last executing test programs: 23.394727178s ago: executing program 1 (id=2027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x7fff, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 23.102323526s ago: executing program 1 (id=2031): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x0, 0x1f0, 0x120, 0x550, 0x0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {0x800000000000000}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) 22.974140302s ago: executing program 1 (id=2033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0xf3, 0x3, 0x1, 0x2, 0xfffffff7, 0x3}}, {0xa, 0x2, [0xc, 0x6, 0x7b2]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@setlink={0x60, 0x13, 0x5, 0x0, 0x8000, {0x0, 0x0, 0x0, r3, 0x408, 0xc002}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x24, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x1f, 0x2, '\xbaE\x10]\x0ebj^N\x81\xec}\x0e\x00\xd6\xb5\xc9\x19\xd7\x8e\xe0\x94:46@\xef'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c004891}, 0x8004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 21.470803244s ago: executing program 0 (id=2039): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x1800, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x28) 21.419676579s ago: executing program 0 (id=2040): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2) unshare(0x44000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$pptp(0x18, 0x1, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.433477493s ago: executing program 4 (id=2043): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0xe}], {0x95, 0x0, 0x1800}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.19436531s ago: executing program 4 (id=2044): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000005c0), 0x3) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x3c, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="0d2a79075827af5aa534d6815c2e93f1"]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="b4e27551be74"]}]}, 0x3c}}, 0x20048800) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}, {&(0x7f0000000400)=""/255, 0xff}, {&(0x7f0000000180)=""/159, 0x9f}], 0x3, &(0x7f0000000540)=""/7, 0x7}, 0x5251}], 0x1, 0x143, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmmsg(r2, &(0x7f0000001000)=[{{&(0x7f0000000740)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000007c0)="324255816a8679812873", 0xa}, {0x0}], 0x2}}], 0x1, 0x0) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000000)=""/61, &(0x7f0000000040)=0x3d) syz_emit_ethernet(0x7a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 20.058746047s ago: executing program 4 (id=2045): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/254, 0xfe}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/223, 0xe0}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/189, 0xbd}, {&(0x7f00000016c0)=""/235, 0xeb}], 0x9}, 0x10001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfff}], 0x3, 0x4022, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x2000}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x30}}, 0x4004000) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0x80) r6 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r6, 0x3a5) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) 19.035021616s ago: executing program 4 (id=2049): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 18.741557821s ago: executing program 4 (id=2051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) close(0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01ef90e92e62541f7ba7e9f03f5058e40ee90c00000731bd7fc346e4d613dc7b0b", @ANYBLOB="e889df416caae3cb06f06f8d383dcf6ea8108d7dc045e9df914b39ca518df01ad3e977b8e57cd5ae3cb354be0cc434fa51e94851f7"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x84) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r3 = socket(0x14, 0x6, 0x4) ioctl$SIOCX25GDTEFACILITIES(r3, 0x61e1, 0x0) write(r2, &(0x7f00000000c0)="ab1ae393207716fa49cd1c342bdddc675b507187cc0a613c19d20c38e95f1b44b901e2b37054f91bea0abbd1b06d5aac6e0765e4715e", 0x36) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000000022d8f05992", @ANYBLOB="4f835b64af1e5aeb263233fa9a24f0b790aaabbc7ecf8bb4ff276c662ad51116d9de3f8a6c121c279279cf894085d912f2fcedb6e5b191a8478395fe063080aebb8a63ad6d1af44b3c3fdcb6cc1dd188ddc4166c1b2d766c77b4d566465f4f6d2ec0e4f5d7a116a08f76", @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYBLOB="0200000004000000010000000e00"/28], 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000010000007020000f8ffffffb7e6ffff07000000b704000000000000850000000300000095000000001c6600"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0xd, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) r7 = socket(0x8, 0x3, 0x3) socket(0x2a, 0x2, 0x20000007) ioctl$sock_netrom_SIOCADDRT(r7, 0x6180, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 18.613169011s ago: executing program 1 (id=2052): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004400)=[{{&(0x7f0000001780), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x92000000000000d0) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x61f0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0xf0a, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xd, 0x6}, {0x4, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x880) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x7, &(0x7f0000000180)=[{0x7fff, 0xf2, 0x1, 0x9}, {0x9, 0x36, 0xf0, 0x7}, {0x8, 0x1, 0x0, 0x200}, {0x8000, 0x6, 0x8, 0xffffffff}, {0xfd06, 0x4, 0xd}, {0x3, 0x75, 0xc3, 0x7}, {0xfff, 0xa8, 0xf7, 0x8}]}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200375f3fbd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) unshare(0x6a040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x40041) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x4008814) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000c801b20000bb01781684d4a096afdaa1da000000000000000000001583b7e282bbb9eebd55136469f3aa2c7dcaf3549d2d60389caf970c9c2dd465e680d0a6d1bccd6fd1b86fbd30a05e4c8101f2b3deebf506c6856bccedb371f92d61f5995a82833680b5d2ac48bde5a0d3bebba87d311eeb51d81ca2a8f082c8687a5d3d9ad35236523f5310ef4af9116426295f4d5813d1767af509e4bd010b3df37a6a071ccc9ed674032d4d0cc726bfac72f9be4a7982f6a34f2e307116916b77dd9f73df6181a68a6e15fef381af9ff3c6e27e4e455d825207eac8343d3e45c57f806b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="f9ffffff080002000200000014000100"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) unshare(0x600) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r7, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) socket$kcm(0x10, 0x2, 0x0) 18.181930747s ago: executing program 0 (id=2053): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 17.900768899s ago: executing program 0 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2a, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e82"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') close(0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1169, &(0x7f00000018c0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x9c, r5, 0x105, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4901}, @device_b, @device_a, @initial, {0x5, 0x1}}, 0x8, @random=0x6c, 0x2, @val, @void, @void, @val={0x4, 0x6, {0x80, 0x5, 0x1, 0x4}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x9d, 0x2}}, @val={0x2d, 0x1a, {0xc, 0x3, 0x4, 0x0, {0xffffffffffffffff, 0x14, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xd, 0x4}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x20}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x9, 0x1}, {0xb, 0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0) 17.792428095s ago: executing program 3 (id=2056): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x8}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ieee802154={0x24, @short={0x2, 0x3, 0xffff}}, 0x80, 0x0}}], 0x1, 0x24004041) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 17.710513066s ago: executing program 0 (id=2057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, 0x0) writev(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800002100000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r4, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0xd7e, &(0x7f0000001800)={@random="9d3e485beb27", @random="78a4e8c9ab61", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd48, 0x3a, 0x0, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xadd, {0x0, 0x6, "6b329f", 0x0, 0x3a, 0x0, @empty, @local, [@hopopts={0x0, 0x19b, '\x00', [@pad1, @generic={0x7, 0xcd4, "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"}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x7, 0x4, 0x552, [@dev={0xfe, 0x80, '\x00', 0x1}]}, @srh={0x32, 0x2, 0x4, 0x1, 0x1, 0x70, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 17.64609138s ago: executing program 3 (id=2058): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="b40000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800040000e40000140001000000000000000000cc0c3ae27f00000114000100fe8000000000000000000000000000aa2c0002"], 0xb4}}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3c, 0x301, 0x70bd26, 0x25dfdbfa, {0x1}}, 0x14}}, 0x24004040) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002c0000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="88010000", @ANYRES16=r7, @ANYBLOB="10002bbd7000fddbdf2501000000040003001400018008000300020000000800030003000000b00002801c00018008000100050000000800010000000000080001000200000044000180080001000300000008000100080000000800010007000000080001000500000008000100080000000800010003000000080001000100000008000100070000004c000180080001000100000008000100030000000800010007000000080001000300000008000100010000000800010001000000080001000700000008000100050000000800010007000000a400028014000180080001000000000008000100070000001c0001800800010002000000080001000200000008000100020000003c000180080001000200000008000100080000000800010005000000080001000400000008000100010000000800010000000000080001000100000034000180080001000800000008000100010000000800010006000000080001000700000008000100050000000800010008000000"], 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) 17.590683078s ago: executing program 2 (id=2059): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$rds(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x2}}], 0xa0}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket(0x28, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r5], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 17.358440965s ago: executing program 2 (id=2060): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x48094) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x320, 0x9, 0x80, 0x1a, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) 17.284114001s ago: executing program 2 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x5c00, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) 17.170183595s ago: executing program 2 (id=2062): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @random="41b143158538", 'erspan0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ipvlan0\x00'}}, 0x1e) 16.994645104s ago: executing program 2 (id=2063): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r6 = socket(0x21, 0x2, 0x10000000000002) recvmmsg(r6, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x3, {0x1, 0x1, 0x6}}, 0x18) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) write$tun(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x352) 16.710848105s ago: executing program 3 (id=2064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000005000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 16.56487889s ago: executing program 3 (id=2065): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x101141, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="0213000e0600000000000000f8dbdf2504000300090000000400000000000000010000004f0000000000000000040000"], 0x30}}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="09002bbd70040000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newqdisc={0xc8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffff6d, 0x3ff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x8, 0x3045}}]}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x60, 0x40, 0x3, 0xff, 0x2, 0x0, 0x9, 0x3}}, {0xa, 0x2, [0x7, 0x5, 0x1]}}, {{0x1c, 0x1, {0x5, 0x97, 0x8001, 0x4, 0x2, 0xac4, 0x2, 0x7}}, {0x12, 0x2, [0x5, 0x8, 0x0, 0x7, 0x9ab, 0xe, 0x0]}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}}], 0x2, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x200}) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffd6e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 15.949260454s ago: executing program 2 (id=2066): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400deef000008001b0000000000"], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f60) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200087a31d66e3db9220056bc6302208d42363716172761c59c095d244ec36eb4a9c1d0c25f9dc473a02b270a2a503923821e7a79d714981f4e7a5377aacf3f641b47118e5ac1f24cbdc30b112549ef46242c7cf165bc0f1fad5db3206b3775ae8a30983e8c135fd5779feccf3a82b525d5de729c9478"], 0x17) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'veth0_macvtap\x00', @random="013301300108"}) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r6 = accept4(r0, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x80, 0x800) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000680)) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f00000002c0)='\x00', 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000b440)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x5, 0x82, 0xb, 0x8, 0x4e9, r8}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="f91aba82d490761af2aee35066c28f94509d3500", 0x14}, {&(0x7f0000000380)="ad0f", 0x2}, {&(0x7f0000000440)="600fe0c45f24a0eeed954483f7e9efc0a09a7cb4a8e5af44947f3940e19102a87f2153aa70b19ed86a93f0abd06f", 0x2e}], 0x3}}, {{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000001080)="8374e5233945507d14d8c2d1a59cac681a14369316a6f556a16b2c0dab4852", 0x1f}, {&(0x7f0000000600)="054e65ebac44c4e6d6d7bb9e6f829f1ef099cb1ff49412", 0x17}, {&(0x7f0000000740)="b3369e", 0x3}, {&(0x7f0000001180)="68e104c744cec1345bd7dd1b812f58dd21fdc41b8f3602dc52811f05c48a470260d0b4d62316e47f2c02ffff", 0x2c}, {&(0x7f00000011c0)="fc7d59a7783d606fae2a1e0af0aa49b9cad13383fe9743203013bbcf1c5af22100f6819f5b1776d858a20484f31ed8f6cd0fa42eccecf6bff7f818425b8385036721b6d4a95b33b1c31c24fc7c23ffedf6c61a794cf14526c277b2d4297b3ea48d00d1b0e226e04c20ade01662a489c2ed51da4cacc53325ffe208617ae6a3ce3e1fe9ee723c9891d528e7177ef796603cc702ea059f20f7b9324f77fae3e4b2ea1ab8baac1ffa51180e30935ca0254df304649119df904df5330c256d71ea75ae2c8b63bb1d", 0xc6}], 0x6}}, {{0x0, 0x0, &(0x7f0000001840)}}], 0x4, 0x48040) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x84, 0x5, 0xff, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x1, 0xfffffffc, 0x7f}}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bind$llc(0xffffffffffffffff, 0x0, 0x0) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000b, 0x100010, 0xffffffffffffffff, 0xde791000) 15.814941452s ago: executing program 1 (id=2067): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) 15.769536812s ago: executing program 0 (id=2068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_emit_ethernet(0x1f, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00'}, 0x10) bind$bt_hci(r2, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000680)=""/4, &(0x7f0000000240)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r4], 0x40}}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x2000}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000)=r7, 0x4) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}]}, 0x48}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="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", 0x112}, {&(0x7f0000001280)="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", 0xcc1}, {&(0x7f0000002100)="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", 0x176}, {&(0x7f00000000c0)="154babd913e653d4a1a6adb94187c28ccc524eac51d7270679617eaa706d7189a722e2aa39188ee68337b38b5f492234db08f8949adff29f0619321218e7ba1c78d44ed81f7607c5", 0x48}], 0x4}, 0x8010) 15.759167928s ago: executing program 1 (id=2069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x9, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 15.694528935s ago: executing program 4 (id=2070): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x2000}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x48}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) 15.600913427s ago: executing program 3 (id=2071): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x48094) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x320, 0x9, 0x80, 0x1a, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) 15.186588308s ago: executing program 3 (id=2072): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) 714.211678ms ago: executing program 32 (id=2068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_emit_ethernet(0x1f, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00'}, 0x10) bind$bt_hci(r2, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000680)=""/4, &(0x7f0000000240)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r4], 0x40}}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x2000}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000)=r7, 0x4) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}]}, 0x48}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="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", 0x112}, {&(0x7f0000001280)="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", 0xcc1}, {&(0x7f0000002100)="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", 0x176}, {&(0x7f00000000c0)="154babd913e653d4a1a6adb94187c28ccc524eac51d7270679617eaa706d7189a722e2aa39188ee68337b38b5f492234db08f8949adff29f0619321218e7ba1c78d44ed81f7607c5", 0x48}], 0x4}, 0x8010) 500.915434ms ago: executing program 