last executing test programs: 3.078196584s ago: executing program 0 (id=8629): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.98469434s ago: executing program 3 (id=8631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8000b55}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f0000000580)=""/4092, 0xffffffffffffffb9}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/38, 0x26}, {&(0x7f0000000440)=""/23, 0x17}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/204, 0xcc}, {&(0x7f0000002680)=""/209, 0xd1}], 0x9, &(0x7f0000002780)=""/226, 0xe2}, 0x8}, {{&(0x7f0000002880)=@ax25={{0x3, @null}, [@default, @rose, @remote, @remote, @netrom, @default, @default, @null]}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002900)=""/107, 0x6b}, {&(0x7f0000002980)=""/188, 0xbc}], 0x2, &(0x7f0000002a80)=""/185, 0xb9}, 0xa3b7}, {{&(0x7f0000002b40)=@l2tp6, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/61, 0x3d}], 0x1, &(0x7f0000002c40)=""/182, 0xb6}, 0x9}, {{&(0x7f0000002d00)=@phonet, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)=""/71, 0x47}, {&(0x7f0000002e00)=""/13, 0xd}, {&(0x7f0000002e40)=""/106, 0x6a}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002f00)=""/185, 0xb9}, {&(0x7f0000002fc0)=""/94, 0x5e}, {&(0x7f0000003040)=""/51, 0x33}, {&(0x7f0000003080)=""/84, 0x54}], 0x4, &(0x7f0000003140)=""/140, 0x8c}, 0x5}, {{&(0x7f0000003200)=@alg, 0x80, &(0x7f0000003300)=[{&(0x7f0000003280)=""/122, 0x7a}], 0x1, &(0x7f0000003800)=""/71, 0x47}, 0x8}, {{&(0x7f0000003380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003400)=""/45, 0x2d}, {&(0x7f0000003440)=""/1, 0x1}, {&(0x7f0000003480)=""/136, 0x88}], 0x3, &(0x7f0000003580)=""/14, 0xe}, 0x7}], 0x7, 0x21, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000003880)={0x6e, 0xe, '\x00', [@enc_lim, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x7, [0xd9c, 0x200, 0x6c, 0x9]}}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8000}, @jumbo, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private1}]}, 0x80) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) close(r6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003780)=ANY=[@ANYBLOB="1c000000e009000000278be250a0dda39973f37f1009e7ab667b0ce1358ef13d907f2ea10c663b7d69a634633298f128a3493a1f7db5a0d8", @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf255700000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32=r7, @ANYRES32=r10], 0x44}}, 0x0) 2.978915619s ago: executing program 0 (id=8632): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x34, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c944", 0x0, 0x2b, 0x0, @empty, @remote, [], "d4a3fb00"}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x803, r0}, 0x38) 2.336573743s ago: executing program 2 (id=8636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400120}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x11}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6f, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffff7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10048880}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916320000000000bf67000000000000a406000007ff0700670600000200ffb0070600000ee60000bf050000000000002e650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) accept4(r2, &(0x7f0000000080)=@ethernet={0x0, @random}, 0x0, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x400000, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@ipv6_newnexthop={0x54, 0x68, 0x100, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x1, 0x0, 0x1b}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044045}, 0x4000800) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000cc0)={{r2}, "81c81bdc3173aeb4c1211ef07ea48c17d47283afe4e15a63f80903a58f58e6c7028a21bd27ca970b81daf78c4f9b97e3f2d2c699aecf3d253078557797a739c7fdaa0d91e49cccef1c0e066918783b6b7bc90c44114494f109acb60b7279ed783a3e6413ec0c4ba53aec2336243e7b354491a173f29a933fbf8a60861b577b819b89b056d6f36b78cf1a7052724295433a10d00a6976e8f031bee7d37ba5f9d6179e6a638cf05c4f1401ae8d40c2a1fbf9ea75acf0d321dbfa2d4af31e8fb542964c3e114e2b8dfe0c4d24155e8d1c06009b85107aff15fae45e8e9f3f114ba702cb210c341234de54533e5b85c46d2345744f01b7ddde9ce8039e5bbcb77b76ca54fb4c8677dfad73ae594259d28048844858f7af967a3dcefe60e6e5e4170c512b799cf97e66faa9be2d905f0dd8d61ca03d42111208752eb0b023546d86248e2ab045f3da8e3a4dc43fcdd31ed277ad558e1b23e087be46e16c125adfe30109be9a5eac9e34b069b91ae6d27ff4c059ead167b7c6e2d077f8988ec58f98bfeffd3fb4a4b756fb5b80416999158f09c93150c73b9ca412386ed07328cda1ca2e12b48a79a794ecd54f2da61d62d75ff89b8ccba7b8a5f250f0fc033e5165a9c9297cdeba7245298bf689b7df89dcc1062a675a6a5c0b782ff92eb202d9fcd8c26c29678d0a61c9ca37b3486378855f54591f6c2c0f79762a4b068b8fbdaf33c4c974fa1b744143c9d1e5c147302d94bf014b88607fe10e728fdd4bb189d4416f1e3d72aefeb085d03af4b0bc3d2d8e6e7e2498d2ecdbfb52d5bd27c81ba96dcebc35cfba7b73aa18704be7145c471cc3e51eb075c5eb0203042feb615ff25340c932c08ed29449df64d1eab7e7f7b8738c6e7e3f06022db96d5faa3eb946f74a7aa7f8324ed263aa6f85e8295d728a92b597ee84e1dc8774b1f7d910d2dc8cb3d6c33464088bc0203fd8e8ec64381c943a57c5ce0d989e998b5ba0200bdb129e5cae79d7f35edfde74262042b987a93b6a9d6e784db104b4eb7ca50e5b0a784ab7803d4dd5d4db93a04ba0f4971d36e8937792dd76fb9388b10a2eee5d4e9cfdbfbdab5d885f8d78d9d8474d30b9a91e3a7565ce3c4f3c7113c40351fd72c4e1fd129ab4ee7ded5c97a53bd9ce90d5ddf42eb871c4f894e35ed933c207e43059908a59ab06cb304e913042ec353feee11dbdedac98185baeb6cc089f8fd31171bf32a42755735eb05d4789bde1a7769b98c1e156090f6247404bb7cecef349e4ed2867fda600abece7fdbeb8178f629787bdb80b3ac400135a92d956b08100b542fb8ac8121b2a4cb37ecbf7e24a8ae242f2e614ebc6d2a28c5232c7cf6542db2f98036403bd0157b3712e1f14cb34fc6fc3653fb9c3d5d87702ecafda7976a67a1f4126cf490d85f55416ba9e64d3a99a7fbcd9f2e70d496413746e96624b499d1df03a7162d0e3b6582891c5bc46388a8a6564027ab07e75dc1799b3d982d29b182fd81466db32facba48c2dbf79ee48587cf6bf67ace68a49a715d5a65242065bbcc3d38dc2cc96a63dac4767388978fdb768247df57b551cc0009b6903b75618d961eedbe22c93781338cd249213bd4793240864e6ee8ea8f81291231694d90b6fe0078ee09c3bf007f4fc5c62c70986fa54d8a15381a90ec5da61845e1fcc5778347ee4dc705f42a6369dcc45e6d3f2714fb4151f2f7c9edf2ae9368a54150281b8a934a63674770a19bf88d8cf49aed8096630776eb65eb0e7650b16afa368f5b4121d6e445d5f2b4921650b2c3d69a3220257bdbf7dce65e9972b18aa6ccfe3c465b3084d214dffd8a6b2f785a062ecfed30ffb5c3e5678336cd75ba3e6036158c2e15924a5951fd1205d15ed700a917d8a181