last executing test programs: 4.16295883s ago: executing program 2 (id=3553): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 3.979373686s ago: executing program 2 (id=3557): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x65000000, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 3.771871476s ago: executing program 2 (id=3560): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x4, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x2}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x401) listen(r1, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000000805010000000000000000020000000900010073797a3000000000060002400200000005000300110000000c0004dbefa5812df68a70c6"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003700)={'wlan1\x00'}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000003640)={{r5, &(0x7f0000000140)='syzkaller1\x00', 0x10b000, &(0x7f00000001c0)={@_ha_fsid={[0x0, 0x1]}, {0x81, 0xf, 0x1, 0x1}}, 0x74, &(0x7f0000000240), &(0x7f00000002c0)=0x13f}, {[0x8, 0x5, 0x1, 0x5]}, 0x2, 0x52, &(0x7f0000000340)=""/82}) bind$bt_hci(r8, &(0x7f00000036c0)={0x1f, 0x1}, 0x6) close(r7) r9 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r9, &(0x7f0000003600)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000002580)=[{&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/163, 0x9a}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/176, 0xb0}], 0x3a, &(0x7f0000002600)=""/4089, 0x1000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x631, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.812092293s ago: executing program 3 (id=3571): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)=ANY=[@ANYBLOB="000000000000000100000000fcdbdf2562d9ffc655c831cfc7c53c80ec3be68563ac7537b603c9960317773f8b56d567a35b65336e8855d715"], 0x10}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0x1, 0x6e, &(0x7f0000000080)="83", &(0x7f0000000200)=""/110, 0x8f0, 0x0, 0xa2, 0xe7, &(0x7f0000000540)="602fdcd9db8f60264293f34659161a00251fa2c8bd6e111e0ebadaa4c1c63aaa9a3bba95eed7a4d2151da3a4c4885d5b1cfaa86b0b96014a588dd9901f789fbb9e2050012deaf8ccfe7cc3a863b2934ae1f38f556132be75bd82ddefdd3bd7344eefd151f9183352c6020b0bd7d355881dbee79e48cba44183bb784807217784ce15037591f9ad81f46cd4b7900a139157253829b7c09900084c07dfc5dfe8a9fb8a", &(0x7f00000006c0)="c001b76d0f0a18e568ad6bb13f50b155943a0bf1d2146fb4a52dd1c55dee69b0d4bea913e032d56a416764cadadc3bb9707a0855f1d7b24e3c545cc054f5fbe8d22810761052629606d124868b48a5fcd9f9f7210cc391e356c8186cf1f490c917c9d4bb7b9fbf35514f5000c84ffb462b1ce98cc4edbce6a89b959c520c883c5aac5e5214dceadc725a4ac749eea4989df4391ac7f69fc1a02fa209297d24c17e529041b69012154c3314e2b187c1c7dcd64b7f3c1fc65fcdf70dd871c956d4a8b19172e4c6cd8a1031b9d4f07b57a85f53b9ba8eecde9f812e135998cc6214f556d8024b9ca9", 0x5, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@empty, @in=@private}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000400)=0xe8) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 2.73878317s ago: executing program 2 (id=3573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4eae5b534fea2565d4dfa5a0fe38d7aa7d9f3c7bc6e895852a9035283b89ddbc41c54dbf9392c8dcc65178726eae650e"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0xbc9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x3, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x2, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x56, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x5f88, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x4, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x10001, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0xffffffff, 0x81, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x80000098, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0x3, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x9e, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x400, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x2, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff337, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.427386447s ago: executing program 4 (id=3577): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x13}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0) 2.188046727s ago: executing program 4 (id=3579): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0xe803000000000000}, 0x8004) 2.014024624s ago: executing program 4 (id=3581): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x1, 0xde, 0xfffffff8, 0x20, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x8000, 0x7, 0x5, 0x2}}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0xb, 0x8, 0x6, 0x4, 0x81}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', r1, 0x19, r2, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x101, 0x9, 0x4000}, 0x10, 0x2a1f2, r5, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=[{0x3, 0x1, 0x6, 0xc}, {0x0, 0x5, 0x6, 0x2}, {0x4, 0x4, 0xe, 0x3}, {0x2, 0x1, 0xe, 0x8}, {0x0, 0x2, 0xa, 0x5}, {0x4, 0x2, 0x10, 0x1}, {0x4, 0x1, 0x6}, {0x4, 0x1, 0xe, 0x8}], 0x10, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0xfffffffffffffe38}}], 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getsadinfo={0x14, 0x23, 0x1}, 0x14}}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r10, 0x0, 0x0, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x36, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000380)={r13}) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r11], 0xc4}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb8014000180100010800800010005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.907902034s ago: executing program 1 (id=3582): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x78}}, 0x8800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.76786758s ago: executing program 3 (id=3583): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xdc0, 0x10ff, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) 1.76721422s ago: executing program 1 (id=3584): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x0, 0xffffffffffffff00, 0x2, 0x4}) connect(r0, &(0x7f0000000100)=@in6={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x80) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000180)={0x0, 0x0, 0x50ba, 0xffffffffffffffe8, 0x2b, 0x30a0}) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x7fffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000200)='team0\x00', 0x2800, &(0x7f0000000240)={@align, {0x7ff, 0x5, 0x9, 0x3}}, 0x1, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x5}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000340)=0x4, 0x4) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000380)=0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x5e, 0x8, 0x41, @dev={0xfe, 0x80, '\x00', 0x39}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x80, 0x26, 0xd5cb}}) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000480), 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000005c0)={r3, &(0x7f00000004c0)=':,^\'$-&\x81+\x00', 0x40000, &(0x7f0000000500)={@_ha_fsid={[0x1, 0x8000]}, {0x9ce, 0xe, 0xfffffffb, 0x80000001}}, 0x9, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x4}) write$nci(r3, &(0x7f0000000600)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x40}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000006c0)=0x0) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x82}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x4040000) bind$x25(r3, &(0x7f0000000800)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000840)=0xffffff00, 0x4) getsockopt$packet_buf(r5, 0x107, 0x1, &(0x7f0000000880)=""/40, &(0x7f00000008c0)=0x28) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000900)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r3, r1, 0x25, 0xe, @val=@iter={&(0x7f0000000940)=@task={r9, 0xffffffffffffffff, r5}, 0x10}}, 0x20) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r3) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r10, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, 0x0, 0x33a, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000cc0)={0x0, 0x9c, "cb283cc0208464ff1a6c01eb156c7653e6b858fcc1c3772b090ab7c3f08dcd68656392de719f0774ae44bec704a7dcff120597ec9bf4b06d6d18584e5ad4beed9e9e5bedff14ea7b32f78ef6491ba191449173909f8683cee0915a8c7d0ae42dd0db33d4eaeca5093d1b71ddd021cf3b354d49b7e807339d59f72b3bad364487de975b54cc66d70dbe1c902ee271f91fe094e2d3e9518639aef86e62"}, &(0x7f0000000d80)=0xa4) 1.766880911s ago: executing program 4 (id=3585): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=ANY=[@ANYBLOB="020300031000000000070000000000000500090018010000ce45b8add73fd52f35e21bf163fe477120a04a0ecc43159711ad42393cb41d796061718cf0e6000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002"], 0x80}, 0x1, 0x7}, 0x0) 1.595209619s ago: executing program 0 (id=3587): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000010000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) 1.594302208s ago: executing program 1 (id=3588): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000800000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x1}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2400ff80}, 0x0) 1.562354004s ago: executing program 3 (id=3589): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01002abd7000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9eb1", 0x2}], 0x2}, 0x20008b88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd27, 0xfffffffc, {0x2c}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0xc000000, 0x489d6}, 0x0) 1.548293091s ago: executing program 4 (id=3590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(0x3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x18}, @generic={0x67, 0x3, 0x0, 0x0, 0x20}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.547183066s ago: executing program 2 (id=3591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in6=@mcast2, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x1, 0x2, 0x8, 0x8000000000000005, 0x200000003}, {0x7, 0xfffffffff7fffffd, 0x6, 0xffffffffffffbffe}, 0x2, 0x0, 0x1, 0x0, 0x6}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3, 0x3}}, 0xe8) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000001000)={{r2}, "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"}) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e24, 0xc, @loopback, 0xfffffffa}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x4840) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='\a', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r7, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x40, r5, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x4004044) socket(0x200000000000011, 0x2, 0x101) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRESHEX=r0, @ANYRES8=r4, @ANYRES16=r1], 0x38}}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x66, &(0x7f0000000f80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[@dstopts={0x87}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 1.471883975s ago: executing program 1 (id=3592): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="020500090e000000ffffffff00000000050019000000000002004e22ac1e0001000000000000000002004e24ac1414350000000000000019070019000000000002004e217f00000100000000fe880000000000000000000000000001018000"/112], 0x70}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="022476fe84ff7588b1bd997249ed4644a33c013475a06a874d28a9d95d069d83fc02f550e08b56f59164683f86c67f515ae16ca763b948f83f63", @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x130, r7, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "90373fa0ade7d36532061f5c132cd8a0cae5667dae2251"}}, @TIPC_NLA_NODE_ID={0x6e, 0x3, "ca21bc1df8e1585afe3b4eb0400cc0c8b0c31e1aef4b0d6f0dd13da975bf44073b9524a43f421cae2c249319e811fa36422c862b5f5682b6832c33408ab6a45c7cc98e4c2a2adeb96d96f1d274f0898a1cca8e737e1ea08610b596a9913b20b9165efb2bb5e2c83ed269"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x49}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r11) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80880000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x1, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xdc6}]}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x98a}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf}]}, 0xa4}, 0x1, 0x0, 0x0, 0x14}, 0x50) 1.442215284s ago: executing program 0 (id=3593): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x30, r3, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xfb}]}, 0x30}}, 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x10341, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x6, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 1.401501084s ago: executing program 3 (id=3594): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) bind$unix(r1, &(0x7f00000008c0)=@file={0x1d, './file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x7c, r2, 0xa, 0x2, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004040}, 0x48080) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x2}]}, @ptr]}}, 0x0, 0x3a}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0xfdffffffffffffff}, 0x4000880) 1.38002655s ago: executing program 4 (id=3595): r0 = socket$kcm(0x11, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r8) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3f, 0xb604}, 0x80, &(0x7f0000004380)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5", 0x1c3}, {&(0x7f00000022c0)="03b082599096ba511a888314cac2cc4b8fcf", 0x12}, {&(0x7f0000000e40)="faffde851ac45a046a46a9adc3a91865a4b629048ef203264097250db3eb46887be64c7e55ded015ec711a842f1af58dd196621d146a1ffa2c9d41de79288efbe3ab7e3431599438d7ee3550a41b83423f5ff0ab925070c84bd829030d5c774137227b272c6295a2aa9d356885ca0782a17fcde043b90bc4fc0b364d254445d70379fa137cba550e54a3bc6e69bb9b9d94537d9f195b4cb07ed2b6ca9b1e14cb334befda618a", 0xa6}], 0x4}, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)={[{0x2d, 'net_cls'}, {0x2b, 'pids'}, {0x2d, 'rdma'}, {0x2d, 'blkio'}, {0x2d, 'net_cls'}]}, 0x25) r9 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r10, 0xc0385869, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) connect$nfc_llcp(r9, &(0x7f0000000380)={0x27, r13, 0x0, 0x5, 0x6, 0x81, "3fd7e2a7f070bbb403a8aead99d424d81e0a0672daf9fd25e2271d5adb23907ff4ef2e83339bef814af30d75143c707120388bbb5563dbfaa55b488d7201d0", 0x4}, 0x60) 1.153754678s ago: executing program 3 (id=3596): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private1, @private1, 0xfffffffc, 0x16, 0xff7f, 0x400, 0x4, 0x8, r3}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.151126937s ago: executing program 1 (id=3597): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) pread64(r0, 0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000a00)={{r2, &(0x7f0000000000)='\'\x00', 0x4100, &(0x7f0000000200)={@align=0x7, {0x2, 0x5, 0x6, 0x2}}, 0x0, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000400)=0x101}, 0x4, &(0x7f0000000980)=[{0x2, 0x800, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="49bf08e5b7fbd6acb532056ec462204f9e2ed4", 0x13, 0x2}, {0x2, 0x7, &(0x7f0000000600)='\x00', &(0x7f0000000640)="2a84b8ecafec10e37dd1fcadeae5c73d61d554609b7d44242350244db987462e99c93cfe58a500daff864a7681f2b12650584937d70d71d683fcb963cd0f284ab30d7474e9838cc37fcbe44320521610ce856692cf11393c2c10b20a81b3e75f74deebcf2929358d17a5659fdc83b7d5dcb10a17a45f843ef9c4902b3b4d1711f343b5b57ab4b4fae26168198b0c532e6e61067cea255d0b70c768a5d3ae8ba759dbbf6101c81c5f1f15e8e06f2ad00c3d89fd53183bee5ea87c882ba1af9c026d8454ce", 0xc4, 0x2}, {0x1, 0x627, &(0x7f0000000780)='\x00', &(0x7f00000007c0)="3759406f38dbc447520c0825bf96b8f004d2b0ab7a9b8a1628bef6745e780c33d4790a4bf6d2b61adfb7f7f682639ed493d88f4c060b64782a3fee6af5e1c960f647f22bf08700b9e79a3b457af2db6672485c9af7c5d38337f5e8d4e5acea", 0x5f}, {0x3, 0x4150, &(0x7f0000000880)='\x00', &(0x7f00000008c0)="0d2163f3f8668c659631a92a67a7317a3d3aafb84f5bb33192775973aa6773f053dcfbbedb4a32d0ad2733affe577c1e6ad62cde2d4c2e1a277e4ea7a12c6ae93dce309a93678732e572418d8c7be3f8974d255ee9f501cc9506ed2d61ae05e7716c76586f79e9a2714cf61e27a90e86c3a020f3d69bdcd2870632b96598e73a8d153ed2e0df7b1205cdca530cfc5eb2e99bbb1f005510e12d491dbe5b0b98cb9d7688e51f710d71606d2904ab4117", 0xaf, 0xa}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ff02010005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r5}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r5, &(0x7f0000000440)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0x20000, 0x0) 987.297669ms ago: executing program 0 (id=3598): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="02", 0x1}], 0x1}, 0x48004) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001300)=@newtaction={0x8c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x10000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 246.454777ms ago: executing program 2 (id=3599): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xec, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x5}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfe00}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0xec}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01733665270a5fbc000000001007000000080001000100000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 239.873117ms ago: executing program 3 (id=3600): socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[], 0x134}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100030008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 80.09717ms ago: executing program 0 (id=3601): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90007fff10000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 79.833024ms ago: executing program 1 (id=3602): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe, 0x2}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0) 33.104269ms ago: executing program 0 (id=3603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000800000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x1}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2400fffd}, 0x0) 0s ago: executing program 0 (id=3604): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01002abd7000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9eb1", 0x2}], 0x2}, 0x20008b88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd27, 0xfffffffc, {0x2c}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0xd000000, 0x489d6}, 0x0) kernel console output (not intermixed with test programs): ail_ex+0x410/0x560 [ 313.372094][T14333] should_failslab+0xa8/0x100 [ 313.372120][T14333] __kmalloc_noprof+0xfe/0x720 [ 313.372140][T14333] ? is_bpf_text_address+0x26/0x2b0 [ 313.372165][T14333] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 313.372188][T14333] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 313.372220][T14333] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 313.372253][T14333] genl_family_rcv_msg_doit+0xda/0x340 [ 313.372284][T14333] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 313.372316][T14333] ? apparmor_capable+0x126/0x170 [ 313.372340][T14333] ? bpf_lsm_capable+0x9/0x20 [ 313.372360][T14333] ? security_capable+0x7e/0x2c0 [ 313.372393][T14333] genl_rcv_msg+0x614/0x7a0 [ 313.372424][T14333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.372446][T14333] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 313.372481][T14333] netlink_rcv_skb+0x226/0x4a0 [ 313.372500][T14333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.372527][T14333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.372563][T14333] ? down_read+0x2be/0x330 [ 313.372592][T14333] genl_rcv+0x28/0x40 [ 313.372615][T14333] netlink_unicast+0x7bd/0x940 [ 313.372655][T14333] netlink_sendmsg+0x813/0xb40 [ 313.372685][T14333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.372708][T14333] ? aa_sock_msg_perm+0xf6/0x1c0 [ 313.372743][T14333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.372761][T14333] sock_sendmsg_nosec+0x13a/0x180 [ 313.372786][T14333] ____sys_sendmsg+0x54e/0x850 [ 313.372818][T14333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.372855][T14333] ? import_iovec+0x73/0xa0 [ 313.372878][T14333] ___sys_sendmsg+0x2a5/0x360 [ 313.372905][T14333] ? __lock_acquire+0x683/0x2cf0 [ 313.372936][T14333] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.372998][T14333] ? __fget_files+0x2a/0x420 [ 313.373022][T14333] ? __fget_files+0x3a2/0x420 [ 313.373057][T14333] __x64_sys_sendmsg+0x1b1/0x290 [ 313.373093][T14333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.373142][T14333] do_syscall_64+0x166/0x520 [ 313.373164][T14333] ? trace_irq_disable+0x3b/0x140 [ 313.373188][T14333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.373207][T14333] ? clear_bhb_loop+0x70/0xc0 [ 313.373229][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.373247][T14333] RIP: 0033:0x7f458b99e0d9 [ 313.373265][T14333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.373281][T14333] RSP: 002b:00007f458c91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.373301][T14333] RAX: ffffffffffffffda RBX: 00007f458bc25fa0 RCX: 00007f458b99e0d9 [ 313.373314][T14333] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 313.373326][T14333] RBP: 00007f458c91e090 R08: 0000000000000000 R09: 0000000000000000 [ 313.373338][T14333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.373348][T14333] R13: 00007f458bc26038 R14: 00007f458bc25fa0 R15: 00007ffe10510768 [ 313.373380][T14333] [ 313.812807][T14007] veth0_vlan: entered promiscuous mode [ 313.844838][T14007] veth1_vlan: entered promiscuous mode [ 313.902351][T14007] veth0_macvtap: entered promiscuous mode [ 313.912694][T14007] veth1_macvtap: entered promiscuous mode [ 313.976121][T14007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.987601][T14007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.047614][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.109049][ T134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.124339][ T134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.170704][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.219499][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 314.231543][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.245469][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.276459][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 314.282398][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.293197][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.304349][T14356] FAULT_INJECTION: forcing a failure. [ 314.304349][T14356] name failslab, interval 1, probability 0, space 0, times 0 [ 314.316988][T14356] CPU: 0 UID: 0 PID: 14356 Comm: syz.0.2928 Not tainted syzkaller #0 PREEMPT(full) [ 314.317013][T14356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.317023][T14356] Call Trace: [ 314.317029][T14356] [ 314.317036][T14356] dump_stack_lvl+0xe8/0x150 [ 314.317066][T14356] should_fail_ex+0x410/0x560 [ 314.317095][T14356] should_failslab+0xa8/0x100 [ 314.317121][T14356] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 314.317141][T14356] ? local_lock_release+0x9c/0x160 [ 314.317164][T14356] ? __alloc_skb+0x1db/0x7a0 [ 314.317186][T14356] ? __alloc_skb+0x1db/0x7a0 [ 314.317212][T14356] __alloc_skb+0x1db/0x7a0 [ 314.317238][T14356] netlink_sendmsg+0x5d4/0xb40 [ 314.317267][T14356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.317291][T14356] ? aa_sock_msg_perm+0xf6/0x1c0 [ 314.317326][T14356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.317345][T14356] sock_sendmsg_nosec+0x13a/0x180 [ 314.317370][T14356] ____sys_sendmsg+0x54e/0x850 [ 314.317404][T14356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.317440][T14356] ? import_iovec+0x73/0xa0 [ 314.317463][T14356] ___sys_sendmsg+0x2a5/0x360 [ 314.317490][T14356] ? __lock_acquire+0x683/0x2cf0 [ 314.317520][T14356] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.317591][T14356] ? __fget_files+0x2a/0x420 [ 314.317616][T14356] ? __fget_files+0x3a2/0x420 [ 314.317651][T14356] __x64_sys_sendmsg+0x1b1/0x290 [ 314.317682][T14356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.317731][T14356] do_syscall_64+0x166/0x520 [ 314.317754][T14356] ? trace_irq_disable+0x3b/0x140 [ 314.317778][T14356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.317797][T14356] ? clear_bhb_loop+0x70/0xc0 [ 314.317820][T14356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.317839][T14356] RIP: 0033:0x7f5fe819e0d9 [ 314.317858][T14356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.317873][T14356] RSP: 002b:00007f5fe90d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.317892][T14356] RAX: ffffffffffffffda RBX: 00007f5fe8425fa0 RCX: 00007f5fe819e0d9 [ 314.317903][T14356] RDX: 0000000000028000 RSI: 0000200000000540 RDI: 0000000000000004 [ 314.317914][T14356] RBP: 00007f5fe90d5090 R08: 0000000000000000 R09: 0000000000000000 [ 314.317924][T14356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.317934][T14356] R13: 00007f5fe8426038 R14: 00007f5fe8425fa0 R15: 00007ffd6f5af838 [ 314.317959][T14356] [ 314.679244][T14368] FAULT_INJECTION: forcing a failure. [ 314.679244][T14368] name failslab, interval 1, probability 0, space 0, times 0 [ 314.691897][T14368] CPU: 0 UID: 0 PID: 14368 Comm: syz.0.2932 Not tainted syzkaller #0 PREEMPT(full) [ 314.691924][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.691936][T14368] Call Trace: [ 314.691944][T14368] [ 314.691961][T14368] dump_stack_lvl+0xe8/0x150 [ 314.691994][T14368] should_fail_ex+0x410/0x560 [ 314.692027][T14368] should_failslab+0xa8/0x100 [ 314.692055][T14368] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 314.692078][T14368] ? ovs_flow_alloc+0x24/0x1f0 [ 314.692104][T14368] ? ovs_flow_alloc+0x24/0x1f0 [ 314.692137][T14368] ovs_flow_alloc+0x24/0x1f0 [ 314.692168][T14368] ovs_packet_cmd_execute+0x5b6/0xf10 [ 314.692199][T14368] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 314.692222][T14368] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 314.692248][T14368] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 314.692282][T14368] genl_family_rcv_msg_doit+0x233/0x340 [ 314.692315][T14368] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 314.692352][T14368] ? bpf_lsm_capable+0x9/0x20 [ 314.692373][T14368] ? security_capable+0x7e/0x2c0 [ 314.692406][T14368] genl_rcv_msg+0x614/0x7a0 [ 314.692438][T14368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.692462][T14368] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 314.692496][T14368] netlink_rcv_skb+0x226/0x4a0 [ 314.692517][T14368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.692544][T14368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.692581][T14368] ? down_read+0x2be/0x330 [ 314.692611][T14368] genl_rcv+0x28/0x40 [ 314.692633][T14368] netlink_unicast+0x7bd/0x940 [ 314.692674][T14368] netlink_sendmsg+0x813/0xb40 [ 314.692704][T14368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.692729][T14368] ? aa_sock_msg_perm+0xf6/0x1c0 [ 314.692765][T14368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.692784][T14368] sock_sendmsg_nosec+0x13a/0x180 [ 314.692810][T14368] ____sys_sendmsg+0x54e/0x850 [ 314.692844][T14368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.692882][T14368] ? import_iovec+0x73/0xa0 [ 314.692912][T14368] ___sys_sendmsg+0x2a5/0x360 [ 314.692939][T14368] ? __lock_acquire+0x683/0x2cf0 [ 314.692971][T14368] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.693035][T14368] ? __fget_files+0x2a/0x420 [ 314.693060][T14368] ? __fget_files+0x3a2/0x420 [ 314.693096][T14368] __x64_sys_sendmsg+0x1b1/0x290 [ 314.693128][T14368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.693180][T14368] do_syscall_64+0x166/0x520 [ 314.693202][T14368] ? trace_irq_disable+0x3b/0x140 [ 314.693226][T14368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.693246][T14368] ? clear_bhb_loop+0x70/0xc0 [ 314.693270][T14368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.693289][T14368] RIP: 0033:0x7f5fe819e0d9 [ 314.693308][T14368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.693323][T14368] RSP: 002b:00007f5fe90d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.693342][T14368] RAX: ffffffffffffffda RBX: 00007f5fe8425fa0 RCX: 00007f5fe819e0d9 [ 314.693355][T14368] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 314.693367][T14368] RBP: 00007f5fe90d5090 R08: 0000000000000000 R09: 0000000000000000 [ 314.693379][T14368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.693389][T14368] R13: 00007f5fe8426038 R14: 00007f5fe8425fa0 R15: 00007ffd6f5af838 [ 314.693422][T14368] [ 314.711235][T14370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2933'. [ 314.768646][T14372] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2934'. [ 314.883221][T14373] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2934'. [ 315.176047][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 315.234507][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 315.359105][T14388] tipc: Started in network mode [ 315.364025][T14388] tipc: Node identity 26574333fd5a, cluster identity 4711 [ 315.371305][T14388] tipc: Enabled bearer , priority 0 [ 315.495055][T14388] syzkaller0: entered promiscuous mode [ 315.500585][T14388] syzkaller0: entered allmulticast mode [ 315.540952][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.552750][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.560868][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.568735][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.578553][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.601279][T14388] tipc: Resetting bearer [ 315.666571][T14387] tipc: Resetting bearer [ 317.111844][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.686150][ T5619] Bluetooth: hci4: command tx timeout [ 318.026811][T14387] tipc: Disabling bearer [ 318.075354][ T24] tipc: Node number set to 3675079475 [ 318.237381][T14423] Cannot find set identified by id 0 to match [ 318.354183][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 318.376156][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 318.428289][T12958] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.437767][T14435] FAULT_INJECTION: forcing a failure. [ 318.437767][T14435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.490791][T14440] FAULT_INJECTION: forcing a failure. [ 318.490791][T14440] name failslab, interval 1, probability 0, space 0, times 0 [ 318.525914][T14435] CPU: 1 UID: 0 PID: 14435 Comm: syz.2.2953 Not tainted syzkaller #0 PREEMPT(full) [ 318.525942][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.525953][T14435] Call Trace: [ 318.525963][T14435] [ 318.525972][T14435] dump_stack_lvl+0xe8/0x150 [ 318.526002][T14435] should_fail_ex+0x410/0x560 [ 318.526035][T14435] _copy_to_user+0x31/0xb0 [ 318.526058][T14435] simple_read_from_buffer+0xe1/0x170 [ 318.526088][T14435] proc_fail_nth_read+0x1bb/0x230 [ 318.526121][T14435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.526153][T14435] ? rw_verify_area+0x24a/0x4c0 [ 318.526179][T14435] ? tun_chr_write_iter+0x18a/0x200 [ 318.526203][T14435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.526231][T14435] vfs_read+0x213/0xa80 [ 318.526263][T14435] ? __pfx___mutex_lock+0x10/0x10 [ 318.526289][T14435] ? __pfx_vfs_read+0x10/0x10 [ 318.526318][T14435] ? __fget_files+0x2a/0x420 [ 318.526348][T14435] ? __fget_files+0x3a2/0x420 [ 318.526372][T14435] ? __fget_files+0x2a/0x420 [ 318.526406][T14435] ksys_read+0x150/0x270 [ 318.526434][T14435] ? __pfx_ksys_read+0x10/0x10 [ 318.526475][T14435] do_syscall_64+0x166/0x520 [ 318.526497][T14435] ? trace_irq_disable+0x3b/0x140 [ 318.526529][T14435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.526548][T14435] ? clear_bhb_loop+0x70/0xc0 [ 318.526572][T14435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.526592][T14435] RIP: 0033:0x7f2c1675e90e [ 318.526609][T14435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.526626][T14435] RSP: 002b:00007f2c176effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.526647][T14435] RAX: ffffffffffffffda RBX: 00007f2c176f06c0 RCX: 00007f2c1675e90e [ 318.526661][T14435] RDX: 000000000000000f RSI: 00007f2c176f00a0 RDI: 0000000000000005 [ 318.526673][T14435] RBP: 00007f2c176f0090 R08: 0000000000000000 R09: 0000000000000000 [ 318.526685][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.526697][T14435] R13: 00007f2c16a26038 R14: 00007f2c16a25fa0 R15: 00007ffc7280b2a8 [ 318.526730][T14435] [ 318.552074][T14440] CPU: 0 UID: 0 PID: 14440 Comm: syz.1.2955 Not tainted syzkaller #0 PREEMPT(full) [ 318.552098][T14440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.552109][T14440] Call Trace: [ 318.552116][T14440] [ 318.552124][T14440] dump_stack_lvl+0xe8/0x150 [ 318.552153][T14440] should_fail_ex+0x410/0x560 [ 318.552187][T14440] should_failslab+0xa8/0x100 [ 318.552213][T14440] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 318.552235][T14440] ? skb_clone+0x212/0x3a0 [ 318.552251][T14440] ? skb_clone+0x212/0x3a0 [ 318.552275][T14440] skb_clone+0x212/0x3a0 [ 318.552295][T14440] __netlink_deliver_tap+0x413/0x860 [ 318.552327][T14440] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.552348][T14440] netlink_deliver_tap+0x19c/0x1b0 [ 318.552369][T14440] netlink_unicast+0x781/0x940 [ 318.552406][T14440] netlink_sendmsg+0x813/0xb40 [ 318.552435][T14440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.552459][T14440] ? aa_sock_msg_perm+0xf6/0x1c0 [ 318.552494][T14440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.552510][T14440] sock_sendmsg_nosec+0x13a/0x180 [ 318.552536][T14440] ____sys_sendmsg+0x54e/0x850 [ 318.552568][T14440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.552605][T14440] ? import_iovec+0x73/0xa0 [ 318.552627][T14440] ___sys_sendmsg+0x2a5/0x360 [ 318.552654][T14440] ? __lock_acquire+0x683/0x2cf0 [ 318.552683][T14440] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.552745][T14440] ? __fget_files+0x2a/0x420 [ 318.552768][T14440] ? __fget_files+0x3a2/0x420 [ 318.552802][T14440] __x64_sys_sendmsg+0x1b1/0x290 [ 318.552832][T14440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.552881][T14440] do_syscall_64+0x166/0x520 [ 318.552903][T14440] ? trace_irq_disable+0x3b/0x140 [ 318.552927][T14440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.552946][T14440] ? clear_bhb_loop+0x70/0xc0 [ 318.552969][T14440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.552988][T14440] RIP: 0033:0x7f458b99e0d9 [ 318.553010][T14440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.553027][T14440] RSP: 002b:00007f458c91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.553046][T14440] RAX: ffffffffffffffda RBX: 00007f458bc25fa0 RCX: 00007f458b99e0d9 [ 318.553060][T14440] RDX: 0000000000028000 RSI: 0000200000000540 RDI: 0000000000000004 [ 318.553073][T14440] RBP: 00007f458c91e090 R08: 0000000000000000 R09: 0000000000000000 [ 318.553084][T14440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.553096][T14440] R13: 00007f458bc26038 R14: 00007f458bc25fa0 R15: 00007ffe10510768 [ 318.553126][T14440] [ 319.224289][T12958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.354303][T12958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.563053][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 319.573596][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 319.821449][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.829072][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.836762][T14393] bridge_slave_0: entered allmulticast mode [ 319.844947][T14393] bridge_slave_0: entered promiscuous mode [ 319.849292][ T5619] Bluetooth: hci4: command tx timeout [ 319.854173][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.864158][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.871562][T14393] bridge_slave_1: entered allmulticast mode [ 319.872912][T14483] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2970'. [ 319.880763][T14393] bridge_slave_1: entered promiscuous mode [ 319.938905][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.994666][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.106943][T12958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.156678][T14393] team0: Port device team_slave_0 added [ 320.165359][T14393] team0: Port device team_slave_1 added [ 320.227455][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.235867][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.261781][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.301351][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.308343][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.315765][T14506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2978'. [ 320.334251][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.363319][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2979'. [ 320.379197][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2979'. [ 320.481751][T14503] syzkaller0: entered promiscuous mode [ 320.487279][T14503] syzkaller0: entered allmulticast mode [ 320.501243][T14393] hsr_slave_0: entered promiscuous mode [ 320.554110][T14393] hsr_slave_1: entered promiscuous mode [ 320.560923][T14393] debugfs: 'hsr0' already exists in 'hsr' [ 320.566685][T14393] Cannot create hsr debugfs directory [ 320.793319][T14523] netlink: 'syz.2.2984': attribute type 1 has an invalid length. [ 320.821733][T14523] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2984'. [ 320.841117][T14523] netlink: 'syz.2.2984': attribute type 1 has an invalid length. [ 320.867740][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2984'. [ 320.983129][T14532] FAULT_INJECTION: forcing a failure. [ 320.983129][T14532] name failslab, interval 1, probability 0, space 0, times 0 [ 320.995809][T14532] CPU: 0 UID: 0 PID: 14532 Comm: syz.0.2988 Not tainted syzkaller #0 PREEMPT(full) [ 320.995835][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.995847][T14532] Call Trace: [ 320.995855][T14532] [ 320.995863][T14532] dump_stack_lvl+0xe8/0x150 [ 320.995895][T14532] should_fail_ex+0x410/0x560 [ 320.995936][T14532] should_failslab+0xa8/0x100 [ 320.995965][T14532] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 320.995988][T14532] ? skb_clone+0x212/0x3a0 [ 320.996005][T14532] ? skb_clone+0x212/0x3a0 [ 320.996028][T14532] skb_clone+0x212/0x3a0 [ 320.996051][T14532] __netlink_deliver_tap+0x413/0x860 [ 320.996084][T14532] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.996106][T14532] netlink_deliver_tap+0x19c/0x1b0 [ 320.996128][T14532] netlink_sendskb+0x68/0x140 [ 320.996159][T14532] netlink_rcv_skb+0x2a4/0x4a0 [ 320.996180][T14532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.996206][T14532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.996239][T14532] ? down_read+0x2be/0x330 [ 320.996268][T14532] genl_rcv+0x28/0x40 [ 320.996289][T14532] netlink_unicast+0x7bd/0x940 [ 320.996329][T14532] netlink_sendmsg+0x813/0xb40 [ 320.996358][T14532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.996381][T14532] ? aa_sock_msg_perm+0xf6/0x1c0 [ 320.996415][T14532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.996432][T14532] sock_sendmsg_nosec+0x13a/0x180 [ 320.996457][T14532] ____sys_sendmsg+0x54e/0x850 [ 320.996490][T14532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.996529][T14532] ? import_iovec+0x73/0xa0 [ 320.996553][T14532] ___sys_sendmsg+0x2a5/0x360 [ 320.996579][T14532] ? __lock_acquire+0x683/0x2cf0 [ 320.996608][T14532] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.996671][T14532] ? __fget_files+0x2a/0x420 [ 320.996695][T14532] ? __fget_files+0x3a2/0x420 [ 320.996730][T14532] __x64_sys_sendmsg+0x1b1/0x290 [ 320.996762][T14532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.996812][T14532] do_syscall_64+0x166/0x520 [ 320.996834][T14532] ? trace_irq_disable+0x3b/0x140 [ 320.996858][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.996877][T14532] ? clear_bhb_loop+0x70/0xc0 [ 320.996901][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.996919][T14532] RIP: 0033:0x7f5fe819e0d9 [ 320.996945][T14532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.996962][T14532] RSP: 002b:00007f5fe90d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.996982][T14532] RAX: ffffffffffffffda RBX: 00007f5fe8425fa0 RCX: 00007f5fe819e0d9 [ 320.996995][T14532] RDX: 0000000000028000 RSI: 0000200000000540 RDI: 0000000000000004 [ 320.997006][T14532] RBP: 00007f5fe90d5090 R08: 0000000000000000 R09: 0000000000000000 [ 320.997017][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.997026][T14532] R13: 00007f5fe8426038 R14: 00007f5fe8425fa0 R15: 00007ffd6f5af838 [ 320.997055][T14532] [ 321.475392][T12958] vlan3: left allmulticast mode [ 321.497398][T12958] geneve0: left allmulticast mode [ 321.504025][T12958] bridge0: port 1(vlan3) entered disabled state [ 321.581551][T12958] pim6reg527: left allmulticast mode [ 321.587501][T12958] dvmrp8: left allmulticast mode [ 321.946065][ T5619] Bluetooth: hci4: command tx timeout [ 322.519574][T12958] bond0 (unregistering): Released all slaves [ 322.532082][T12958] bond1 (unregistering): (slave veth3): Releasing active interface [ 322.545208][T12958] bond1 (unregistering): Released all slaves [ 322.559521][T12958] bond2 (unregistering): Released all slaves [ 322.593572][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 322.691256][T14575] xt_TCPMSS: Only works on TCP SYN packets [ 323.040276][T12958] tipc: Disabling bearer [ 323.085380][T12958] tipc: Disabling bearer [ 323.093511][T12958] tipc: Left network mode [ 323.528486][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 323.588574][T14612] __nla_validate_parse: 68 callbacks suppressed [ 323.588591][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3006'. [ 323.772516][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 324.063628][T14631] syzkaller0: entered promiscuous mode [ 324.069783][ T5619] Bluetooth: hci4: command tx timeout [ 324.096081][T14631] syzkaller0: entered allmulticast mode [ 324.230070][T14644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3012'. [ 326.080933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.376645][T14650] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 326.700478][T14662] lo: entered promiscuous mode [ 326.717375][T14662] tunl0: entered promiscuous mode [ 326.741389][T14662] gre0: entered promiscuous mode [ 326.962184][T14662] ip_vti0: entered promiscuous mode [ 327.239704][T12958] hsr_slave_0: left promiscuous mode [ 327.253672][T12958] hsr_slave_1: left promiscuous mode [ 327.265443][T12958] veth1_macvtap: left promiscuous mode [ 327.271177][T12958] veth0_macvtap: left promiscuous mode [ 327.277212][T12958] veth1_vlan: left promiscuous mode [ 327.282522][T12958] veth0_vlan: left promiscuous mode [ 327.420572][T14694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3022'. [ 328.388205][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3028'. [ 328.414763][T14393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.460136][T14393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.509821][T14393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.570234][T14393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.605317][T14393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.657914][T14393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.674501][T14393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 328.696338][T14393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.727326][T12958] IPVS: stop unused estimator thread 0... [ 328.738759][T14720] syzkaller0: entered promiscuous mode [ 328.748483][T14722] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3031'. [ 328.761347][T14720] syzkaller0: entered allmulticast mode [ 328.995317][T14739] FAULT_INJECTION: forcing a failure. [ 328.995317][T14739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.053715][T14739] CPU: 1 UID: 0 PID: 14739 Comm: syz.2.3033 Not tainted syzkaller #0 PREEMPT(full) [ 329.053743][T14739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.053755][T14739] Call Trace: [ 329.053762][T14739] [ 329.053770][T14739] dump_stack_lvl+0xe8/0x150 [ 329.053805][T14739] should_fail_ex+0x410/0x560 [ 329.053838][T14739] _copy_from_iter+0x1d3/0x1660 [ 329.053866][T14739] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 329.053889][T14739] ? rcu_is_watching+0x16/0xb0 [ 329.053909][T14739] ? trace_kmem_cache_alloc+0x29/0xe0 [ 329.053933][T14739] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 329.053955][T14739] ? __pfx__copy_from_iter+0x10/0x10 [ 329.053982][T14739] ? __alloc_skb+0x27a/0x7a0 [ 329.054015][T14739] ? __alloc_skb+0x27a/0x7a0 [ 329.054046][T14739] ? netlink_sendmsg+0x650/0xb40 [ 329.054066][T14739] ? skb_put+0x112/0x210 [ 329.054095][T14739] netlink_sendmsg+0x6c0/0xb40 [ 329.054125][T14739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.054150][T14739] ? aa_sock_msg_perm+0xf6/0x1c0 [ 329.054186][T14739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.054206][T14739] sock_sendmsg_nosec+0x13a/0x180 [ 329.054232][T14739] ____sys_sendmsg+0x54e/0x850 [ 329.054266][T14739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.054304][T14739] ? import_iovec+0x73/0xa0 [ 329.054328][T14739] ___sys_sendmsg+0x2a5/0x360 [ 329.054355][T14739] ? __lock_acquire+0x683/0x2cf0 [ 329.054387][T14739] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.054452][T14739] ? __fget_files+0x2a/0x420 [ 329.054477][T14739] ? __fget_files+0x3a2/0x420 [ 329.054512][T14739] __x64_sys_sendmsg+0x1b1/0x290 [ 329.054542][T14739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.054591][T14739] do_syscall_64+0x166/0x520 [ 329.054614][T14739] ? trace_irq_disable+0x3b/0x140 [ 329.054638][T14739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.054658][T14739] ? clear_bhb_loop+0x70/0xc0 [ 329.054681][T14739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.054700][T14739] RIP: 0033:0x7f2c1679e0d9 [ 329.054719][T14739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.054737][T14739] RSP: 002b:00007f2c176f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.054758][T14739] RAX: ffffffffffffffda RBX: 00007f2c16a25fa0 RCX: 00007f2c1679e0d9 [ 329.054773][T14739] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 329.054785][T14739] RBP: 00007f2c176f0090 R08: 0000000000000000 R09: 0000000000000000 [ 329.054796][T14739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.054808][T14739] R13: 00007f2c16a26038 R14: 00007f2c16a25fa0 R15: 00007ffc7280b2a8 [ 329.054840][T14739] [ 329.352517][T14393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.372331][T14393] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.386427][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.393574][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.414213][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.421354][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.470435][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'. [ 329.521899][T14393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.545779][T14393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.684056][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'. [ 329.841600][T14764] syzkaller1: entered promiscuous mode [ 329.847114][T14764] syzkaller1: entered allmulticast mode [ 329.983135][T14773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3042'. [ 330.005464][T14773] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 330.470001][T14796] bridge0: port 3(vlan2) entered blocking state [ 330.521411][T14796] bridge0: port 3(vlan2) entered disabled state [ 330.527867][T14796] vlan2: entered allmulticast mode [ 330.541061][T14796] geneve0: entered allmulticast mode [ 330.552559][T14796] vlan2: entered promiscuous mode [ 330.557628][T14796] geneve0: entered promiscuous mode [ 330.580155][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3049'. [ 330.591210][T14806] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 330.616027][T14393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.807048][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'. [ 330.872496][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'. [ 331.053058][T14827] syzkaller1: entered promiscuous mode [ 331.058578][T14827] syzkaller1: entered allmulticast mode [ 331.080428][T14393] veth0_vlan: entered promiscuous mode [ 331.127893][T14393] veth1_vlan: entered promiscuous mode [ 331.160603][T14393] veth0_macvtap: entered promiscuous mode [ 331.175503][T14393] veth1_macvtap: entered promiscuous mode [ 331.246537][T14806] syz.1.3049 (14806) used greatest stack depth: 16288 bytes left [ 331.263762][T14393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.306169][T14393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.311835][T14834] netlink: 'syz.1.3060': attribute type 2 has an invalid length. [ 331.336023][T14834] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3060'. [ 331.441936][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3061'. [ 331.492630][ T134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.528129][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.557414][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.590574][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.599670][T12960] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.622386][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.699816][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.769332][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.809707][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'. [ 331.888373][T14851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 332.050335][T14858] netlink: 'syz.4.2939': attribute type 10 has an invalid length. [ 332.085514][T14858] syz_tun: entered promiscuous mode [ 332.295501][T14870] syzkaller1: entered promiscuous mode [ 332.301018][T14870] syzkaller1: entered allmulticast mode [ 332.572465][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.582785][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.591189][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.687621][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.695433][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.755342][ T5614] bond0: (slave syz_tun): Releasing backup interface [ 333.018629][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.029127][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.451005][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.461294][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.634078][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.647601][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.651022][T14920] netlink: 'syz.1.3083': attribute type 2 has an invalid length. [ 333.761392][T14874] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.768600][T14874] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.775737][T14874] bridge_slave_0: entered allmulticast mode [ 333.783239][T14874] bridge_slave_0: entered promiscuous mode [ 333.793290][T14874] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.800482][T14874] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.807633][T14874] bridge_slave_1: entered allmulticast mode [ 333.838041][T14874] bridge_slave_1: entered promiscuous mode [ 333.883329][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 333.893189][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.903459][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.922214][T14874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.951688][T14874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.989421][T14874] team0: Port device team_slave_0 added [ 333.997851][T14874] team0: Port device team_slave_1 added [ 334.030827][T14874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.037807][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.077526][T14874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.091361][T14874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.098449][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.124521][T14874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.165311][T14874] hsr_slave_0: entered promiscuous mode [ 334.171480][T14874] hsr_slave_1: entered promiscuous mode [ 334.189037][T14874] debugfs: 'hsr0' already exists in 'hsr' [ 334.194850][T14874] Cannot create hsr debugfs directory [ 334.425839][T14933] openvswitch: netlink: EtherType 2 is less than min 600 [ 334.555903][ T46] batadv1: left allmulticast mode [ 334.561166][ T46] batadv1: left promiscuous mode [ 334.567755][ T46] bridge0: port 1(batadv1) entered disabled state [ 334.649510][ T46] dvmrp8: left allmulticast mode [ 334.654694][ T46] pimreg3: left allmulticast mode [ 334.807487][ T5616] Bluetooth: hci2: command tx timeout [ 334.888930][ T46] erspan0 (unregistering): left promiscuous mode [ 334.908299][ T46] gretap0 (unregistering): left promiscuous mode [ 335.092731][ T46] bond0 (unregistering): Released all slaves [ 335.102691][ T46] bond1 (unregistering): Released all slaves [ 335.116627][ T46] bond2 (unregistering): Released all slaves [ 335.129855][ T46] bond3 (unregistering): Released all slaves [ 335.190605][T14937] syzkaller1: entered promiscuous mode [ 335.196088][T14937] syzkaller1: entered allmulticast mode [ 335.420781][ T46] tipc: Disabling bearer [ 335.432016][ T46] tipc: Left network mode [ 335.917381][T14890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.064598][ T46] hsr_slave_0: left promiscuous mode [ 336.106320][ T46] hsr_slave_1: left promiscuous mode [ 336.126781][ T46] veth1_vlan: left allmulticast