33 (id=2069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x9, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 358.917565ms ago: executing program 34 (id=2066): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400deef000008001b0000000000"], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f60) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200087a31d66e3db9220056bc6302208d42363716172761c59c095d244ec36eb4a9c1d0c25f9dc473a02b270a2a503923821e7a79d714981f4e7a5377aacf3f641b47118e5ac1f24cbdc30b112549ef46242c7cf165bc0f1fad5db3206b3775ae8a30983e8c135fd5779feccf3a82b525d5de729c9478"], 0x17) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'veth0_macvtap\x00', @random="013301300108"}) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r6 = accept4(r0, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x80, 0x800) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000680)) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f00000002c0)='\x00', 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000b440)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x5, 0x82, 0xb, 0x8, 0x4e9, r8}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="f91aba82d490761af2aee35066c28f94509d3500", 0x14}, {&(0x7f0000000380)="ad0f", 0x2}, {&(0x7f0000000440)="600fe0c45f24a0eeed954483f7e9efc0a09a7cb4a8e5af44947f3940e19102a87f2153aa70b19ed86a93f0abd06f", 0x2e}], 0x3}}, {{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000001080)="8374e5233945507d14d8c2d1a59cac681a14369316a6f556a16b2c0dab4852", 0x1f}, {&(0x7f0000000600)="054e65ebac44c4e6d6d7bb9e6f829f1ef099cb1ff49412", 0x17}, {&(0x7f0000000740)="b3369e", 0x3}, {&(0x7f0000001180)="68e104c744cec1345bd7dd1b812f58dd21fdc41b8f3602dc52811f05c48a470260d0b4d62316e47f2c02ffff", 0x2c}, {&(0x7f00000011c0)="fc7d59a7783d606fae2a1e0af0aa49b9cad13383fe9743203013bbcf1c5af22100f6819f5b1776d858a20484f31ed8f6cd0fa42eccecf6bff7f818425b8385036721b6d4a95b33b1c31c24fc7c23ffedf6c61a794cf14526c277b2d4297b3ea48d00d1b0e226e04c20ade01662a489c2ed51da4cacc53325ffe208617ae6a3ce3e1fe9ee723c9891d528e7177ef796603cc702ea059f20f7b9324f77fae3e4b2ea1ab8baac1ffa51180e30935ca0254df304649119df904df5330c256d71ea75ae2c8b63bb1d", 0xc6}], 0x6}}, {{0x0, 0x0, &(0x7f0000001840)}}], 0x4, 0x48040) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x84, 0x5, 0xff, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x1, 0xfffffffc, 0x7f}}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bind$llc(0xffffffffffffffff, 0x0, 0x0) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000b, 0x100010, 0xffffffffffffffff, 0xde791000) 182.070643ms ago: executing program 35 (id=2072): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) 0s ago: executing program 36 (id=2070): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x2000}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x48}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) kernel console output (not intermixed with test programs): __pfx_netlink_sendmsg+0x10/0x10 [ 257.850114][ T9723] __sock_sendmsg+0x21c/0x270 [ 257.850148][ T9723] ____sys_sendmsg+0x505/0x830 [ 257.850180][ T9723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.850216][ T9723] ? import_iovec+0x74/0xa0 [ 257.850298][ T9723] ___sys_sendmsg+0x21f/0x2a0 [ 257.850335][ T9723] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.850401][ T9723] ? __fget_files+0x2a/0x420 [ 257.850420][ T9723] ? __fget_files+0x3a0/0x420 [ 257.850451][ T9723] __x64_sys_sendmsg+0x19b/0x260 [ 257.850479][ T9723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.850514][ T9723] ? __pfx_ksys_write+0x10/0x10 [ 257.850548][ T9723] ? do_syscall_64+0xbe/0xfa0 [ 257.850578][ T9723] do_syscall_64+0xfa/0xfa0 [ 257.850601][ T9723] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.850625][ T9723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.850646][ T9723] ? clear_bhb_loop+0x60/0xb0 [ 257.850672][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.850691][ T9723] RIP: 0033:0x7f654138eec9 [ 257.850711][ T9723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.850729][ T9723] RSP: 002b:00007f654217a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.850752][ T9723] RAX: ffffffffffffffda RBX: 00007f65415e5fa0 RCX: 00007f654138eec9 [ 257.850766][ T9723] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000d [ 257.850779][ T9723] RBP: 00007f654217a090 R08: 0000000000000000 R09: 0000000000000000 [ 257.850791][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.850804][ T9723] R13: 00007f65415e6038 R14: 00007f65415e5fa0 R15: 00007ffd3cdb8088 [ 257.850840][ T9723] [ 258.261276][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 258.471097][ T9704] wlan1 speed is unknown, defaulting to 1000 [ 258.964580][ T9725] wlan1 speed is unknown, defaulting to 1000 [ 259.616186][ T9747] nbd: must specify at least one socket [ 260.314940][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 261.364767][ T9759] wlan1 speed is unknown, defaulting to 1000 [ 261.991450][ T9774] wlan1 speed is unknown, defaulting to 1000 [ 262.263215][ T9797] bridge4: entered promiscuous mode [ 262.268668][ T9797] bridge4: entered allmulticast mode [ 262.291256][ T9799] __nla_validate_parse: 6 callbacks suppressed [ 262.291277][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 262.785457][ T9793] wlan1 speed is unknown, defaulting to 1000 [ 262.974305][ T9771] wlan1 speed is unknown, defaulting to 1000 [ 263.331634][ T9778] wlan1 speed is unknown, defaulting to 1000 [ 265.129657][ T9809] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 265.177420][ T1325] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:acfd:cbff:fe67:b145 error=-28 [ 265.178266][ T9809] bond1: (slave macvlan5): Enslaving as an active interface with an up link [ 265.292224][ T9815] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1220'. [ 265.293218][ T9814] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 265.337647][ T9815] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1220'. [ 265.357634][ T9815] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1220'. [ 265.403271][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 265.594922][ T7563] page_pool_release_retry() stalled pool shutdown: id 65, 1 inflight 60 sec [ 266.031884][ T9834] ipvlan3: entered promiscuous mode [ 266.143201][ T9820] wlan1 speed is unknown, defaulting to 1000 [ 266.168964][ T9839] syz_tun: entered promiscuous mode [ 266.184944][ T9839] vlan2: entered promiscuous mode [ 266.363964][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 266.396251][ T9848] netlink: 'syz.1.1232': attribute type 30 has an invalid length. [ 266.455035][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.480828][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.521127][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.030397][ T9871] ipvlan8: entered promiscuous mode [ 268.491560][ T9898] wlan1 speed is unknown, defaulting to 1000 [ 268.525530][ T9909] ipvlan9: entered promiscuous mode [ 269.320993][ T9918] wlan1 speed is unknown, defaulting to 1000 [ 269.585865][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1267'. [ 269.879745][ T9965] FAULT_INJECTION: forcing a failure. [ 269.879745][ T9965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.908872][ T9962] ipvlan4: entered promiscuous mode [ 269.918239][ T9965] CPU: 1 UID: 0 PID: 9965 Comm: syz.2.1271 Not tainted syzkaller #0 PREEMPT(full) [ 269.918268][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.918281][ T9965] Call Trace: [ 269.918289][ T9965] [ 269.918298][ T9965] dump_stack_lvl+0x189/0x250 [ 269.918326][ T9965] ? __pfx____ratelimit+0x10/0x10 [ 269.918350][ T9965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.918372][ T9965] ? __pfx__printk+0x10/0x10 [ 269.918409][ T9965] should_fail_ex+0x414/0x560 [ 269.918441][ T9965] _copy_to_user+0x31/0xb0 [ 269.918465][ T9965] simple_read_from_buffer+0xe1/0x170 [ 269.918500][ T9965] proc_fail_nth_read+0x1b3/0x220 [ 269.918529][ T9965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.918558][ T9965] ? rw_verify_area+0x2a6/0x4d0 [ 269.918584][ T9965] ? __lock_acquire+0xab9/0xd20 [ 269.918603][ T9965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.918630][ T9965] vfs_read+0x200/0xa30 [ 269.918655][ T9965] ? fdget_pos+0x247/0x320 [ 269.918680][ T9965] ? __pfx___mutex_lock+0x10/0x10 [ 269.918705][ T9965] ? __pfx_vfs_read+0x10/0x10 [ 269.918735][ T9965] ? __fget_files+0x2a/0x420 [ 269.918759][ T9965] ? __fget_files+0x3a0/0x420 [ 269.918776][ T9965] ? __fget_files+0x2a/0x420 [ 269.918803][ T9965] ksys_read+0x145/0x250 [ 269.918833][ T9965] ? __pfx_ksys_read+0x10/0x10 [ 269.918861][ T9965] ? do_syscall_64+0xbe/0xfa0 [ 269.918888][ T9965] do_syscall_64+0xfa/0xfa0 [ 269.918909][ T9965] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.918932][ T9965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.918953][ T9965] ? clear_bhb_loop+0x60/0xb0 [ 269.918978][ T9965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.918997][ T9965] RIP: 0033:0x7fa68158d8dc [ 269.919016][ T9965] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 269.919035][ T9965] RSP: 002b:00007fa6823fe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.919058][ T9965] RAX: ffffffffffffffda RBX: 00007fa6817e5fa0 RCX: 00007fa68158d8dc [ 269.919073][ T9965] RDX: 000000000000000f RSI: 00007fa6823fe0a0 RDI: 0000000000000004 [ 269.919094][ T9965] RBP: 00007fa6823fe090 R08: 0000000000000000 R09: 0000000000000000 [ 269.919107][ T9965] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 269.919119][ T9965] R13: 00007fa6817e6038 R14: 00007fa6817e5fa0 R15: 00007ffeb19dc808 [ 269.919157][ T9965] [ 270.166426][ T9945] wlan1 speed is unknown, defaulting to 1000 [ 270.308218][ T9971] netlink: 'syz.2.1272': attribute type 10 has an invalid length. [ 270.737635][ T9980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1274'. [ 270.798352][ T9982] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1275'. [ 270.809459][ T9982] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1275'. [ 270.841393][ T9982] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1275'. [ 270.884851][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 270.944856][ T9988] gre1: entered allmulticast mode [ 271.042424][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1279'. [ 271.087681][ T9994] netlink: 'syz.3.1279': attribute type 96 has an invalid length. [ 271.136231][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 272.109777][T10017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1287'. [ 272.175906][T10014] ipvlan7: entered promiscuous mode [ 272.622077][T10010] wlan1 speed is unknown, defaulting to 1000 [ 272.654660][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 272.854305][T10033] tipc: Enabled bearer , priority 0 [ 272.885735][T10033] syzkaller0: entered promiscuous mode [ 272.918809][T10033] syzkaller0: entered allmulticast mode [ 273.144911][T10037] tipc: Resetting bearer [ 273.254315][T10032] tipc: Resetting bearer [ 273.299715][T10032] tipc: Disabling bearer [ 273.557044][T10022] wlan1 speed is unknown, defaulting to 1000 [ 273.932890][T10051] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 274.263852][T10064] netlink: 'syz.2.1300': attribute type 19 has an invalid length. [ 274.272318][T10064] netlink: 'syz.2.1300': attribute type 20 has an invalid length. [ 274.287394][T10063] netlink: 'syz.0.1301': attribute type 5 has an invalid length. [ 274.746997][T10077] __nla_validate_parse: 8 callbacks suppressed [ 274.747019][T10077] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1306'. [ 274.765620][T10077] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1306'. [ 274.775156][T10077] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1306'. [ 274.784629][T10034] wlan1 speed is unknown, defaulting to 1000 [ 274.991941][T10079] nbd1: detected capacity change from 0 to 127 [ 275.015708][ T52] block nbd1: Receive control failed (result -32) [ 275.017667][ T9114] block nbd1: Send control failed (result -32) [ 275.040427][ T9114] block nbd1: Request send failed, requeueing [ 275.065182][ T56] block nbd1: Dead connection, failed to find a fallback [ 275.073269][ T56] block nbd1: shutting down sockets [ 275.078678][ T56] blk_print_req_error: 138 callbacks suppressed [ 275.078700][ T56] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.095423][ T56] buffer_io_error: 138 callbacks suppressed [ 275.095445][ T56] Buffer I/O error on dev nbd1, logical block 0, async page read [ 275.109998][ T9114] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.119302][ T9114] Buffer I/O error on dev nbd1, logical block 1, async page read [ 275.127534][ T9114] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.137008][ T9114] Buffer I/O error on dev nbd1, logical block 2, async page read [ 275.145897][ T9114] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.156173][ T9114] Buffer I/O error on dev nbd1, logical block 3, async page read [ 275.164677][ T9114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.174255][ T9114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 275.182400][ T9114] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.191778][ T9114] Buffer I/O error on dev nbd1, logical block 1, async page read [ 275.199763][ T9114] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.209217][ T9114] Buffer I/O error on dev nbd1, logical block 2, async page read [ 275.219524][ T9114] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.232947][ T9114] Buffer I/O error on dev nbd1, logical block 3, async page read [ 275.241455][ T9114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.250692][ T9114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 275.259360][ T9114] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.269803][ T9114] Buffer I/O error on dev nbd1, logical block 1, async page read [ 275.282965][ T9114] ldm_validate_partition_table(): Disk read failed. [ 275.293395][ T9114] Dev nbd1: unable to read RDB block 0 [ 275.308448][ T9114] nbd1: unable to read partition table [ 275.358370][ T9114] ldm_validate_partition_table(): Disk read failed. [ 275.389058][ T9114] Dev nbd1: unable to read RDB block 0 [ 275.397564][ T9114] nbd1: unable to read partition table [ 275.504253][T10086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1310'. [ 275.674264][T10069] wlan1 speed is unknown, defaulting to 1000 [ 276.077216][T10099] FAULT_INJECTION: forcing a failure. [ 276.077216][T10099] name failslab, interval 1, probability 0, space 0, times 0 [ 276.090051][T10099] CPU: 1 UID: 0 PID: 10099 Comm: syz.2.1316 Not tainted syzkaller #0 PREEMPT(full) [ 276.090080][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.090092][T10099] Call Trace: [ 276.090101][T10099] [ 276.090118][T10099] dump_stack_lvl+0x189/0x250 [ 276.090147][T10099] ? __pfx____ratelimit+0x10/0x10 [ 276.090173][T10099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.090195][T10099] ? __pfx__printk+0x10/0x10 [ 276.090219][T10099] ? __pfx___might_resched+0x10/0x10 [ 276.090243][T10099] ? fs_reclaim_acquire+0x7d/0x100 [ 276.090295][T10099] should_fail_ex+0x414/0x560 [ 276.090337][T10099] should_failslab+0xa8/0x100 [ 276.090366][T10099] kmem_cache_alloc_noprof+0x74/0x6e0 [ 276.090395][T10099] ? skb_clone+0x212/0x3a0 [ 276.090433][T10099] skb_clone+0x212/0x3a0 [ 276.090457][T10099] ? nfnetlink_rcv+0x4ba/0x2590 [ 276.090491][T10099] nfnetlink_rcv+0x4ec/0x2590 [ 276.090523][T10099] ? __dev_queue_xmit+0x27b/0x3b50 [ 276.090552][T10099] ? __dev_queue_xmit+0x1d79/0x3b50 [ 276.090575][T10099] ? kasan_save_track+0x3e/0x80 [ 276.090600][T10099] ? __kasan_slab_alloc+0x6c/0x80 [ 276.090638][T10099] ? __dev_queue_xmit+0x27b/0x3b50 [ 276.090679][T10099] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 276.090729][T10099] ? ref_tracker_free+0x63a/0x7d0 [ 276.090756][T10099] ? __asan_memcpy+0x40/0x70 [ 276.090780][T10099] ? __pfx_ref_tracker_free+0x10/0x10 [ 276.090826][T10099] ? skb_clone+0x246/0x3a0 [ 276.090855][T10099] ? __netlink_deliver_tap+0x807/0x850 [ 276.090875][T10099] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.090925][T10099] netlink_unicast+0x82f/0x9e0 [ 276.090967][T10099] ? __pfx_netlink_unicast+0x10/0x10 [ 276.091000][T10099] ? netlink_sendmsg+0x642/0xb30 [ 276.091020][T10099] ? skb_put+0x11b/0x210 [ 276.091046][T10099] netlink_sendmsg+0x805/0xb30 [ 276.091080][T10099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.091107][T10099] ? aa_sock_msg_perm+0xf1/0x1d0 [ 276.091151][T10099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.091171][T10099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.091201][T10099] __sock_sendmsg+0x21c/0x270 [ 276.091234][T10099] ____sys_sendmsg+0x505/0x830 [ 276.091265][T10099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.091299][T10099] ? import_iovec+0x74/0xa0 [ 276.091325][T10099] ___sys_sendmsg+0x21f/0x2a0 [ 276.091352][T10099] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.091419][T10099] ? __fget_files+0x2a/0x420 [ 276.091437][T10099] ? __fget_files+0x3a0/0x420 [ 276.091469][T10099] __x64_sys_sendmsg+0x19b/0x260 [ 276.091498][T10099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.091533][T10099] ? __pfx_ksys_write+0x10/0x10 [ 276.091565][T10099] ? do_syscall_64+0xbe/0xfa0 [ 276.091592][T10099] do_syscall_64+0xfa/0xfa0 [ 276.091614][T10099] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.091639][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.091659][T10099] ? clear_bhb_loop+0x60/0xb0 [ 276.091684][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.091704][T10099] RIP: 0033:0x7fa68158eec9 [ 276.091724][T10099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.091741][T10099] RSP: 002b:00007fa6823fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.091764][T10099] RAX: ffffffffffffffda RBX: 00007fa6817e5fa0 RCX: 00007fa68158eec9 [ 276.091779][T10099] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 276.091793][T10099] RBP: 00007fa6823fe090 R08: 0000000000000000 