bc6afa0daff97a509306f86a552cb9afb4d322a3e3f320c8fe5b9993933be671674d7c4949afae464f746245a3fc8b2f6ce539d69f1b945873d2dbce716b12a4cf6f197c911ab9105902557fb81a1f6c07d93ca82c6a266000bc3927c34d89b713e766fb20fd82db6f3526231011f08f0e4b2ebfbfb194f667bdcba03104cda92923c68e13609af3d0419781ac6c313c67c76055bc1d160d22215f7598ac80b7be6822b46d80d086dc6f7b1ab7e09111c5f6c7516c877c8a29e6d5c7330791231c9d737b5dccb221a4e27c832b63e2da4713d48c64733210e5a9c53e4cf8b3855959f5315cf3ee98e261ea3c6efbcd467afce6c758cfea0d4ca664c431b1c98bad0269145f94a97038f0cb13060c7979e101bc55a79646b4fa4b02b5f983ad8e45f60a698d5a27d552c03aad3ab958f4bcccdff565a57411cee81ab885cba78316bab6b361ccb3c1823565d94fb7c8c5d47c29624f6d025804ee8a24dbae84edc4ac73bdf576df5a90767805550c29b6808e5b41bfa7611b62ff009ca567e1584460073ec97651d07bd94b61bf2eb2f06260a50a0ae5b9cc3fa4bac9c232ba90254256f18ede4e8f5ab2d84d76019a8a8b7d6892042356fd0764cf20584205c93c56e324f774dd6e76ff5e590f1155582900b7e6d53a81009ed419818e6cc5e5d200f1d73af7dbd75235d1d0b8d03316fc90daa6dd45717b8d7d4f6ad2c2034431e0d7e54db97145077335c0155388bdd183052db665e56c341f9b0d433b884561bdf80aef1a47d15bc7493f0c54b432605ac5f7f3f889903f68ff0a9a6bb91eb89234532c232b2e403f2e3044b3e149dd601cb3c577ae029882de7da1e1397530ce79c96bb9cda56efd48ef51855e49b0f75057b1263fddb63a0a0b314b8d80f3fcd7a4e16dfdb09fd544a49930975e4d7e36a64a5dcec5a357a7bcccc1d3825f8bdd4624c40602de851472d3e19eb26951fa736bb54e4f3b83eaab8affc8ae71f278998f86fec6322d87ef4258d114045b1692d69c7b451c329f9f5ddcba8e8bff9edb47703e61522665b5fdbfa92dbd3266bde44104fe08a1ab7a8d3997f17f1f553827adcc4ddb0888075b63e3d94b0942447cca33ab3bdd3a68d7a676954b44fe62fa68979a4eb0a2b6713605cf69464a6c8e213b3d8b20f58627bfda0d8c659c12ebe2916c0219a56df667b2240b9f698d23163067c4b5036fe21e4f8e5c46846c586ee7d7036395d48a2b6b2a86fd24215fa26ec7e061a34262ff13a43fcb60edb1d90b92adf0d744b49a403a5dc3f23d4a558fbca8aa9dca7040b3ae190431a872fe2f410b1920f7649597a80e78fe1ca3271c0ae158b9f02168df636edd1ffffa3b0fdec5b3993fb7a4a6592ccd343830e0a261b532ca3d4733b115741b99d009386cf71e67945ebe10cd2cef310999c0f14c6e161cf027f8a84fce700433e59c32d05fb0e0ff117c17c4237ee7a1596b8eaac3a2aa28e049613d20302e2e39b94a28aaaa8a26498a2cfeafa6033bd3ad8b79366e58422123371bd7d06b2d755459f89d635d01be666ac6c6ae570c79686d5e1ed95184782009abf414e384b736a46b37db0a8518c37acc111151743ad23dcb2bf69e70e9001260dce88f08033ba773ca8f2990bf972731840f05b364e63b693afb9cfb71b06da8f8cc82271e606573dffbc6ead28e518a911e25b7f7201100b7c3d996d2d8ae0ac876884259d670dc7af82a480b858fa2805abf34c1162a18b608cfbeca7b3535aa45f46215962ea13246f9d7636dee81fe93bab1d43dc7fe004ec614612081a32cb8bc772e6dc7041af33a8fc419876aa9206a879faada821bd39b9c8a1144c63615e77120e05a44dcf12a897b491a75418b56b104c6349f44ed4a19742644ab7aaf34de8343dbeccb6cd41e4fe0cc64c91a471901c65958014f1ed78ef80e6c35e5f39f242724bb39176158efec13d2f6fd572801716a5f970515635cbf4a1007660fc46e9369d809dca944f21f15d1ca2322eb862476d4fefb84bfc86f7134cde99b28af4777976b5490faf1d97291a498360f5a2490cd4894ff36dcf0cdefe6d79282005607f8042b69ae20fe43c891b59aa9a1fc3538bcdcab7cab0aa923e25bcbace69a21bcb6b6e0147354bb6f837e3831bc7b25eb49ecd4c447a4218c9b02c56334d25d1909296fbd78f6b839b1a5a6d91a5579c1f563ad3ab13ce8eac986306a71daaab947cf7cdb443ec79df3035a1fa21182cc0a1fbb67c0aefa3ff96d1526ca3d232bbdac7198d794e3718aaba8de9f74904a02e85cfc06e8208ae4dd4e3cb534a6b918f24e3043a6bc21db2d875cfab2d1f86dd34051a241293413152b90d15baa14fa113b5efd89bde9b61a91e361ea1ca046621eca78393afdb22540a84fe02d04485bfd3316232647d314e614811c959670bce9192afb8566b6982ced460e9fd8a8432a17fa47bceef1484bcd544e2123fe929c52be336f20a120bdade559700fc7e67d5b03d23c2d22e80f208312035cb843a251d4e10db43c15a5569221fef5d710c7b742a93eb2aab0cabc8345d314ecd2b03296270180a039e7f0af9b21f4ba2fabb8c030ef794588baf170abe360c2178e3746897461e3e7757fb5d0b2c502f3e72ec5af20f8c3a42ee964923b336a73c0e2c95938103a4722d73c5688ab3d4d7811058e52d9ab4f54edd79fc6b28cb48ec841986cf247c29eb83d54f7bee9985cbb9accc66abf69d6306705eaeef2343abf7532253898fae915273dd6d80d1a705eab349df407f94e526ea9383e5357238c2b248f6c2dd6b41a3bb5c7cebde215c8f53ede7c641db03e6eb05e26edcdb686c73457c445010cba60ce263b0097e79e61c4153943d40c43d25c2e7efb4ca635ba8506fa06ce10be680aa96eb1594e943b4772a25c7214ff8b32ff479ad64794a81089259a3d42db128b3dd7304680d130d9ef93463ae389fce4c3eec1659c56b36954d1c50125a19ba2689a17a23bf19c01e8f7e02c2931eadbbbfca1e7c83ec2f73bcbfb890753bbc1ab346cca2139d97192e9b5d1203d2cb6288e1eea78295dfe791c5feba9d6b872490e81f98fc30709265ff591e240c9c010f1cea4f01d6a94fcbfd7d490906d9a31989b73dd024468b3bfe431d98899c787d9c05a068746dbcf72d1562603971552512091877722e7466a89b523aecd0dae2591fe33b80a1e72f1819fae918a08c55848191ca400852e1ddee6e46e947d6e6c9d2f525fc7acb1c76e847c5c240f6076caf88fcc58e0dcda1efcd291db0d912a2b9a62699fb0be393a896f6b0e1b1b979ab4ee41ec64ff8a6de60a971933bf3c79dca93f04900a90b403e8d8d36ce49bd53ec0a038ff9677b9d421a8b39f0f10edca0400d299c6250d8572bb53e9d1931d79af1ad801a9e68cc6458aa99ee688171d0cb750daf233239dd1cfc85eaad2adca93385a4d67ce951add2a729be31b160030d64c7b7b0a477b0198118c8523f5a5c3b5cc8b8dc053f6be0522a8cd9c0c5c56966b8c88ee07070905df2262b527387b1c1599a57ac23633fd935dc7ef05af59d90f8fe99e3d286d50f3c4bc87bdfeb9de74c089325b67c0059764f7b79c72c891e635cdb708c7fc1bac6b556b771d7e0d945590c9c0bcd6eaf56c3db3cdfe74bae0e85cfaa0c3071e4792dc4f0c415357a87e3d2246fab7ce1b6c41f965413bb5763439348b6a906b653f7ebfc4517b0b0319c94e74c047bb3501ebefe87b748b253ff9ad45da8299b36d0db06a3c5e4f48554c129722850dfe43217c69551e472b61274413cf915815e76626de97ee3d91407e387e1727ceb49c3d7c483a2156a1bf1f2cdfcabc78ccdb35facd5201ccd835736b2660acfc73cd89370bbde496bd085789496"}) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24008890}, 0x4000) 2.254532049s ago: executing program 0 (id=8638): syz_emit_ethernet(0x76, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts]}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c0009"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000003c0)={0x0, @adiantum}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140100005200010000000000000000000a000000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000300)={r10, 0xffff, 0x2, 0x401, 0x0, 0x236c, 0x1000, 0x5, {r10, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x3, 0x9, 0x3, 0xffd7f8d, 0x80}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000240)={r10, 0x93}, &(0x7f0000000280)=0x8) getsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r12, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c000400010000010002"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 