mode [ 336.132404][ T46] veth0_macvtap: left promiscuous mode [ 336.139475][ T46] veth1_vlan: left promiscuous mode [ 336.144760][ T46] veth0_vlan: left promiscuous mode [ 336.869091][ T5616] Bluetooth: hci2: command tx timeout [ 336.917872][T14874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.028629][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.036501][T14874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.045063][T14969] netlink: 'syz.1.3093': attribute type 2 has an invalid length. [ 337.086567][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.120415][T14874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.168640][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.212864][T14874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.253333][T14874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.350288][T14969] __nla_validate_parse: 2 callbacks suppressed [ 337.350307][T14969] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3093'. [ 337.499376][T14998] netlink: 'syz.4.3098': attribute type 21 has an invalid length. [ 337.543112][T14998] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3098'. [ 337.652830][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 337.691899][T14874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.799427][T15008] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.904652][T14874] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.957867][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.965028][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.974045][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.993050][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.240881][T15022] FAULT_INJECTION: forcing a failure. [ 338.240881][T15022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.254567][T15022] CPU: 0 UID: 0 PID: 15022 Comm: syz.4.3107 Not tainted syzkaller #0 PREEMPT(full) [ 338.254598][T15022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.254610][T15022] Call Trace: [ 338.254617][T15022] [ 338.254626][T15022] dump_stack_lvl+0xe8/0x150 [ 338.254656][T15022] should_fail_ex+0x410/0x560 [ 338.254690][T15022] prepare_alloc_pages+0x230/0x650 [ 338.254721][T15022] __alloc_frozen_pages_noprof+0x12f/0x380 [ 338.254751][T15022] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 338.254780][T15022] ? __pfx_policy_nodemask+0x10/0x10 [ 338.254804][T15022] ? __folio_batch_add_and_move+0x11a/0xc50 [ 338.254824][T15022] ? lock_acquire+0x106/0x350 [ 338.254858][T15022] alloc_pages_mpol+0x212/0x390 [ 338.254890][T15022] folio_alloc_mpol_noprof+0x39/0x160 [ 338.254919][T15022] vma_alloc_folio_noprof+0xe1/0x1e0 [ 338.254949][T15022] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 338.254987][T15022] do_wp_page+0x1163/0x4c70 [ 338.255023][T15022] ? __pfx_do_wp_page+0x10/0x10 [ 338.255039][T15022] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.255065][T15022] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.255098][T15022] handle_mm_fault+0x1490/0x3080 [ 338.255131][T15022] ? handle_mm_fault+0xec/0x3080 [ 338.255158][T15022] ? __pfx_handle_mm_fault+0x10/0x10 [ 338.255189][T15022] ? __pfx___up_read+0x10/0x10 [ 338.255214][T15022] ? lock_mm_and_find_vma+0xa7/0x340 [ 338.255239][T15022] do_user_addr_fault+0x746/0x1340 [ 338.255282][T15022] exc_page_fault+0x6a/0xc0 [ 338.255304][T15022] asm_exc_page_fault+0x26/0x30 [ 338.255319][T15022] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 338.255343][T15022] Code: 65 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 338.255358][T15022] RSP: 0018:ffffc900050f7698 EFLAGS: 00050206 [ 338.255372][T15022] RAX: ffffffff84d35f01 RBX: ffff888056e000e8 RCX: 00000000000067a0 [ 338.255383][T15022] RDX: 0000000000000000 RSI: ffff888056e09b18 RDI: 000020000001a000 [ 338.255393][T15022] RBP: ffffc900050f7818 R08: ffff888056e102b7 R09: 1ffff1100adc2056 [ 338.255404][T15022] R10: dffffc0000000000 R11: ffffed100adc2057 R12: dffffc0000000000 [ 338.255416][T15022] R13: 00000000000101d0 R14: ffffc900050f7e10 R15: 00000000000101d0 [ 338.255433][T15022] ? _copy_to_iter+0x421/0x1810 [ 338.255459][T15022] _copy_to_iter+0x49d/0x1810 [ 338.255493][T15022] ? __pfx__copy_to_iter+0x10/0x10 [ 338.255512][T15022] ? kmem_cache_alloc_node_noprof+0x1f7/0x620 [ 338.255530][T15022] ? __alloc_skb+0x27a/0x7a0 [ 338.255550][T15022] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 338.255600][T15022] __skb_datagram_iter+0xf8/0x980 [ 338.255616][T15022] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 338.255633][T15022] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 338.255656][T15022] skb_copy_datagram_iter+0xb5/0x240 [ 338.255674][T15022] tipc_recvstream+0x732/0xe90 [ 338.255706][T15022] ? __pfx_tipc_recvstream+0x10/0x10 [ 338.255723][T15022] sock_recvmsg+0x196/0x1e0 [ 338.255743][T15022] ____sys_recvmsg+0x1e6/0x4a0 [ 338.255776][T15022] ? __pfx_____sys_recvmsg+0x10/0x10 [ 338.255819][T15022] ? import_iovec+0x73/0xa0 [ 338.255843][T15022] ___sys_recvmsg+0x213/0x5a0 [ 338.255877][T15022] ? __pfx____sys_recvmsg+0x10/0x10 [ 338.255911][T15022] ? __fget_files+0x2a/0x420 [ 338.255956][T15022] ? __fget_files+0x3a2/0x420 [ 338.255990][T15022] __x64_sys_recvmsg+0x1ae/0x290 [ 338.256020][T15022] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 338.256068][T15022] do_syscall_64+0x166/0x520 [ 338.256090][T15022] ? trace_irq_disable+0x3b/0x140 [ 338.256111][T15022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.256127][T15022] ? clear_bhb_loop+0x70/0xc0 [ 338.256149][T15022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.256166][T15022] RIP: 0033:0x7f056b99e0d9 [ 338.256182][T15022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.256197][T15022] RSP: 002b:00007f056c856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 338.256216][T15022] RAX: ffffffffffffffda RBX: 00007f056bc25fa0 RCX: 00007f056b99e0d9 [ 338.256230][T15022] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000004 [ 338.256242][T15022] RBP: 00007f056c856090 R08: 0000000000000000 R09: 0000000000000000 [ 338.256254][T15022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.256265][T15022] R13: 00007f056bc26038 R14: 00007f056bc25fa0 R15: 00007ffdacec2118 [ 338.256295][T15022] [ 338.440754][T15034] syzkaller0: entered promiscuous mode [ 338.762215][T15034] syzkaller0: entered allmulticast mode [ 339.037871][ T5616] Bluetooth: hci2: command tx timeout [ 339.113603][T15052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3113'. [ 339.349488][T15057] syzkaller0: entered promiscuous mode [ 339.355183][T15057] syzkaller0: entered allmulticast mode [ 339.366344][T15059] syzkaller0: entered promiscuous mode [ 339.378663][T15059] syzkaller0: entered allmulticast mode [ 339.393685][T15057] tipc: Enabled bearer , priority 0 [ 339.401910][T15059] FAULT_INJECTION: forcing a failure. [ 339.401910][T15059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.415254][T15056] tipc: Resetting bearer [ 339.421375][T15059] CPU: 0 UID: 0 PID: 15059 Comm: syz.1.3115 Not tainted syzkaller #0 PREEMPT(full) [ 339.421398][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.421410][T15059] Call Trace: [ 339.421417][T15059] [ 339.421425][T15059] dump_stack_lvl+0xe8/0x150 [ 339.421456][T15059] should_fail_ex+0x410/0x560 [ 339.421489][T15059] _copy_from_iter+0x3b0/0x1660 [ 339.421528][T15059] ? __pfx__copy_from_iter+0x10/0x10 [ 339.421561][T15059] ? dev_get_by_index+0x22/0x2d0 [ 339.421583][T15059] ? dev_get_by_index+0x22/0x2d0 [ 339.421609][T15059] packet_sendmsg+0x2eb0/0x4f80 [ 339.421631][T15059] ? up_write+0x19d/0x4a0 [ 339.421655][T15059] ? aa_label_sk_perm+0x532/0x6e0 [ 339.421683][T15059] ? __lock_acquire+0x683/0x2cf0 [ 339.421716][T15059] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 339.421748][T15059] ? __pfx_process_measurement+0x10/0x10 [ 339.421780][T15059] ? unwind_next_frame+0x8f/0x2550 [ 339.421814][T15059] ? __pfx_packet_sendmsg+0x10/0x10 [ 339.421849][T15059] ? __pfx_aa_sk_perm+0x10/0x10 [ 339.421876][T15059] ? aa_sock_msg_perm+0xf6/0x1c0 [ 339.421908][T15059] ? __pfx_packet_sendmsg+0x10/0x10 [ 339.421924][T15059] sock_sendmsg_nosec+0x13a/0x180 [ 339.421957][T15059] ____sys_sendmsg+0x54e/0x850 [ 339.421989][T15059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.422023][T15059] ? import_iovec+0x73/0xa0 [ 339.422046][T15059] ___sys_sendmsg+0x2a5/0x360 [ 339.422071][T15059] ? __lock_acquire+0x683/0x2cf0 [ 339.422101][T15059] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.422162][T15059] ? __fget_files+0x2a/0x420 [ 339.422186][T15059] ? __fget_files+0x3a2/0x420 [ 339.422220][T15059] __x64_sys_sendmsg+0x1b1/0x290 [ 339.422250][T15059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.422296][T15059] do_syscall_64+0x166/0x520 [ 339.422319][T15059] ? trace_irq_disable+0x3b/0x140 [ 339.422343][T15059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.422361][T15059] ? clear_bhb_loop+0x70/0xc0 [ 339.422383][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.422400][T15059] RIP: 0033:0x7f458b99e0d9 [ 339.422418][T15059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.422434][T15059] RSP: 002b:00007f458c91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.422453][T15059] RAX: ffffffffffffffda RBX: 00007f458bc25fa0 RCX: 00007f458b99e0d9 [ 339.422465][T15059] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 339.422477][T15059] RBP: 00007f458c91e090 R08: 0000000000000000 R09: 0000000000000000 [ 339.422489][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.422500][T15059] R13: 00007f458bc26038 R14: 00007f458bc25fa0 R15: 00007ffe10510768 [ 339.422531][T15059] [ 339.756600][T15056] tipc: Disabling bearer [ 339.769526][T14874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.885945][T14874] veth0_vlan: entered promiscuous mode [ 339.898641][T14874] veth1_vlan: entered promiscuous mode [ 339.943873][T14874] veth0_macvtap: entered promiscuous mode [ 339.968354][T14874] veth1_macvtap: entered promiscuous mode [ 339.988502][T14874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.003957][T14874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.059541][T12959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.112846][T12959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.201333][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.230656][T15081] netlink: 'syz.2.3124': attribute type 2 has an invalid length. [ 340.238582][T15079] syz_tun: entered promiscuous mode [ 340.304185][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.307770][T15081] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3124'. [ 340.324393][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.371134][T12959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.378976][T12959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.415952][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.556991][T15093] bridge0: port 1(vlan4) entered blocking state [ 340.567276][T15093] bridge0: port 1(vlan4) entered disabled state [ 340.577684][T15093] vlan4: entered allmulticast mode [ 340.587195][T15093] geneve0: entered allmulticast mode [ 340.598893][T15093] vlan4: entered promiscuous mode [ 340.620151][T15093] geneve0: entered promiscuous mode [ 340.933930][T15109] openvswitch: netlink: Message has 8 unknown bytes. [ 340.941293][T15106] syzkaller0: entered promiscuous mode [ 340.949794][T15106] syzkaller0: entered allmulticast mode [ 340.987119][T15114] tipc: Enabled bearer , priority 0 [ 341.110382][T15105] tipc: Resetting bearer [ 341.152066][T15105] tipc: Disabling bearer [ 341.204425][ T5616] Bluetooth: hci2: command tx timeout [ 341.272965][T15127] syzkaller0: entered promiscuous mode [ 341.278473][T15127] syzkaller0: entered allmulticast mode [ 341.286188][T15127] FAULT_INJECTION: forcing a failure. [ 341.286188][T15127] name failslab, interval 1, probability 0, space 0, times 0 [ 341.348189][T15127] CPU: 0 UID: 0 PID: 15127 Comm: syz.1.3138 Not tainted syzkaller #0 PREEMPT(full) [ 341.348215][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.348225][T15127] Call Trace: [ 341.348233][T15127] [ 341.348240][T15127] dump_stack_lvl+0xe8/0x150 [ 341.348272][T15127] should_fail_ex+0x410/0x560 [ 341.348306][T15127] should_failslab+0xa8/0x100 [ 341.348334][T15127] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 341.348355][T15127] ? local_lock_release+0x9c/0x160 [ 341.348382][T15127] ? __alloc_skb+0x1db/0x7a0 [ 341.348404][T15127] ? __alloc_skb+0x1db/0x7a0 [ 341.348435][T15127] __alloc_skb+0x1db/0x7a0 [ 341.348464][T15127] alloc_skb_with_frags+0xc6/0x760 [ 341.348503][T15127] sock_alloc_send_pskb+0x878/0x990 [ 341.348541][T15127] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 341.348567][T15127] ? dev_get_by_index+0x22/0x2d0 [ 341.348586][T15127] ? dev_get_by_index+0x22/0x2d0 [ 341.348613][T15127] packet_sendmsg+0x31bb/0x4f80 [ 341.348635][T15127] ? up_write+0x19d/0x4a0 [ 341.348658][T15127] ? aa_label_sk_perm+0x532/0x6e0 [ 341.348695][T15127] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 341.348728][T15127] ? __pfx_process_measurement+0x10/0x10 [ 341.348765][T15127] ? unwind_next_frame+0x8f/0x2550 [ 341.348798][T15127] ? __pfx_packet_sendmsg+0x10/0x10 [ 341.348833][T15127] ? __pfx_aa_sk_perm+0x10/0x10 [ 341.348862][T15127] ? aa_sock_msg_perm+0xf6/0x1c0 [ 341.348896][T15127] ? __pfx_packet_sendmsg+0x10/0x10 [ 341.348916][T15127] sock_sendmsg_nosec+0x13a/0x180 [ 341.348940][T15127] ____sys_sendmsg+0x54e/0x850 [ 341.348975][T15127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.349010][T15127] ? import_iovec+0x73/0xa0 [ 341.349034][T15127] ___sys_sendmsg+0x2a5/0x360 [ 341.349061][T15127] ? __lock_acquire+0x683/0x2cf0 [ 341.349092][T15127] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.349157][T15127] ? __fget_files+0x2a/0x420 [ 341.349181][T15127] ? __fget_files+0x3a2/0x420 [ 341.349218][T15127] __x64_sys_sendmsg+0x1b1/0x290 [ 341.349249][T15127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.349300][T15127] do_syscall_64+0x166/0x520 [ 341.349324][T15127] ? trace_irq_disable+0x3b/0x140 [ 341.349349][T15127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.349368][T15127] ? clear_bhb_loop+0x70/0xc0 [ 341.349393][T15127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.349412][T15127] RIP: 0033:0x7f458b99e0d9 [ 341.349430][T15127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.349446][T15127] RSP: 002b:00007f458c91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.349466][T15127] RAX: ffffffffffffffda RBX: 00007f458bc25fa0 RCX: 00007f458b99e0d9 [ 341.349478][T15127] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 341.349490][T15127] RBP: 00007f458c91e090 R08: 0000000000000000 R09: 0000000000000000 [ 341.349501][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.349512][T15127] R13: 00007f458bc26038 R14: 00007f458bc25fa0 R15: 00007ffe10510768 [ 341.349542][T15127] [ 341.784962][T15133] syzkaller0: entered promiscuous mode [ 341.790472][T15133] syzkaller0: entered allmulticast mode [ 341.815222][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.826577][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.835639][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.872828][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.883368][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.043863][T15138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3144'. [ 342.145599][T15144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3145'. [ 342.700560][T15175] x_tables: duplicate underflow at hook 1 [ 342.946948][T15132] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.978526][T15132] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.985753][T15132] bridge_slave_0: entered allmulticast mode [ 342.993448][T15132] bridge_slave_0: entered promiscuous mode [ 343.001989][T15132] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.009196][T15132] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.041080][T15132] bridge_slave_1: entered allmulticast mode [ 343.048802][T15132] bridge_slave_1: entered promiscuous mode [ 343.105251][T15132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.116247][T15191] syzkaller0: entered promiscuous mode [ 343.121742][T15191] syzkaller0: entered allmulticast mode [ 343.151583][T15132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.238907][T15132] team0: Port device team_slave_0 added [ 343.248204][T15132] team0: Port device team_slave_1 added [ 343.288189][T15132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.295157][T15132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.321082][T15132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.333202][T15132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.340285][T15132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.386449][T15132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.465434][T15132] hsr_slave_0: entered promiscuous mode [ 343.472027][T15132] hsr_slave_1: entered promiscuous mode [ 343.725946][T15132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.809217][T15216] Bluetooth: hci0: unsupported parameter 5135 [ 343.815748][T15216] Bluetooth: hci0: unsupported parameter 8192 [ 343.832507][T15216] Bluetooth: hci0: unsupported parameter 5135 [ 343.839029][T15216] Bluetooth: hci0: unsupported parameter 8192 [ 343.907117][ T5619] Bluetooth: hci3: command tx timeout [ 344.118526][T15234] sctp: [Deprecated]: syz.3.3178 (pid 15234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.118526][T15234] Use struct sctp_sack_info instead [ 344.211236][T15234] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.221272][T15234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3178'. [ 344.359991][T15132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.640700][T15255] FAULT_INJECTION: forcing a failure. [ 