R09: 0000000000000000 [ 276.091806][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.091818][T10099] R13: 00007fa6817e6038 R14: 00007fa6817e5fa0 R15: 00007ffeb19dc808 [ 276.091854][T10099] [ 276.545028][T10101] FAULT_INJECTION: forcing a failure. [ 276.545028][T10101] name failslab, interval 1, probability 0, space 0, times 0 [ 276.558347][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.2.1317 Not tainted syzkaller #0 PREEMPT(full) [ 276.558379][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.558391][T10101] Call Trace: [ 276.558400][T10101] [ 276.558408][T10101] dump_stack_lvl+0x189/0x250 [ 276.558436][T10101] ? __pfx____ratelimit+0x10/0x10 [ 276.558461][T10101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.558482][T10101] ? __pfx__printk+0x10/0x10 [ 276.558509][T10101] ? __lock_acquire+0xab9/0xd20 [ 276.558539][T10101] should_fail_ex+0x414/0x560 [ 276.558570][T10101] should_failslab+0xa8/0x100 [ 276.558593][T10101] kmem_cache_alloc_noprof+0x74/0x6e0 [ 276.558619][T10101] ? skb_clone+0x212/0x3a0 [ 276.558649][T10101] skb_clone+0x212/0x3a0 [ 276.558678][T10101] __netlink_deliver_tap+0x404/0x850 [ 276.558716][T10101] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.558739][T10101] netlink_deliver_tap+0x19c/0x1b0 [ 276.558761][T10101] netlink_unicast+0x7fa/0x9e0 [ 276.558803][T10101] ? __pfx_netlink_unicast+0x10/0x10 [ 276.558836][T10101] ? netlink_sendmsg+0x642/0xb30 [ 276.558856][T10101] ? skb_put+0x11b/0x210 [ 276.558894][T10101] netlink_sendmsg+0x805/0xb30 [ 276.558926][T10101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.558952][T10101] ? aa_sock_msg_perm+0xf1/0x1d0 [ 276.558981][T10101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.559002][T10101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.559025][T10101] __sock_sendmsg+0x21c/0x270 [ 276.559058][T10101] ____sys_sendmsg+0x505/0x830 [ 276.559090][T10101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.559125][T10101] ? import_iovec+0x74/0xa0 [ 276.559150][T10101] ___sys_sendmsg+0x21f/0x2a0 [ 276.559178][T10101] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.559244][T10101] ? __fget_files+0x2a/0x420 [ 276.559263][T10101] ? __fget_files+0x3a0/0x420 [ 276.559300][T10101] __x64_sys_sendmsg+0x19b/0x260 [ 276.559327][T10101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.559361][T10101] ? __pfx_ksys_write+0x10/0x10 [ 276.559395][T10101] ? do_syscall_64+0xbe/0xfa0 [ 276.559423][T10101] do_syscall_64+0xfa/0xfa0 [ 276.559446][T10101] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.559470][T10101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.559490][T10101] ? clear_bhb_loop+0x60/0xb0 [ 276.559516][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.559535][T10101] RIP: 0033:0x7fa68158eec9 [ 276.559555][T10101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.559572][T10101] RSP: 002b:00007fa6823fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.559595][T10101] RAX: ffffffffffffffda RBX: 00007fa6817e5fa0 RCX: 00007fa68158eec9 [ 276.559610][T10101] RDX: 0000000024004040 RSI: 0000200000001040 RDI: 0000000000000003 [ 276.559624][T10101] RBP: 00007fa6823fe090 R08: 0000000000000000 R09: 0000000000000000 [ 276.559636][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.559648][T10101] R13: 00007fa6817e6038 R14: 00007fa6817e5fa0 R15: 00007ffeb19dc808 [ 276.559685][T10101] [ 276.915144][T10045] wlan1 speed is unknown, defaulting to 1000 [ 278.373285][T10123] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 278.402766][T10107] wlan1 speed is unknown, defaulting to 1000 [ 278.577629][T10128] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 278.608855][T10130] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1328'. [ 278.623571][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 278.642481][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 278.683646][T10130] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 279.297234][T10132] wlan1 speed is unknown, defaulting to 1000 [ 280.748717][T10151] wlan1 speed is unknown, defaulting to 1000 [ 283.312078][T10163] wlan1 speed is unknown, defaulting to 1000 [ 283.405318][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 283.899301][T10174] tipc: Can't bind to reserved service type 1 [ 284.108904][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 284.384846][T10182] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 284.662324][T10182] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.670638][T10184] macvlan1: entered allmulticast mode [ 284.684061][T10184] veth1_vlan: entered allmulticast mode [ 284.697590][T10184] bond3: (slave macvlan1): Enslaving as an active interface with a down link [ 284.722302][T10187] netlink: 700 bytes leftover after parsing attributes in process `syz.3.1347'. [ 284.732876][T10187] netlink: 700 bytes leftover after parsing attributes in process `syz.3.1347'. [ 284.945164][T10191] openvswitch: netlink: IP tunnel dst address not specified [ 285.014397][T10194] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.1350'. [ 285.107250][T10195] vlan1: entered promiscuous mode [ 285.142812][T10195] batadv0: entered promiscuous mode [ 285.372816][T10202] netlink: 'syz.3.1352': attribute type 5 has an invalid length. [ 285.406181][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 285.450222][T10203] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.1353'. [ 285.628242][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1355'. [ 285.926532][T10211] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1356'. [ 285.941412][T10211] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1356'. [ 285.956219][T10211] netlink: 'syz.0.1356': attribute type 5 has an invalid length. [ 286.095369][T10220] Cannot find del_set index 1 as target [ 286.647195][T10222] wlan1 speed is unknown, defaulting to 1000 [ 288.126860][T10283] FAULT_INJECTION: forcing a failure. [ 288.126860][T10283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.148729][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.4.1375 Not tainted syzkaller #0 PREEMPT(full) [ 288.148760][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.148772][T10283] Call Trace: [ 288.148781][T10283] [ 288.148791][T10283] dump_stack_lvl+0x189/0x250 [ 288.148817][T10283] ? __pfx____ratelimit+0x10/0x10 [ 288.148842][T10283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.148863][T10283] ? __pfx__printk+0x10/0x10 [ 288.148900][T10283] should_fail_ex+0x414/0x560 [ 288.148931][T10283] _copy_to_user+0x31/0xb0 [ 288.148953][T10283] simple_read_from_buffer+0xe1/0x170 [ 288.148983][T10283] proc_fail_nth_read+0x1b3/0x220 [ 288.149007][T10283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.149035][T10283] ? rw_verify_area+0x2a6/0x4d0 [ 288.149060][T10283] ? __lock_acquire+0xab9/0xd20 [ 288.149087][T10283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.149114][T10283] vfs_read+0x200/0xa30 [ 288.149140][T10283] ? fdget_pos+0x247/0x320 [ 288.149171][T10283] ? __pfx___mutex_lock+0x10/0x10 [ 288.149199][T10283] ? __pfx_vfs_read+0x10/0x10 [ 288.149228][T10283] ? __fget_files+0x2a/0x420 [ 288.149252][T10283] ? __fget_files+0x3a0/0x420 [ 288.149270][T10283] ? __fget_files+0x2a/0x420 [ 288.149300][T10283] ksys_read+0x145/0x250 [ 288.149326][T10283] ? __fget_files+0x2a/0x420 [ 288.149346][T10283] ? __pfx_ksys_read+0x10/0x10 [ 288.149378][T10283] ? do_syscall_64+0xbe/0xfa0 [ 288.149408][T10283] do_syscall_64+0xfa/0xfa0 [ 288.149431][T10283] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.149455][T10283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.149476][T10283] ? clear_bhb_loop+0x60/0xb0 [ 288.149502][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.149522][T10283] RIP: 0033:0x7f654138d8dc [ 288.149543][T10283] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 288.149561][T10283] RSP: 002b:00007f654217a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.149585][T10283] RAX: ffffffffffffffda RBX: 00007f65415e5fa0 RCX: 00007f654138d8dc [ 288.149600][T10283] RDX: 000000000000000f RSI: 00007f654217a0a0 RDI: 0000000000000003 [ 288.149613][T10283] RBP: 00007f654217a090 R08: 0000000000000000 R09: 0000000000000000 [ 288.149625][T10283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.149637][T10283] R13: 00007f65415e6038 R14: 00007f65415e5fa0 R15: 00007ffd3cdb8088 [ 288.149674][T10283] [ 288.464390][T10247] wlan1 speed is unknown, defaulting to 1000 [ 288.740801][T10293] tipc: Enabled bearer , priority 0 [ 288.762410][T10297] __nla_validate_parse: 8 callbacks suppressed [ 288.762433][T10297] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1379'. [ 288.802751][T10297] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1379'. [ 288.833984][T10297] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1379'. [ 288.843773][T10293] syzkaller0: entered promiscuous mode [ 288.849365][T10293] syzkaller0: entered allmulticast mode [ 288.860515][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 288.987450][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 289.024155][T10298] block nbd2: shutting down sockets [ 289.146457][T10310] vlan1: entered promiscuous mode [ 289.152056][T10310] bond0: entered promiscuous mode [ 289.157443][T10310] bond_slave_0: entered promiscuous mode [ 289.164547][T10310] bond_slave_1: entered promiscuous mode [ 289.523224][T10298] tipc: Resetting bearer [ 289.610023][T10298] tipc: Disabling bearer [ 290.116937][T10323] vlan2: entered promiscuous mode [ 290.275731][T10327] vlan1: entered promiscuous mode [ 291.048262][T10318] wlan1 speed is unknown, defaulting to 1000 [ 291.196072][T10308] wlan1 speed is unknown, defaulting to 1000 [ 291.625427][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 291.720092][T10356] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.365157][T10349] wlan1 speed is unknown, defaulting to 1000 [ 292.664225][T10344] wlan1 speed is unknown, defaulting to 1000 [ 293.317510][T10369] wlan1 speed is unknown, defaulting to 1000 [ 294.271559][T10388] vlan2: entered promiscuous mode [ 294.456617][T10381] wlan1 speed is unknown, defaulting to 1000 [ 294.588163][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 294.724671][T10392] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1400'. [ 295.028385][T10405] netlink: 'syz.4.1403': attribute type 10 has an invalid length. [ 296.361747][T10423] IPVS: Error connecting to the multicast addr [ 296.697658][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 297.158310][T10439] !: renamed from dummy0 [ 297.201728][T10435] netlink: 'syz.1.1413': attribute type 16 has an invalid length. [ 297.220378][T10435] netlink: 'syz.1.1413': attribute type 17 has an invalid length. [ 297.291960][T10435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.332804][T10410] wlan1 speed is unknown, defaulting to 1000 [ 297.376605][T10446] syz_tun: entered allmulticast mode [ 297.419185][T10446] dvmrp8: entered allmulticast mode [ 297.538966][T10447] netlink: 'syz.3.1417': attribute type 23 has an invalid length. [ 297.643056][T10451] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 298.060245][T10446] wlan1 speed is unknown, defaulting to 1000 [ 298.363945][T10445] syz_tun: left allmulticast mode [ 298.369795][T10445] dvmrp8: left allmulticast mode [ 298.820666][T10469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.863090][T10463] wlan1 speed is unknown, defaulting to 1000 [ 299.046284][T10457] wlan1 speed is unknown, defaulting to 1000 [ 299.742116][T10473] FAULT_INJECTION: forcing a failure. [ 299.742116][T10473] name failslab, interval 1, probability 0, space 0, times 0 [ 299.755424][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.1.1426 Not tainted syzkaller #0 PREEMPT(full) [ 299.755452][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.755463][T10473] Call Trace: [ 299.755472][T10473] [ 299.755480][T10473] dump_stack_lvl+0x189/0x250 [ 299.755509][T10473] ? __pfx____ratelimit+0x10/0x10 [ 299.755532][T10473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.755553][T10473] ? __pfx__printk+0x10/0x10 [ 299.755578][T10473] ? __pfx___might_resched+0x10/0x10 [ 299.755600][T10473] ? fs_reclaim_acquire+0x7d/0x100 [ 299.755637][T10473] should_fail_ex+0x414/0x560 [ 299.755667][T10473] should_failslab+0xa8/0x100 [ 299.755690][T10473] __kmalloc_cache_noprof+0x6f/0x6f0 [ 299.755718][T10473] ? dev_ethtool+0x126/0x19c0 [ 299.755759][T10473] dev_ethtool+0x126/0x19c0 [ 299.755788][T10473] ? __lock_acquire+0xab9/0xd20 [ 299.755814][T10473] ? __pfx_dev_ethtool+0x10/0x10 [ 299.755851][T10473] ? dev_load+0x21/0x1f0 [ 299.755873][T10473] ? dev_load+0x21/0x1f0 [ 299.755893][T10473] dev_ioctl+0x392/0x1150 [ 299.755918][T10473] sock_do_ioctl+0x22c/0x300 [ 299.755946][T10473] ? __pfx_sock_do_ioctl+0x10/0x10 [ 299.755993][T10473] sock_ioctl+0x576/0x790 [ 299.756022][T10473] ? __pfx_sock_ioctl+0x10/0x10 [ 299.756053][T10473] ? __fget_files+0x3a0/0x420 [ 299.756070][T10473] ? __fget_files+0x2a/0x420 [ 299.756093][T10473] ? bpf_lsm_file_ioctl+0x9/0x20 [ 299.756116][T10473] ? __pfx_sock_ioctl+0x10/0x10 [ 299.756142][T10473] __se_sys_ioctl+0xfc/0x170 [ 299.756171][T10473] do_syscall_64+0xfa/0xfa0 [ 299.756194][T10473] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.756218][T10473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.756238][T10473] ? clear_bhb_loop+0x60/0xb0 [ 299.756265][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.756283][T10473] RIP: 0033:0x7f7749f8eec9 [ 299.756303][T10473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.756320][T10473] RSP: 002b:00007f774ae75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.756343][T10473] RAX: ffffffffffffffda RBX: 00007f774a1e5fa0 RCX: 00007f7749f8eec9 [ 299.756358][T10473] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 299.756371][T10473] RBP: 00007f774ae75090 R08: 0000000000000000 R09: 0000000000000000 [ 299.756384][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.756395][T10473] R13: 00007f774a1e6038 R14: 00007f774a1e5fa0 R15: 00007ffd0cc58808 [ 299.756431][T10473] [ 300.458389][T10478] ipvlan0: entered promiscuous mode [ 300.823893][T10486] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1431'. [ 301.020209][T10494] FAULT_INJECTION: forcing a failure. [ 301.020209][T10494] name failslab, interval 1, probability 0, space 0, times 0 [ 301.060572][T10494] CPU: 1 UID: 0 PID: 10494 Comm: syz.3.1435 Not tainted syzkaller #0 PREEMPT(full) [ 301.060602][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.060614][T10494] Call Trace: [ 301.060622][T10494] [ 301.060631][T10494] dump_stack_lvl+0x189/0x250 [ 301.060660][T10494] ? __pfx____ratelimit+0x10/0x10 [ 301.060684][T10494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.060706][T10494] ? __pfx__printk+0x10/0x10 [ 301.060734][T10494] ? __pfx___might_resched+0x10/0x10 [ 301.060755][T10494] ? fs_reclaim_acquire+0x7d/0x100 [ 301.060792][T10494] should_fail_ex+0x414/0x560 [ 301.060821][T10494] should_failslab+0xa8/0x100 [ 301.060843][T10494] __kmalloc_noprof+0xcb/0x7f0 [ 301.060869][T10494] ? security_sk_alloc+0x52/0x390 [ 301.060896][T10494] security_sk_alloc+0x52/0x390 [ 301.060919][T10494] sk_prot_alloc+0x101/0x220 [ 301.060941][T10494] ? sk_alloc+0x24/0x370 [ 301.060965][T10494] sk_alloc+0x3a/0x370 [ 301.061012][T10494] __netlink_create+0x65/0x260 [ 301.061034][T10494] ? __pfx_genl_release+0x10/0x10 [ 301.061070][T10494] netlink_create+0x3ca/0x590 [ 301.061093][T10494] ? __pfx_genl_unbind+0x10/0x10 [ 301.061117][T10494] ? __pfx_genl_bind+0x10/0x10 [ 301.061145][T10494] __sock_create+0x4b3/0x9f0 [ 301.061191][T10494] __sys_socket+0xd7/0x1b0 [ 301.061223][T10494] __x64_sys_socket+0x7a/0x90 [ 301.061253][T10494] do_syscall_64+0xfa/0xfa0 [ 301.061276][T10494] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.061300][T10494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.061320][T10494] ? clear_bhb_loop+0x60/0xb0 [ 301.061345][T10494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.061364][T10494] RIP: 0033:0x7f4c45f90de7 [ 301.061383][T10494] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.061401][T10494] RSP: 002b:00007f4c46e6ffa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 301.061424][T10494] RAX: ffffffffffffffda RBX: 00007f4c461e5fa0 RCX: 00007f4c45f90de7 [ 301.061437][T10494] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 301.061448][T10494] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 301.061460][T10494] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000001 [ 301.061473][T10494] R13: 00007f4c461e6038 R14: 00007f4c461e5fa0 R15: 00007fffc9cf17e8 [ 301.061507][T10494] [ 301.177184][T10498] netlink: 'syz.1.1434': attribute type 4 has an invalid length. [ 301.322338][T10492] syzkaller1: entered promiscuous mode [ 301.328680][T10492] syzkaller1: entered allmulticast mode [ 301.382333][T10498] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 301.405404][T10498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1434'. [ 301.590644][T10507] ipvlan8: entered promiscuous mode [ 301.745401][T10496] wlan1 speed is unknown, defaulting to 1000 [ 302.120126][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 303.106478][T10550] vlan2: entered promiscuous mode [ 303.112227][T10550] team0: entered promiscuous mode [ 303.121021][T10550] team_slave_0: entered promiscuous mode [ 303.130706][T10550] team_slave_1: entered promiscuous mode [ 303.215591][T10552] ipvlan5: entered promiscuous mode [ 303.744713][T10533] wlan1 speed is unknown, defaulting to 1000 [ 304.045862][T10568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1457'. [ 304.106339][T10530] wlan1 speed is unknown, defaulting to 1000 [ 304.754114][T10542] wlan1 speed is unknown, defaulting to 1000 [ 305.219187][T10560] wlan1 speed is unknown, defaulting to 1000 [ 305.891297][T10570] wlan1 speed is unknown, defaulting to 1000 [ 306.114138][T10591] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1464'. [ 306.129261][T10591] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1464'. [ 