2.24751034s ago: executing program 1 (id=8639): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 2.069110168s ago: executing program 3 (id=8640): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYRES8=r2], 0x3c}}, 0x4000001) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xe2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x240000b4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYRES8=r2], 0x3c}}, 0x4000001) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xe2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x240000b4) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) 1.986376973s ago: executing program 1 (id=8641): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) unshare(0x22020400) (async, rerun: 32) unshare(0x8000000) (async) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9f00b9a0ae256b81a5010018000000000000000c0000002b00000000000b010000b0a7612e00"], 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) (rerun: 64) setsockopt$MRT_PIM(r5, 0x0, 0xcf, 0x0, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2ca00000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c00098008000200030000000c000280080001"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x11, 0x6, "bfe03adc55c504336d8907e2bf"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfffffffffffffef1}}, 0x0) (async, rerun: 32) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000140)={{0xbd4f, 0x4}, 0x8}, 0x10) (async, rerun: 32) close(r3) (async, rerun: 32) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async, rerun: 32) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020007000200000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.751429202s ago: executing program 3 (id=8642): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.744090401s ago: executing program 2 (id=8643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) syz_emit_ethernet(0x7a, &(0x7f0000000200)=ANY=[], 0x0) 1.606215491s ago: executing program 0 (id=8644): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="410401", @ANYRES8], 0x4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r8, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r8, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 1.520308295s ago: executing program 1 (id=8645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x400}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x8b) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000000f14010029cd7000fcdbdf2509004500756d6164000000000800010001000000539de2db7eadfdcda4fe8da1c05bd7dcf91585bb00000000e66808a22ccb1adcf31ad136615ac5f1878707000b01192feedfcfc093656d01d1a0401079509ea68cd836ef1c012500355ca0c9679f8ecd56ad7a8485732b079dbe7758e32da2757bd3e6dde341eb0c9599763f5cc28f4c80e73b7632a9b2e17d40e8f61284254417c8"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='fsi_dev_init\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB="000000000000ee5cb0113b578d0b597b9da41c1ae3dd0a0328b3ef0a1f88f0d5358500000096e307d482c1ad9eb0cd3013f118c5b1fc7700a63368ffb935fa95f910033774aeb87e480c5c20aabfa88b05f2dc770d7ba11309011927018d839f15d4fd782da17db2dec63ab1254f3b60c41ea06533315d73c01203548fbfc58a37b594c6a2bfffbb51c00b5b9c415f3a3e44bb64799613205725ff128bbfe77704058da094207b3ac678fc27bd88bc802277bc8d0ecb29dfbcc89c0aefbb00000000", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r5, @ANYRES64=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ed29a407897f60248d3d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xe, 0x3}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000600)=ANY=[@ANYBLOB="aa348eb2e0ad2877101bd493c65453fc7d80c44628e93f7b64d0aaaaaaaaaa00000000400088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff020000000000000000000000000001242022eb0000000000000800000086dd080088be00000001100700000100000000000000080022eb000000d305f2c5a226609ab661a7e67b22020074dce95d43a3006438fb9d6bfb52b3c650fb66a6909d17e835093f0904e1561c63ad5d99489234a174cdf08a65df04744dbd080f0000120728362043cb2b9a0a0233ec5f84a72b9c20ec23f0cdd773ac5c325cbf349a6cba5b224160ec45638a50ef72ef8f6a35e8993504575ca594fffe08370ae0f13900b665a365aecf14155df2dfc9369a1e03a980a9f335f4aa114eaf6145366061cf716e33bbac21230747693f76a3b199d506f03f932f831bf1b31a32d7ac38243ffe61f2ea7abe569a787d6dc4adaab68756eca2c4e0b9db737e3fe9f61f6b448b5213e2"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0xf3c2, 0x200, @empty, 0x4}, @in6={0xa, 0x4e24, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}], 0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005800800024000000000080001400080"], 0xa0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000", @ANYRES32, @ANYRESDEC=r7, @ANYRES32=r13, @ANYRES8=r6], 0x80}}, 0x0) 1.507191017s ago: executing program 3 (id=8646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1e0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1ac, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x1a0, 0x1, [@m_ctinfo={0x19c, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0xfd, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723ed1f1ae47fadcce83f0df3ec18ad73df9e2dbbf597a81169d561156ddae652f19d529a52ec8bce706bc317ce6d5d0dd605c256dbe2d08b90e595b41e88386bdd18542dd8b689a7975b590b240426a577bd91c64275898006519062a4986a8de51434725dc5b9bf2026776727a25f6e667a07c77ec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bind$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = accept(r4, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x40895, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x2}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYBLOB="db7ec214bbe82efaa2271d24620d798986e85b938e06567be4e9216b993967fd81c09e7a909911fd0ac8a34a995fcf54e6fa78d128fcb0881deb03c44b649ba919777370ef055c3a0ae590709b8a1ee5a1d4", @ANYBLOB="0000000060000070004c00028008000100", @ANYBLOB, @ANYRES8=0x0], 0x78}}, 0xc0c0) 1.471080522s ago: executing program 2 (id=8647): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}, 0x1, 0x3000000}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 1.356861437s ago: executing program 4 (id=8648): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x34, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c944", 0x0, 0x2b, 0x0, @empty, @remote, [], "d4a3fb00"}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x803, r0}, 0x38) 