344.640700][T15255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.671260][T15132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.687168][T15255] CPU: 1 UID: 0 PID: 15255 Comm: syz.4.3185 Not tainted syzkaller #0 PREEMPT(full) [ 344.687192][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.687204][T15255] Call Trace: [ 344.687211][T15255] [ 344.687218][T15255] dump_stack_lvl+0xe8/0x150 [ 344.687250][T15255] should_fail_ex+0x410/0x560 [ 344.687282][T15255] prepare_alloc_pages+0x230/0x650 [ 344.687317][T15255] __alloc_frozen_pages_noprof+0x12f/0x380 [ 344.687347][T15255] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 344.687376][T15255] ? __pfx_policy_nodemask+0x10/0x10 [ 344.687401][T15255] ? __folio_batch_add_and_move+0x11a/0xc50 [ 344.687420][T15255] ? lock_acquire+0x106/0x350 [ 344.687453][T15255] alloc_pages_mpol+0x212/0x390 [ 344.687486][T15255] folio_alloc_mpol_noprof+0x39/0x160 [ 344.687525][T15255] vma_alloc_folio_noprof+0xe1/0x1e0 [ 344.687554][T15255] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 344.687592][T15255] do_wp_page+0x1163/0x4c70 [ 344.687632][T15255] ? __pfx_do_wp_page+0x10/0x10 [ 344.687648][T15255] ? do_raw_spin_lock+0x12b/0x2f0 [ 344.687674][T15255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 344.687708][T15255] handle_mm_fault+0x1490/0x3080 [ 344.687741][T15255] ? handle_mm_fault+0xec/0x3080 [ 344.687768][T15255] ? __pfx_handle_mm_fault+0x10/0x10 [ 344.687799][T15255] ? __pfx___up_read+0x10/0x10 [ 344.687825][T15255] ? lock_mm_and_find_vma+0xa7/0x340 [ 344.687850][T15255] do_user_addr_fault+0x746/0x1340 [ 344.687875][T15255] exc_page_fault+0x6a/0xc0 [ 344.687889][T15255] asm_exc_page_fault+0x26/0x30 [ 344.687899][T15255] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 344.687916][T15255] Code: 65 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 344.687925][T15255] RSP: 0018:ffffc9000395f698 EFLAGS: 00050206 [ 344.687934][T15255] RAX: ffffffff84d35f01 RBX: ffff8880673a00e8 RCX: 00000000000007a0 [ 344.687942][T15255] RDX: 0000000000000000 RSI: ffff8880673afb18 RDI: 0000200000020000 [ 344.687949][T15255] RBP: ffffc9000395f818 R08: ffff8880673b02b7 R09: 1ffff1100ce76056 [ 344.687956][T15255] R10: dffffc0000000000 R11: ffffed100ce76057 R12: dffffc0000000000 [ 344.687963][T15255] R13: 00000000000101d0 R14: ffffc9000395fe10 R15: 00000000000101d0 [ 344.687974][T15255] ? _copy_to_iter+0x421/0x1810 [ 344.687994][T15255] _copy_to_iter+0x49d/0x1810 [ 344.688020][T15255] ? __pfx__copy_to_iter+0x10/0x10 [ 344.688034][T15255] ? kmem_cache_alloc_node_noprof+0x1f7/0x620 [ 344.688046][T15255] ? __alloc_skb+0x27a/0x7a0 [ 344.688060][T15255] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 344.688079][T15255] __skb_datagram_iter+0xf8/0x980 [ 344.688089][T15255] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 344.688110][T15255] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 344.688125][T15255] skb_copy_datagram_iter+0xb5/0x240 [ 344.688138][T15255] tipc_recvstream+0x732/0xe90 [ 344.688159][T15255] ? __pfx_tipc_recvstream+0x10/0x10 [ 344.688171][T15255] sock_recvmsg+0x196/0x1e0 [ 344.688185][T15255] ____sys_recvmsg+0x1e6/0x4a0 [ 344.688205][T15255] ? __pfx_____sys_recvmsg+0x10/0x10 [ 344.688229][T15255] ? import_iovec+0x73/0xa0 [ 344.688241][T15255] ___sys_recvmsg+0x213/0x5a0 [ 344.688260][T15255] ? __pfx____sys_recvmsg+0x10/0x10 [ 344.688277][T15255] ? __fget_files+0x2a/0x420 [ 344.688300][T15255] ? __fget_files+0x3a2/0x420 [ 344.688320][T15255] __x64_sys_recvmsg+0x1ae/0x290 [ 344.688337][T15255] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 344.688363][T15255] do_syscall_64+0x166/0x520 [ 344.688375][T15255] ? trace_irq_disable+0x3b/0x140 [ 344.688388][T15255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.688398][T15255] ? clear_bhb_loop+0x70/0xc0 [ 344.688410][T15255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.688419][T15255] RIP: 0033:0x7f056b99e0d9 [ 344.688429][T15255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.688438][T15255] RSP: 002b:00007f056c856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 344.688448][T15255] RAX: ffffffffffffffda RBX: 00007f056bc25fa0 RCX: 00007f056b99e0d9 [ 344.688455][T15255] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000004 [ 344.688462][T15255] RBP: 00007f056c856090 R08: 0000000000000000 R09: 0000000000000000 [ 344.688468][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.688474][T15255] R13: 00007f056bc26038 R14: 00007f056bc25fa0 R15: 00007ffdacec2118 [ 344.688491][T15255] [ 345.238464][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 345.283268][T15269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.372777][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'. [ 345.383625][T15271] netlink: 'syz.4.3192': attribute type 10 has an invalid length. [ 345.391480][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3192'. [ 345.394140][T15277] bridge_slave_0: left allmulticast mode [ 345.406208][T15277] bridge_slave_0: left promiscuous mode [ 345.412448][T15277] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.421826][T15277] bridge_slave_1: left allmulticast mode [ 345.428218][T15277] bridge_slave_1: left promiscuous mode [ 345.433935][T15277] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.442386][T15277] vlan2: left promiscuous mode [ 345.447216][T15277] geneve0: left promiscuous mode [ 345.454531][T15277] bond0: (slave bond_slave_0): Releasing backup interface [ 345.482762][T15277] bond0: (slave bond_slave_1): Releasing backup interface [ 345.494249][T15277] team0: Port device team_slave_0 removed [ 345.502983][T15277] team0: Port device team_slave_1 removed [ 345.509276][T15277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.516653][T15277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.524870][T15277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.532250][T15277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.540648][T15277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.658332][T15132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.953741][T15296] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3203'. [ 346.153487][T15305] tipc: Enabling of bearer rejected, already enabled [ 346.225428][T15308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.454789][T15132] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.487831][T15132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.496424][T15132] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.519633][T15132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.545481][T15132] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.560293][T15323] FAULT_INJECTION: forcing a failure. [ 346.560293][T15323] name failslab, interval 1, probability 0, space 0, times 0 [ 346.592167][T15323] CPU: 0 UID: 0 PID: 15323 Comm: syz.4.3215 Not tainted syzkaller #0 PREEMPT(full) [ 346.592193][T15323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.592204][T15323] Call Trace: [ 346.592211][T15323] [ 346.592219][T15323] dump_stack_lvl+0xe8/0x150 [ 346.592251][T15323] should_fail_ex+0x410/0x560 [ 346.592291][T15323] should_failslab+0xa8/0x100 [ 346.592319][T15323] __kmalloc_noprof+0xfe/0x720 [ 346.592341][T15323] ? rcu_is_watching+0x16/0xb0 [ 346.592359][T15323] ? tomoyo_realpath_from_path+0xef/0x640 [ 346.592379][T15323] ? tomoyo_realpath_from_path+0xef/0x640 [ 346.592406][T15323] tomoyo_realpath_from_path+0xef/0x640 [ 346.592436][T15323] ? tomoyo_path_number_perm+0x219/0x5f0 [ 346.592463][T15323] tomoyo_path_number_perm+0x246/0x5f0 [ 346.592492][T15323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 346.592516][T15323] ? __lock_acquire+0x683/0x2cf0 [ 346.592557][T15323] ? hook_file_ioctl+0x1f0/0x5f0 [ 346.592604][T15323] ? __fget_files+0x2a/0x420 [ 346.592633][T15323] ? __fget_files+0x2a/0x420 [ 346.592656][T15323] ? __fget_files+0x3a2/0x420 [ 346.592679][T15323] ? __fget_files+0x2a/0x420 [ 346.592708][T15323] security_file_ioctl+0xc3/0x2a0 [ 346.592735][T15323] __se_sys_ioctl+0x47/0x170 [ 346.592758][T15323] do_syscall_64+0x166/0x520 [ 346.592778][T15323] ? trace_irq_disable+0x3b/0x140 [ 346.592803][T15323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.592822][T15323] ? clear_bhb_loop+0x70/0xc0 [ 346.592845][T15323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.592864][T15323] RIP: 0033:0x7f056b99e0d9 [ 346.592881][T15323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.592898][T15323] RSP: 002b:00007f056c856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.592919][T15323] RAX: ffffffffffffffda RBX: 00007f056bc25fa0 RCX: 00007f056b99e0d9 [ 346.592933][T15323] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000007 [ 346.592946][T15323] RBP: 00007f056c856090 R08: 0000000000000000 R09: 0000000000000000 [ 346.592957][T15323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.592968][T15323] R13: 00007f056bc26038 R14: 00007f056bc25fa0 R15: 00007ffdacec2118 [ 346.592999][T15323] [ 346.593709][T15323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 346.618793][T15132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.851703][T15132] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.874733][T15132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.936639][T15330] syzkaller0: entered promiscuous mode [ 346.942161][T15330] syzkaller0: entered allmulticast mode [ 346.983852][T15330] tipc: Enabled bearer , priority 0 [ 347.004828][T15329] tipc: Resetting bearer [ 347.031680][T15345] openvswitch: netlink: Message has 8 unknown bytes. [ 347.057713][T15329] tipc: Disabling bearer [ 347.183171][T15132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.214223][T15132] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.260334][T15357] netlink: 'syz.4.3226': attribute type 1 has an invalid length. [ 347.280480][T15132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.290855][T15132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.351131][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.358394][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.404293][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.411465][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.449308][T15362] hsr0: entered allmulticast mode [ 347.454395][T15362] hsr_slave_0: entered allmulticast mode [ 347.501879][T15362] hsr_slave_1: entered allmulticast mode [ 347.699267][T15375] openvswitch: netlink: Message has 8 unknown bytes. [ 348.050198][T15132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.125116][T15132] veth0_vlan: entered promiscuous mode [ 348.206585][T15132] veth1_vlan: entered promiscuous mode [ 348.237053][T15404] bond0: entered promiscuous mode [ 348.242144][T15404] bond_slave_0: entered promiscuous mode [ 348.297381][T15404] bond_slave_1: entered promiscuous mode [ 348.307017][T15404] batadv0: entered promiscuous mode [ 348.324724][T15404] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 348.335960][T15404] bond0: left promiscuous mode [ 348.340772][T15404] bond_slave_0: left promiscuous mode [ 348.346372][T15404] bond_slave_1: left promiscuous mode [ 348.355042][T15410] openvswitch: netlink: Message has 8 unknown bytes. [ 348.375530][T15404] batadv0: left promiscuous mode [ 348.432764][T15132] veth0_macvtap: entered promiscuous mode [ 348.485600][T15132] veth1_macvtap: entered promiscuous mode [ 348.529485][T15132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.545915][T15132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.611786][T15418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.660425][T15422] netlink: 'syz.1.3249': attribute type 1 has an invalid length. [ 348.690343][T15422] 8021q: adding VLAN 0 to HW filter on device bond7 [ 348.701544][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.713702][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.743048][T15422] xt_SECMARK: invalid mode: 9 [ 348.815969][ T1044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.850103][ T1044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.905961][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.951496][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.001813][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.010539][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.152108][T15439] openvswitch: netlink: Key type 31 is not supported [ 349.160600][T15439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.167936][T15439] IPv6: NLM_F_CREATE should be set when creating new route [ 349.175261][T15439] IPv6: NLM_F_CREATE should be set when creating new route [ 349.182569][T15439] IPv6: NLM_F_CREATE should be set when creating new route [ 349.190666][T15433] FAULT_INJECTION: forcing a failure. [ 349.190666][T15433] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.207612][T15433] CPU: 1 UID: 0 PID: 15433 Comm: syz.1.3254 Not tainted syzkaller #0 PREEMPT(full) [ 349.207636][T15433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.207647][T15433] Call Trace: [ 349.207654][T15433] [ 349.207662][T15433] dump_stack_lvl+0xe8/0x150 [ 349.207999][T15433] should_fail_ex+0x410/0x560 [ 349.208103][T15433] prepare_alloc_pages+0x230/0x650 [ 349.208166][T15433] __alloc_frozen_pages_noprof+0x12f/0x380 [ 349.208197][T15433] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 349.208248][T15433] ? __pfx_policy_nodemask+0x10/0x10 [ 349.208286][T15433] ? __folio_batch_add_and_move+0x11a/0xc50 [ 349.208324][T15433] ? lock_acquire+0x106/0x350 [ 349.208372][T15433] alloc_pages_mpol+0x212/0x390 [ 349.208406][T15433] folio_alloc_mpol_noprof+0x39/0x160 [ 349.208434][T15433] vma_alloc_folio_noprof+0xe1/0x1e0 [ 349.208464][T15433] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 349.208504][T15433] do_wp_page+0x1163/0x4c70 [ 349.208551][T15433] ? __pfx_do_wp_page+0x10/0x10 [ 349.208567][T15433] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.208594][T15433] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 349.208626][T15433] handle_mm_fault+0x1490/0x3080 [ 349.208659][T15433] ? handle_mm_fault+0xec/0x3080 [ 349.208687][T15433] ? __pfx_handle_mm_fault+0x10/0x10 [ 349.208720][T15433] ? __pfx___up_read+0x10/0x10 [ 349.208747][T15433] ? lock_mm_and_find_vma+0xa7/0x340 [ 349.208774][T15433] do_user_addr_fault+0x746/0x1340 [ 349.208832][T15433] exc_page_fault+0x6a/0xc0 [ 349.208937][T15433] asm_exc_page_fault+0x26/0x30 [ 349.208968][T15433] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 349.209046][T15433] Code: 65 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 349.209062][T15433] RSP: 0018:ffffc90002fef698 EFLAGS: 00050206 [ 349.209079][T15433] RAX: ffffffff84d35f01 RBX: ffff8880586400e8 RCX: 000000000000d970 [ 349.209093][T15433] RDX: 0000000000000000 RSI: ffff888058642948 RDI: 0000200000023000 [ 349.209105][T15433] RBP: ffffc90002fef818 R08: ffff8880586502b7 R09: 1ffff1100b0ca056 [ 349.209126][T15433] R10: dffffc0000000000 R11: ffffed100b0ca057 R12: dffffc0000000000 [ 349.209140][T15433] R13: 00000000000203a0 R14: ffffc90002fefe10 R15: 00000000000101d0 [ 349.209163][T15433] ? _copy_to_iter+0x421/0x1810 [ 349.209233][T15433] _copy_to_iter+0x49d/0x1810 [ 349.209261][T15433] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 349.209295][T15433] ? __pfx__copy_to_iter+0x10/0x10 [ 349.209322][T15433] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 349.209371][T15433] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 349.209477][T15433] __skb_datagram_iter+0xf8/0x980 [ 349.209551][T15433] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 349.209573][T15433] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 349.209600][T15433] skb_copy_datagram_iter+0xb5/0x240 [ 349.209623][T15433] tipc_recvstream+0x732/0xe90 [ 349.209661][T15433] ? __pfx_tipc_recvstream+0x10/0x10 [ 349.209682][T15433] sock_recvmsg+0x196/0x1e0 [ 349.209734][T15433] ____sys_recvmsg+0x1e6/0x4a0 [ 349.209797][T15433] ? __pfx_____sys_recvmsg+0x10/0x10 [ 349.209840][T15433] ? import_iovec+0x73/0xa0 [ 349.209889][T15433] ___sys_recvmsg+0x213/0x5a0 [ 349.209924][T15433] ? __pfx____sys_recvmsg+0x10/0x10 [ 349.209957][T15433] ? __fget_files+0x2a/0x420 [ 349.210012][T15433] ? __fget_files+0x3a2/0x420 [ 349.210049][T15433] __x64_sys_recvmsg+0x1ae/0x290 [ 349.210083][T15433] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 349.210142][T15433] do_syscall_64+0x166/0x520 [ 349.210165][T15433] ? trace_irq_disable+0x3b/0x140 [ 349.210200][T15433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.210218][T15433] ? clear_bhb_loop+0x70/0xc0 [ 349.210241][T15433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.210260][T15433] RIP: 0033:0x7f458b99e0d9 [ 349.210279][T15433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.210295][T15433] RSP: 002b:00007f458c91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 349.210315][T15433] RAX: ffffffffffffffda RBX: 00007f458bc25fa0 RCX: 00007f458b99e0d9 [ 349.210329][T15433] RDX: 0000000000003f01 RSI: 0000200000000500 RDI: 0000000000000004 [ 349.210342][T15433] RBP: 00007f458c91e090 R08: 0000000000000000 R09: 0000000000000000 [ 349.210355][T15433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.210367][T15433] R13: 00007f458bc26038 R14: 00007f458bc25fa0 R15: 00007ffe10510768 [ 349.210401][T15433] [ 349.490024][T15445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.061240][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.072438][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.080389][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.088252][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.095828][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.169138][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3261'. [ 350.316806][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'. [ 350.325828][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3264'. [ 