306.159095][T10591] netlink: 'syz.0.1464': attribute type 6 has an invalid length. [ 306.178064][T10591] netlink: 'syz.0.1464': attribute type 5 has an invalid length. [ 306.194706][T10591] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1464'. [ 306.352879][T10593] ipvlan5: entered promiscuous mode [ 306.844309][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 306.953489][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 307.663163][T10610] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1469'. [ 307.772292][T10583] wlan1 speed is unknown, defaulting to 1000 [ 307.836265][T10614] xt_TPROXY: Can be used only with -p tcp or -p udp [ 308.256457][T10624] ipvlan6: entered promiscuous mode [ 308.592438][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 308.601657][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 308.610822][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 308.641904][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 308.651046][T10635] netlink: 'syz.0.1479': attribute type 6 has an invalid length. [ 308.671626][T10638] ipvlan7: entered promiscuous mode [ 308.992788][T10648] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1481'. [ 309.913974][T10669] --map-set only usable from mangle table [ 310.706681][T10655] wlan1 speed is unknown, defaulting to 1000 [ 311.276221][T10676] wlan1 speed is unknown, defaulting to 1000 [ 311.760930][T10708] syz_tun: entered allmulticast mode [ 311.793722][T10711] dvmrp8: entered allmulticast mode [ 311.902397][T10708] netlink: 'syz.0.1500': attribute type 23 has an invalid length. [ 311.916339][T10686] wlan1 speed is unknown, defaulting to 1000 [ 312.642251][T10704] syz_tun: left allmulticast mode [ 312.655887][T10704] dvmrp8: left allmulticast mode [ 312.895598][T10726] __nla_validate_parse: 6 callbacks suppressed [ 312.895620][T10726] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1505'. [ 312.912382][T10726] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1505'. [ 312.922155][T10726] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1505'. [ 312.943875][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 313.039558][T10729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1506'. [ 313.229199][T10706] wlan1 speed is unknown, defaulting to 1000 [ 313.913410][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 314.557971][T10762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1513'. [ 314.648609][T10762] 8021q: VLANs not supported on vcan0 [ 314.777758][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 315.019971][T10772] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1517'. [ 315.188117][T10776] ipvlan8: entered promiscuous mode [ 315.379092][T10784] FAULT_INJECTION: forcing a failure. [ 315.379092][T10784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.392953][T10784] CPU: 0 UID: 0 PID: 10784 Comm: syz.2.1521 Not tainted syzkaller #0 PREEMPT(full) [ 315.392981][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.392994][T10784] Call Trace: [ 315.393002][T10784] [ 315.393011][T10784] dump_stack_lvl+0x189/0x250 [ 315.393039][T10784] ? __pfx____ratelimit+0x10/0x10 [ 315.393064][T10784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.393086][T10784] ? __pfx__printk+0x10/0x10 [ 315.393107][T10784] ? __might_fault+0xb0/0x130 [ 315.393148][T10784] should_fail_ex+0x414/0x560 [ 315.393178][T10784] _copy_from_user+0x2d/0xb0 [ 315.393199][T10784] ___sys_sendmsg+0x158/0x2a0 [ 315.393227][T10784] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.393294][T10784] ? __fget_files+0x2a/0x420 [ 315.393311][T10784] ? __fget_files+0x3a0/0x420 [ 315.393342][T10784] __x64_sys_sendmsg+0x19b/0x260 [ 315.393369][T10784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.393404][T10784] ? __pfx_ksys_write+0x10/0x10 [ 315.393437][T10784] ? do_syscall_64+0xbe/0xfa0 [ 315.393467][T10784] do_syscall_64+0xfa/0xfa0 [ 315.393489][T10784] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.393514][T10784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.393534][T10784] ? clear_bhb_loop+0x60/0xb0 [ 315.393560][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.393579][T10784] RIP: 0033:0x7fa68158eec9 [ 315.393597][T10784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.393613][T10784] RSP: 002b:00007fa6823fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.393635][T10784] RAX: ffffffffffffffda RBX: 00007fa6817e5fa0 RCX: 00007fa68158eec9 [ 315.393650][T10784] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 315.393662][T10784] RBP: 00007fa6823fe090 R08: 0000000000000000 R09: 0000000000000000 [ 315.393674][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.393685][T10784] R13: 00007fa6817e6038 R14: 00007fa6817e5fa0 R15: 00007ffeb19dc808 [ 315.393718][T10784] [ 315.515455][T10767] wlan1 speed is unknown, defaulting to 1000 [ 315.873723][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 315.873782][T10791] bridge_slave_1: left allmulticast mode [ 315.906448][T10791] bridge_slave_1: left promiscuous mode [ 315.926820][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.946285][T10791] bridge_slave_0: left promiscuous mode [ 315.953296][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.169947][T10799] netlink: 'syz.4.1527': attribute type 1 has an invalid length. [ 316.484890][T10815] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 316.818071][T10804] wlan1 speed is unknown, defaulting to 1000 [ 316.989994][T10826] syzkaller0: entered promiscuous mode [ 316.996058][T10826] syzkaller0: entered allmulticast mode [ 317.359832][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.368754][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.546970][T10830] ipvlan9: entered promiscuous mode [ 318.150811][T10850] __nla_validate_parse: 2 callbacks suppressed [ 318.150833][T10850] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1541'. [ 318.245721][T10852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1542'. [ 318.667109][T10865] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 318.740356][T10870] netlink: 'syz.4.1547': attribute type 10 has an invalid length. [ 318.807262][T10869] bond5: entered promiscuous mode [ 318.814881][T10869] bond5: entered allmulticast mode [ 318.830767][T10869] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.916432][T10869] 8021q: adding VLAN 0 to HW filter on device bond6 [ 318.942121][T10869] bond6: entered promiscuous mode [ 318.953863][T10869] bond6: entered allmulticast mode [ 318.970279][T10869] bond5: (slave bond6): Enslaving as a backup interface with a down link [ 319.001273][T10836] wlan1 speed is unknown, defaulting to 1000 [ 319.158757][T10881] ipvlan9: entered promiscuous mode [ 319.351660][T10888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1553'. [ 319.557641][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 319.636427][T10861] wlan1 speed is unknown, defaulting to 1000 [ 319.823569][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 319.833046][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 320.107623][T10890] wlan1 speed is unknown, defaulting to 1000 [ 320.531931][T10922] netlink: 'syz.0.1568': attribute type 2 has an invalid length. [ 320.552759][T10923] FAULT_INJECTION: forcing a failure. [ 320.552759][T10923] name failslab, interval 1, probability 0, space 0, times 0 [ 320.569511][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.1.1567 Not tainted syzkaller #0 PREEMPT(full) [ 320.569541][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.569552][T10923] Call Trace: [ 320.569561][T10923] [ 320.569570][T10923] dump_stack_lvl+0x189/0x250 [ 320.569597][T10923] ? __pfx____ratelimit+0x10/0x10 [ 320.569619][T10923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.569641][T10923] ? __pfx__printk+0x10/0x10 [ 320.569670][T10923] ? __pfx___might_resched+0x10/0x10 [ 320.569699][T10923] should_fail_ex+0x414/0x560 [ 320.569730][T10923] should_failslab+0xa8/0x100 [ 320.569753][T10923] __kmalloc_noprof+0xcb/0x7f0 [ 320.569780][T10923] ? ethnl_default_notify+0x1af/0xb70 [ 320.569812][T10923] ethnl_default_notify+0x1af/0xb70 [ 320.569839][T10923] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 320.569864][T10923] ? __pfx_ethnl_default_notify+0x10/0x10 [ 320.569907][T10923] ? mutex_is_locked+0x17/0x50 [ 320.569926][T10923] ? rtnl_is_locked+0x15/0x20 [ 320.569951][T10923] ethnl_default_set_doit+0x4f8/0x890 [ 320.569994][T10923] genl_family_rcv_msg_doit+0x215/0x300 [ 320.570031][T10923] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.570071][T10923] ? bpf_lsm_capable+0x9/0x20 [ 320.570093][T10923] ? security_capable+0x7e/0x2e0 [ 320.570125][T10923] genl_rcv_msg+0x60e/0x790 [ 320.570157][T10923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.570180][T10923] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 320.570207][T10923] ? __asan_memcpy+0x40/0x70 [ 320.570231][T10923] ? __pfx_ref_tracker_free+0x10/0x10 [ 320.570268][T10923] netlink_rcv_skb+0x208/0x470 [ 320.570287][T10923] ? __lock_acquire+0xab9/0xd20 [ 320.570309][T10923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.570335][T10923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.570379][T10923] ? down_read+0x1ad/0x2e0 [ 320.570407][T10923] genl_rcv+0x28/0x40 [ 320.570429][T10923] netlink_unicast+0x82f/0x9e0 [ 320.570469][T10923] ? __pfx_netlink_unicast+0x10/0x10 [ 320.570501][T10923] ? netlink_sendmsg+0x642/0xb30 [ 320.570520][T10923] ? skb_put+0x11b/0x210 [ 320.570545][T10923] netlink_sendmsg+0x805/0xb30 [ 320.570580][T10923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.570605][T10923] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.570632][T10923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.570650][T10923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.570674][T10923] __sock_sendmsg+0x21c/0x270 [ 320.570707][T10923] ____sys_sendmsg+0x505/0x830 [ 320.570738][T10923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.570775][T10923] ? import_iovec+0x74/0xa0 [ 320.570800][T10923] ___sys_sendmsg+0x21f/0x2a0 [ 320.570828][T10923] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.570899][T10923] ? __fget_files+0x2a/0x420 [ 320.570917][T10923] ? __fget_files+0x3a0/0x420 [ 320.570949][T10923] __x64_sys_sendmsg+0x19b/0x260 [ 320.570986][T10923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.571024][T10923] ? __pfx_ksys_write+0x10/0x10 [ 320.571057][T10923] ? do_syscall_64+0xbe/0xfa0 [ 320.571087][T10923] do_syscall_64+0xfa/0xfa0 [ 320.571109][T10923] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.571134][T10923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.571154][T10923] ? clear_bhb_loop+0x60/0xb0 [ 320.571183][T10923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.571201][T10923] RIP: 0033:0x7f7749f8eec9 [ 320.571220][T10923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.571237][T10923] RSP: 002b:00007f774ae54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.571260][T10923] RAX: ffffffffffffffda RBX: 00007f774a1e6090 RCX: 00007f7749f8eec9 [ 320.571274][T10923] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000d [ 320.571287][T10923] RBP: 00007f774ae54090 R08: 0000000000000000 R09: 0000000000000000 [ 320.571299][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.571311][T10923] R13: 00007f774a1e6128 R14: 00007f774a1e6090 R15: 00007ffd0cc58808 [ 320.571349][T10923] [ 321.512974][T10931] FAULT_INJECTION: forcing a failure. [ 321.512974][T10931] name failslab, interval 1, probability 0, space 0, times 0 [ 321.541918][T10931] CPU: 1 UID: 0 PID: 10931 Comm: syz.0.1569 Not tainted syzkaller #0 PREEMPT(full) [ 321.541948][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.541960][T10931] Call Trace: [ 321.541968][T10931] [ 321.541977][T10931] dump_stack_lvl+0x189/0x250 [ 321.542005][T10931] ? __pfx____ratelimit+0x10/0x10 [ 321.542030][T10931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.542051][T10931] ? __pfx__printk+0x10/0x10 [ 321.542075][T10931] ? __pfx___might_resched+0x10/0x10 [ 321.542098][T10931] ? fs_reclaim_acquire+0x7d/0x100 [ 321.542134][T10931] should_fail_ex+0x414/0x560 [ 321.542164][T10931] should_failslab+0xa8/0x100 [ 321.542186][T10931] __kmalloc_cache_noprof+0x6f/0x6f0 [ 321.542214][T10931] ? rtnl_newlink+0xfb/0x1c80 [ 321.542242][T10931] rtnl_newlink+0xfb/0x1c80 [ 321.542277][T10931] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.542303][T10931] ? is_bpf_text_address+0x26/0x2b0 [ 321.542331][T10931] ? is_bpf_text_address+0x292/0x2b0 [ 321.542351][T10931] ? is_bpf_text_address+0x26/0x2b0 [ 321.542377][T10931] ? __lock_acquire+0xab9/0xd20 [ 321.542410][T10931] ? __lock_acquire+0xab9/0xd20 [ 321.542452][T10931] ? is_bpf_text_address+0x26/0x2b0 [ 321.542479][T10931] ? is_bpf_text_address+0x292/0x2b0 [ 321.542499][T10931] ? is_bpf_text_address+0x26/0x2b0 [ 321.542531][T10931] ? __lock_acquire+0xab9/0xd20 [ 321.542579][T10931] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.542599][T10931] rtnetlink_rcv_msg+0x7cf/0xb70 [ 321.542618][T10931] ? __lock_acquire+0xab9/0xd20 [ 321.542640][T10931] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 321.542658][T10931] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.542697][T10931] netlink_rcv_skb+0x208/0x470 [ 321.542717][T10931] ? __lock_acquire+0xab9/0xd20 [ 321.542737][T10931] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.542759][T10931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.542794][T10931] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.542825][T10931] netlink_unicast+0x82f/0x9e0 [ 321.542865][T10931] ? __pfx_netlink_unicast+0x10/0x10 [ 321.542898][T10931] ? netlink_sendmsg+0x642/0xb30 [ 321.542927][T10931] ? skb_put+0x11b/0x210 [ 321.542953][T10931] netlink_sendmsg+0x805/0xb30 [ 321.542986][T10931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.543012][T10931] ? aa_sock_msg_perm+0xf1/0x1d0 [ 321.543041][T10931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.543062][T10931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.543085][T10931] __sock_sendmsg+0x21c/0x270 [ 321.543117][T10931] ____sys_sendmsg+0x505/0x830 [ 321.543145][T10931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.543180][T10931] ? import_iovec+0x74/0xa0 [ 321.543202][T10931] ___sys_sendmsg+0x21f/0x2a0 [ 321.543226][T10931] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.543288][T10931] ? __fget_files+0x2a/0x420 [ 321.543306][T10931] ? __fget_files+0x3a0/0x420 [ 321.543335][T10931] __x64_sys_sendmsg+0x19b/0x260 [ 321.543361][T10931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.543396][T10931] ? __pfx_ksys_write+0x10/0x10 [ 321.543427][T10931] ? do_syscall_64+0xbe/0xfa0 [ 321.543454][T10931] do_syscall_64+0xfa/0xfa0 [ 321.543477][T10931] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.543501][T10931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.543521][T10931] ? clear_bhb_loop+0x60/0xb0 [ 321.543545][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.543563][T10931] RIP: 0033:0x7f38ccb8eec9 [ 321.543581][T10931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.543597][T10931] RSP: 002b:00007f38cdac2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.543620][T10931] RAX: ffffffffffffffda RBX: 00007f38ccde6090 RCX: 00007f38ccb8eec9 [ 321.543635][T10931] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 321.543649][T10931] RBP: 00007f38cdac2090 R08: 0000000000000000 R09: 0000000000000000 [ 321.543660][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.543672][T10931] R13: 00007f38ccde6128 R14: 00007f38ccde6090 R15: 00007ffdf15bf188 [ 321.543706][T10931] [ 321.706707][T10920] wlan1 speed is unknown, defaulting to 1000 [ 321.769071][T10935] netlink: 'syz.4.1570': attribute type 10 has an invalid length. [ 323.425193][T10972] ipvlan10: entered promiscuous mode [ 323.698213][T10986] sock: sock_timestamping_bind_phc: sock not bind to device [ 323.875994][ T30] audit: type=1804 audit(1760642585.238:2): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1586" name="/newroot/330/cgroup.controllers" dev="tmpfs" ino=1699 res=1 errno=0 [ 323.944339][ T30] audit: type=1800 audit(1760642585.248:3): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1586" name="cgroup.controllers" dev="tmpfs" ino=1699 res=0 errno=0 [ 323.991409][ T30] audit: type=1800 audit(1760642585.288:4): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1586" name="cgroup.controllers" dev="tmpfs" ino=1699 res=0 errno=0 [ 324.159245][T10974] wlan1 speed is unknown, defaulting to 1000 [ 324.575943][T11015] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 324.856097][T10976] wlan1 speed is unknown, defaulting to 1000 [ 325.171846][T11000] wlan1 speed is unknown, defaulting to 1000 [ 325.527622][T11039] FAULT_INJECTION: forcing a failure. [ 325.527622][T11039] name failslab, interval 1, probability 0, space 0, times 0 [ 325.551612][T11039] CPU: 1 UID: 0 PID: 11039 Comm: syz.0.1601 Not tainted syzkaller #0 PREEMPT(full) [ 325.551642][T11039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.551654][T11039] Call Trace: [ 325.551662][T11039] [ 325.551671][T11039] dump_stack_lvl+0x189/0x250 [ 325.551698][T11039] ? __pfx____ratelimit+0x10/0x10 [ 325.551732][T11039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.551754][T11039] ? __pfx__printk+0x10/0x10 [ 325.551782][T11039] ? __pfx___might_resched+0x10/0x10 [ 325.551803][T11039] ? fs_reclaim_acquire+0x7d/0x100 [ 325.551839][T11039] should_fail_ex+0x414/0x560 [ 325.551869][T11039] should_failslab+0xa8/0x100 [ 325.551891][T11039] kmem_cache_alloc_noprof+0x74/0x6e0 [ 325.551918][T11039] ? alloc_empty_file+0x55/0x1d0 [ 325.551942][T11039] alloc_empty_file+0x55/0x1d0 [ 325.551965][T11039] alloc_file_pseudo+0x13d/0x210 [ 325.551990][T11039] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 325.552021][T11039] ? alloc_fd+0x64c/0x6c0 [ 325.552062][T11039] sock_alloc_file+0xb8/0x2e0 [ 325.552088][T11039] ? __sys_socket+0x12c/0x1b0 [ 325.552122][T11039] __sys_socket+0x13d/0x1b0 [ 325.552155][T11039] __x64_sys_socket+0x7a/0x90 [ 325.552187][T11039] do_syscall_64+0xfa/0xfa0 [ 325.552211][T11039] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.552236][T11039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.552256][T11039] ? clear_bhb_loop+0x60/0xb0 [ 325.552281][T11039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.552300][T11039] RIP: 0033:0x7f38ccb90de7 [ 325.552320][T11039] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.552338][T11039] RSP: 002b:00007f38cdae1fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 325.552361][T11039] RAX: ffffffffffffffda RBX: 00007f38ccde5fa0 RCX: 00007f38ccb90de7 [ 325.552376][T11039] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 325.552388][T11039] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 325.552400][T11039] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000001 [ 325.552413][T11039] R13: 00007f38ccde6038 R14: 00007f38ccde5fa0 R15: 00007ffdf15bf188 [ 325.552449][T11039] [ 325.926658][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 326.047941][T11048] tipc: Started in network mode [ 326.054424][T11048] tipc: Node identity e2718dcfcc98, cluster identity 4711 [ 326.062908][T11048] tipc: Enabled bearer , priority 0 [ 326.070787][T11048] vlan0: entered allmulticast mode [ 326.076295][T11048] veth0_vlan: entered allmulticast mode [ 326.085891][T11048] tipc: Resetting bearer [ 326.093173][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 326.106099][T11028] wlan1 speed is unknown, defaulting to 1000 [ 326.113636][T11047] tipc: Disabling bearer [ 326.261460][T11027] rdma_rxe: rxe_newlink: failed to add syz_tun [ 326.521514][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1606'. [ 326.541487][T11053] 8021q: VLANs not supported on vcan0 [ 326.651083][T11055] netlink: 'syz.2.1607': attribute type 10 has an invalid length. [ 326.663131][T11042] wlan1 speed is unknown, defaulting to 1000 [ 328.533931][T11071] ipvlan11: entered promiscuous mode [ 328.951585][T11057] wlan1 speed is unknown, defaulting to 1000 [ 329.094623][T11083] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1615'. [ 329.664467][T11109] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1626'. [ 329.687836][T11109] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1626'. [ 329.707133][T11109] netlink: 'syz.3.1626': attribute type 6 has an invalid length. [ 329.724798][T11109] netlink: 'syz.3.1626': attribute type 5 has an invalid length. [ 329.741365][T11109] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1626'. [ 329.922059][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 330.082619][T11104] wlan1 speed is unknown, defaulting to 1000 [ 330.377576][T11128] xt_recent: Unsupported userspace flags (000000b1) [ 330.653904][T11135] batman_adv: batadv0: Interface deactivated: dummy0 [ 331.488321][T11134] wlan1 speed is unknown, defaulting to 1000 [ 332.183202][T11137] wlan1 speed is unknown, defaulting to 1000 [ 333.304255][T11159] wlan1 speed is unknown, defaulting to 1000 [ 333.518546][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 333.562217][T11175] 8021q: VLANs not supported on vcan0 [ 333.813748][T11179] netlink: 'syz.2.1651': attribute type 49 has an invalid length. [ 334.232395][T11185] vlan2: entered promiscuous mode [ 334.243578][T11185] gretap0: entered promiscuous mode [ 334.577701][T11191] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 335.048358][T11199] IPVS: stopping backup sync thread 11015 ... [ 335.249365][T11187] wlan1 speed is unknown, defaulting to 1000 [ 335.434872][T11209] bond8: entered promiscuous mode [ 335.440701][T11209] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.751391][ T7335] page_pool_release_retry() stalled pool shutdown: id 81, 1 inflight 60 sec [ 335.975237][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 336.004455][T11224] netlink: 'syz.4.1665': attribute type 5 has an invalid length. [ 336.012841][T11212] wlan1 speed is unknown, defaulting to 1000 [ 336.023559][T11224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1665'. [ 336.092444][T11224] geneve2: entered promiscuous mode [ 336.103155][T11228] FAULT_INJECTION: forcing a failure. [ 336.103155][T11228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.125847][T11224] geneve2: entered allmulticast mode [ 336.137556][T11228] CPU: 1 UID: 0 PID: 11228 Comm: syz.3.1667 Not tainted syzkaller #0 PREEMPT(full) [ 336.137593][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.137605][T11228] Call Trace: [ 336.137614][T11228] [ 336.137624][T11228] dump_stack_lvl+0x189/0x250 [ 336.137650][T11228] ? __pfx____ratelimit+0x10/0x10 [ 336.137674][T11228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.137695][T11228] ? __pfx__printk+0x10/0x10 [ 336.137716][T11228] ? __might_fault+0xb0/0x130 [ 336.137758][T11228] should_fail_ex+0x414/0x560 [ 336.137790][T11228] _copy_from_iter+0x1de/0x1790 [ 336.137828][T11228] ? rcu_is_watching+0x15/0xb0 [ 336.137856][T11228] ? kmalloc_reserve+0xbd/0x290 [ 336.137878][T11228] ? __pfx__copy_from_iter+0x10/0x10 [ 336.137909][T11228] ? __build_skb_around+0x262/0x3f0 [ 336.137935][T11228] ? netlink_sendmsg+0x642/0xb30 [ 336.137955][T11228] ? skb_put+0x11b/0x210 [ 336.137981][T11228] netlink_sendmsg+0x6b2/0xb30 [ 336.138015][T11228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.138041][T11228] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.138072][T11228] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.138091][T11228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.138114][T11228] __sock_sendmsg+0x21c/0x270 [ 336.138149][T11228] ____sys_sendmsg+0x505/0x830 [ 336.138180][T11228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.138216][T11228] ? import_iovec+0x74/0xa0 [ 336.138240][T11228] ___sys_sendmsg+0x21f/0x2a0 [ 336.138269][T11228] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.138337][T11228] ? __fget_files+0x2a/0x420 [ 336.138355][T11228] ? __fget_files+0x3a0/0x420 [ 336.138385][T11228] __x64_sys_sendmsg+0x19b/0x260 [ 336.138414][T11228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.138450][T11228] ? __pfx_ksys_write+0x10/0x10 [ 336.138482][T11228] ? do_syscall_64+0xbe/0xfa0 [ 336.138512][T11228] do_syscall_64+0xfa/0xfa0 [ 336.138534][T11228] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.138558][T11228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.138578][T11228] ? clear_bhb_loop+0x60/0xb0 [ 336.138614][T11228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.138633][T11228] RIP: 0033:0x7f4c45f8eec9 [ 336.138652][T11228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.138670][T11228] RSP: 002b:00007f4c46e71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.138693][T11228] RAX: ffffffffffffffda RBX: 00007f4c461e5fa0 RCX: 00007f4c45f8eec9 [ 336.138708][T11228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 336.138721][T11228] RBP: 00007f4c46e71090 R08: 0000000000000000 R09: 0000000000000000 [ 336.138733][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.138745][T11228] R13: 00007f4c461e6038 R14: 00007f4c461e5fa0 R15: 00007fffc9cf17e8 [ 336.138782][T11228] [ 336.341514][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 336.443419][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 336.452794][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 336.593141][T11226] smc: removing ib device syz2 [ 336.764171][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 337.245884][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1670'. [ 337.255122][T11237] netlink: 'syz.1.1670': attribute type 7 has an invalid length. [ 337.263424][T11237] netlink: 'syz.1.1670': attribute type 8 has an invalid length. [ 337.271786][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1670'. [ 339.416559][T11247] netlink: 'syz.4.1673': attribute type 10 has an invalid length. [ 340.807617][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 341.983082][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1692'. [ 342.019708][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1692'. [ 342.900013][T11324] FAULT_INJECTION: forcing a failure. [ 342.900013][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 342.932811][T11324] CPU: 1 UID: 0 PID: 11324 Comm: syz.0.1696 Not tainted syzkaller #0 PREEMPT(full) [ 342.932842][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.932854][T11324] Call Trace: [ 342.932863][T11324] [ 342.932871][T11324] dump_stack_lvl+0x189/0x250 [ 342.932899][T11324] ? __pfx____ratelimit+0x10/0x10 [ 342.932924][T11324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.932944][T11324] ? __pfx__printk+0x10/0x10 [ 342.932967][T11324] ? __pfx___might_resched+0x10/0x10 [ 342.932989][T11324] ? fs_reclaim_acquire+0x7d/0x100 [ 342.933026][T11324] should_fail_ex+0x414/0x560 [ 342.933056][T11324] should_failslab+0xa8/0x100 [ 342.933078][T11324] kmem_cache_alloc_node_noprof+0x77/0x710 [ 342.933104][T11324] ? pppol2tp_sock_to_session+0x7f/0x550 [ 342.933124][T11324] ? __alloc_skb+0x112/0x2d0 [ 342.933145][T11324] ? pppol2tp_sock_to_session+0x4be/0x550 [ 342.933170][T11324] __alloc_skb+0x112/0x2d0 [ 342.933196][T11324] sock_wmalloc+0xb2/0x130 [ 342.933224][T11324] pppol2tp_sendmsg+0x183/0x5f0 [ 342.933252][T11324] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 342.933273][T11324] __sock_sendmsg+0x21c/0x270 [ 342.933307][T11324] ____sys_sendmsg+0x52d/0x830 [ 342.933339][T11324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.933383][T11324] ? import_iovec+0x74/0xa0 [ 342.933409][T11324] ___sys_sendmsg+0x21f/0x2a0 [ 342.933436][T11324] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.933512][T11324] ? __might_fault+0xb0/0x130 [ 342.933551][T11324] __sys_sendmmsg+0x227/0x430 [ 342.933582][T11324] ? __pfx___sys_sendmmsg+0x10/0x10 [ 342.933617][T11324] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 342.933673][T11324] ? ksys_write+0x22a/0x250 [ 342.933704][T11324] ? __pfx_ksys_write+0x10/0x10 [ 342.933738][T11324] __x64_sys_sendmmsg+0xa0/0xc0 [ 342.933765][T11324] do_syscall_64+0xfa/0xfa0 [ 342.933789][T11324] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.933812][T11324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.933832][T11324] ? clear_bhb_loop+0x60/0xb0 [ 342.933858][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.933876][T11324] RIP: 0033:0x7f38ccb8eec9 [ 342.933895][T11324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.933913][T11324] RSP: 002b:00007f38cdae3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 342.933936][T11324] RAX: ffffffffffffffda RBX: 00007f38ccde5fa0 RCX: 00007f38ccb8eec9 [ 342.933959][T11324] RDX: 04000000000001ce RSI: 0000200000005f80 RDI: 0000000000000004 [ 342.933973][T11324] RBP: 00007f38cdae3090 R08: 0000000000000000 R09: 0000000000000000 [ 342.933986][T11324] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000002 [ 342.933998][T11324] R13: 00007f38ccde6038 R14: 00007f38ccde5fa0 R15: 00007ffdf15bf188 [ 342.934035][T11324] [ 343.436503][T11327] vlan2: entered promiscuous mode [ 343.439025][T11331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1699'. [ 343.647050][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1700'. [ 343.782962][T11340] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1702'. [ 343.820880][T11340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1702'. [ 343.851137][T11340] netlink: 'syz.0.1702': attribute type 1 has an invalid length. [ 344.160824][T11343] vlan1: entered promiscuous mode [ 344.603656][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 344.899693][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 345.004514][T11372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1713'. [ 345.777283][T11395] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 345.813104][T11395] __nla_validate_parse: 2 callbacks suppressed [ 345.813125][T11395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1721'. [ 345.835504][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 346.400989][T11416] ipvlan1: entered promiscuous mode [ 346.562262][T11424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1724'. [ 346.698651][T11420] syzkaller1: entered promiscuous mode [ 346.729674][T11424] nbd: socks must be embedded in a SOCK_ITEM attr [ 346.738060][T11420] syzkaller1: entered allmulticast mode [ 346.822892][T10243] block nbd64: NBD_DISCONNECT [ 346.881579][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'. [ 346.978832][T11433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1728'. [ 347.105739][T10243] udevd[10243]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 347.221439][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 347.523400][T11445] nbd2: detected capacity change from 0 to 127 [ 347.584217][T11445] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1732'. [ 347.610454][T11445] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1732'. [ 347.648195][ T52] block nbd2: Receive control failed (result -104) [ 348.063294][T11455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1736'. [ 348.129334][T11455] 8021q: VLANs not supported on vcan0 [ 348.936732][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 349.154982][T11473] IPVS: Unknown mcast interface: vcan0 [ 349.607154][T11482] syzkaller1: entered promiscuous mode [ 349.624353][T11482] syzkaller1: entered allmulticast mode [ 350.269621][T11510] macsec1: entered allmulticast mode [ 350.275104][T11510] bridge0: entered allmulticast mode [ 350.281775][T11510] bridge0: port 3(macsec1) entered blocking state [ 350.289137][T11510] bridge0: port 3(macsec1) entered disabled state [ 350.374591][T11510] bridge0: left allmulticast mode [ 351.009462][T11542] vlan0: entered allmulticast mode [ 351.038357][T11542] bridge_slave_0: entered allmulticast mode [ 351.455607][T11563] vlan1: entered promiscuous mode [ 351.867599][T11580] netlink: 'syz.3.1776': attribute type 1 has an invalid length. [ 351.938416][T11584] __nla_validate_parse: 3 callbacks suppressed [ 351.938440][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1776'. [ 352.104302][T11588] bond9: (slave geneve2): making interface the new active one [ 352.127271][T11588] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 352.245178][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 352.255847][T11597] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.292195][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 352.341894][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 352.350272][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 352.857229][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1788'. [ 352.890958][T11621] netlink: 'syz.1.1788': attribute type 1 has an invalid length. [ 353.124395][T11626] netlink: 'syz.3.1791': attribute type 6 has an invalid length. [ 353.188203][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 353.339134][T11635] xt_recent: Unsupported userspace flags (000000b1) [ 353.462071][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'. [ 353.477280][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 353.494716][T11639] netlink: 'syz.4.1795': attribute type 12 has an invalid length. [ 353.503816][T11639] netlink: 'syz.4.1795': attribute type 11 has an invalid length. [ 353.798210][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 355.023016][T11677] syzkaller1: entered promiscuous mode [ 355.028692][T11677] syzkaller1: entered allmulticast mode [ 355.049769][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.071375][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.080459][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.099950][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.119179][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.128774][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.402091][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 355.579006][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 355.620242][T11694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1810'. [ 355.898002][T11701] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 356.151882][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 356.809362][T11729] FAULT_INJECTION: forcing a failure. [ 356.809362][T11729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.831391][T11729] CPU: 0 UID: 0 PID: 11729 Comm: syz.1.1824 Not tainted syzkaller #0 PREEMPT(full) [ 356.831422][T11729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.831435][T11729] Call Trace: [ 356.831443][T11729] [ 356.831452][T11729] dump_stack_lvl+0x189/0x250 [ 356.831480][T11729] ? __pfx____ratelimit+0x10/0x10 [ 356.831514][T11729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.831535][T11729] ? __pfx__printk+0x10/0x10 [ 356.831573][T11729] should_fail_ex+0x414/0x560 [ 356.831604][T11729] _copy_from_user+0x2d/0xb0 [ 356.831625][T11729] bpf_test_init+0xd8/0x150 [ 356.831651][T11729] bpf_prog_test_run_xdp+0x49e/0x10e0 [ 356.831703][T11729] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.831731][T11729] ? __fget_files+0x2a/0x420 [ 356.831756][T11729] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.831776][T11729] bpf_prog_test_run+0x2c7/0x340 [ 356.831803][T11729] __sys_bpf+0x562/0x860 [ 356.831824][T11729] ? __pfx___sys_bpf+0x10/0x10 [ 356.831862][T11729] ? ksys_write+0x22a/0x250 [ 356.831892][T11729] ? __pfx_ksys_write+0x10/0x10 [ 356.831926][T11729] __x64_sys_bpf+0x7c/0x90 [ 356.831956][T11729] do_syscall_64+0xfa/0xfa0 [ 356.831978][T11729] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.832001][T11729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.832020][T11729] ? clear_bhb_loop+0x60/0xb0 [ 356.832045][T11729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.832064][T11729] RIP: 0033:0x7f7749f8eec9 [ 356.832083][T11729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.832100][T11729] RSP: 002b:00007f774ae75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.832123][T11729] RAX: ffffffffffffffda RBX: 00007f774a1e5fa0 RCX: 