1.256869058s ago: executing program 0 (id=8649): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0xffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 1.182107s ago: executing program 2 (id=8650): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='dummy0\x00', 0x10) r1 = socket(0x400000000010, 0x6, 0x803) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f00000022c0)={0x5d0, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0xb8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xa0, 0xe, 0x0, 0x1, [{0x99, 0x0, "899470aae72e6d60d77d800faf491c9813cbd77a5f6814867edda07ce047b0763b9bfadad211a181d4c9454f8d7fb5f822b45223edc78c229841d00ee4d9187d7bcbbab17fd59bffad213ed9dd4f973501b82d071a9aee7f70ec305d05d66deb51748190caedfb7df1dbe1ffb4ef02aa4fe33bf117e0d9298dba90bf4050dfe785bc1b54736ea520f8079519e275e17c5330df96f2"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ab96beddbd90"}]}, @NL80211_ATTR_NAN_FUNC={0x4f4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0xfc, 0xe, 0x0, 0x1, [{0x4b, 0x0, "58d89aeeeca0cc880c9c24e0c8bf86a210c26a2c63f15032e704f5230e00a107c22f63c4ac4ed96c8e53de0a294928910c8250741d460c3a45c0e43307935136611d79cb26d1ef"}, {0xaa, 0x0, "ef99127d6a80b7a3d0100882d6c6981d2d554dfaf6e1d03cfead19e5eb1966d17e91cdb2a1815e1c7af2697ed5264683893c82d5143e12d4d8c2b90d9210963142f5811e18160003f34ba490648e761618d068adfad988792bb03f17071f572e78eaa08c5880043bd2a84e2bc3d6774c17c844a0e2e3f258bec1d70146e1782360ec911f9d6e11192c7e43fe6ad6949acdd232b2834f5cde29b9e05ed4016c7a43f2ea41c2a1"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x0, 0xf, 0xf9}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x27c, 0xe, 0x0, 0x1, [{0x89, 0x0, "72a9b967716fb4b4f5a1d47e16938a73edcc9a48b4e94ad9877e37ad745db8877b096e95a899c07fea2db6077b795e022036b5e3185f2fd3b4082f063a85728cec9a138b50751f9b92af77aef809ee9c56c3601c15fef98c7e09f61242d9edfecf03f1a239953c6d4d7be0e7eb48bf949abfe84a3b4aff5eb74ea3357337a39b4c99d7db9e"}, {0x156, 0x0, "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"}, {0x92, 0x0, "a747346174684625066e4879d02ff1ed058174bc48345170c8c17c2cd214585b0f866889970e0be8a89c6f011c541acce44886ff2e9725b0e55da71f1e481c0049ec2fa062a5163c24e26936095cedba383dcc0718b4d13ddc0a8609e314c6973040b872f0ef543488c77661b212484d476842f96befe2273def33e3adbca47f980c3c0eda0017a5156f16c0cbff"}]}, @NL80211_NAN_FUNC_SRF={0x48}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x0, 0x10, 0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x0, 0xd, 0x0, 0x1, [{0x0, 0x0, "9093cc42acfd11da4d903dd6f6848a26a8db0de457202042e221952277ba6013d151ae460fa6935863ec75600f49397e3c3484c062b677378054ac7ea7b17c66061fb90dc7469017b87694cab5aae2bec5af4a3b606f5a6d3c4f114520aec0ce1c208dd22c83edfa3fc6d477e5d4942ee5c98bc6001c38eb345300092dfdbbb9d3dc322ad1eb51d9778ff6ac6b616aed3499c4fae77dc52afdbe7bec1a0f938e733b7cd90d907366ca407cc716f21c38995f09e57c459f0f8d3b682932aa040d84279cc22c016cd720da9d1dd4a2a64d16b33d5f139585cea710a2244e4bd0"}, {0x0, 0x0, "f3dad35ca5a517c8bad71c440f84d1c2eeed8ea0450525c0ff7192311c372873ecf729c4a90dafe3ecadff8e3f4ebe1b048973403a85c1060fd34e9df5f72e8bbca75f43b64161b27cbda127d69002a71c17fea5e46a50fa297b8ae25a698727d997e50ddc52700b3f9bd7239b96a9ac5b855a378693062c92691177f87f1e42edc1d29868e178b9195f57"}, {0x0, 0x0, "afb5e92b62c74fbb0d154b64e4786abf3ec0c3e52730476fabf81956a50c17e41ad010fd6f356cb33cd25a999208bb941698f16f44c0729cfce7"}, {0x0, 0x0, "2c437c4f33d9bdfb4780a8e5c40a8f0e8bf8c81a246e7c64e03d2a1e7ffc27afb0b649db18743ddccea0d5f5c06762048566d2387bcd508df72b901879fcf1cfb757da3ebad088"}, {0x0, 0x0, "c05dbacfc4cec1c51b65345dacb6047afc9e714ea88e6a866ada2e8f75f50cbb390f5d47d56cc5c9446b298f759a261472d1192200d3c82567cd0a643a95a3bc258f004b8037"}, {0x0, 0x0, "c86503613edc5f33a4e7133cab4b3352fcfd44fc7a68b768d956a96d60a7c7c469fdb11d90b953056376630d03b5b9fe03f0747a732885ed42b7e0430e4c18d7275e04479488986838cd76b6f8433ad4aeef20285e20765e1ade2babe7c8730300215e1e901f48dd431c0470062ebf5606934bbcb54ded215c73af30768efaad35e11c14d7cb8d96560ea831b34f786f8691def9e3f15b2f51"}, {0x0, 0x0, "a76be9482f0bc22a592c5dec022cfd363a483ca806bf1f8cb579cadc48ca4008fb4c4f9d26b16edf1f67a04b096ed05357cd5e9056ba11ff233a347baafb41a644784b64179c59d1ed4cbc5a6af19370540e"}, {0x0, 0x0, "72d3b8a516daa725cb0de5d31e11b1e8cba960c23a6ec6a312589159c7d695935a1488a790df3c005459e336e9ab438bbab77583dde01cad9b2c89ca78d000bb85b08291201dc351baf61bb180ae15a14ab887955fcfdee9f2b768d251da8f2aeff1209012645cc3d595aadfed8af84cfab6200b756485e26e5b7a30938b6f9688"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x0, 0x7, 0x6}]}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x5, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000080)=""/147, 0x28, 0x93, 0x0, 0x3, 0x10000}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1d00000000000000040000000900000000000200", @ANYRES32, @ANYBLOB="00000016541b00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000000100"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x2, 0x4, 0x3, 0x0, r2, 0xfffffffe}, 0x50) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000180)=@srh={0x7, 0x0, 0x4, 0x0, 0x37, 0xf8, 0x7}, 0x8) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000bc0)={0x0, 0x5, 0x2bb3, 0xe3, 0x94b, 0x7fff}, &(0x7f0000000c00)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001780)={0x30, 0x140a, 0x10, 0x7, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4844) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000011c0)={'macsec0\x00', 0x5}) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) setsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f0000001840)=@hopopts={0x2b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @pad1]}, 0x18) 1.001981246s ago: executing program 0 (id=8651): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x4}, 0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x75, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f6, 0x100, 0x70bd26, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x800) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="01020000000050a245d5cde02700450000280f680000000290780ad06fb510ffffff11e06d780000000062ea00000000000000000000f9b8e611a1e70702cfdaa8f47ae3f47b56907d7f89a6fe53a69e2daeb75ce7b6b78d06b3e0adb6390d33666c3b3903b4aa"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) accept4(r6, &(0x7f0000000500)=@generic, &(0x7f0000000100)=0x80, 0x40000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25GETUID(r9, 