350.381487][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 350.402248][T15475] netlink: 'syz.4.3265': attribute type 11 has an invalid length. [ 350.592028][T15483] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3268'. [ 350.607186][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3269'. [ 350.616081][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3269'. [ 350.637984][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.661986][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.700902][T15489] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3268'. [ 350.879233][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 350.905781][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.916147][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.922624][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 351.106561][T15507] openvswitch: netlink: Message has 8 unknown bytes. [ 351.147516][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.175218][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.309744][T15512] bridge0: port 3(vlan2) entered blocking state [ 351.328982][T15512] bridge0: port 3(vlan2) entered disabled state [ 351.349978][T15512] vlan2: entered allmulticast mode [ 351.366447][T15512] geneve0: entered allmulticast mode [ 351.378266][T15512] vlan2: entered promiscuous mode [ 351.383390][T15512] geneve0: entered promiscuous mode [ 351.410789][T15522] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 351.476988][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.507966][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.552981][T15522] bond1: entered promiscuous mode [ 351.560397][T15522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.688859][T15522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.696181][T15522] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 351.706354][T15522] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 351.741254][T15522] bond1: (slave xfrm1): making interface the new active one [ 351.751770][T15522] xfrm1: entered promiscuous mode [ 351.762099][T15522] xfrm1: left promiscuous mode [ 351.984800][T15457] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.991913][T15457] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.065671][T15457] bridge_slave_0: entered allmulticast mode [ 352.087788][T15457] bridge_slave_0: entered promiscuous mode [ 352.108131][T15457] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.115315][T15457] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.132161][T15457] bridge_slave_1: entered allmulticast mode [ 352.139863][T15457] bridge_slave_1: entered promiscuous mode [ 352.147257][ T5619] Bluetooth: hci1: command tx timeout [ 352.239743][T15457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.252808][T15457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.368245][T15457] team0: Port device team_slave_0 added [ 352.419836][T15457] team0: Port device team_slave_1 added [ 352.471980][ T12] vlan4: left allmulticast mode [ 352.476963][ T12] geneve0: left allmulticast mode [ 352.482853][ T12] vlan4: left promiscuous mode [ 352.488055][ T12] geneve0: left promiscuous mode [ 352.493652][ T12] bridge0: port 1(vlan4) entered disabled state [ 352.846860][ T12] pimreg: left allmulticast mode [ 353.479593][ T12] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 353.657749][ T12] bond2 (unregistering): (slave bridge6): Releasing backup interface [ 353.799099][T15607] netlink: 'syz.2.3299': attribute type 10 has an invalid length. [ 353.810981][ T12] bond0 (unregistering): Released all slaves [ 353.821365][ T12] bond1 (unregistering): Released all slaves [ 353.836663][ T12] bond2 (unregistering): Released all slaves [ 353.852062][ T12] bond3 (unregistering): Released all slaves [ 353.870485][ T12] bond4 (unregistering): (slave bond5): Releasing backup interface [ 353.879082][ T12] bond4 (unregistering): Released all slaves [ 353.892276][ T12] bond5 (unregistering): Released all slaves [ 353.919059][ T12] bond6 (unregistering): Released all slaves [ 353.933453][ T12] bond7 (unregistering): Released all slaves [ 353.946746][T15457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.953771][T15457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.979699][T15457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.992553][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 354.066249][T15607] team0: entered allmulticast mode [ 354.078493][T15607] team_slave_0: entered allmulticast mode [ 354.085192][T15607] team_slave_1: entered allmulticast mode [ 354.097910][T15607] bridge0: port 3(team0) entered blocking state [ 354.104634][T15607] bridge0: port 3(team0) entered disabled state [ 354.113838][T15607] team0: entered promiscuous mode [ 354.119401][T15607] team_slave_0: entered promiscuous mode [ 354.125484][T15607] team_slave_1: entered promiscuous mode [ 354.137710][T15607] bridge0: port 3(team0) entered blocking state [ 354.144274][T15607] bridge0: port 3(team0) entered forwarding state [ 354.227979][ T5619] Bluetooth: hci1: command tx timeout [ 354.234277][T15457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.244317][T15457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.276300][T15457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.371319][T15457] hsr_slave_0: entered promiscuous mode [ 354.405285][T15457] hsr_slave_1: entered promiscuous mode [ 354.428527][T15457] debugfs: 'hsr0' already exists in 'hsr' [ 354.459413][T15457] Cannot create hsr debugfs directory [ 354.501922][T15625] FAULT_INJECTION: forcing a failure. [ 354.501922][T15625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.518987][T15628] netlink: 'syz.0.3308': attribute type 2 has an invalid length. [ 354.546991][T15625] CPU: 0 UID: 0 PID: 15625 Comm: syz.3.3307 Not tainted syzkaller #0 PREEMPT(full) [ 354.547015][T15625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.547025][T15625] Call Trace: [ 354.547032][T15625] [ 354.547040][T15625] dump_stack_lvl+0xe8/0x150 [ 354.547071][T15625] should_fail_ex+0x410/0x560 [ 354.547105][T15625] _copy_from_iter+0x1d3/0x1660 [ 354.547129][T15625] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 354.547152][T15625] ? rcu_is_watching+0x16/0xb0 [ 354.547199][T15625] ? trace_kmem_cache_alloc+0x29/0xe0 [ 354.547222][T15625] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 354.547240][T15625] ? __pfx__copy_from_iter+0x10/0x10 [ 354.547262][T15625] ? __alloc_skb+0x27a/0x7a0 [ 354.547336][T15625] ? __alloc_skb+0x27a/0x7a0 [ 354.547365][T15625] ? netlink_sendmsg+0x650/0xb40 [ 354.547431][T15625] ? skb_put+0x112/0x210 [ 354.547457][T15625] netlink_sendmsg+0x6c0/0xb40 [ 354.547483][T15625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.547505][T15625] ? aa_sock_msg_perm+0xf6/0x1c0 [ 354.547617][T15625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.547634][T15625] sock_sendmsg_nosec+0x13a/0x180 [ 354.547657][T15625] ____sys_sendmsg+0x54e/0x850 [ 354.547687][T15625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.547721][T15625] ? import_iovec+0x73/0xa0 [ 354.547741][T15625] ___sys_sendmsg+0x2a5/0x360 [ 354.547763][T15625] ? __lock_acquire+0x683/0x2cf0 [ 354.547792][T15625] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.547851][T15625] ? __fget_files+0x2a/0x420 [ 354.547874][T15625] ? __fget_files+0x3a2/0x420 [ 354.547908][T15625] __x64_sys_sendmsg+0x1b1/0x290 [ 354.547938][T15625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.547991][T15625] do_syscall_64+0x166/0x520 [ 354.548014][T15625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.548033][T15625] ? clear_bhb_loop+0x70/0xc0 [ 354.548055][T15625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.548073][T15625] RIP: 0033:0x7f49dbf9e0d9 [ 354.548092][T15625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.548107][T15625] RSP: 002b:00007f49dcd8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.548128][T15625] RAX: ffffffffffffffda RBX: 00007f49dc225fa0 RCX: 00007f49dbf9e0d9 [ 354.548142][T15625] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 354.548155][T15625] RBP: 00007f49dcd8b090 R08: 0000000000000000 R09: 0000000000000000 [ 354.548167][T15625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.548178][T15625] R13: 00007f49dc226038 R14: 00007f49dc225fa0 R15: 00007ffc43dfb3c8 [ 354.548208][T15625] [ 354.554341][ T12] : left promiscuous mode [ 354.968267][T15621] syzkaller0: entered promiscuous mode [ 354.973790][T15621] syzkaller0: entered allmulticast mode [ 355.189105][ T12] tipc: Disabling bearer [ 355.194847][ T12] tipc: Left network mode [ 355.489073][T15665] __nla_validate_parse: 4 callbacks suppressed [ 355.489091][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 355.521964][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 355.716869][T15659] netlink: 'syz.2.3314': attribute type 29 has an invalid length. [ 355.724732][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 355.735185][T15673] netlink: 'syz.2.3314': attribute type 29 has an invalid length. [ 355.743033][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 355.753034][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 355.908258][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3321'. [ 355.920552][T15678] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3319'. [ 355.955585][T15680] netlink: 'syz.2.3320': attribute type 10 has an invalid length. [ 355.990333][T15678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3319'. [ 356.185919][T15692] FAULT_INJECTION: forcing a failure. [ 356.185919][T15692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.198999][T15692] CPU: 0 UID: 0 PID: 15692 Comm: syz.2.3324 Not tainted syzkaller #0 PREEMPT(full) [ 356.199023][T15692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.199033][T15692] Call Trace: [ 356.199040][T15692] [ 356.199047][T15692] dump_stack_lvl+0xe8/0x150 [ 356.199078][T15692] should_fail_ex+0x410/0x560 [ 356.199111][T15692] _copy_from_user+0x2d/0xb0 [ 356.199132][T15692] __sys_bpf+0x2e7/0xd90 [ 356.199197][T15692] ? __pfx___sys_bpf+0x10/0x10 [ 356.199229][T15692] ? __fget_files+0x2a/0x420 [ 356.199269][T15692] ? ksys_write+0x242/0x270 [ 356.199297][T15692] ? __pfx_ksys_write+0x10/0x10 [ 356.199328][T15692] __x64_sys_bpf+0xba/0xd0 [ 356.199353][T15692] do_syscall_64+0x166/0x520 [ 356.199383][T15692] ? trace_irq_disable+0x3b/0x140 [ 356.199406][T15692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.199425][T15692] ? clear_bhb_loop+0x70/0xc0 [ 356.199447][T15692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.199464][T15692] RIP: 0033:0x7f2872d9e0d9 [ 356.199482][T15692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.199497][T15692] RSP: 002b:00007f2873bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.199517][T15692] RAX: ffffffffffffffda RBX: 00007f2873025fa0 RCX: 00007f2872d9e0d9 [ 356.199529][T15692] RDX: 000000000000003a RSI: 0000200000000280 RDI: 000000000000000a [ 356.199541][T15692] RBP: 00007f2873bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 356.199553][T15692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.199563][T15692] R13: 00007f2873026038 R14: 00007f2873025fa0 R15: 00007fff8dde80d8 [ 356.199594][T15692] [ 356.236592][T15697] openvswitch: netlink: Message has 8 unknown bytes. [ 356.376605][ T5619] Bluetooth: hci1: command tx timeout [ 356.554898][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3329'. [ 356.564728][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3329'. [ 356.573604][T15708] FAULT_INJECTION: forcing a failure. [ 356.573604][T15708] name failslab, interval 1, probability 0, space 0, times 0 [ 356.601022][T15708] CPU: 0 UID: 0 PID: 15708 Comm: syz.4.3329 Not tainted syzkaller #0 PREEMPT(full) [ 356.601047][T15708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.601058][T15708] Call Trace: [ 356.601066][T15708] [ 356.601074][T15708] dump_stack_lvl+0xe8/0x150 [ 356.601106][T15708] should_fail_ex+0x410/0x560 [ 356.601140][T15708] should_failslab+0xa8/0x100 [ 356.601165][T15708] __kmalloc_cache_noprof+0xa8/0x660 [ 356.601189][T15708] ? netlbl_mgmt_add_common+0x57/0x1260 [ 356.601327][T15708] ? netlbl_mgmt_add_common+0x57/0x1260 [ 356.601361][T15708] netlbl_mgmt_add_common+0x57/0x1260 [ 356.601389][T15708] ? rcu_is_watching+0x16/0xb0 [ 356.601411][T15708] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 356.601444][T15708] netlbl_mgmt_adddef+0x28b/0x330 [ 356.601474][T15708] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 356.601505][T15708] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 356.601563][T15708] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 356.601598][T15708] genl_family_rcv_msg_doit+0x233/0x340 [ 356.601630][T15708] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 356.601670][T15708] ? bpf_lsm_capable+0x9/0x20 [ 356.601701][T15708] ? security_capable+0x7e/0x2c0 [ 356.601797][T15708] genl_rcv_msg+0x614/0x7a0 [ 356.601828][T15708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.601852][T15708] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 356.601894][T15708] netlink_rcv_skb+0x226/0x4a0 [ 356.601916][T15708] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.601943][T15708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.601981][T15708] ? down_read+0x2be/0x330 [ 356.602008][T15708] genl_rcv+0x28/0x40 [ 356.602031][T15708] netlink_unicast+0x7bd/0x940 [ 356.602093][T15708] netlink_sendmsg+0x813/0xb40 [ 356.602122][T15708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.602144][T15708] ? aa_sock_msg_perm+0xf6/0x1c0 [ 356.602177][T15708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.602196][T15708] sock_sendmsg_nosec+0x13a/0x180 [ 356.602222][T15708] ____sys_sendmsg+0x54e/0x850 [ 356.602261][T15708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.602289][T15708] ? import_iovec+0x73/0xa0 [ 356.602307][T15708] ___sys_sendmsg+0x2a5/0x360 [ 356.602326][T15708] ? __lock_acquire+0x683/0x2cf0 [ 356.602350][T15708] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.602402][T15708] ? __fget_files+0x2a/0x420 [ 356.602419][T15708] ? __fget_files+0x3a2/0x420 [ 356.602447][T15708] __x64_sys_sendmsg+0x1b1/0x290 [ 356.602472][T15708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.602513][T15708] do_syscall_64+0x166/0x520 [ 356.602530][T15708] ? trace_irq_disable+0x3b/0x140 [ 356.602549][T15708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.602565][T15708] ? clear_bhb_loop+0x70/0xc0 [ 356.602583][T15708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.602599][T15708] RIP: 0033:0x7f056b99e0d9 [ 356.602615][T15708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.602629][T15708] RSP: 002b:00007f056c856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.602645][T15708] RAX: ffffffffffffffda RBX: 00007f056bc25fa0 RCX: 00007f056b99e0d9 [ 356.602656][T15708] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 356.602665][T15708] RBP: 00007f056c856090 R08: 0000000000000000 R09: 0000000000000000 [ 356.602675][T15708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.602684][T15708] R13: 00007f056bc26038 R14: 00007f056bc25fa0 R15: 00007ffdacec2118 [ 356.602712][T15708] [ 356.636188][T15710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3328'. [ 357.196934][T15733] FAULT_INJECTION: forcing a failure. [ 357.196934][T15733] name failslab, interval 1, probability 0, space 0, times 0 [ 357.226643][T15733] CPU: 0 UID: 0 PID: 15733 Comm: syz.0.3336 Not tainted syzkaller #0 PREEMPT(full) [ 357.226669][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.226680][T15733] Call Trace: [ 357.226688][T15733] [ 357.226696][T15733] dump_stack_lvl+0xe8/0x150 [ 357.226728][T15733] should_fail_ex+0x410/0x560 [ 357.226762][T15733] should_failslab+0xa8/0x100 [ 357.226790][T15733] __kmalloc_noprof+0xfe/0x720 [ 357.226812][T15733] ? bpf_ctx_init+0xaf/0x1b0 [ 357.226830][T15733] ? bpf_ctx_init+0xaf/0x1b0 [ 357.226854][T15733] bpf_ctx_init+0xaf/0x1b0 [ 357.226875][T15733] bpf_prog_test_run_xdp+0x2c3/0x11d0 [ 357.226898][T15733] ? __fget_files+0x2a/0x420 [ 357.226935][T15733] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.226960][T15733] ? __fget_files+0x2a/0x420 [ 357.226988][T15733] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.227006][T15733] bpf_prog_test_run+0x2c5/0x340 [ 357.227036][T15733] __sys_bpf+0xa22/0xd90 [ 357.227069][T15733] ? __pfx___sys_bpf+0x10/0x10 [ 357.227103][T15733] ? __fget_files+0x2a/0x420 [ 357.227141][T15733] ? ksys_write+0x242/0x270 [ 357.227169][T15733] ? __pfx_ksys_write+0x10/0x10 [ 357.227199][T15733] __x64_sys_bpf+0xba/0xd0 [ 357.227226][T15733] do_syscall_64+0x166/0x520 [ 357.227248][T15733] ? trace_irq_disable+0x3b/0x140 [ 357.227272][T15733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.227290][T15733] ? clear_bhb_loop+0x70/0xc0 [ 357.227322][T15733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.227340][T15733] RIP: 0033:0x7f92e819e0d9 [ 357.227358][T15733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.227374][T15733] RSP: 002b:00007f92e9005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.227394][T15733] RAX: ffffffffffffffda RBX: 00007f92e8425fa0 RCX: 00007f92e819e0d9 [ 357.227408][T15733] RDX: 000000000000003a RSI: 0000200000000280 RDI: 000000000000000a [ 357.227420][T15733] RBP: 00007f92e9005090 R08: 0000000000000000 R09: 0000000000000000 [ 357.227432][T15733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.227443][T15733] R13: 00007f92e8426038 R14: 00007f92e8425fa0 R15: 00007fff58c91068 [ 357.227475][T15733] [ 357.235402][ T12] hsr_slave_0: left promiscuous mode [ 357.451348][T15740] ip_tables: iptables: counters copy to user failed while replacing table [ 357.482792][T15745] sctp: [Deprecated]: syz.4.3337 (pid 15745) Use of int in maxseg socket option. [ 357.482792][T15745] Use struct sctp_assoc_value instead [ 357.542126][ T12] hsr_slave_1: left promiscuous mode [ 357.557504][ T12] veth0_macvtap: left promiscuous mode [ 357.564566][ T12] veth1_vlan: left promiscuous mode [ 357.569865][ T12] veth0_vlan: left promiscuous mode [ 358.215552][T15759] netlink: 'syz.3.3343': attribute type 10 has an invalid length. [ 358.401722][T15769] netlink: 'syz.4.3345': attribute type 5 has an invalid length. [ 358.462745][T15772] netlink: 'syz.4.3345': attribute type 10 has an invalid length. [ 358.471445][ T5619] Bluetooth: hci1: command tx timeout [ 358.544670][T15779] FAULT_INJECTION: forcing a failure. [ 358.544670][T15779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.579793][T15772] team0: entered allmulticast mode [ 358.599844][T15779] CPU: 1 UID: 0 PID: 15779 Comm: syz.2.3349 Not tainted syzkaller #0 PREEMPT(full) [ 358.599870][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.599882][T15779] Call Trace: [ 358.599890][T15779] [ 358.599898][T15779] dump_stack_lvl+0xe8/0x150 [ 358.599929][T15779] should_fail_ex+0x410/0x560 [ 358.599961][T15779] _copy_from_user+0x2d/0xb0 [ 358.599985][T15779] __sys_bpf+0x2e7/0xd90 [ 358.600022][T15779] ? __pfx___sys_bpf+0x10/0x10 [ 358.600055][T15779] ? __fget_files+0x2a/0x420 [ 358.600096][T15779] ? ksys_write+0x242/0x270 [ 358.600125][T15779] ? __pfx_ksys_write+0x10/0x10 [ 358.600154][T15779] __x64_sys_bpf+0xba/0xd0 [ 358.600180][T15779] do_syscall_64+0x166/0x520 [ 358.600202][T15779] ? trace_irq_disable+0x3b/0x140 [ 358.600224][T15779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.600244][T15779] ? clear_bhb_loop+0x70/0xc0 [ 358.600267][T15779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.600284][T15779] RIP: 0033:0x7f2872d9e0d9 [ 358.600301][T15779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.600317][T15779] RSP: 002b:00007f2873bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.600337][T15779] RAX: ffffffffffffffda RBX: 00007f2873025fa0 RCX: 00007f2872d9e0d9 [ 358.600352][T15779] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 358.600364][T15779] RBP: 00007f2873bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 358.600377][T15779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.600389][T15779] R13: 00007f2873026038 R14: 00007f2873025fa0 R15: 00007fff8dde80d8 [ 358.600421][T15779] [ 358.613004][T15772] team_slave_0: entered allmulticast mode [ 358.788119][T15772] team_slave_1: entered allmulticast mode [ 358.794246][T15772] bridge0: port 4(team0) entered blocking state [ 358.800750][T15772] bridge0: port 4(team0) entered disabled state [ 358.816891][T15772] team0: entered promiscuous mode [ 358.822102][T15772] team_slave_0: entered promiscuous mode [ 358.834621][T15772] team_slave_1: entered promiscuous mode [ 358.846123][T15772] bridge0: port 4(team0) entered blocking state [ 358.852561][T15772] bridge0: port 4(team0) entered forwarding state [ 358.871394][ T12] IPVS: stop unused estimator thread 0... [ 359.162598][T15457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.195624][T15457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.213825][T15805] vlan2: entered allmulticast mode [ 359.220875][T15805] bridge1: entered allmulticast mode [ 359.236912][T15457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.276089][T15457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.290552][T15457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.322631][T15457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.343162][T15805] bridge1: port 1(erspan0) entered blocking state [ 359.362963][T15805] bridge1: port 1(erspan0) entered disabled state [ 359.371767][T15805] erspan0: entered allmulticast mode [ 359.380502][T15805] erspan0: entered promiscuous mode [ 359.396970][T15805] bridge1: port 1(erspan0) entered blocking state [ 359.403640][T15805] bridge1: port 1(erspan0) entered forwarding state [ 359.443856][T15457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.465756][T15457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.827774][T15457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.900714][T15457] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.923773][T15846] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 359.951807][T12960] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.959087][T12960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.982855][T12960] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.986815][T15846] x_tables: duplicate underflow at hook 1 [ 359.990118][T12960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.379212][T15846] macvtap1: entered promiscuous mode [ 360.385960][T15846] vlan0: entered promiscuous mode [ 360.403644][T15846] macvtap1: entered allmulticast mode [ 360.414736][T15846] vlan0: entered allmulticast mode [ 360.420248][T15846] veth0_vlan: entered allmulticast mode [ 360.431423][T15865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.074609][T15457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.143765][T15457] veth0_vlan: entered promiscuous mode [ 361.165615][T15457] veth1_vlan: entered promiscuous mode [ 361.238655][T15457] veth0_macvtap: entered promiscuous mode [ 361.250685][T15457] veth1_macvtap: entered promiscuous mode [ 361.296380][T15457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.321654][T15457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.200973][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.246203][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.289525][T15929] FAULT_INJECTION: forcing a failure. [ 363.289525][T15929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.343027][T15929] CPU: 1 UID: 0 PID: 15929 Comm: syz.3.3379 Not tainted syzkaller #0 PREEMPT(full) [ 363.343053][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.343068][T15929] Call Trace: [ 363.343075][T15929] [ 363.343087][T15929] dump_stack_lvl+0xe8/0x150 [ 363.343117][T15929] should_fail_ex+0x410/0x560 [ 363.343148][T15929] _copy_from_user+0x2d/0xb0 [ 363.343167][T15929] bpf_test_init+0xd8/0x150 [ 363.343189][T15929] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 363.343224][T15929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 363.343247][T15929] ? __fget_files+0x2a/0x420 [ 363.343277][T15929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 363.343297][T15929] bpf_prog_test_run+0x2c5/0x340 [ 363.343328][T15929] __sys_bpf+0xa22/0xd90 [ 363.343359][T15929] ? __pfx___sys_bpf+0x10/0x10 [ 363.343395][T15929] ? __fget_files+0x2a/0x420 [ 363.343438][T15929] ? ksys_write+0x242/0x270 [ 363.343464][T15929] ? __pfx_ksys_write+0x10/0x10 [ 363.343495][T15929] __x64_sys_bpf+0xba/0xd0 [ 363.343519][T15929] do_syscall_64+0x166/0x520 [ 363.343541][T15929] ? trace_irq_disable+0x3b/0x140 [ 363.343562][T15929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.343580][T15929] ? clear_bhb_loop+0x70/0xc0 [ 363.343603][T15929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.343622][T15929] RIP: 0033:0x7f49dbf9e0d9 [ 363.343647][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.343663][T15929] RSP: 002b:00007f49dcd8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.343682][T15929] RAX: ffffffffffffffda RBX: 00007f49dc225fa0 RCX: 00007f49dbf9e0d9 [ 363.343694][T15929] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 363.343705][T15929] RBP: 00007f49dcd8b090 R08: 0000000000000000 R09: 0000000000000000 [ 363.343716][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.343728][T15929] R13: 00007f49dc226038 R14: 00007f49dc225fa0 R15: 00007ffc43dfb3c8 [ 363.343758][T15929] [ 363.350533][T15934] __nla_validate_parse: 7 callbacks suppressed [ 363.350551][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3381'. [ 363.363285][ T134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.523545][T15940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3383'. [ 363.595695][T12960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.607632][T12960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.688596][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.696667][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.703530][T15946] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3385'. [ 363.712147][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.729023][T15946] gretap0: entered allmulticast mode [ 363.867898][T15946] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 366.338072][T15934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.347971][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 366.370391][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 366.535689][T15985] openvswitch: netlink: Missing valid actions attribute. [ 366.587604][T15992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3400'. [ 366.817252][T16006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3403'. [ 367.022426][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3406'. [ 367.052230][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3407'. [ 367.125051][T16021] vlan3: entered allmulticast mode [ 367.150789][T16021] bridge4: entered allmulticast mode [ 367.192752][T16025] bridge0: port 3(veth0) entered blocking state [ 367.238339][T16025] bridge0: port 3(veth0) entered disabled state [ 367.246084][T16025] veth0: entered allmulticast mode [ 367.259735][T16025] veth0: entered promiscuous mode [ 367.288901][T16025] bridge0: port 3(veth0) entered blocking state [ 367.295396][T16025] bridge0: port 3(veth0) entered forwarding state [ 367.466064][T16040] netlink: 'syz.2.3418': attribute type 10 has an invalid length. [ 367.650716][T16040] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 367.708659][T16050] openvswitch: netlink: Message has 8 unknown bytes. [ 367.753932][T16052] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3422'. [ 367.908896][T16063] netlink: zone id is out of range [ 367.935086][T16063] netlink: zone id is out of range [ 367.963371][T16063] netlink: zone id is out of range [ 367.982680][ T13] IPVS: starting estimator thread 0... [ 368.087241][T16069] IPVS: using max 26 ests per chain, 62400 per kthread [ 368.141193][T16078] xt_hashlimit: size too large, truncated to 1048576 [ 368.141663][T16079] netlink: 'syz.2.3434': attribute type 10 has an invalid length. [ 368.499537][T16092] syzkaller0: entered promiscuous mode [ 368.506606][T16092] syzkaller0: entered allmulticast mode [ 368.526749][T16092] tipc: Started in network mode [ 368.538731][T16092] tipc: Node identity f6fa5a70c5fe, cluster identity 4711 [ 368.569044][T16092] tipc: Enabled bearer , priority 0 [ 368.587539][T16091] tipc: Resetting bearer [ 368.633888][T16101] __nla_validate_parse: 3 callbacks suppressed [ 368.633906][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 368.688885][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 368.704571][T16091] tipc: Disabling bearer [ 368.863770][T16109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3446'. [ 368.893428][T16111] openvswitch: netlink: Message has 8 unknown bytes. [ 368.900896][T16109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3446'. [ 369.030848][T16109] ip6t_rpfilter: unknown options [ 369.058145][T16121] syzkaller0: entered promiscuous mode [ 369.063768][T16121] syzkaller0: entered allmulticast mode [ 369.117852][T16124] netlink: 'syz.4.3452': attribute type 1 has an invalid length. [ 369.262192][T16130] netlink: 'syz.2.3454': attribute type 21 has an invalid length. [ 369.293732][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3454'. [ 369.379098][T12960] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.413376][T12960] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.439520][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.513771][ T46] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.646535][T16158] FAULT_INJECTION: forcing a failure. [ 369.646535][T16158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.649873][T16155] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 369.663781][T16158] CPU: 1 UID: 0 PID: 16158 Comm: syz.2.3464 Not tainted syzkaller #0 PREEMPT(full) [ 369.663808][T16158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.663818][T16158] Call Trace: [ 369.663826][T16158] [ 369.663833][T16158] dump_stack_lvl+0xe8/0x150 [ 369.663865][T16158] should_fail_ex+0x410/0x560 [ 369.663897][T16158] _copy_to_user+0x31/0xb0 [ 369.663919][T16158] bpf_test_finish+0x52e/0x690 [ 369.663947][T16158] ? __pfx_bpf_test_finish+0x10/0x10 [ 369.663983][T16158] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 369.664018][T16158] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.664041][T16158] ? __fget_files+0x2a/0x420 [ 369.664072][T16158] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 369.664093][T16158] bpf_prog_test_run+0x2c5/0x340 [ 369.664123][T16158] __sys_bpf+0xa22/0xd90 [ 369.664161][T16158] ? __pfx___sys_bpf+0x10/0x10 [ 369.664197][T16158] ? __fget_files+0x2a/0x420 [ 369.664237][T16158] ? ksys_write+0x242/0x270 [ 369.664265][T16158] ? __pfx_ksys_write+0x10/0x10 [ 369.664297][T16158] __x64_sys_bpf+0xba/0xd0 [ 369.664322][T16158] do_syscall_64+0x166/0x520 [ 369.664345][T16158] ? trace_irq_disable+0x3b/0x140 [ 369.664368][T16158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.664386][T16158] ? clear_bhb_loop+0x70/0xc0 [ 369.664408][T16158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.664425][T16158] RIP: 0033:0x7f2872d9e0d9 [ 369.664443][T16158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.664459][T16158] RSP: 002b:00007f2873bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.664479][T16158] RAX: ffffffffffffffda RBX: 00007f2873025fa0 RCX: 00007f2872d9e0d9 [ 369.664492][T16158] RDX: 000000000000003a RSI: 0000200000000280 RDI: 000000000000000a [ 369.664504][T16158] RBP: 00007f2873bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 369.664515][T16158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.664526][T16158] R13: 00007f2873026038 R14: 00007f2873025fa0 R15: 00007fff8dde80d8 [ 369.664555][T16158] [ 369.719084][T16151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.734357][T16155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.146665][T16181] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3470'. [ 370.421352][T16203] FAULT_INJECTION: forcing a failure. [ 370.421352][T16203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.445448][T16203] CPU: 0 UID: 0 PID: 16203 Comm: syz.4.3475 Not tainted syzkaller #0 PREEMPT(full) [ 370.445475][T16203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.445486][T16203] Call Trace: [ 370.445493][T16203] [ 370.445501][T16203] dump_stack_lvl+0xe8/0x150 [ 370.445532][T16203] should_fail_ex+0x410/0x560 [ 370.445564][T16203] _copy_from_iter+0x1d3/0x1660 [ 370.445590][T16203] ? trace_kmem_cache_alloc+0x29/0xe0 [ 370.445612][T16203] ? kmem_cache_alloc_noprof+0x30c/0x5f0 [ 370.445629][T16203] ? kmem_cache_alloc_noprof+0x152/0x5f0 [ 370.445646][T16203] ? __build_skb+0x62/0x440 [ 370.445666][T16203] ? __build_skb+0x62/0x440 [ 370.445685][T16203] ? __pfx__copy_from_iter+0x10/0x10 [ 370.445711][T16203] ? __build_skb+0x2a2/0x440 [ 370.445734][T16203] ? netlink_sendmsg+0x650/0xb40 [ 370.445751][T16203] ? skb_put+0x112/0x210 [ 370.445774][T16203] netlink_sendmsg+0x6c0/0xb40 [ 370.445801][T16203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.445824][T16203] ? aa_sock_msg_perm+0xf6/0x1c0 [ 370.445855][T16203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.445870][T16203] sock_sendmsg_nosec+0x13a/0x180 [ 370.445892][T16203] ____sys_sendmsg+0x54e/0x850 [ 370.445925][T16203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.445958][T16203] ? import_iovec+0x73/0xa0 [ 370.445980][T16203] ___sys_sendmsg+0x2a5/0x360 [ 370.446006][T16203] ? __lock_acquire+0x683/0x2cf0 [ 370.446039][T16203] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.446096][T16203] ? __fget_files+0x2a/0x420 [ 370.446119][T16203] ? __fget_files+0x3a2/0x420 [ 370.446152][T16203] __x64_sys_sendmsg+0x1b1/0x290 [ 370.446183][T16203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.446234][T16203] do_syscall_64+0x166/0x520 [ 370.446255][T16203] ? trace_irq_disable+0x3b/0x140 [ 370.446276][T16203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.446294][T16203] ? clear_bhb_loop+0x70/0xc0 [ 370.446315][T16203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.446332][T16203] RIP: 0033:0x7f056b99e0d9 [ 370.446354][T16203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.446377][T16203] RSP: 002b:00007f056c856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.446397][T16203] RAX: ffffffffffffffda RBX: 00007f056bc25fa0 RCX: 00007f056b99e0d9 [ 370.446410][T16203] RDX: 0000000004008094 RSI: 00002000000002c0 RDI: 0000000000000003 [ 370.446423][T16203] RBP: 00007f056c856090 R08: 0000000000000000 R09: 0000000000000000 [ 370.446435][T16203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.446447][T16203] R13: 00007f056bc26038 R14: 00007f056bc25fa0 R15: 00007ffdacec2118 [ 370.446479][T16203] [ 370.903708][T16206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.094673][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3482'. [ 371.482880][T16242] FAULT_INJECTION: forcing a failure. [ 371.482880][T16242] name failslab, interval 1, probability 0, space 0, times 0 [ 371.530543][T16242] CPU: 1 UID: 0 PID: 16242 Comm: syz.2.3489 Not tainted syzkaller #0 PREEMPT(full) [ 371.530570][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.530581][T16242] Call Trace: [ 371.530588][T16242] [ 371.530596][T16242] dump_stack_lvl+0xe8/0x150 [ 371.530627][T16242] should_fail_ex+0x410/0x560 [ 371.530661][T16242] should_failslab+0xa8/0x100 [ 371.530689][T16242] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 371.530712][T16242] ? skb_clone+0x212/0x3a0 [ 371.530728][T16242] ? skb_clone+0x212/0x3a0 [ 371.530752][T16242] skb_clone+0x212/0x3a0 [ 371.530776][T16242] __netlink_deliver_tap+0x413/0x860 [ 371.530809][T16242] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.530830][T16242] netlink_deliver_tap+0x19c/0x1b0 [ 371.530852][T16242] netlink_unicast+0x781/0x940 [ 371.530891][T16242] netlink_sendmsg+0x813/0xb40 [ 371.530921][T16242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.530945][T16242] ? aa_sock_msg_perm+0xf6/0x1c0 [ 371.530981][T16242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.531000][T16242] sock_sendmsg_nosec+0x13a/0x180 [ 371.531026][T16242] ____sys_sendmsg+0x54e/0x850 [ 371.531060][T16242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.531098][T16242] ? import_iovec+0x73/0xa0 [ 371.531122][T16242] ___sys_sendmsg+0x2a5/0x360 [ 371.531149][T16242] ? __lock_acquire+0x683/0x2cf0 [ 371.531180][T16242] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.531245][T16242] ? __fget_files+0x2a/0x420 [ 371.531276][T16242] ? __fget_files+0x3a2/0x420 [ 371.531312][T16242] __x64_sys_sendmsg+0x1b1/0x290 [ 371.531344][T16242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.531391][T16242] do_syscall_64+0x166/0x520 [ 371.531419][T16242] ? trace_irq_disable+0x3b/0x140 [ 371.531443][T16242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.531471][T16242] ? clear_bhb_loop+0x70/0xc0 [ 371.531495][T16242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.531514][T16242] RIP: 0033:0x7f2872d9e0d9 [ 371.531532][T16242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.531549][T16242] RSP: 002b:00007f2873bfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.531569][T16242] RAX: ffffffffffffffda RBX: 00007f2873025fa0 RCX: 00007f2872d9e0d9 [ 371.531583][T16242] RDX: 0000000004008094 RSI: 00002000000002c0 RDI: 0000000000000003 [ 371.531596][T16242] RBP: 00007f2873bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 371.531608][T16242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.531620][T16242] R13: 00007f2873026038 R14: 00007f2873025fa0 R15: 00007fff8dde80d8 [ 371.531652][T16242] [ 371.610054][T16242] netlink: zone id is out of range [ 371.811195][T16242] netlink: zone id is out of range [ 371.823962][T16242] netlink: zone id is out of range [ 371.836187][T16246] veth3: entered allmulticast mode [ 372.006376][T16259] netlink: zone id is out of range [ 372.014839][T16259] netlink: zone id is out of range [ 372.026641][T16259] netlink: zone id is out of range [ 372.273725][T16275] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3503'. [ 372.324174][T16276] netlink: 'syz.0.3502': attribute type 4 has an invalid length. [ 372.345264][T16275] tipc: Started in network mode [ 372.352670][T16275] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 372.366707][T16275] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 372.383640][T16275] tipc: Enabled bearer , priority 10 [ 372.697955][T16295] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3510'. [ 372.715377][T16296] netlink: 'syz.1.3509': attribute type 10 has an invalid length. [ 372.761428][T16298] netlink: zone id is out of range [ 373.011893][T16312] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3517'. [ 373.289199][T16333] netlink: 'syz.4.3523': attribute type 4 has an invalid length. [ 373.503787][ T24] tipc: Node number set to 1 [ 373.689514][T16354] __nla_validate_parse: 2 callbacks suppressed [ 373.689531][T16354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3534'. [ 373.713880][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3536'. [ 373.755070][T16356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.768086][T16356] bond0: (slave bond1): Enslaving as an active interface with an up link [ 373.805515][T16359] syzkaller0: entered promiscuous mode [ 373.822952][T16359] syzkaller0: entered allmulticast mode [ 373.842565][T16359] netlink: 'syz.0.3535': attribute type 20 has an invalid length. [ 373.865789][T16359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3535'. [ 373.930644][T16369] netlink: 'syz.4.3540': attribute type 3 has an invalid length. [ 373.932485][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.939200][T16369] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 373.952419][ T46] IPVS: starting estimator thread 0... [ 373.955248][T16369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3540'. [ 373.972855][T16369] netlink: 'syz.4.3540': attribute type 3 has an invalid length. [ 373.983434][T16369] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 373.993111][T16369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3540'. [ 373.996910][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.087129][T16370] IPVS: using max 35 ests per chain, 84000 per kthread [ 374.117269][T12956] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.167219][T12956] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.176279][T16379] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3544'. [ 374.219706][T16379] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 374.255045][T16379] tipc: Enabled bearer , priority 10 [ 374.298673][T16385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3547'. [ 374.320112][T16389] netlink: 'syz.0.3548': attribute type 10 has an invalid length. [ 374.332852][T16384] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 374.460946][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3546'. [ 374.547797][T16401] netlink: 'syz.1.3551': attribute type 2 has an invalid length. [ 374.555780][T16403] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3553'. [ 374.641073][T16409] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3551'. [ 374.938833][T16423] vlan1: entered promiscuous mode [ 375.057334][T16427] syzkaller1: entered promiscuous mode [ 375.077201][T16427] syzkaller1: entered allmulticast mode [ 375.357157][T16432] net_ratelimit: 3 callbacks suppressed [ 375.357175][T16432] openvswitch: netlink: EtherType 2 is less than min 600 [ 375.367410][ T50] tipc: Node number set to 855923312 [ 375.702854][T16450] syzkaller1: entered promiscuous mode [ 375.708558][T16450] syzkaller1: entered allmulticast mode [ 375.721030][T16453] syzkaller0: entered promiscuous mode [ 375.726613][T16453] syzkaller0: entered allmulticast mode [ 375.736200][T16453] tipc: Started in network mode [ 375.741322][T16453] tipc: Node identity 8ad3f72801b6, cluster identity 4711 [ 375.752650][T16453] tipc: Enabled bearer , priority 0 [ 375.763866][T16452] tipc: Resetting bearer [ 375.802796][T16452] tipc: Disabling bearer [ 375.964890][T16464] netlink: 'syz.2.3573': attribute type 2 has an invalid length. [ 376.004189][T16465] netlink: zone id is out of range [ 376.024220][T16465] netlink: zone id is out of range [ 376.043930][T16465] netlink: zone id is out of range [ 376.059624][T16465] netlink: zone id is out of range [ 376.086104][T16465] netlink: zone id is out of range [ 376.119975][T16465] netlink: zone id is out of range [ 376.140860][T16465] netlink: zone id is out of range [ 376.160767][T16465] netlink: zone id is out of range [ 376.176866][ T29] audit: type=1804 audit(1787711882.546:8): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3575" name="/newroot/71/cgroup.controllers" dev="tmpfs" ino=376 res=1 errno=0 [ 376.199423][T16465] netlink: zone id is out of range [ 376.268523][ T29] audit: type=1800 audit(1787711882.546:9): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3575" name="cgroup.controllers" dev="tmpfs" ino=376 res=0 errno=0 [ 376.684730][T16486] team0: Port device dummy0 added [ 377.353045][T16509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.426939][T16518] syzkaller0: entered promiscuous mode [ 377.450003][T16518] syzkaller0: entered allmulticast mode [ 378.323309][T16526] validate_nla: 6 callbacks suppressed [ 378.323330][T16526] netlink: 'syz.3.3596': attribute type 2 has an invalid length. [ 378.509593][T16539] netlink: 'syz.2.3599': attribute type 1 has an invalid length. [ 378.523395][T16539] netlink: 'syz.2.3599': attribute type 2 has an invalid length. [ 378.555095][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.188791][ T30] INFO: task kworker/1:1H:1626 blocked for more than 143 seconds. [ 379.197857][ T30] Not tainted syzkaller #0 [ 379.202832][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.211637][ T30] task:kworker/1:1H state:D stack:26568 pid:1626 tgid:1626 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 379.224126][ T30] Workqueue: kblockd blk_mq_requeue_work [ 379.232257][ T30] Call Trace: [ 379.235577][ T30] [ 379.238624][ T30] __schedule+0x17d4/0x5630 [ 379.243161][ T30] ? __lock_acquire+0x683/0x2cf0 [ 379.248388][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 379.253455][ T30] ? __pfx___schedule+0x10/0x10 [ 379.258443][ T30] ? schedule+0x90/0x2b0 [ 379.262724][ T30] schedule+0x164/0x2b0 [ 379.266882][ T30] schedule_timeout+0x152/0x2c0 [ 379.271940][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 379.277440][ T30] ? __pfx_process_timeout+0x10/0x10 [ 379.282755][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.288619][ T30] ? prepare_to_wait_event+0x436/0x480 [ 379.294138][ T30] nbd_queue_rq+0x889/0x1150 [ 379.298946][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 379.304018][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 379.310266][ T30] blk_mq_dispatch_rq_list+0x499/0x1990 [ 379.315955][ T30] ? sbitmap_get+0x229/0x390 [ 379.320773][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 379.328282][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 379.334159][ T30] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 379.340907][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 379.348410][ T30] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 379.354307][ T30] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 379.359720][ T30] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 379.365068][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 379.371125][ T30] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 379.376425][ T30] blk_mq_run_hw_queue+0x34a/0x4f0 [ 379.381732][ T30] blk_mq_run_hw_queues+0x268/0x3f0 [ 379.387019][ T30] blk_mq_requeue_work+0x703/0x760 [ 379.392156][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 379.397930][ T30] ? rcu_is_watching+0x16/0xb0 [ 379.402762][ T30] ? process_scheduled_works+0xa1a/0x14c0 [ 379.408576][ T30] process_scheduled_works+0xa88/0x14c0 [ 379.414169][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.420244][ T30] ? assign_work+0x3cf/0x5d0 [ 379.424878][ T30] worker_thread+0xa47/0xfb0 [ 379.437569][ T30] kthread+0x38b/0x480 [ 379.441703][ T30] ? __pfx_worker_thread+0x10/0x10 [ 379.446808][ T30] ? __pfx_kthread+0x10/0x10 [ 379.451548][ T30] ret_from_fork+0x514/0xb70 [ 379.456221][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 379.461441][ T30] ? __switch_to+0xc89/0x1420 [ 379.466164][ T30] ? __pfx_kthread+0x10/0x10 [ 379.470879][ T30] ret_from_fork_asm+0x1a/0x30 [ 379.475717][ T30] [ 379.479013][ T30] [ 379.479013][ T30] Showing all locks held in the system: [ 379.486915][ T30] locks held by khungtaskd/30: 1, last CPU#0: [ 379.493351][ T30] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 379.503318][ T30] locks held by kworker/1:1H/1626: 4, on CPU#1: [ 379.509763][ T30] #0: ffff88801f281940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 379.520896][ T30] #1: ffffc900058e7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 379.534965][ T30] #2: ffff888027100d18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x321/0x4f0 [ 379.544623][ T30] #3: ffff8880271fe338 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 379.553701][ T30] locks held by getty/5360: 2, on CPU#0: [ 379.559428][ T30] #0: ffff8880368740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 379.569353][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 379.579690][ T30] locks held by udevd/7150: 1, on CPU#1: [ 379.585354][ T30] #0: ffff888022f94350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 379.595011][ T30] locks held by syz.4.3595/16517: 1, on CPU#1: [ 379.601346][ T30] #0: ffff8880560fb140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 379.611258][ T30] locks held by syz.4.3595/16518: 4, on CPU#0: [ 379.617504][ T30] #0: ffffffff900a7268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 379.625738][ T30] #1: ffffffff900a70a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 379.636247][ T30] #2: ffff8880560fb140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 379.645143][ T30] #3: ffff888032d5c348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 379.654476][ T30] locks held by syz.2.3599/16539: 2, on CPU#1: [ 379.660746][ T30] #0: ffffffff900a7268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 379.669328][ T30] #1: ffffffff900a70a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 379.678417][ T30] locks held by syz.2.3599/16541: 2, on CPU#1: [ 379.684579][ T30] #0: ffffffff900a7268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 379.692852][ T30] #1: ffffffff900a70a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 379.701956][ T30] locks held by syz.3.3600/16538: 2, on CPU#0: [ 379.708288][ T30] #0: ffffffff900a7268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 379.716537][ T30] #1: ffffffff900a70a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 379.725614][ T30] locks held by syz.1.3602/16545: 2, on CPU#0: [ 379.731820][ T30] #0: ffffffff900a7268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 379.741253][ T30] #1: ffffffff900a70a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 379.750465][ T30] locks held by syz.0.3604/16551: 2, on CPU#0: [ 379.756672][ T30] #0: ffffffff900a7268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 379.764916][ T30] #1: ffffffff900a70a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 379.773947][ T30] [ 379.776274][ T30] ============================================= [ 379.776274][ T30] [ 379.784799][ T30] NMI backtrace for cpu 0 [ 379.784814][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 379.784831][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.784841][ T30] Call Trace: [ 379.784847][ T30] [ 379.784854][ T30] dump_stack_lvl+0xe8/0x150 [ 379.784883][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 379.785003][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 379.785032][ T30] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 379.785054][ T30] sys_info+0x135/0x170 [ 379.785080][ T30] watchdog+0xfd7/0x1030 [ 379.785122][ T30] ? watchdog+0x1c7/0x1030 [ 379.785151][ T30] kthread+0x38b/0x480 [ 379.785176][ T30] ? __pfx_watchdog+0x10/0x10 [ 379.785198][ T30] ? __pfx_kthread+0x10/0x10 [ 379.785223][ T30] ret_from_fork+0x514/0xb70 [ 379.785251][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 379.785276][ T30] ? __switch_to+0xc89/0x1420 [ 379.785297][ T30] ? __pfx_kthread+0x10/0x10 [ 379.785323][ T30] ret_from_fork_asm+0x1a/0x30 [ 379.785359][ T30] [ 379.785365][ T30] Sending NMI from CPU 0 to CPUs 1: [ 379.899676][ C1] NMI backtrace for cpu 1 [ 379.899695][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 379.899715][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.899726][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 379.899755][ C1] Code: 9c 79 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 10 00 fb f4 4c 09 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 379.899771][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 379.899788][ C1] RAX: 0000000000100415 RBX: ffffffff819b2810 RCX: 8000000000000001 [ 379.899802][ C1] RDX: 0000000000000001 RSI: ffffffff8e25899f RDI: ffffffff8c4cd780 [ 379.899816][ C1] RBP: ffffc90000197f10 R08: ffff8880b873389b R09: 1ffff110170e6713 [ 379.899830][ C1] R10: dffffc0000000000 R11: ffffed10170e6714 R12: 0000000000000000 [ 379.899843][ C1] R13: 1ffff11003c55000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 379.899857][ C1] FS: 0000000000000000(0000) GS:ffff888125021000(0000) knlGS:0000000000000000 [ 379.899873][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.899886][ C1] CR2: 000000110c36e28b CR3: 000000007d5d2000 CR4: 00000000003526f0 [ 379.899903][ C1] Call Trace: [ 379.899911][ C1] [ 379.899918][ C1] default_idle+0x9/0x20 [ 379.899942][ C1] default_idle_call+0x72/0xb0 [ 379.899966][ C1] do_idle+0x2e0/0x540 [ 379.899996][ C1] ? __pfx_do_idle+0x10/0x10 [ 379.900026][ C1] cpu_startup_entry+0x43/0x60 [ 379.900050][ C1] start_secondary+0x101/0x110 [ 379.900079][ C1] common_startup_64+0x13e/0x157 [ 379.900110][ C1] [ 380.063672][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 380.070546][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 380.079736][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.089780][ T30] Call Trace: [ 380.093052][ T30] [ 380.095973][ T30] vpanic+0x56d/0xa60 [ 380.099966][ T30] ? __pfx___schedule+0x10/0x10 [ 380.104819][ T30] ? __pfx_vpanic+0x10/0x10 [ 380.109318][ T30] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 380.115514][ T30] panic+0xc5/0xd0 [ 380.119249][ T30] ? __pfx_panic+0x10/0x10 [ 380.123656][ T30] ? preempt_schedule_common+0x7f/0xd0 [ 380.129104][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 380.134465][ T30] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 380.140616][ T30] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 380.146770][ T30] watchdog+0x1030/0x1030 [ 380.151144][ T30] ? watchdog+0x1c7/0x1030 [ 380.155583][ T30] kthread+0x38b/0x480 [ 380.159645][ T30] ? __pfx_watchdog+0x10/0x10 [ 380.164310][ T30] ? __pfx_kthread+0x10/0x10 [ 380.168896][ T30] ret_from_fork+0x514/0xb70 [ 380.173497][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 380.178612][ T30] ? __switch_to+0xc89/0x1420 [ 380.183292][ T30] ? __pfx_kthread+0x10/0x10 [ 380.187886][ T30] ret_from_fork_asm+0x1a/0x30 [ 380.192686][ T30] [ 380.195978][ T30] Kernel Offset: disabled [ 380.200297][ T30] Rebooting in 86400 seconds..