00007f7749f8eec9 [ 356.832138][T11729] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 356.832151][T11729] RBP: 00007f774ae75090 R08: 0000000000000000 R09: 0000000000000000 [ 356.832163][T11729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.832174][T11729] R13: 00007f774a1e6038 R14: 00007f774a1e5fa0 R15: 00007ffd0cc58808 [ 356.832220][T11729] [ 357.755067][T11756] __nla_validate_parse: 2 callbacks suppressed [ 357.755090][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 358.040749][T11761] ipvlan10: entered promiscuous mode [ 358.256598][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 359.401050][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 359.575047][ T2914] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.590217][ T2914] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.671278][ T2914] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.701354][ T2914] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.090262][T11805] !: renamed from dummy0 [ 360.233692][T11810] xt_recent: Unsupported userspace flags (000000b1) [ 360.322601][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 361.152585][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 361.164266][T11843] veth1_vlan: left allmulticast mode [ 361.352654][T11846] bond7: entered promiscuous mode [ 361.358314][T11846] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.058066][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'. [ 362.491383][T11872] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1865'. [ 363.348019][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 363.383324][T11893] vlan2: entered promiscuous mode [ 364.440471][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 364.815730][T11909] netlink: 'syz.2.1878': attribute type 4 has an invalid length. [ 365.797201][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 365.879218][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1885'. [ 365.888748][T11936] netlink: 'syz.2.1885': attribute type 7 has an invalid length. [ 365.898561][T11936] netlink: 'syz.2.1885': attribute type 8 has an invalid length. [ 365.908002][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 367.123239][T11971] trusted_key: syz.4.1893 sent an empty control message without MSG_MORE. [ 368.193318][T11985] SET target dimension over the limit! [ 368.420593][T11992] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1899'. [ 368.783190][T11998] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 368.794630][T11998] team0: Failed to send options change via netlink (err -105) [ 368.805298][T11998] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 368.822740][T11998] team0: Port device netdevsim0 removed [ 369.586535][T12006] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1904'. [ 369.659376][T12008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1904'. [ 370.461973][T12030] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 370.633392][T12036] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 370.671004][ T2914] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 370.672485][T12030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.692624][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'. [ 370.828880][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1918'. [ 370.995941][T12052] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1921'. [ 371.028563][T12030] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 371.039693][T12030] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 371.054597][T12030] bond2 (unregistering): Released all slaves [ 371.230443][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 371.327210][T12064] FAULT_INJECTION: forcing a failure. [ 371.327210][T12064] name failslab, interval 1, probability 0, space 0, times 0 [ 371.373275][T12064] CPU: 1 UID: 0 PID: 12064 Comm: syz.1.1924 Not tainted syzkaller #0 PREEMPT(full) [ 371.373306][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.373318][T12064] Call Trace: [ 371.373326][T12064] [ 371.373336][T12064] dump_stack_lvl+0x189/0x250 [ 371.373364][T12064] ? __pfx____ratelimit+0x10/0x10 [ 371.373390][T12064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.373412][T12064] ? __pfx__printk+0x10/0x10 [ 371.373440][T12064] ? __pfx___might_resched+0x10/0x10 [ 371.373461][T12064] ? fs_reclaim_acquire+0x7d/0x100 [ 371.373497][T12064] should_fail_ex+0x414/0x560 [ 371.373528][T12064] should_failslab+0xa8/0x100 [ 371.373551][T12064] kmem_cache_alloc_node_noprof+0x77/0x710 [ 371.373578][T12064] ? __alloc_skb+0x112/0x2d0 [ 371.373607][T12064] __alloc_skb+0x112/0x2d0 [ 371.373633][T12064] ctrl_getfamily+0x3a1/0x590 [ 371.373664][T12064] ? __pfx_ctrl_getfamily+0x10/0x10 [ 371.373702][T12064] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 371.373741][T12064] genl_family_rcv_msg_doit+0x215/0x300 [ 371.373777][T12064] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 371.373824][T12064] ? stack_trace_save+0x9c/0xe0 [ 371.373859][T12064] genl_rcv_msg+0x60e/0x790 [ 371.373894][T12064] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.373920][T12064] ? __pfx_ctrl_getfamily+0x10/0x10 [ 371.373964][T12064] netlink_rcv_skb+0x208/0x470 [ 371.373982][T12064] ? __lock_acquire+0xab9/0xd20 [ 371.374003][T12064] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.374033][T12064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.374079][T12064] ? down_read+0x1ad/0x2e0 [ 371.374110][T12064] genl_rcv+0x28/0x40 [ 371.374134][T12064] netlink_unicast+0x82f/0x9e0 [ 371.374176][T12064] ? __pfx_netlink_unicast+0x10/0x10 [ 371.374210][T12064] ? netlink_sendmsg+0x642/0xb30 [ 371.374229][T12064] ? skb_put+0x11b/0x210 [ 371.374255][T12064] netlink_sendmsg+0x805/0xb30 [ 371.374290][T12064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.374316][T12064] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.374346][T12064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.374365][T12064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.374387][T12064] __sock_sendmsg+0x21c/0x270 [ 371.374419][T12064] __sys_sendto+0x3bd/0x520 [ 371.374444][T12064] ? __pfx___sys_sendto+0x10/0x10 [ 371.374462][T12064] ? __lock_acquire+0xab9/0xd20 [ 371.374515][T12064] ? fd_install+0x97/0x540 [ 371.374544][T12064] ? fd_install+0x30d/0x540 [ 371.374584][T12064] __x64_sys_sendto+0xde/0x100 [ 371.374610][T12064] do_syscall_64+0xfa/0xfa0 [ 371.374632][T12064] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.374657][T12064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.374678][T12064] ? clear_bhb_loop+0x60/0xb0 [ 371.374717][T12064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.374736][T12064] RIP: 0033:0x7f7749f90d5c [ 371.374756][T12064] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 371.374774][T12064] RSP: 002b:00007f774ae73ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 371.374797][T12064] RAX: ffffffffffffffda RBX: 00007f774ae73fc0 RCX: 00007f7749f90d5c [ 371.374812][T12064] RDX: 0000000000000020 RSI: 00007f774ae74010 RDI: 0000000000000008 [ 371.374825][T12064] RBP: 0000000000000000 R08: 00007f774ae73f14 R09: 000000000000000c [ 371.374838][T12064] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 371.374850][T12064] R13: 00007f774ae73f68 R14: 00007f774ae74010 R15: 0000000000000000 [ 371.374888][T12064] [ 371.733936][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1926'. [ 371.769348][T12066] macvlan1: left allmulticast mode [ 371.779356][T12066] ipvlan3: left promiscuous mode [ 371.786126][T12066] ipvlan4: left promiscuous mode [ 371.792226][T12066] ipvlan5: left promiscuous mode [ 371.797551][T12066] bond5: left promiscuous mode [ 371.802676][T12066] bond6: left promiscuous mode [ 371.807980][T12066] bond5: left allmulticast mode [ 371.812961][T12066] bond6: left allmulticast mode [ 372.066057][T12075] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1927'. [ 372.247183][T12076] veth3: entered promiscuous mode [ 372.896475][T12092] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1932'. [ 373.242002][T12100] netlink: 'syz.2.1935': attribute type 7 has an invalid length. [ 373.250527][T12100] netlink: 'syz.2.1935': attribute type 8 has an invalid length. [ 373.792553][T12118] netlink: 'syz.2.1943': attribute type 13 has an invalid length. [ 373.862883][T12122] __nla_validate_parse: 6 callbacks suppressed [ 373.862904][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'. [ 373.903061][T12118] netlink: 'syz.2.1943': attribute type 17 has an invalid length. [ 374.156205][T12118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.247363][T12118] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.258213][T12118] batman_adv: batadv0: Interface activated: dummy0 [ 374.269720][T12118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.171072][T12145] FAULT_INJECTION: forcing a failure. [ 375.171072][T12145] name failslab, interval 1, probability 0, space 0, times 0 [ 375.184641][T12145] CPU: 1 UID: 0 PID: 12145 Comm: syz.2.1950 Not tainted syzkaller #0 PREEMPT(full) [ 375.184670][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 375.184683][T12145] Call Trace: [ 375.184692][T12145] [ 375.184700][T12145] dump_stack_lvl+0x189/0x250 [ 375.184728][T12145] ? __pfx____ratelimit+0x10/0x10 [ 375.184752][T12145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.184773][T12145] ? __pfx__printk+0x10/0x10 [ 375.184801][T12145] ? __pfx___might_resched+0x10/0x10 [ 375.184823][T12145] ? fs_reclaim_acquire+0x7d/0x100 [ 375.184858][T12145] should_fail_ex+0x414/0x560 [ 375.184888][T12145] should_failslab+0xa8/0x100 [ 375.184911][T12145] kmem_cache_alloc_node_noprof+0x77/0x710 [ 375.184938][T12145] ? __alloc_skb+0x112/0x2d0 [ 375.184966][T12145] __alloc_skb+0x112/0x2d0 [ 375.184991][T12145] netlink_sendmsg+0x5c6/0xb30 [ 375.185025][T12145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.185049][T12145] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.185077][T12145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.185096][T12145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.185119][T12145] __sock_sendmsg+0x21c/0x270 [ 375.185152][T12145] ____sys_sendmsg+0x505/0x830 [ 375.185183][T12145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.185217][T12145] ? import_iovec+0x74/0xa0 [ 375.185242][T12145] ___sys_sendmsg+0x21f/0x2a0 [ 375.185269][T12145] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.185335][T12145] ? __fget_files+0x2a/0x420 [ 375.185353][T12145] ? __fget_files+0x3a0/0x420 [ 375.185383][T12145] __x64_sys_sendmsg+0x19b/0x260 [ 375.185410][T12145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.185446][T12145] ? __pfx_ksys_write+0x10/0x10 [ 375.185479][T12145] ? do_syscall_64+0xbe/0xfa0 [ 375.185508][T12145] do_syscall_64+0xfa/0xfa0 [ 375.185538][T12145] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.185562][T12145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.185583][T12145] ? clear_bhb_loop+0x60/0xb0 [ 375.185608][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.185627][T12145] RIP: 0033:0x7fa68158eec9 [ 375.185646][T12145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.185664][T12145] RSP: 002b:00007fa6823fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.185687][T12145] RAX: ffffffffffffffda RBX: 00007fa6817e5fa0 RCX: 00007fa68158eec9 [ 375.185701][T12145] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 375.185714][T12145] RBP: 00007fa6823fe090 R08: 0000000000000000 R09: 0000000000000000 [ 375.185726][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.185738][T12145] R13: 00007fa6817e6038 R14: 00007fa6817e5fa0 R15: 00007ffeb19dc808 [ 375.185774][T12145] [ 375.544685][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 375.946160][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 376.056016][T12165] FAULT_INJECTION: forcing a failure. [ 376.056016][T12165] name failslab, interval 1, probability 0, space 0, times 0 [ 376.068871][T12165] CPU: 0 UID: 0 PID: 12165 Comm: syz.3.1958 Not tainted syzkaller #0 PREEMPT(full) [ 376.068900][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.068912][T12165] Call Trace: [ 376.068921][T12165] [ 376.068930][T12165] dump_stack_lvl+0x189/0x250 [ 376.068959][T12165] ? __pfx____ratelimit+0x10/0x10 [ 376.068984][T12165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.069006][T12165] ? __pfx__printk+0x10/0x10 [ 376.069036][T12165] ? rcu_is_watching+0x15/0xb0 [ 376.069064][T12165] should_fail_ex+0x414/0x560 [ 376.069096][T12165] should_failslab+0xa8/0x100 [ 376.069118][T12165] __kmalloc_noprof+0xcb/0x7f0 [ 376.069146][T12165] ? mpls_build_state+0x196/0x4e0 [ 376.069173][T12165] ? nla_get_labels+0x17f/0x780 [ 376.069204][T12165] mpls_build_state+0x196/0x4e0 [ 376.069240][T12165] ? __pfx_mpls_build_state+0x10/0x10 [ 376.069282][T12165] ? lwtunnel_build_state+0xe2/0x4c0 [ 376.069315][T12165] lwtunnel_build_state+0x384/0x4c0 [ 376.069345][T12165] ? lwtunnel_build_state+0xe2/0x4c0 [ 376.069375][T12165] fib_nh_common_init+0x127/0x3b0 [ 376.069408][T12165] ? __pfx_fib_nh_common_init+0x10/0x10 [ 376.069433][T12165] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 376.069577][T12165] ? rcu_is_watching+0x15/0xb0 [ 376.069604][T12165] fib_nh_init+0x9e/0x410 [ 376.069631][T12165] fib_create_info+0x1be6/0x3210 [ 376.069686][T12165] fib_table_insert+0xc6/0x1b50 [ 376.069710][T12165] ? lwtunnel_valid_encap_type+0xb7/0x210 [ 376.069739][T12165] ? __pfx___mutex_lock+0x10/0x10 [ 376.069764][T12165] ? rtm_to_fib_config+0x1086/0x13c0 [ 376.069809][T12165] inet_rtm_newroute+0x12b/0x210 [ 376.069830][T12165] ? __lock_acquire+0xab9/0xd20 [ 376.069852][T12165] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 376.069899][T12165] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 376.069920][T12165] rtnetlink_rcv_msg+0x7cf/0xb70 [ 376.069940][T12165] ? __lock_acquire+0xab9/0xd20 [ 376.069963][T12165] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 376.069983][T12165] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.070025][T12165] netlink_rcv_skb+0x208/0x470 [ 376.070045][T12165] ? __lock_acquire+0xab9/0xd20 [ 376.070066][T12165] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.070089][T12165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.070124][T12165] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.070157][T12165] netlink_unicast+0x82f/0x9e0 [ 376.070200][T12165] ? __pfx_netlink_unicast+0x10/0x10 [ 376.070233][T12165] ? netlink_sendmsg+0x642/0xb30 [ 376.070253][T12165] ? skb_put+0x11b/0x210 [ 376.070280][T12165] netlink_sendmsg+0x805/0xb30 [ 376.070315][T12165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.070342][T12165] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.070374][T12165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.070393][T12165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.070417][T12165] __sock_sendmsg+0x21c/0x270 [ 376.070458][T12165] ____sys_sendmsg+0x505/0x830 [ 376.070490][T12165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.070525][T12165] ? import_iovec+0x74/0xa0 [ 376.070550][T12165] ___sys_sendmsg+0x21f/0x2a0 [ 376.070577][T12165] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.070646][T12165] ? __fget_files+0x2a/0x420 [ 376.070665][T12165] ? __fget_files+0x3a0/0x420 [ 376.070696][T12165] __x64_sys_sendmsg+0x19b/0x260 [ 376.070719][T12165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.070756][T12165] ? __pfx_ksys_write+0x10/0x10 [ 376.070789][T12165] ? do_syscall_64+0xbe/0xfa0 [ 376.070820][T12165] do_syscall_64+0xfa/0xfa0 [ 376.070842][T12165] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.070867][T12165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.070887][T12165] ? clear_bhb_loop+0x60/0xb0 [ 376.070913][T12165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.070934][T12165] RIP: 0033:0x7f4c45f8eec9 [ 376.070954][T12165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.070972][T12165] RSP: 002b:00007f4c46e71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.070995][T12165] RAX: ffffffffffffffda RBX: 00007f4c461e5fa0 RCX: 00007f4c45f8eec9 [ 376.071009][T12165] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 376.071022][T12165] RBP: 00007f4c46e71090 R08: 0000000000000000 R09: 0000000000000000 [ 376.071035][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.071047][T12165] R13: 00007f4c461e6038 R14: 00007f4c461e5fa0 R15: 00007fffc9cf17e8 [ 376.071085][T12165] [ 376.882021][T12177] netlink: 'syz.0.1961': attribute type 3 has an invalid length. [ 376.889913][T12177] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1961'. [ 377.464763][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1964'. [ 377.516680][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 377.732846][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'. [ 378.209481][ T56] block nbd2: Possible stuck request ffff88802592e000: control (read@0,1024B). Runtime 30 seconds [ 378.221557][ T56] block nbd2: Possible stuck request ffff88802592e1c0: control (read@1024,1024B). Runtime 30 seconds [ 378.235245][ T56] block nbd2: Possible stuck request ffff88802592e380: control (read@2048,1024B). Runtime 30 seconds [ 378.246317][ T56] block nbd2: Possible stuck request ffff88802592e540: control (read@3072,1024B). Runtime 30 seconds [ 378.387764][T12213] FAULT_INJECTION: forcing a failure. [ 378.387764][T12213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.423096][T12213] CPU: 0 UID: 0 PID: 12213 Comm: syz.3.1973 Not tainted syzkaller #0 PREEMPT(full) [ 378.423125][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.423137][T12213] Call Trace: [ 378.423146][T12213] [ 378.423155][T12213] dump_stack_lvl+0x189/0x250 [ 378.423182][T12213] ? __pfx____ratelimit+0x10/0x10 [ 378.423206][T12213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.423227][T12213] ? __pfx__printk+0x10/0x10 [ 378.423248][T12213] ? __might_fault+0xb0/0x130 [ 378.423288][T12213] should_fail_ex+0x414/0x560 [ 378.423319][T12213] _copy_from_user+0x2d/0xb0 [ 