] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1303.168580][ T7644] do_sock_setsockopt+0x17c/0x1b0 [ 1303.168608][ T7644] __x64_sys_setsockopt+0x13d/0x1b0 [ 1303.168635][ T7644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.168656][ T7644] do_syscall_64+0x174/0x580 [ 1303.168681][ T7644] ? trace_irq_disable+0x3b/0x140 [ 1303.168706][ T7644] ? clear_bhb_loop+0x40/0x90 [ 1303.168730][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.168750][ T7644] RIP: 0033:0x7f805999e0d9 [ 1303.168768][ T7644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.168785][ T7644] RSP: 002b:00007f805a841028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1303.168805][ T7644] RAX: ffffffffffffffda RBX: 00007f8059c25fa0 RCX: 00007f805999e0d9 [ 1303.168819][ T7644] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1303.168831][ T7644] RBP: 00007f805a841090 R08: 0000000000000468 R09: 0000000000000000 [ 1303.168843][ T7644] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 1303.168855][ T7644] R13: 00007f8059c26038 R14: 00007f8059c25fa0 R15: 00007fff48f770e8 [ 1303.168886][ T7644] [ 1303.801073][ T7651] bond0: (slave ip6tnl0): refused to change device type [ 1304.445150][ T7657] netlink: 'syz.1.9773': attribute type 1 has an invalid length. [ 1304.798915][ T7662] vlan2: entered promiscuous mode [ 1304.816415][ T7662] hsr0: entered promiscuous mode [ 1304.852443][ T7662] vlan2: entered allmulticast mode [ 1304.857608][ T7662] hsr0: entered allmulticast mode [ 1304.862651][ T7662] hsr_slave_0: entered allmulticast mode [ 1304.868291][ T7662] hsr_slave_1: entered allmulticast mode [ 1304.914973][ T7662] netlink: 24044 bytes leftover after parsing attributes in process `syz.1.9776'. [ 1304.933615][ T7662] hsr_slave_0: left promiscuous mode [ 1305.024179][ T7662] hsr_slave_1: left promiscuous mode [ 1305.438425][ T7674] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9780'. [ 1305.601147][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9781'. [ 1305.610354][ T7676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9781'. [ 1305.963250][ T7571] Set syz1 is full, maxelem 65536 reached [ 1306.050201][ T7697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9788'. [ 1306.073505][ T7693] netlink: 'syz.1.9786': attribute type 1 has an invalid length. [ 1306.375329][ T7714] FAULT_INJECTION: forcing a failure. [ 1306.375329][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.387974][ T7714] CPU: 1 UID: 0 PID: 7714 Comm: syz.0.9795 Not tainted syzkaller #0 PREEMPT(full) [ 1306.388000][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1306.388011][ T7714] Call Trace: [ 1306.388020][ T7714] [ 1306.388028][ T7714] dump_stack_lvl+0xe8/0x150 [ 1306.388063][ T7714] should_fail_ex+0x40c/0x560 [ 1306.388093][ T7714] should_failslab+0xa8/0x100 [ 1306.388125][ T7714] __kmalloc_cache_noprof+0xa8/0x660 [ 1306.388153][ T7714] ? ovs_flow_cmd_new+0x356/0xe80 [ 1306.388178][ T7714] ? ovs_flow_cmd_new+0x356/0xe80 [ 1306.388208][ T7714] ovs_flow_cmd_new+0x356/0xe80 [ 1306.388232][ T7714] ? __kmalloc_noprof+0x1ad/0x720 [ 1306.388258][ T7714] ? kasan_save_track+0x3e/0x80 [ 1306.388288][ T7714] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1306.388365][ T7714] ? __kmalloc_noprof+0x396/0x720 [ 1306.388393][ T7714] ? __nla_parse+0x40/0x60 [ 1306.388425][ T7714] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1306.388446][ T7714] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1306.388475][ T7714] genl_family_rcv_msg_doit+0x233/0x340 [ 1306.388509][ T7714] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1306.388543][ T7714] ? bpf_lsm_capable+0x9/0x20 [ 1306.388568][ T7714] ? security_capable+0x7e/0x2c0 [ 1306.388596][ T7714] genl_rcv_msg+0x614/0x7a0 [ 1306.388623][ T7714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1306.388642][ T7714] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1306.388668][ T7714] ? __pfx_ref_tracker_free+0x10/0x10 [ 1306.388706][ T7714] netlink_rcv_skb+0x226/0x4a0 [ 1306.388733][ T7714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1306.388754][ T7714] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1306.388795][ T7714] ? down_read+0x2be/0x330 [ 1306.388819][ T7714] genl_rcv+0x28/0x40 [ 1306.388836][ T7714] netlink_unicast+0x7bb/0x940 [ 1306.388870][ T7714] netlink_sendmsg+0x813/0xb40 [ 1306.388905][ T7714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.388935][ T7714] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1306.388964][ T7714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.388988][ T7714] sock_sendmsg_nosec+0x13a/0x180 [ 1306.389021][ T7714] ____sys_sendmsg+0x54e/0x850 [ 1306.389053][ T7714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1306.389088][ T7714] ? import_iovec+0x73/0xa0 [ 1306.389111][ T7714] ___sys_sendmsg+0x2a5/0x360 [ 1306.389135][ T7714] ? __lock_acquire+0x683/0x2cf0 [ 1306.389167][ T7714] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.389230][ T7714] ? __fget_files+0x2a/0x420 [ 1306.389256][ T7714] ? __fget_files+0x3a2/0x420 [ 1306.389293][ T7714] __x64_sys_sendmsg+0x1b1/0x290 [ 1306.389321][ T7714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1306.389366][ T7714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.389388][ T7714] do_syscall_64+0x174/0x580 [ 1306.389414][ T7714] ? trace_irq_disable+0x3b/0x140 [ 1306.389439][ T7714] ? clear_bhb_loop+0x40/0x90 [ 1306.389464][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.389483][ T7714] RIP: 0033:0x7f496f99e0d9 [ 1306.389508][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1306.389526][ T7714] RSP: 002b:00007f4970910028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.389547][ T7714] RAX: ffffffffffffffda RBX: 00007f496fc25fa0 RCX: 00007f496f99e0d9 [ 1306.389562][ T7714] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1306.389575][ T7714] RBP: 00007f4970910090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.389588][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.389599][ T7714] R13: 00007f496fc26038 R14: 00007f496fc25fa0 R15: 00007ffefe400ee8 [ 1306.389632][ T7714] [ 1306.444237][ T7718] x_tables: duplicate underflow at hook 4 [ 1306.532410][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9796'. [ 1306.851567][ T7718] siw: device registration error -23 [ 1307.098873][ T7737] netlink: 192 bytes leftover after parsing attributes in process `syz.4.9801'. [ 1307.189762][ T7739] FAULT_INJECTION: forcing a failure. [ 1307.189762][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.209965][ T7739] CPU: 1 UID: 0 PID: 7739 Comm: syz.4.9803 Not tainted syzkaller #0 PREEMPT(full) [ 1307.209991][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1307.210003][ T7739] Call Trace: [ 1307.210011][ T7739] [ 1307.210019][ T7739] dump_stack_lvl+0xe8/0x150 [ 1307.210053][ T7739] should_fail_ex+0x40c/0x560 [ 1307.210084][ T7739] should_failslab+0xa8/0x100 [ 1307.210115][ T7739] __kmalloc_cache_noprof+0xa8/0x660 [ 1307.210142][ T7739] ? __kmalloc_cache_noprof+0x150/0x660 [ 1307.210166][ T7739] ? nft_netdev_hook_alloc+0x59/0x5a0 [ 1307.210191][ T7739] ? nft_netdev_hook_alloc+0x59/0x5a0 [ 1307.210221][ T7739] nft_netdev_hook_alloc+0x59/0x5a0 [ 1307.210253][ T7739] nf_tables_parse_netdev_hooks+0x14c/0xa10 [ 1307.210287][ T7739] nft_flowtable_parse_hook+0x551/0xab0 [ 1307.210327][ T7739] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 1307.210359][ T7739] ? __rhashtable_init_noprof+0x7d9/0xaf0 [ 1307.210392][ T7739] ? nf_flow_table_init+0x287/0x2a0 [ 1307.210497][ T7739] nf_tables_newflowtable+0x1627/0x25b0 [ 1307.210534][ T7739] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 1307.210557][ T7739] ? nfnl_pernet+0x23/0x240 [ 1307.210593][ T7739] ? __nla_parse+0x40/0x60 [ 1307.210624][ T7739] nfnetlink_rcv+0x1288/0x28c0 [ 1307.210680][ T7739] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1307.210747][ T7739] ? netlink_deliver_tap+0x2e/0x1b0 [ 1307.210783][ T7739] ? netlink_deliver_tap+0x2e/0x1b0 [ 1307.210807][ T7739] ? netlink_deliver_tap+0x2e/0x1b0 [ 1307.210837][ T7739] netlink_unicast+0x7bb/0x940 [ 1307.210872][ T7739] netlink_sendmsg+0x813/0xb40 [ 1307.210907][ T7739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1307.210935][ T7739] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1307.210963][ T7739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1307.210987][ T7739] sock_sendmsg_nosec+0x13a/0x180 [ 1307.211019][ T7739] ____sys_sendmsg+0x54e/0x850 [ 1307.211050][ T7739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1307.211084][ T7739] ? import_iovec+0x73/0xa0 [ 1307.211107][ T7739] ___sys_sendmsg+0x2a5/0x360 [ 1307.211130][ T7739] ? __lock_acquire+0x683/0x2cf0 [ 1307.211161][ T7739] ? __pfx____sys_sendmsg+0x10/0x10 [ 1307.211221][ T7739] ? __fget_files+0x2a/0x420 [ 1307.211246][ T7739] ? __fget_files+0x3a2/0x420 [ 1307.211280][ T7739] __x64_sys_sendmsg+0x1b1/0x290 [ 1307.211306][ T7739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1307.211348][ T7739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.211369][ T7739] do_syscall_64+0x174/0x580 [ 1307.211395][ T7739] ? trace_irq_disable+0x3b/0x140 [ 1307.211427][ T7739] ? clear_bhb_loop+0x40/0x90 [ 1307.211451][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.211470][ T7739] RIP: 0033:0x7f805999e0d9 [ 1307.211488][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.211504][ T7739] RSP: 002b:00007f805a841028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1307.211525][ T7739] RAX: ffffffffffffffda RBX: 00007f8059c25fa0 RCX: 00007f805999e0d9 [ 1307.211539][ T7739] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1307.211550][ T7739] RBP: 00007f805a841090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.211561][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.211573][ T7739] R13: 00007f8059c26038 R14: 00007f8059c25fa0 R15: 00007fff48f770e8 [ 1307.211604][ T7739] [ 1307.217021][ T7741] Bluetooth: MGMT ver 1.23 [ 1307.303872][ T7746] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9805'. [ 1307.637357][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9805'. [ 1307.646345][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9805'. [ 1308.086258][ T7784] FAULT_INJECTION: forcing a failure. [ 1308.086258][ T7784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.100083][ T7784] CPU: 1 UID: 0 PID: 7784 Comm: syz.1.9816 Not tainted syzkaller #0 PREEMPT(full) [ 1308.100111][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1308.100123][ T7784] Call Trace: [ 1308.100131][ T7784] [ 1308.100138][ T7784] dump_stack_lvl+0xe8/0x150 [ 1308.100170][ T7784] should_fail_ex+0x40c/0x560 [ 1308.100199][ T7784] _copy_from_user+0x2d/0xb0 [ 1308.100219][ T7784] kstrtouint_from_user+0xd6/0x180 [ 1308.100246][ T7784] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1308.100284][ T7784] proc_fail_nth_write+0x8e/0x210 [ 1308.100313][ T7784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1308.100347][ T7784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1308.100374][ T7784] vfs_write+0x296/0xba0 [ 1308.100403][ T7784] ? __pfx_vfs_write+0x10/0x10 [ 1308.100424][ T7784] ? __fget_files+0x2a/0x420 [ 1308.100455][ T7784] ? __fget_files+0x3a2/0x420 [ 1308.100490][ T7784] ? __fget_files+0x2a/0x420 [ 1308.100525][ T7784] ksys_write+0x150/0x270 [ 1308.100548][ T7784] ? __pfx_ksys_write+0x10/0x10 [ 1308.100576][ T7784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.100598][ T7784] do_syscall_64+0x174/0x580 [ 1308.100625][ T7784] ? trace_irq_disable+0x3b/0x140 [ 1308.100651][ T7784] ? clear_bhb_loop+0x40/0x90 [ 1308.100676][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.100696][ T7784] RIP: 0033:0x7fe87d55e90e [ 1308.100715][ T7784] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1308.100731][ T7784] RSP: 002b:00007fe87e429fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1308.100750][ T7784] RAX: ffffffffffffffda RBX: 00007fe87e42a6c0 RCX: 00007fe87d55e90e [ 1308.100764][ T7784] RDX: 0000000000000001 RSI: 00007fe87e42a0a0 RDI: 0000000000000004 [ 1308.100777][ T7784] RBP: 00007fe87e42a090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.100789][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1308.100801][ T7784] R13: 00007fe87d826038 R14: 00007fe87d825fa0 R15: 00007fffc85bf968 [ 1308.100833][ T7784] [ 1308.147084][ T7789] netlink: 'syz.3.9814': attribute type 7 has an invalid length. [ 1308.242448][ T7793] xt_hashlimit: size too large, truncated to 1048576 [ 1308.344176][ T7789] netlink: 'syz.3.9814': attribute type 8 has an invalid length. [ 1308.352381][ T7789] veth1: entered promiscuous mode [ 1308.403917][ T7789] veth0: entered promiscuous mode [ 1308.423744][ T7789] erspan0: entered promiscuous mode [ 1308.434236][ T7789] debugfs: 'hsr1' already exists in 'hsr' [ 1308.440944][ T7793] xt_hashlimit: max too large, truncated to 1048576 [ 1308.447849][ T7793] xt_hashlimit: overflow, rate too high: 0 [ 1308.453967][ T7789] Cannot create hsr debugfs directory [ 1308.472609][ T7803] netlink: 'syz.1.9819': attribute type 13 has an invalid length. [ 1308.655452][ T7811] FAULT_INJECTION: forcing a failure. [ 1308.655452][ T7811] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.677756][ T7811] CPU: 1 UID: 0 PID: 7811 Comm: syz.0.9823 Not tainted syzkaller #0 PREEMPT(full) [ 1308.677782][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1308.677793][ T7811] Call Trace: [ 1308.677800][ T7811] [ 1308.677808][ T7811] dump_stack_lvl+0xe8/0x150 [ 1308.677840][ T7811] should_fail_ex+0x40c/0x560 [ 1308.677868][ T7811] should_failslab+0xa8/0x100 [ 1308.677895][ T7811] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1308.677918][ T7811] ? local_lock_release+0x9c/0x160 [ 1308.677939][ T7811] ? __alloc_skb+0x1d7/0x7a0 [ 1308.677957][ T7811] ? __alloc_skb+0x1d7/0x7a0 [ 1308.677979][ T7811] __alloc_skb+0x1d7/0x7a0 [ 1308.678001][ T7811] netlink_ack+0x136/0xb30 [ 1308.678030][ T7811] ? __kmalloc_cache_noprof+0x150/0x660 [ 1308.678054][ T7811] ? nfnetlink_rcv+0x1021/0x28c0 [ 1308.678082][ T7811] nfnetlink_rcv+0x260c/0x28c0 [ 1308.678136][ T7811] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1308.678174][ T7811] ? ref_tracker_free+0x689/0x830 [ 1308.678222][ T7811] ? skb_clone+0x246/0x3a0 [ 1308.678250][ T7811] ? __netlink_deliver_tap+0x811/0x860 [ 1308.678282][ T7811] ? netlink_deliver_tap+0x2e/0x1b0 [ 1308.678305][ T7811] ? netlink_deliver_tap+0x2e/0x1b0 [ 1308.678334][ T7811] netlink_unicast+0x7bb/0x940 [ 1308.678377][ T7811] netlink_sendmsg+0x813/0xb40 [ 1308.678411][ T7811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1308.678439][ T7811] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1308.678466][ T7811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1308.678490][ T7811] sock_sendmsg_nosec+0x13a/0x180 [ 1308.678522][ T7811] ____sys_sendmsg+0x54e/0x850 [ 1308.678551][ T7811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1308.678584][ T7811] ? import_iovec+0x73/0xa0 [ 1308.678606][ T7811] ___sys_sendmsg+0x2a5/0x360 [ 1308.678629][ T7811] ? __lock_acquire+0x683/0x2cf0 [ 1308.678659][ T7811] ? __pfx____sys_sendmsg+0x10/0x10 [ 1308.678721][ T7811] ? __fget_files+0x2a/0x420 [ 1308.678746][ T7811] ? __fget_files+0x3a2/0x420 [ 1308.678784][ T7811] __x64_sys_sendmsg+0x1b1/0x290 [ 1308.678811][ T7811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1308.678851][ T7811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.678871][ T7811] do_syscall_64+0x174/0x580 [ 1308.678895][ T7811] ? trace_irq_disable+0x3b/0x140 [ 1308.678915][ T7811] ? clear_bhb_loop+0x40/0x90 [ 1308.678937][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.678956][ T7811] RIP: 0033:0x7f496f99e0d9 [ 1308.678974][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.678988][ T7811] RSP: 002b:00007f4970910028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1308.679007][ T7811] RAX: ffffffffffffffda RBX: 00007f496fc25fa0 RCX: 00007f496f99e0d9 [ 1308.679019][ T7811] RDX: 0000000004040080 RSI: 0000200000000500 RDI: 0000000000000003 [ 1308.679032][ T7811] RBP: 00007f4970910090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.679044][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.679055][ T7811] R13: 00007f496fc26038 R14: 00007f496fc25fa0 R15: 00007ffefe400ee8 [ 1308.679084][ T7811] [ 1308.739989][ T7813] syzkaller0: entered promiscuous mode [ 1309.103685][ T7813] syzkaller0: entered allmulticast mode [ 1309.123425][ T7809] team0: Port device team_slave_0 removed [ 1309.154843][ T1178] IPVS: starting estimator thread 0... [ 1309.316176][ T7832] IPVS: using max 34 ests per chain, 81600 per kthread [ 1309.519034][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.526374][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.714642][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1309.728244][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1309.763350][ T6865] [ 1309.765718][ T6865] ====================================================== [ 1309.772789][ T6865] WARNING: possible circular locking dependency detected [ 1309.779905][ T6865] syzkaller #0 Not tainted [ 1309.784331][ T6865] ------------------------------------------------------ [ 1309.791430][ T6865] kworker/u8:5/6865 is trying to acquire lock: [ 1309.797584][ T6865] ffff88803a7b9070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1309.806752][ T6865] [ 1309.806752][ T6865] but task is already holding lock: [ 1309.814134][ T6865] ffff888026650958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1309.824083][ T6865] [ 1309.824083][ T6865] which lock already depends on the new lock. [ 1309.824083][ T6865] [ 1309.826167][ T7834] geneve2: left promiscuous mode [ 1309.834488][ T6865] [ 1309.834488][ T6865] the existing dependency chain (in reverse order) is: [ 1309.834499][ T6865] [ 1309.834499][ T6865] -> #1 [ 1309.839419][ T7834] geneve2: left allmulticast mode [ 1309.848405][ T6865] (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 1309.864026][ T6865] _raw_spin_lock+0x2e/0x40 [ 1309.869061][ T6865] sch_direct_xmit+0x15f/0x4c0 [ 1309.874354][ T6865] __dev_queue_xmit+0x177f/0x3820 [ 1309.879914][ T6865] hsr_forward_skb+0x1701/0x2b70 [ 1309.885381][ T6865] hsr_dev_xmit+0x242/0x360 [ 1309.890408][ T6865] dev_hard_start_xmit+0x2cd/0x830 [ 1309.896023][ T6865] __dev_queue_xmit+0x14c0/0x3820 [ 1309.901547][ T6865] ip6_output+0x337/0x540 [ 1309.906378][ T6865] NF_HOOK+0x177/0x4f0 [ 1309.910938][ T6865] mld_sendpack+0x890/0xe10 [ 1309.915940][ T6865] mld_ifc_work+0x842/0xd60 [ 1309.920949][ T6865] process_scheduled_works+0xa8e/0x14e0 [ 1309.926994][ T6865] worker_thread+0xa47/0xfb0 [ 1309.932086][ T6865] kthread+0x388/0x470 [ 1309.936670][ T6865] ret_from_fork+0x514/0xb70 [ 1309.941768][ T6865] ret_from_fork_asm+0x1a/0x30 [ 1309.947025][ T6865] [ 1309.947025][ T6865] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 1309.954727][ T6865] __lock_acquire+0x1520/0x2cf0 [ 1309.960082][ T6865] lock_acquire+0x106/0x350 [ 1309.965087][ T6865] _raw_spin_lock_bh+0x36/0x50 [ 1309.970376][ T6865] hsr_dev_xmit+0x237/0x360 [ 1309.975409][ T6865] dev_hard_start_xmit+0x2cd/0x830 [ 1309.981053][ T6865] __dev_queue_xmit+0x14c0/0x3820 [ 1309.986614][ T6865] ip_finish_output2+0xc4b/0x10b0 [ 1309.992168][ T6865] ip_output+0x29f/0x450 [ 1309.996941][ T6865] iptunnel_xmit+0x626/0xd10 [ 1310.002061][ T6865] ip_tunnel_xmit+0x195b/0x2040 [ 1310.007438][ T6865] __gre_xmit+0x19e/0x240 [ 1310.012291][ T6865] erspan_xmit+0xad5/0x1590 [ 1310.017317][ T6865] dev_hard_start_xmit+0x2cd/0x830 [ 1310.022958][ T6865] sch_direct_xmit+0x257/0x4c0 [ 1310.028249][ T6865] __dev_queue_xmit+0x177f/0x3820 [ 1310.033810][ T6865] alb_send_lp_vid+0x348/0x550 [ 1310.039211][ T6865] alb_send_learning_packets+0x12c/0x300 [ 1310.045373][ T6865] bond_alb_monitor+0x3d0/0x17c0 [ 1310.050846][ T6865] process_scheduled_works+0xa8e/0x14e0 [ 1310.056930][ T6865] worker_thread+0xa47/0xfb0 [ 1310.062048][ T6865] kthread+0x388/0x470 [ 1310.066653][ T6865] ret_from_fork+0x514/0xb70 [ 1310.071776][ T6865] ret_from_fork_asm+0x1a/0x30 [ 1310.077068][ T6865] [ 1310.077068][ T6865] other info that might help us debug this: [ 1310.077068][ T6865] [ 1310.087294][ T6865] Possible unsafe locking scenario: [ 1310.087294][ T6865] [ 1310.094810][ T6865] CPU0 CPU1 [ 1310.100229][ T6865] ---- ---- [ 1310.105643][ T6865] lock(&qdisc_xmit_lock_key#4); [ 1310.110683][ T6865] lock(&hsr->seqnr_lock); [ 1310.117717][ T6865] lock(&qdisc_xmit_lock_key#4); [ 1310.125277][ T6865] lock(&hsr->seqnr_lock); [ 1310.129782][ T6865] [ 1310.129782][ T6865] *** DEADLOCK *** [ 1310.129782][ T6865] [ 1310.137981][ T6865] 10 locks held by kworker/u8:5/6865: [ 1310.143350][ T6865] #0: ffff888076c49940 ((wq_completion)bond6#7){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1310.154493][ T6865] #1: ffffc900066f7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1310.167386][ T6865] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0 [ 1310.176989][ T6865] #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 1310.186938][ T6865] #4: ffff88803888a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 1310.199591][ T6865] #5: ffff888026650958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1310.209899][ T6865] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 1310.218796][ T6865] #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 1310.228564][ T6865] #8: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 1310.238511][ T6865] #9: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1310.247674][ T6865] [ 1310.247674][ T6865] stack backtrace: [ 1310.253564][ T6865] CPU: 0 UID: 0 PID: 6865 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1310.253587][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1310.253600][ T6865] Workqueue: bond6 bond_alb_monitor [ 1310.253630][ T6865] Call Trace: [ 1310.253639][ T6865] [ 1310.253648][ T6865] dump_stack_lvl+0xe8/0x150 [ 1310.253684][ T6865] print_circular_bug+0x2e1/0x300 [ 1310.253705][ T6865] check_noncircular+0x12e/0x150 [ 1310.253726][ T6865] __lock_acquire+0x1520/0x2cf0 [ 1310.253754][ T6865] ? __siphash_unaligned+0x28d/0x3e0 [ 1310.253785][ T6865] ? skb_network_protocol+0x23d/0x400 [ 1310.253812][ T6865] ? hsr_dev_xmit+0x237/0x360 [ 1310.253832][ T6865] lock_acquire+0x106/0x350 [ 1310.253857][ T6865] ? hsr_dev_xmit+0x237/0x360 [ 1310.253880][ T6865] ? hsr_dev_xmit+0x237/0x360 [ 1310.253899][ T6865] _raw_spin_lock_bh+0x36/0x50 [ 1310.253920][ T6865] ? hsr_dev_xmit+0x237/0x360 [ 1310.253940][ T6865] hsr_dev_xmit+0x237/0x360 [ 1310.253958][ T6865] ? hsr_dev_xmit+0x2d/0x360 [ 1310.253978][ T6865] dev_hard_start_xmit+0x2cd/0x830 [ 1310.254009][ T6865] __dev_queue_xmit+0x14c0/0x3820 [ 1310.254039][ T6865] ? ___neigh_create+0x1cd2/0x22b0 [ 1310.254058][ T6865] ? __dev_queue_xmit+0x29b/0x3820 [ 1310.254084][ T6865] ? lockdep_hardirqs_on+0x7a/0x110 [ 1310.254111][ T6865] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1310.254136][ T6865] ? neigh_connected_output+0x1e7/0x470 [ 1310.254157][ T6865] ? eth_header+0x11b/0x200 [ 1310.254250][ T6865] ? __asan_memcpy+0x40/0x70 [ 1310.254282][ T6865] ? ip_finish_output2+0x3de/0x10b0 [ 1310.254305][ T6865] ip_finish_output2+0xc4b/0x10b0 [ 1310.254327][ T6865] ? ip_skb_dst_mtu+0x811/0xa50 [ 1310.254347][ T6865] ? ip_finish_output2+0x3de/0x10b0 [ 1310.254371][ T6865] ? ip_finish_output+0x40b/0x530 [ 1310.254392][ T6865] ip_output+0x29f/0x450 [ 1310.254411][ T6865] ? ip_output+0x5a/0x450 [ 1310.254432][ T6865] iptunnel_xmit+0x626/0xd10 [ 1310.254460][ T6865] ip_tunnel_xmit+0x195b/0x2040 [ 1310.254489][ T6865] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1310.254511][ T6865] ? __pfx_gre_build_header+0x10/0x10 [ 1310.254531][ T6865] ? kfree+0x1c5/0x640 [ 1310.254550][ T6865] ? pskb_expand_head+0x469/0x13a0 [ 1310.254576][ T6865] __gre_xmit+0x19e/0x240 [ 1310.254594][ T6865] ? __pfx___gre_xmit+0x10/0x10 [ 1310.254615][ T6865] erspan_xmit+0xad5/0x1590 [ 1310.254638][ T6865] ? __pfx_erspan_xmit+0x10/0x10 [ 1310.254657][ T6865] ? __lock_acquire+0x683/0x2cf0 [ 1310.254691][ T6865] dev_hard_start_xmit+0x2cd/0x830 [ 1310.254721][ T6865] sch_direct_xmit+0x257/0x4c0 [ 1310.254744][ T6865] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1310.254764][ T6865] ? __switch_to_asm+0x70/0x70 [ 1310.254783][ T6865] __dev_queue_xmit+0x177f/0x3820 [ 1310.254811][ T6865] ? __dev_queue_xmit+0x29b/0x3820 [ 1310.254838][ T6865] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1310.254863][ T6865] ? rcu_is_watching+0x15/0xb0 [ 1310.254880][ T6865] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 1310.254903][ T6865] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1310.254924][ T6865] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 1310.254948][ T6865] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1310.254970][ T6865] ? local_lock_release+0x9c/0x160 [ 1310.254988][ T6865] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1310.255016][ T6865] ? __alloc_skb+0x4cc/0x7a0 [ 1310.255038][ T6865] ? alb_send_lp_vid+0x14e/0x550 [ 1310.255067][ T6865] alb_send_lp_vid+0x348/0x550 [ 1310.255096][ T6865] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1310.255129][ T6865] alb_send_learning_packets+0x12c/0x300 [ 1310.255157][ T6865] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1310.255184][ T6865] ? bond_alb_monitor+0xf3/0x17c0 [ 1310.255212][ T6865] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1310.255235][ T6865] bond_alb_monitor+0x3d0/0x17c0 [ 1310.255263][ T6865] ? bond_alb_monitor+0xf3/0x17c0 [ 1310.255290][ T6865] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1310.255316][ T6865] ? rcu_is_watching+0x15/0xb0 [ 1310.255334][ T6865] ? process_scheduled_works+0xa20/0x14e0 [ 1310.255356][ T6865] process_scheduled_works+0xa8e/0x14e0 [ 1310.255388][ T6865] ? __pfx_process_scheduled_works+0x10/0x10 [ 1310.255412][ T6865] ? assign_work+0x3cf/0x5d0 [ 1310.255434][ T6865] worker_thread+0xa47/0xfb0 [ 1310.255462][ T6865] ? __kthread_parkme+0x71/0x1f0 [ 1310.255489][ T6865] kthread+0x388/0x470 [ 1310.255515][ T6865] ? __pfx_worker_thread+0x10/0x10 [ 1310.255535][ T6865] ? __pfx_kthread+0x10/0x10 [ 1310.255561][ T6865] ret_from_fork+0x514/0xb70 [ 1310.255597][ T6865] ? __pfx_ret_from_fork+0x10/0x10 [ 1310.255623][ T6865] ? __switch_to+0xc89/0x1420 [ 1310.255647][ T6865] ? __pfx_kthread+0x10/0x10 [ 1310.255679][ T6865] ret_from_fork_asm+0x1a/0x30 [ 1310.255702][ T6865] [ 1310.757602][ T7834] bond5: left promiscuous mode [ 1310.763080][ T7834] bond5: left allmulticast mode [ 1310.774735][ T7834] bond6: left promiscuous mode [ 1310.783430][ T7834] erspan1: left promiscuous mode [ 1310.792492][ T7834] bond6: left allmulticast mode [ 1310.801966][ T7834] erspan1: left allmulticast mode [ 1310.824506][ T7834] bond8: left promiscuous mode [ 1310.829603][ T7834] veth0_to_bond: left promiscuous mode [ 1310.835246][ T7834] bond8: left allmulticast mode [ 1310.840200][ T7834] veth0_to_bond: left allmulticast mode [ 1310.846377][ T7834] bond9: left allmulticast mode [ 1310.852025][ T7834] bond10: left promiscuous mode [ 1310.857015][ T7834] bond10: left allmulticast mode [ 1310.867439][ T7834] bond11: left promiscuous mode [ 1310.873138][ T7834] bond11: left allmulticast mode [ 1310.929548][ T7838] __nla_validate_parse: 8 callbacks suppressed [ 1310.929568][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9827'. [ 1310.955964][ T3303] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.965548][ T3303] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.974549][ T3303] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.015978][ T3303] netdevsim netdevsim2 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0