0x89e0, &(0x7f0000000040)={0x3, @bcast, 0xee00}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x90) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4c0c4) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0x2683) 951.604225ms ago: executing program 4 (id=8652): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x3, 0x2, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESOCT=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 836.892229ms ago: executing program 1 (id=8653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x201, 0x6000000, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 741.719769ms ago: executing program 2 (id=8654): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000050000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x800) 690.553397ms ago: executing program 1 (id=8655): r0 = epoll_create(0xfffffffe) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) syz_init_net_socket$x25(0x9, 0x5, 0x4000000) 584.519295ms ago: executing program 4 (id=8656): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 584.215748ms ago: executing program 2 (id=8657): r0 = socket(0x2, 0x3, 0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0xfffffffffffffef3}}, 0x20000010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) close(0x3) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 531.400176ms ago: executing program 1 (id=8658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x44, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000001840)={{r0}, "3f9b90f95021041ab77006c837d647b8d6db9ba8588c439e3f93e62676ad7816893295b06fdeb68e745488fc3198a64c15e0d6f37daf18ec34b347d4389390a452fb4dfdbb13f7699205262f49e361d3cec5c7475ca2d4e9df3449f125453ccb0e8f072478f22fa9500a43066190e47ba4e5ab51f908108011075c132144420a73e6bcf5814aca8c43de559944fdefabcce6a576bbc83fa96bdc06ac65646c40fae36c215d89cd1f7a6a9ffbe92725f79f6c54ddf6d1a4bfb68deb1e4ca3f808061f7dce3c2a7730c697e8913e2ece2c0f78385103a960eb338888847f644338a548e5da5357533ab1367f944088fa60d15968403e82e9cb2108f1ef9066056809d048c786205b922e958ec86a9d33dfd9e1679f7f437fa0537c7136ef660a83bd66e7fea99e8c83a456617f7c71ef845ede81ab86f2ae7ed677f88026956f6ee900f73c34d19572f6436ec8183ff15c3476debd5a0c632613436bbb94c6a609f874a30a0def25176af15705a7975accbdea63edf8cc6e58fcdd35ba5b15512c295a2a62d6a4175c6c33c48e2dd1743413188705d587041b8be26f5a42667924c83abca69cd22750d708112e38ec8e8acec051f9209dc90875509e2c0e6e4804cd4ed4936a2fad8ee76c0d57f862502517144e139207a2f4be7d7e4d828dd33bf150f55488717de1cc4e0abec0b5a8d165a908bd7272758a847e7597592638256bfe61d94ab15e9caf8bb80f65b5e81329e2844de5843a46fcd11a0453cda68fafbf0cc411e8b9583581b173df5c57e349cbcb4cec994f92cef4f72daa800bb1a6f6e0cdc0d7a1eef340f22df155da968c1fce1e03decda2e620a11382258a30f7c56f2fdf5f261b971a0ca391dc7e7ce5931dfc96518d65aa5117ceb220ade3fe529ad3ccae5be2ac85da66520161660d004ea712ef914b0fb307fc21bd76c73060154218ccf09720b211b83da43a48e99081194871bb068521fa367374b89c1ad6e5caeb4f471913b856ffbdf3eaecea78a0ce9b7aafbf95447f2e9b3a6dc40bd40ad05d5d93e5d21316c34b72399f2197c6b01cc81ae9bdd3fb70232cf6a2b5d1cb65463f92f0f5237a5ebf7e1ed792bfdc58abee7015299ba904b35ebdee33a7b0c0775db400dee562583322f9b608e810106d71d3ede0be0530d82295fd2c2fa51fa43fd400c84e8937b6a5e0dc0b0e361f50aaa2c2f7e42f8394f7bde366d5e7553f5f70fb3774e90cb1b50563115f64ee735eff79970850fc099c603be2cc92c69b23d432bc0cd19440a2a50bc27ffd21c57a2d3259a40600fcc1704b66053c8278a861888f7d7c203b131aab3e0e1e704e7cf304db8c6da67fe4ae32bc8d9a8f086e8825f7dd26a1cece4075867ec3dd975aa744f74973b1150e20134715db7672b3d61bf25ad2ad00106f80dd93dadf5762781fc8426e592ac49602dade3d63824418f1f2ce02335cb1b7c46207cbeb030f480740935088cd0783eb2566534687597d588136f3a2670483d50382ba43c81a51727e5c32e5e6065deb07fd3c9881eb53a03beb7dc5e580f4faa734ec17921ac9587f3de5e25eeeca4cdb6ce881d1ae46524daff494387c0be6c6ea22ccd979a66dcc52793dd95745b4221e2475d72cb635fa497c2f59617faa06ae197e60eab6a327b33a7c144b544b01a34dbef9666921724cd2f855d657fd6a35244061454a47a93191fe46c6431170ad3efed075988b1ee72ffe83fd6193c6da8931e096d333770fabd9c27bb23fc721518f8cf33c54c9d1b0c5b377742e1395bced6604fee6cffa57f46a77d89fe1f3d6f2ab47f998d1d9faacfd640d80925bf785d43d4a9e13ec0576a8154ed19a48d2b73b4b295cc096930d7cb8f36e63c534eec13718129c01658fddd4c88fa90d5218a05b00248694207d571fa67f82cead59609bd41073365ba0f2db23aacc729a3357240abe7bf99ca5617cc55c0cb7c5936f42c370eef7b4a8f3f66b3f8e77ab9a298e7a84522faaac60d30e4e9c322e91e7ab1997f4ff795452ee5fabd9accdbdbe34ea7ef2b0ebf021f5275f5938c39d689b296006a1cf66ef13babed2518a63a0d14182bc923d42b44b295571d59cb15ccfee30946fe3389be339445f58a12454b5c88f3f48a3eb7c678775bfc543160aba2596f9d0d2ac8723c2da3450173595c78c8e644b1a9307852316ae0064246f9f4bd4253f7f7990ac97ca0d2ceafff45d63427b398ed344e98ad44f5e266911e28f21a53348a91b9ccb3a833e3ca7a298530a6d6fae669f4c54a62283eca97a187ac866f4ee4a42ee21805dbf312f9e798dc6df756ab852a9a086b1975e9d42a02c4a52cc826aace567ebc35ffd4cecec9a45a6e1991bac77cc6fc149ba73b57b00f8e1851491b3bdbe154bd9cab07c3a4b558371c55fd547e906e0c6c45fd7888d6abcd89349dfec4202cc41b9944caeee7710fb3608e3fbfa81a8f41e64dd463f0dd435d01799fa004b73954b73de1305e879109e3d9a1a8d40f278d7010f0a58ef4379c4b836d0b289190c833c7d74dc97e2cbc92882df202d0f5890787be00f35bff54a61594a9694c3ecfe3499072a6abc543e0377f13f5ea4975ecb95c890da522713504ff72952f6a1eeb25c4d3759f255f9fc208fcbdfcf3f2ca2aca17e2205c46319de77ec3699f87698f173b14ca261a0ecaf506eb4dc5445066de817a0b3e5eb13cda07b3ace834e99e86cfcece1e5d9fe22a053cbb1f84ebf8305ff37460c7077ef7506757c13615aceb59f868d02036cb1593d40e3f8332b4c514bbe8cde11b83bf8f2b5797af91b84e1470963597df5c5a5494eb991d529d7101edc6ec4a329fe4e3a88f8548f48f258cb913c7fe230eaa8489d7da227321ef8abf9e8f265f12bf9c667edc0369636fa894aa02f6ae6ae5e2f0cc2dcaaebd8a7d5e239b132b93b3d9df37f9abb314abc63ccc8fd37ffac829f0869609e5b038837bed9a08dd9e6b1359fb645bcb3805e58d022f5138fb7d76ce8173ab7f96d81e43029c5018020e36aff2fe775c16a382fe26e1f576a9e018d9b37fd1de6383d48d68b22db3098461a7ce0c7543963d02a93da41b930fc5875ca99f4ed5f7c778da1202a8ff49beedad70aed9ff057d7106ca6f57310c4441b29f969bddb73497e057a7c4c455bd2d99a001528d1a5d9172b34f6966461db7fa34cd8173cbcb02c99d5e6c429da2d900caeb7dec1167255c5be08df4fa1cabdfbd1b2c744c3f351ad17511195eea9be93774852a36c6a4d2e6aae523b3914ffa62db11f0e1ec3644623337849d2f060fb4d7c71f79ac61ee5dd70b915b435be46e79dff997789c938019914d1f9adcd139eb4d47c6f0871b1ce78dd27f474f227188e47cbbdd94e9b4ae7ae495