378.423340][T12213] __sys_bpf+0x1e3/0x860 [ 378.423363][T12213] ? __pfx___sys_bpf+0x10/0x10 [ 378.423402][T12213] ? ksys_write+0x22a/0x250 [ 378.423432][T12213] ? __pfx_ksys_write+0x10/0x10 [ 378.423466][T12213] __x64_sys_bpf+0x7c/0x90 [ 378.423496][T12213] do_syscall_64+0xfa/0xfa0 [ 378.423520][T12213] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.423544][T12213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.423564][T12213] ? clear_bhb_loop+0x60/0xb0 [ 378.423589][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.423609][T12213] RIP: 0033:0x7f4c45f8eec9 [ 378.423628][T12213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.423646][T12213] RSP: 002b:00007f4c46e71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.423669][T12213] RAX: ffffffffffffffda RBX: 00007f4c461e5fa0 RCX: 00007f4c45f8eec9 [ 378.423692][T12213] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 378.423706][T12213] RBP: 00007f4c46e71090 R08: 0000000000000000 R09: 0000000000000000 [ 378.423718][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.423730][T12213] R13: 00007f4c461e6038 R14: 00007f4c461e5fa0 R15: 00007fffc9cf17e8 [ 378.423766][T12213] [ 378.798781][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.815000][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.777549][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 379.798495][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 379.956447][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'. [ 380.016020][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1982'. [ 380.075473][T12245] macsec1: entered allmulticast mode [ 380.083939][T12245] bridge0: entered allmulticast mode [ 380.104338][T12245] bridge0: port 3(macsec1) entered blocking state [ 380.118472][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 380.122716][T12245] bridge0: port 3(macsec1) entered disabled state [ 380.142827][T12245] bridge0: left allmulticast mode [ 380.205018][T12248] macsec1: entered allmulticast mode [ 380.215453][T12252] xt_TPROXY: Can be used only with -p tcp or -p udp [ 380.222349][T12248] bridge0: entered allmulticast mode [ 380.228540][T12248] bridge0: port 2(macsec1) entered blocking state [ 380.251515][T12248] bridge0: port 2(macsec1) entered disabled state [ 380.275898][T12248] bridge0: left allmulticast mode [ 380.343155][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1986'. [ 380.380424][T12254] vlan2: entered promiscuous mode [ 380.403441][T12256] 8021q: VLANs not supported on vcan0 [ 380.885357][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 381.010537][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 381.023596][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 381.345237][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 381.434417][T12281] macsec2: entered allmulticast mode [ 381.439791][T12281] bridge0: entered allmulticast mode [ 381.457168][T12281] bridge0: port 1(macsec2) entered blocking state [ 381.471414][T12281] bridge0: port 1(macsec2) entered disabled state [ 381.498938][T12281] bridge0: left allmulticast mode [ 381.692702][T12288] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 382.106390][T12301] FAULT_INJECTION: forcing a failure. [ 382.106390][T12301] name failslab, interval 1, probability 0, space 0, times 0 [ 382.140007][T12301] CPU: 1 UID: 0 PID: 12301 Comm: syz.1.2002 Not tainted syzkaller #0 PREEMPT(full) [ 382.140039][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 382.140051][T12301] Call Trace: [ 382.140060][T12301] [ 382.140069][T12301] dump_stack_lvl+0x189/0x250 [ 382.140097][T12301] ? __pfx____ratelimit+0x10/0x10 [ 382.140121][T12301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.140143][T12301] ? __pfx__printk+0x10/0x10 [ 382.140171][T12301] ? __pfx___might_resched+0x10/0x10 [ 382.140192][T12301] ? fs_reclaim_acquire+0x7d/0x100 [ 382.140229][T12301] should_fail_ex+0x414/0x560 [ 382.140260][T12301] should_failslab+0xa8/0x100 [ 382.140282][T12301] kmem_cache_alloc_noprof+0x74/0x6e0 [ 382.140311][T12301] ? fib_table_insert+0x4a7/0x1b50 [ 382.140343][T12301] fib_table_insert+0x4a7/0x1b50 [ 382.140374][T12301] ? mutex_lock_nested+0x20/0x20 [ 382.140398][T12301] ? rtm_to_fib_config+0x1086/0x13c0 [ 382.140444][T12301] inet_rtm_newroute+0x12b/0x210 [ 382.140464][T12301] ? __lock_acquire+0xab9/0xd20 [ 382.140486][T12301] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 382.140541][T12301] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 382.140562][T12301] rtnetlink_rcv_msg+0x7cf/0xb70 [ 382.140587][T12301] ? __lock_acquire+0xab9/0xd20 [ 382.140610][T12301] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 382.140630][T12301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.140671][T12301] netlink_rcv_skb+0x208/0x470 [ 382.140691][T12301] ? __lock_acquire+0xab9/0xd20 [ 382.140711][T12301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.140733][T12301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.140768][T12301] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.140800][T12301] netlink_unicast+0x82f/0x9e0 [ 382.140841][T12301] ? __pfx_netlink_unicast+0x10/0x10 [ 382.140873][T12301] ? netlink_sendmsg+0x642/0xb30 [ 382.140893][T12301] ? skb_put+0x11b/0x210 [ 382.140920][T12301] netlink_sendmsg+0x805/0xb30 [ 382.140954][T12301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.140980][T12301] ? aa_sock_msg_perm+0xf1/0x1d0 [ 382.141010][T12301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 382.141029][T12301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.141053][T12301] __sock_sendmsg+0x21c/0x270 [ 382.141086][T12301] ____sys_sendmsg+0x505/0x830 [ 382.141118][T12301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.141158][T12301] ? import_iovec+0x74/0xa0 [ 382.141182][T12301] ___sys_sendmsg+0x21f/0x2a0 [ 382.141208][T12301] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.141276][T12301] ? __fget_files+0x2a/0x420 [ 382.141293][T12301] ? __fget_files+0x3a0/0x420 [ 382.141325][T12301] __x64_sys_sendmsg+0x19b/0x260 [ 382.141353][T12301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.141389][T12301] ? __pfx_ksys_write+0x10/0x10 [ 382.141423][T12301] ? do_syscall_64+0xbe/0xfa0 [ 382.141452][T12301] do_syscall_64+0xfa/0xfa0 [ 382.141475][T12301] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.141507][T12301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.141527][T12301] ? clear_bhb_loop+0x60/0xb0 [ 382.141553][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.141572][T12301] RIP: 0033:0x7f7749f8eec9 [ 382.141591][T12301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.141608][T12301] RSP: 002b:00007f774ae75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.141631][T12301] RAX: ffffffffffffffda RBX: 00007f774a1e5fa0 RCX: 00007f7749f8eec9 [ 382.141646][T12301] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 382.141659][T12301] RBP: 00007f774ae75090 R08: 0000000000000000 R09: 0000000000000000 [ 382.141670][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.141682][T12301] R13: 00007f774a1e6038 R14: 00007f774a1e5fa0 R15: 00007ffd0cc58808 [ 382.141718][T12301] [ 383.085174][T12317] FAULT_INJECTION: forcing a failure. [ 383.085174][T12317] name failslab, interval 1, probability 0, space 0, times 0 [ 383.098015][T12317] CPU: 0 UID: 0 PID: 12317 Comm: syz.1.2006 Not tainted syzkaller #0 PREEMPT(full) [ 383.098044][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.098056][T12317] Call Trace: [ 383.098065][T12317] [ 383.098073][T12317] dump_stack_lvl+0x189/0x250 [ 383.098102][T12317] ? __pfx____ratelimit+0x10/0x10 [ 383.098128][T12317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.098150][T12317] ? __pfx__printk+0x10/0x10 [ 383.098175][T12317] ? __pfx___might_resched+0x10/0x10 [ 383.098198][T12317] ? fs_reclaim_acquire+0x7d/0x100 [ 383.098233][T12317] should_fail_ex+0x414/0x560 [ 383.098264][T12317] should_failslab+0xa8/0x100 [ 383.098285][T12317] __kvmalloc_node_noprof+0x158/0x910 [ 383.098314][T12317] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 383.098340][T12317] ? page_pool_create_percpu+0x314/0xbc0 [ 383.098367][T12317] ? page_pool_create_percpu+0xb2/0xbc0 [ 383.098399][T12317] page_pool_create_percpu+0x314/0xbc0 [ 383.098425][T12317] ? bpf_test_run_xdp_live+0x1bf/0x1b20 [ 383.098463][T12317] bpf_test_run_xdp_live+0x1d4/0x1b20 [ 383.098486][T12317] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 383.098521][T12317] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 383.098561][T12317] ? synchronize_rcu+0x11a/0x310 [ 383.098586][T12317] ? __pfx_synchronize_rcu+0x10/0x10 [ 383.098615][T12317] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 383.098640][T12317] ? 0xffffffffa0205280 [ 383.098680][T12317] ? 0xffffffffa0205168 [ 383.098728][T12317] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 383.098765][T12317] ? _copy_from_user+0x94/0xb0 [ 383.098786][T12317] ? bpf_test_init+0x113/0x150 [ 383.098804][T12317] ? xdp_convert_md_to_buff+0x5b/0x330 [ 383.098829][T12317] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 383.098869][T12317] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 383.098897][T12317] ? __fget_files+0x2a/0x420 [ 383.098922][T12317] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 383.098944][T12317] bpf_prog_test_run+0x2c7/0x340 [ 383.098971][T12317] __sys_bpf+0x562/0x860 [ 383.098993][T12317] ? __pfx___sys_bpf+0x10/0x10 [ 383.099032][T12317] ? ksys_write+0x22a/0x250 [ 383.099062][T12317] ? __pfx_ksys_write+0x10/0x10 [ 383.099097][T12317] __x64_sys_bpf+0x7c/0x90 [ 383.099127][T12317] do_syscall_64+0xfa/0xfa0 [ 383.099150][T12317] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.099174][T12317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.099194][T12317] ? clear_bhb_loop+0x60/0xb0 [ 383.099219][T12317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.099239][T12317] RIP: 0033:0x7f7749f8eec9 [ 383.099256][T12317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.099273][T12317] RSP: 002b:00007f774ae75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.099296][T12317] RAX: ffffffffffffffda RBX: 00007f774a1e5fa0 RCX: 00007f7749f8eec9 [ 383.099310][T12317] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 383.099323][T12317] RBP: 00007f774ae75090 R08: 0000000000000000 R09: 0000000000000000 [ 383.099336][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.099347][T12317] R13: 00007f774a1e6038 R14: 00007f774a1e5fa0 R15: 00007ffd0cc58808 [ 383.099384][T12317] [ 383.099422][T12317] page_pool_create_percpu() gave up with errno -12 [ 383.628921][T12321] netlink: 'syz.1.2007': attribute type 11 has an invalid length. [ 383.651783][T12321] netlink: 'syz.1.2007': attribute type 11 has an invalid length. [ 384.268296][T12341] FAULT_INJECTION: forcing a failure. [ 384.268296][T12341] name failslab, interval 1, probability 0, space 0, times 0 [ 384.333431][T12341] CPU: 1 UID: 0 PID: 12341 Comm: syz.0.2011 Not tainted syzkaller #0 PREEMPT(full) [ 384.333461][T12341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.333474][T12341] Call Trace: [ 384.333482][T12341] [ 384.333491][T12341] dump_stack_lvl+0x189/0x250 [ 384.333517][T12341] ? __pfx____ratelimit+0x10/0x10 [ 384.333541][T12341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.333571][T12341] ? __pfx__printk+0x10/0x10 [ 384.333597][T12341] ? __pfx___might_resched+0x10/0x10 [ 384.333618][T12341] ? fs_reclaim_acquire+0x7d/0x100 [ 384.333651][T12341] should_fail_ex+0x414/0x560 [ 384.333681][T12341] should_failslab+0xa8/0x100 [ 384.333703][T12341] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 384.333733][T12341] ? __get_vm_area_node+0x13f/0x300 [ 384.333776][T12341] __get_vm_area_node+0x13f/0x300 [ 384.333809][T12341] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 384.333838][T12341] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 384.333862][T12341] ? __lock_acquire+0xab9/0xd20 [ 384.333898][T12341] ? __lock_acquire+0xab9/0xd20 [ 384.333933][T12341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.333964][T12341] ? __might_fault+0xb0/0x130 [ 384.334000][T12341] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 384.334018][T12341] __vmalloc_noprof+0xb1/0xf0 [ 384.334046][T12341] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 384.334070][T12341] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 384.334096][T12341] bpf_prog_alloc+0x3c/0x1a0 [ 384.334119][T12341] bpf_prog_load+0x735/0x19e0 [ 384.334154][T12341] ? __pfx_bpf_prog_load+0x10/0x10 [ 384.334201][T12341] ? bpf_lsm_bpf+0x9/0x20 [ 384.334238][T12341] ? security_bpf+0x7e/0x300 [ 384.334266][T12341] __sys_bpf+0x507/0x860 [ 384.334295][T12341] ? __pfx___sys_bpf+0x10/0x10 [ 384.334334][T12341] ? ksys_write+0x22a/0x250 [ 384.334365][T12341] ? __pfx_ksys_write+0x10/0x10 [ 384.334400][T12341] __x64_sys_bpf+0x7c/0x90 [ 384.334431][T12341] do_syscall_64+0xfa/0xfa0 [ 384.334454][T12341] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.334478][T12341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.334498][T12341] ? clear_bhb_loop+0x60/0xb0 [ 384.334523][T12341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.334544][T12341] RIP: 0033:0x7f38ccb8eec9 [ 384.334563][T12341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.334581][T12341] RSP: 002b:00007f38cdae3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.334603][T12341] RAX: ffffffffffffffda RBX: 00007f38ccde5fa0 RCX: 00007f38ccb8eec9 [ 384.334618][T12341] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 384.334631][T12341] RBP: 00007f38cdae3090 R08: 0000000000000000 R09: 0000000000000000 [ 384.334644][T12341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.334656][T12341] R13: 00007f38ccde6038 R14: 00007f38ccde5fa0 R15: 00007ffdf15bf188 [ 384.334692][T12341] [ 384.334711][T12341] syz.0.2011: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 384.382182][T12345] netlink: 'syz.2.2013': attribute type 33 has an invalid length. [ 384.388467][T12341] ,cpuset=/,mems_allowed=0-1 [ 384.674029][T12341] CPU: 1 UID: 0 PID: 12341 Comm: syz.0.2011 Not tainted syzkaller #0 PREEMPT(full) [ 384.674058][T12341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.674070][T12341] Call Trace: [ 384.674078][T12341] [ 384.674087][T12341] dump_stack_lvl+0x189/0x250 [ 384.674115][T12341] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 384.674146][T12341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.674167][T12341] ? __pfx__printk+0x10/0x10 [ 384.674189][T12341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.674217][T12341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.674254][T12341] warn_alloc+0x214/0x310 [ 384.674291][T12341] ? __pfx_warn_alloc+0x10/0x10 [ 384.674333][T12341] ? __get_vm_area_node+0x2b5/0x300 [ 384.674368][T12341] __vmalloc_node_range_noprof+0x331/0x12d0 [ 384.674410][T12341] ? __lock_acquire+0xab9/0xd20 [ 384.674447][T12341] ? __lock_acquire+0xab9/0xd20 [ 384.674474][T12341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.674505][T12341] ? __might_fault+0xb0/0x130 [ 384.674541][T12341] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 384.674559][T12341] __vmalloc_noprof+0xb1/0xf0 [ 384.674586][T12341] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 384.674610][T12341] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 384.674637][T12341] bpf_prog_alloc+0x3c/0x1a0 [ 384.674660][T12341] bpf_prog_load+0x735/0x19e0 [ 384.674695][T12341] ? __pfx_bpf_prog_load+0x10/0x10 [ 384.674742][T12341] ? bpf_lsm_bpf+0x9/0x20 [ 384.674762][T12341] ? security_bpf+0x7e/0x300 [ 384.674789][T12341] __sys_bpf+0x507/0x860 [ 384.674812][T12341] ? __pfx___sys_bpf+0x10/0x10 [ 384.674851][T12341] ? ksys_write+0x22a/0x250 [ 384.674883][T12341] ? __pfx_ksys_write+0x10/0x10 [ 384.674918][T12341] __x64_sys_bpf+0x7c/0x90 [ 384.674947][T12341] do_syscall_64+0xfa/0xfa0 [ 384.674970][T12341] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.674993][T12341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.675013][T12341] ? clear_bhb_loop+0x60/0xb0 [ 384.675039][T12341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.675058][T12341] RIP: 0033:0x7f38ccb8eec9 [ 384.675077][T12341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.675094][T12341] RSP: 002b:00007f38cdae3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.675116][T12341] RAX: ffffffffffffffda RBX: 00007f38ccde5fa0 RCX: 00007f38ccb8eec9 [ 384.675131][T12341] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 384.675144][T12341] RBP: 00007f38cdae3090 R08: 0000000000000000 R09: 0000000000000000 [ 384.675157][T12341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.675168][T12341] R13: 00007f38ccde6038 R14: 00007f38ccde5fa0 R15: 00007ffdf15bf188 [ 384.675203][T12341] [ 384.675211][T12341] Mem-Info: [ 384.883852][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 384.888750][T12341] active_anon:8898 inactive_anon:0 isolated_anon:0 [ 384.888750][T12341] active_file:3772 inactive_file:39996 isolated_file:0 [ 384.888750][T12341] unevictable:768 dirty:198 writeback:0 [ 384.888750][T12341] slab_reclaimable:11974 slab_unreclaimable:118240 [ 384.888750][T12341] mapped:32844 shmem:4248 pagetables:1230 [ 384.888750][T12341] sec_pagetables:0 bounce:0 [ 384.888750][T12341] kernel_misc_reclaimable:0 [ 384.888750][T12341] free:1302983 free_pcp:14161 free_cma:0 [ 385.021502][T12341] Node 0 active_anon:35592kB inactive_anon:0kB active_file:15088kB inactive_file:159780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131376kB dirty:792kB writeback:0kB shmem:15456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13676kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.091876][T12341] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.131356][T12341] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.213891][T12341] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 385.220714][T12341] Node 0 DMA32 free:1298748kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35540kB inactive_anon:0kB active_file:15088kB inactive_file:159780kB unevictable:1536kB writepending:892kB zspages:0kB present:3129332kB managed:2561664kB mlocked:0kB bounce:0kB free_pcp:40996kB local_pcp:23012kB free_cma:0kB [ 385.260871][T12361] __nla_validate_parse: 4 callbacks suppressed [ 385.260894][T12361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2019'. [ 385.276719][T12361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2019'. [ 385.286417][T12361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2019'. [ 385.310820][T12341] lowmem_reserve[]: 0 0 1 1 1 [ 385.317625][T12361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2019'. [ 385.331316][T12341] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.421254][T12341] lowmem_reserve[]: 0 0 0 0 0 [ 385.426068][T12341] Node 1 Normal free:3900080kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15136kB local_pcp:8000kB free_cma:0kB [ 385.517288][T12341] lowmem_reserve[]: 0 0 0 0 0 [ 385.544810][T12341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 385.558003][ T30] audit: type=1800 audit(1760642646.918:5): pid=12362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2018" name="memory.events" dev="tmpfs" ino=1942 res=0 errno=0 [ 385.588977][T12341] Node 0 DMA32: 3289*4kB (UME) 1338*8kB (UME) 523*16kB (UME) 457*32kB (UME) 78*64kB (UME) 167*128kB (UM) 120*256kB (UME) 70*512kB (UME) 36*1024kB (UME) 4*2048kB (ME) 273*4096kB (M) = 1303044kB [ 385.651089][T12341] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 385.709386][T12341] Node 1 Normal: 194*4kB (UME) 55*8kB (UME) 41*16kB (UME) 133*32kB (UME) 37*64kB (UME) 11*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3900080kB [ 385.771662][T12341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.810581][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 385.819846][T12341] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.864940][T12341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.907094][T12341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.921505][T12341] 45143 total pagecache pages [ 385.926239][T12341] 0 pages in swap cache [ 385.930430][T12341] Free swap = 124996kB [ 385.970878][T12341] Total swap = 124996kB [ 385.982001][T12341] 2097051 pages RAM [ 385.985882][T12341] 0 pages HighMem/MovableOnly [ 386.001513][T12341] 424545 pages reserved [ 386.005723][T12341] 0 pages cma reserved [ 386.018818][T12378] bond7: Removing last arp target with arp_interval on [ 386.232948][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 386.459027][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 386.491102][T12405] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 387.547261][T12421] tipc: Enabled bearer , priority 0 [ 387.555935][T12421] syzkaller0: entered promiscuous mode [ 387.563080][T12421] syzkaller0: entered allmulticast mode [ 387.623575][T12421] tipc: Resetting bearer [ 387.642070][T12420] tipc: Resetting bearer [ 387.667475][T12420] tipc: Disabling bearer [ 389.322750][T12451] batadv1: entered promiscuous mode [ 389.427093][T12454] macsec0: entered allmulticast mode [ 390.105967][T12465] FAULT_INJECTION: forcing a failure. [ 390.105967][T12465] name failslab, interval 1, probability 0, space 0, times 0 [ 390.112588][T12461] bond8: entered promiscuous mode [ 390.118819][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz.3.2047 Not tainted syzkaller #0 PREEMPT(full) [ 390.118845][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.118857][T12465] Call Trace: [ 390.118865][T12465] [ 390.118873][T12465] dump_stack_lvl+0x189/0x250 [ 390.118900][T12465] ? __pfx____ratelimit+0x10/0x10 [ 390.118922][T12465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.118941][T12465] ? __pfx__printk+0x10/0x10 [ 390.118962][T12465] ? __lock_acquire+0xab9/0xd20 [ 390.118990][T12465] should_fail_ex+0x414/0x560 [ 390.119018][T12465] should_failslab+0xa8/0x100 [ 390.119038][T12465] kmem_cache_alloc_bulk_noprof+0x72/0x5d0 [ 390.119065][T12465] ? pfn_valid+0x125/0x4d0 [ 390.119086][T12465] ? pfn_valid+0x125/0x4d0 [ 390.119103][T12465] ? pfn_valid+0x440/0x4d0 [ 390.119125][T12465] bpf_test_run_xdp_live+0x15fb/0x1b20 [ 390.119153][T12465] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 390.119178][T12465] ? bpf_test_run_xdp_live+0x398/0x1b20 [ 390.119208][T12465] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 390.119229][T12465] ? 0xffffffffa0205280 [ 390.119264][T12465] ? 0xffffffffa020510c [ 390.119307][T12465] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 390.119339][T12465] ? _copy_from_user+0x94/0xb0 [ 390.119357][T12465] ? bpf_test_init+0x113/0x150 [ 390.119374][T12465] ? xdp_convert_md_to_buff+0x5b/0x330 [ 390.119395][T12465] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 390.119430][T12465] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 390.119454][T12465] ? __fget_files+0x2a/0x420 [ 390.119476][T12465] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 390.119503][T12465] bpf_prog_test_run+0x2c7/0x340 [ 390.119525][T12465] __sys_bpf+0x562/0x860 [ 390.119546][T12465] ? __pfx___sys_bpf+0x10/0x10 [ 390.119580][T12465] ? ksys_write+0x22a/0x250 [ 390.119606][T12465] ? __pfx_ksys_write+0x10/0x10 [ 390.119636][T12465] __x64_sys_bpf+0x7c/0x90 [ 390.119662][T12465] do_syscall_64+0xfa/0xfa0 [ 390.119684][T12465] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.119705][T12465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.119723][T12465] ? clear_bhb_loop+0x60/0xb0 [ 390.119746][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.119763][T12465] RIP: 0033:0x7f4c45f8eec9 [ 390.119779][T12465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.119794][T12465] RSP: 002b:00007f4c46e71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.119814][T12465] RAX: ffffffffffffffda RBX: 00007f4c461e5fa0 RCX: 00007f4c45f8eec9 [ 390.119828][T12465] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 390.119839][T12465] RBP: 00007f4c46e71090 R08: 0000000000000000 R09: 0000000000000000 [ 390.119850][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.119861][T12465] R13: 00007f4c461e6038 R14: 00007f4c461e5fa0 R15: 00007fffc9cf17e8 [ 390.119892][T12465] [ 390.421857][T12461] 8021q: adding VLAN 0 to HW filter on device bond8 [ 390.599433][T12471] netlink: 'syz.4.2049': attribute type 1 has an invalid length. [ 390.728875][T12471] 8021q: adding VLAN 0 to HW filter on device bond9 [ 391.668589][T12490] --map-set only usable from mangle table [ 391.994392][T12499] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2058'. [ 392.045504][T12501] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 392.880621][T12520] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2064'. [ 392.899362][T12520] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2064'. [ 392.914471][T12520] netlink: 'syz.3.2064': attribute type 6 has an invalid length. [ 392.922789][T12520] netlink: 'syz.3.2064': attribute type 5 has an invalid length. [ 392.930935][T12520] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2064'. [ 393.094388][T12523] tipc: Enabled bearer , priority 0 [ 393.326134][T12524] tipc: Resetting bearer [ 394.226673][ T7327] tipc: Node number set to 2766094403 [ 408.709645][ T5198] udevd[5198]: worker [10243] /devices/virtual/block/nbd2 is taking a long time [ 410.162172][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.171569][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.180231][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 410.189683][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 410.197998][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 410.569612][ T5148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 410.578929][ T5148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 410.589126][ T5148] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 410.599896][ T5148] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 410.610661][ T5148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 410.618886][ T5148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 410.627572][ T5148] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 410.636569][ T5148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 410.644153][ T5148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 410.651868][ T5148] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 410.660447][ T5148] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 410.670747][ T5148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 410.679373][ T5148] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 410.686853][ T5148] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 410.694457][ T5148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 410.705055][ T5148] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 410.714496][ T5148] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 410.723567][ T5148] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 410.730762][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 410.747484][ T5148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 412.231313][ T5845] Bluetooth: hci5: command tx timeout [ 412.791443][ T5831] Bluetooth: hci7: command tx timeout [ 412.797604][ T5148] Bluetooth: hci8: command tx timeout [ 412.803842][ T5845] Bluetooth: hci6: command tx timeout [ 412.871346][ T5148] Bluetooth: hci9: command tx timeout [ 414.311278][ T5148] Bluetooth: hci5: command tx timeout [ 414.871398][ T5831] Bluetooth: hci7: command tx timeout [ 414.876868][ T5831] Bluetooth: hci6: command tx timeout [ 414.883293][ T5148] Bluetooth: hci8: command tx timeout [ 414.951274][ T5831] Bluetooth: hci9: command tx timeout [ 416.391277][ T5831] Bluetooth: hci5: command tx timeout [ 416.951348][ T5831] Bluetooth: hci6: command tx timeout [ 416.956821][ T5831] Bluetooth: hci8: command tx timeout [ 416.962315][ T5148] Bluetooth: hci7: command tx timeout [ 417.031388][ T5831] Bluetooth: hci9: command tx timeout [ 418.471445][ T5831] Bluetooth: hci5: command tx timeout [ 419.031383][ T5845] Bluetooth: hci7: command tx timeout [ 419.036857][ T5845] Bluetooth: hci6: command tx timeout [ 419.042373][ T5831] Bluetooth: hci8: command tx timeout [ 419.111257][ T5845] Bluetooth: hci9: command tx timeout [ 440.236794][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.244204][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.652173][ T5148] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 470.661839][ T5148] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 470.670269][ T5148] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 470.678718][ T5148] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 470.693126][ T5148] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 471.098659][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 471.120754][T12585] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 471.130957][T12585] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 471.143556][T12585] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 471.152513][T12585] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 471.161333][T12585] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 471.170215][T12585] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 471.179058][T12585] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 471.186643][T12585] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 471.194421][T12585] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 471.203937][T12585] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 471.212054][T12585] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 471.222415][T12585] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 471.231858][T12585] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 471.239744][T12585] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 471.248859][T12585] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 471.257047][T12585] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 471.264473][T12585] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 471.274367][T12585] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 471.302352][ T5831] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 499.301108][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 499.307995][ C0] rcu: 0-....: (10528 ticks this GP) idle=5cf4/1/0x4000000000000000 softirq=110006/110007 fqs=5244 [ 499.319948][ C0] rcu: hardirqs softirqs csw/system [ 499.326465][ C0] rcu: number: 6031 0 0 [ 499.332964][ C0] rcu: cputime: 142 52347 8 ==> 52510(ms) [ 499.340764][ C0] rcu: (t=10503 jiffies g=68621 q=1874 ncpus=2) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 499.347264][ C0] CPU: 0 UID: 0 PID: 12532 Comm: syz.2.2066 Not tainted syzkaller #0 PREEMPT(full) [ 499.347283][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 499.347291][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 499.347317][ C0] Code: 58 16 00 00 83 fa 02 75 21 48 8b 91 60 16 00 00 48 8b 32 48 8d 7e 01 8b 89 5c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 3e 90 8e 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 499.347327][ C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000246 [ 499.347339][ C0] RAX: ffffffff8965b0c0 RBX: 0000000000000000 RCX: ffff88802f5a3c80 [ 499.347348][ C0] RDX: 0000000000000100 RSI: 0000000000000010 RDI: 000000000000000b [ 499.347355][ C0] RBP: 1ffff110065c3672 R08: 0000000000000000 R09: ffffffff896509a6 [ 499.347362][ C0] R10: 0000000000000001 R11: ffffffff89586210 R12: dffffc0000000000 [ 499.347370][ C0] R13: ffff888032e1b394 R14: 0000000000000010 R15: 0000000000000002 [ 499.347378][ C0] FS: 00007fa6823bc6c0(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 499.347387][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.347394][ C0] CR2: 000000110c3c141f CR3: 0000000057a92000 CR4: 00000000003526f0 [ 499.347411][ C0] Call Trace: [ 499.347419][ C0] [ 499.347423][ C0] taprio_dequeue_tc_priority+0x2d0/0x750 [ 499.347448][ C0] ? taprio_dequeue+0x26/0x550 [ 499.347460][ C0] taprio_dequeue+0x186/0x550 [ 499.347474][ C0] __qdisc_run+0x239/0x15f0 [ 499.347502][ C0] qdisc_run+0xc2/0x230 [ 499.347519][ C0] net_tx_action+0x7c9/0x980 [ 499.347529][ C0] ? net_tx_action+0x634/0x980 [ 499.347540][ C0] ? __pfx_net_tx_action+0x10/0x10 [ 499.347558][ C0] handle_softirqs+0x283/0x870 [ 499.347573][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 499.347588][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 499.347602][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 499.347619][ C0] __irq_exit_rcu+0xca/0x1f0 [ 499.347630][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 499.347647][ C0] irq_exit_rcu+0x9/0x30 [ 499.347657][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 499.347672][ C0] [ 499.347676][ C0] [ 499.347681][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 499.347693][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 499.347703][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb fc f3 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 499.347712][ C0] RSP: 0018:ffffc9001a0a75d0 EFLAGS: 00000206 [ 499.347722][ C0] RAX: 5fe7b8eb4db3d700 RBX: 0000000000000000 RCX: 5fe7b8eb4db3d700 [ 499.347729][ C0] RDX: 0000000000000000 RSI: ffffffff8d9d1601 RDI: ffffffff8bc074e0 [ 499.347736][ C0] RBP: ffffffff89f631c7 R08: 0000000000000000 R09: ffffffff89f631c7 [ 499.347743][ C0] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: 0000000000000000 [ 499.347751][ C0] R13: ffff88802cee86d8 R14: 0000000000000001 R15: 0000000000000246 [ 499.347760][ C0] ? unix_stream_read_generic+0xbd7/0x2470 [ 499.347775][ C0] ? unix_stream_read_generic+0xbd7/0x2470 [ 499.347800][ C0] _raw_spin_lock+0x2e/0x40 [ 499.347811][ C0] ? unix_stream_read_generic+0xbd7/0x2470 [ 499.347823][ C0] unix_stream_read_generic+0xbd7/0x2470 [ 499.347834][ C0] ? finish_task_switch+0x18b/0x950 [ 499.347867][ C0] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 499.347879][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 499.347905][ C0] unix_stream_recvmsg+0x15d/0x1b0 [ 499.347921][ C0] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 499.347934][ C0] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 499.347948][ C0] ? aa_sock_msg_perm+0xda/0x1d0 [ 499.347965][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 499.347975][ C0] ? security_socket_recvmsg+0x7e/0x2e0 [ 499.347992][ C0] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 499.348006][ C0] sock_recvmsg+0x22c/0x270 [ 499.348032][ C0] ____sys_recvmsg+0x1c9/0x460 [ 499.348050][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 499.348072][ C0] ? import_iovec+0x74/0xa0 [ 499.348085][ C0] ___sys_recvmsg+0x1b5/0x510 [ 499.348101][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 499.348128][ C0] ? __fget_files+0x3a0/0x420 [ 499.348144][ C0] __x64_sys_recvmsg+0x198/0x260 [ 499.348159][ C0] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 499.348181][ C0] ? do_syscall_64+0xbe/0xfa0 [ 499.348197][ C0] do_syscall_64+0xfa/0xfa0 [ 499.348209][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.348222][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.348232][ C0] ? clear_bhb_loop+0x60/0xb0 [ 499.348245][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.348256][ C0] RIP: 0033:0x7fa68158eec9 [ 499.348267][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.348276][ C0] RSP: 002b:00007fa6823bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 499.348287][ C0] RAX: ffffffffffffffda RBX: 00007fa6817e6180 RCX: 00007fa68158eec9 [ 499.348294][ C0] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000008 [ 499.348302][ C0] RBP: 00007fa681611f91 R08: 0000000000000000 R09: 0000000000000000 [ 499.348308][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.348314][ C0] R13: 00007fa6817e6218 R14: 00007fa6817e6180 R15: 00007ffeb19dc808 [ 499.348332][ C0] [ 500.865940][ C0] sched: DL replenish lagged too much [ 501.676359][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.684075][ T1302] ieee802154 phy1 wpan1: encryption failed: -22