f6a6186f49a76356d4919c6fbf2ed845f41117a57c060f0a27a6eefd8b980b0b5359651873631b7ed62a7042bc9255221d8a4be133f92e902f4ab7cbaed92092725aa6b6b87a749adb3d080f61926b08466cdaa1736904b91d6f91530090f5188b07bb4226f02af4f249520661b68fc96ca86b5ee451b96babc7acb101f0a6404dc164d279a7100a8b89c0d7faee5e6ca2ef94104fc7662c715a99cd22e7fcfc4a7403a0f330d96fa627adeaf1abec2ee2beaa28caa749ef4b728d90c7c668d342bc9792026cda4f065ccc89fa0293eee1c3f1a8c23a64807b8a38daa819ab864eebdb69a77e5f2f1431b06b7e4caff79424a4bb5c5e7f2741a015aa3346a0920badbdfe74e247dc54724eecab4cd5ca88e7623629f854fdc432c52782eab28c1fd34901413f1aaac054637ed0fb82d32553e00b126913440252080a5b8a30c0457775b04cff212485ac4ce72cd7d4ae0940dc2a5238015cb92e3fa46f7994794ee66fc928cf8fb84c1b968358874ae53154bb2b140553aec98fa2043414b0043b046677c427f7f67e550550dca4f06bc79a7af4214faee773659bc380fa281d4a405032fa4edce39d7824f91453f4314dfd139a4cd0f80df7868f55bfc601a95c7c6eab7b57c19780ce25cd0a3e0c868b3cf1651376389541cffa1ae63ca046c7f29edd16ae5bcba5c7e61958ad13b8322ea8f6962bba8e542f03258c979b8a938d5c2940769535cc2496c08f56fa31d20600990075d42412a8d472243fea04d088ac4a0d3961f16fb280ac23243605e7f431b2e14ac6934753d48d002e1b1db0068dcb486a3013db1d6eff882df9780f67e8fea4c9bb0eb96f60eb52017dcb4411a025c1c59ee5ee458dfed337bf988a568bdbdf27c9a75f3b19121b53829e3ea67d3e8e2f8439c939d25ea68946dd9e86f5aa60e2c817312620a439fd3772c67e51337e95ea8a248b750d65ebf27e7a24f1d3ac0f07fa533ecb359a197c7f48f94f4a9a67c5ea57499ce10c3f8f6e41b7db530d34b36d6f2d8f37cdb07e4a47f00f7b1c3380c41f12a7f4f934a943265c12dea48cdacd263f85190155996e2c35dfac277f8b60b5f21a04d168b67e493da626c09a55e0b859c56e86f83a3cfe79981305dac4da80df22de74c82edbc8c2317e7461c9ed8b988d28b5ceaa84f1b35dd9314069dad4f7cf52c9a025af3264c1da29b78181b3f0b7a24628c00515cd566de0eca61f70f85c1c2837dbf6b2b657da2e26b36318b37d10d995c3df6bc367dd0af9c28a0bb2a9ea1d9e36a7e22ea19fa7a173869bd1342de8e7599c45043742a992175dc37e0d4d8c0e9b30b3a298a37b8ff293a8643fd486fa653154e9fe1a933bc74405f9b213bce4febdd40424534ffe168f7a095dd105cc43ba62b83faf8b052b31b2648e5bdcce1c45d4c2f430cacb1b0429bae628ef2141f393869f1d2d717068454b38a97d0596d75b4fd01c8d1f7d82f73547c9cad30202fab7e9117e9221e6beee26dfac837eb579efeeab993e60069a8afa191b150ef6ce57af482cc02d6fa571b1e5c5c976dca3aab9f404fbdece09d82d4bea553ab93c9e8e0250befd5da65ac14709406aa21b265656e3b510b8b8556a804c123cac8f5f00551390282315a95fa0351f9babc39d865927d18d19edd03fba0828bbe6be7fe9f9f9d7b55ea40ad0cc5be25f58f43e02ec0c5490d0bd24595f5f09d9ef4263d86a790a75e0e93663131c4682ef97e0b5cd325ce3168f1f0bdd773f832d544142a282d437efb94c68046a5c99d2316852a082532c5c57d318b8490430e2b435f662d6a5453f8faeb84c14e19fcc18855a4b1c256bd3970080d2b2e974efd0aa8a6a744309d4cc842654095a4153cad60ae64631ff91043e15f4801addc6b5896afadf19f28f29428fe35db4682542d13643d4f79d43af3a8ac34b6f27a3127346d163805c84b013dcfeb490d383f6d2b55eacb69fa5b77bb9483f338d592ba3395c31a89fa197db33ef487aee057ec0cd84b6dd7db3bb92d2056eef948d6f2176b79981bc5211ad32f96a2dd7fe4b705a03b17b59795f5bad16f51bf775164aabf3c8b26411d9193081972b008c95aa3df6913c7d9e9456473ca8d015fea2ffcdc0b704e6eed93909297bbde7754bf5d0ea54065ac3b0fd6a40ebb3e8eee678aafc32a9a0efca6520a4c6e444f4855cd971f2c948fda3cf733f467a12f4a6069fed76d37971cd49243db7a1a748f3f4fdda589ad273de2a652c105d04a40c0a7595eb6163b1f59289f2b2ac60a289a9ba25b5fa1e2c3a1f6b7f14afb7fbbbe1fe53c5555fd29ee7e3f7c8e24682f2e29fc3f0e10343ba07dda7d1c6a3ce3bdfe433e0de9d4e83de4b55dbbdf8f7490a5ec29a91bf2a3c81e44"}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x577, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0x585) 484.069154ms ago: executing program 4 (id=8659): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'macsec0\x00', 0x8}) (fail_nth: 3) 470.677641ms ago: executing program 3 (id=8660): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x1c00, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x4}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) 328.863078ms ago: executing program 3 (id=8661): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0xffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 83.450451ms ago: executing program 4 (id=8662): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0xffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=8663): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r2, &(0x7f0000000740)="8a0d", &(0x7f00000006c0)=""/46}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES8=0x0, @ANYBLOB="c19000008100"/22, @ANYRES8=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYRES16=r1], 0x40}}, 0x0) (async) socket(0x2b, 0x80801, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000004240)=0x40000006, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) (async) recvmmsg(r4, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r6 = socket$inet6(0xa, 0x1, 0x81) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xf0, 0x5c, 0x160, 0x0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'virt_wifi0\x00', {}, {0x222cecdb0fb5a62a}, 0x3a, 0x0, 0x0, 0x42}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfd47}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8d, 0x0, 0x8, 'snmp_trap\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) close(r1) kernel console output (not intermixed with test programs): +0x10/0x10 [ 628.519451][T26947] ? __pfx_ksys_write+0x10/0x10 [ 628.519476][T26947] ? rcu_is_watching+0x15/0xb0 [ 628.519504][T26947] ? do_syscall_64+0xbe/0x3b0 [ 628.519530][T26947] do_syscall_64+0xfa/0x3b0 [ 628.519549][T26947] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.519579][T26947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.519602][T26947] ? clear_bhb_loop+0x60/0xb0 [ 628.519635][T26947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.519655][T26947] RIP: 0033:0x7f8138f8eba9 [ 628.519675][T26947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.519693][T26947] RSP: 002b:00007f8139e03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.519715][T26947] RAX: ffffffffffffffda RBX: 00007f81391d5fa0 RCX: 00007f8138f8eba9 [ 628.519731][T26947] RDX: 0000000000000000 RSI: 00002000000047c0 RDI: 0000000000000003 [ 628.519744][T26947] RBP: 00007f8139e03090 R08: 0000000000000000 R09: 0000000000000000 [ 628.519757][T26947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.519770][T26947] R13: 00007f81391d6038 R14: 00007f81391d5fa0 R15: 00007ffe216a1ae8 [ 628.519807][T26947] [ 628.897218][T26958] syzkaller1: entered promiscuous mode [ 628.953740][T26958] syzkaller1: entered allmulticast mode [ 629.062751][T26967] netlink: 'syz.4.6771': attribute type 10 has an invalid length. [ 629.090075][ T1168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.261765][T26975] FAULT_INJECTION: forcing a failure. [ 629.261765][T26975] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 629.291899][T26977] __nla_validate_parse: 42 callbacks suppressed [ 629.291922][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6774'. [ 629.337970][T26975] CPU: 0 UID: 0 PID: 26975 Comm: syz.4.6773 Not tainted syzkaller #0 PREEMPT(full) [ 629.338001][T26975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.338015][T26975] Call Trace: [ 629.338024][T26975] [ 629.338033][T26975] dump_stack_lvl+0x189/0x250 [ 629.338066][T26975] ? __pfx____ratelimit+0x10/0x10 [ 629.338099][T26975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.338124][T26975] ? __pfx__printk+0x10/0x10 [ 629.338156][T26975] ? fs_reclaim_acquire+0x7d/0x100 [ 629.338200][T26975] should_fail_ex+0x414/0x560 [ 629.338235][T26975] prepare_alloc_pages+0x213/0x610 [ 629.338267][T26975] __alloc_frozen_pages_noprof+0x123/0x370 [ 629.338295][T26975] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 629.338329][T26975] ? policy_nodemask+0x27c/0x720 [ 629.338356][T26975] ? __lock_acquire+0xab9/0xd20 [ 629.338396][T26975] alloc_pages_mpol+0x232/0x4a0 [ 629.338434][T26975] vma_alloc_folio_noprof+0xe4/0x200 [ 629.338465][T26975] ? page_table_check_set+0x18d/0x730 [ 629.338497][T26975] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 629.338544][T26975] folio_prealloc+0x30/0x180 [ 629.338579][T26975] __handle_mm_fault+0x2ab9/0x5440 [ 629.338629][T26975] ? __pfx___handle_mm_fault+0x10/0x10 [ 629.338677][T26975] ? follow_page_pte+0x7ef/0x13e0 [ 629.338720][T26975] handle_mm_fault+0x40a/0x8e0 [ 629.338764][T26975] __get_user_pages+0x1699/0x2ce0 [ 629.338789][T26975] ? __lock_acquire+0xab9/0xd20 [ 629.338872][T26975] __gup_longterm_locked+0xde9/0x1660 [ 629.338919][T26975] ? sanity_check_pinned_pages+0x123a/0x1300 [ 629.338957][T26975] gup_fast_fallback+0x1e6a/0x2010 [ 629.339028][T26975] ? __pfx_gup_fast_fallback+0x10/0x10 [ 629.339066][T26975] ? rcu_is_watching+0x15/0xb0 [ 629.339086][T26975] ? is_valid_gup_args+0x11f/0x200 [ 629.339117][T26975] ? pin_user_pages_fast+0x4d/0xb0 [ 629.339148][T26975] rds_info_getsockopt+0x1fb/0x470 [ 629.339189][T26975] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 629.339222][T26975] ? __might_fault+0xb0/0x130 [ 629.339257][T26975] ? rds_getsockopt+0x31d/0x500 [ 629.339292][T26975] ? __pfx_rds_getsockopt+0x10/0x10 [ 629.339318][T26975] do_sock_getsockopt+0x372/0x450 [ 629.339364][T26975] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 629.339386][T26975] ? write_ibpb+0x30/0x40 [ 629.339405][T26975] ? __fget_files+0x3a0/0x420 [ 629.339424][T26975] ? __fget_files+0x2a/0x420 [ 629.339452][T26975] __x64_sys_getsockopt+0x1a5/0x250 [ 629.339475][T26975] ? write_ibpb+0x30/0x40 [ 629.339496][T26975] ? write_ibpb+0x30/0x40 [ 629.339520][T26975] do_syscall_64+0xfa/0x3b0 [ 629.339538][T26975] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.339569][T26975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.339590][T26975] ? clear_bhb_loop+0x60/0xb0 [ 629.339617][T26975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.339638][T26975] RIP: 0033:0x7f8d7e38eba9 [ 629.339657][T26975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.339676][T26975] RSP: 002b:00007f8d7f27d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 629.339698][T26975] RAX: ffffffffffffffda RBX: 00007f8d7e5d5fa0 RCX: 00007f8d7e38eba9 [ 629.339713][T26975] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 629.339727][T26975] RBP: 00007f8d7f27d090 R08: 0000200000000280 R09: 0000000000000000 [ 629.339741][T26975] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 629.339755][T26975] R13: 00007f8d7e5d6038 R14: 00007f8d7e5d5fa0 R15: 00007ffebfc18328 [ 629.339792][T26975] [ 629.722278][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 629.831404][T26985] pimreg: left allmulticast mode [ 629.911878][T26989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6778'. [ 629.925318][T26991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6779'. [ 629.979870][T26989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6778'. [ 630.033351][T26996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6778'. [ 630.212515][T27000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6782'. [ 630.392443][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6785'. [ 630.421903][T27013] netlink: 'syz.2.6786': attribute type 3 has an invalid length. [ 630.438559][T27013] netlink: 766 bytes leftover after parsing attributes in process `syz.2.6786'. [ 630.643566][T27021] FAULT_INJECTION: forcing a failure. [ 630.643566][T27021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 630.690874][T27021] CPU: 0 UID: 0 PID: 27021 Comm: syz.1.6789 Not tainted syzkaller #0 PREEMPT(full) [ 630.690904][T27021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.690918][T27021] Call Trace: [ 630.690928][T27021] [ 630.690938][T27021] dump_stack_lvl+0x189/0x250 [ 630.690969][T27021] ? __pfx____ratelimit+0x10/0x10 [ 630.691001][T27021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.691028][T27021] ? __pfx__printk+0x10/0x10 [ 630.691060][T27021] ? fs_reclaim_acquire+0x7d/0x100 [ 630.691105][T27021] should_fail_ex+0x414/0x560 [ 630.691141][T27021] prepare_alloc_pages+0x213/0x610 [ 630.691172][T27021] __alloc_frozen_pages_noprof+0x123/0x370 [ 630.691200][T27021] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 630.691235][T27021] ? policy_nodemask+0x27c/0x720 [ 630.691262][T27021] ? __lock_acquire+0xab9/0xd20 [ 630.691299][T27021] alloc_pages_mpol+0x232/0x4a0 [ 630.691337][T27021] vma_alloc_folio_noprof+0xe4/0x200 [ 630.691368][T27021] ? page_table_check_set+0x18d/0x730 [ 630.691399][T27021] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 630.691446][T27021] folio_prealloc+0x30/0x180 [ 630.691480][T27021] __handle_mm_fault+0x2ab9/0x5440 [ 630.691529][T27021] ? __pfx___handle_mm_fault+0x10/0x10 [ 630.691576][T27021] ? follow_page_pte+0x7ef/0x13e0 [ 630.691618][T27021] handle_mm_fault+0x40a/0x8e0 [ 630.691660][T27021] __get_user_pages+0x1699/0x2ce0 [ 630.691690][T27021] ? __lock_acquire+0xab9/0xd20 [ 630.691764][T27021] __gup_longterm_locked+0xde9/0x1660 [ 630.691808][T27021] ? sanity_check_pinned_pages+0x123a/0x1300 [ 630.691845][T27021] gup_fast_fallback+0x1e6a/0x2010 [ 630.691914][T27021] ? __pfx_gup_fast_fallback+0x10/0x10 [ 630.691951][T27021] ? rcu_is_watching+0x15/0xb0 [ 630.691971][T27021] ? is_valid_gup_args+0x11f/0x200 [ 630.692001][T27021] ? pin_user_pages_fast+0x4d/0xb0 [ 630.692031][T27021] rds_info_getsockopt+0x1fb/0x470 [ 630.692070][T27021] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 630.692103][T27021] ? __might_fault+0xb0/0x130 [ 630.692136][T27021] ? rds_getsockopt+0x31d/0x500 [ 630.692159][T27021] ? __pfx_rds_getsockopt+0x10/0x10 [ 630.692184][T27021] do_sock_getsockopt+0x372/0x450 [ 630.692213][T27021] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 630.692235][T27021] ? write_ibpb+0x30/0x40 [ 630.692254][T27021] ? __fget_files+0x3a0/0x420 [ 630.692272][T27021] ? __fget_files+0x2a/0x420 [ 630.692300][T27021] __x64_sys_getsockopt+0x1a5/0x250 [ 630.692323][T27021] ? write_ibpb+0x30/0x40 [ 630.692343][T27021] ? write_ibpb+0x30/0x40 [ 630.692368][T27021] do_syscall_64+0xfa/0x3b0 [ 630.692386][T27021] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.692416][T27021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.692437][T27021] ? clear_bhb_loop+0x60/0xb0 [ 630.692464][T27021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.692484][T27021] RIP: 0033:0x7f8138f8eba9 [ 630.692504][T27021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.692523][T27021] RSP: 002b:00007f8139e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 630.692546][T27021] RAX: ffffffffffffffda RBX: 00007f81391d5fa0 RCX: 00007f8138f8eba9 [ 630.692561][T27021] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 630.692581][T27021] RBP: 00007f8139e03090 R08: 0000200000000280 R09: 0000000000000000 [ 630.692596][T27021] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 630.692609][T27021] R13: 00007f81391d6038 R14: 00007f81391d5fa0 R15: 00007ffe216a1ae8 [ 630.692651][T27021] [ 631.118230][T27026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6792'. [ 631.270475][T27033] netlink: 'syz.1.6793': attribute type 1 has an invalid length. [ 631.407517][T27046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6798'. [ 631.956097][T27080] tipc: Enabling of bearer rejected, already enabled [ 632.029668][T27080] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 632.248120][T27096] netlink: 'syz.3.6814': attribute type 1 has an invalid length. [ 632.662791][T27119] netlink: 'syz.2.6820': attribute type 1 has an invalid length. [ 632.706351][T27119] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 632.912788][T27137] netlink: 'syz.3.6823': attribute type 2 has an invalid length. [ 633.200793][T27149] netlink: 'syz.2.6827': attribute type 1 has an invalid length. [ 633.817153][T27177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 634.236000][T27210] netlink: 'syz.0.6846': attribute type 1 has an invalid length. [ 634.458836][T27225] netlink: 'syz.2.6849': attribute type 4 has an invalid length. [ 634.606077][T27234] __nla_validate_parse: 17 callbacks suppressed [ 634.606099][T27234] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6850'. [ 634.743494][T27244] netlink: 'syz.0.6853': attribute type 1 has an invalid length. [ 634.781932][T27244] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6853'. [ 635.087888][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 635.096032][ C0] lec:lec_tx_timeout: lec0 [ 635.269306][T27270] syzkaller1: entered promiscuous mode [ 635.275003][T27270] syzkaller1: entered allmulticast mode [ 635.688859][T27283] netlink: 'syz.0.6862': attribute type 1 has an invalid length. [ 635.698511][T27283] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6862'. [ 636.069691][T27311] netlink: 'syz.0.6869': attribute type 1 has an invalid length. [ 636.089696][T27311] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6869'. [ 636.169930][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6866'. [ 636.264191][T27323] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6874'. [ 636.330792][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6866'. [ 636.490199][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6866'. [ 636.639488][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6866'. [ 636.748386][T27344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6881'. [ 636.765110][T27351] openvswitch: netlink: Actions may not be safe on all matching packets [ 637.349592][ T123] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 60 seconds [ 637.360737][ T123] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 60 seconds [ 637.372909][ T123] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 60 seconds [ 637.384444][ T123] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 60 seconds [ 637.722818][T27406] FAULT_INJECTION: forcing a failure. [ 637.722818][T27406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 637.744125][T27406] CPU: 1 UID: 0 PID: 27406 Comm: syz.4.6901 Not tainted syzkaller #0 PREEMPT(full) [ 637.744157][T27406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.744170][T27406] Call Trace: [ 637.744179][T27406] [ 637.744189][T27406] dump_stack_lvl+0x189/0x250 [ 637.744221][T27406] ? __pfx____ratelimit+0x10/0x10 [ 637.744254][T27406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.744280][T27406] ? __pfx__printk+0x10/0x10 [ 637.744312][T27406] ? fs_reclaim_acquire+0x7d/0x100 [ 637.744357][T27406] should_fail_ex+0x414/0x560 [ 637.744392][T27406] prepare_alloc_pages+0x213/0x610 [ 637.744423][T27406] __alloc_frozen_pages_noprof+0x123/0x370 [ 637.744450][T27406] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 637.744485][T27406] ? policy_nodemask+0x27c/0x720 [ 637.744512][T27406] ? __lock_acquire+0xab9/0xd20 [ 637.744550][T27406] alloc_pages_mpol+0x232/0x4a0 [ 637.744586][T27406] vma_alloc_folio_noprof+0xe4/0x200 [ 637.744617][T27406] ? page_table_check_set+0x18d/0x730 [ 637.744648][T27406] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 637.744695][T27406] folio_prealloc+0x30/0x180 [ 637.744728][T27406] __handle_mm_fault+0x2ab9/0x5440 [ 637.744777][T27406] ? __pfx___handle_mm_fault+0x10/0x10 [ 637.744824][T27406] ? follow_page_pte+0x7ef/0x13e0 [ 637.744866][T27406] handle_mm_fault+0x40a/0x8e0 [ 637.744907][T27406] __get_user_pages+0x1699/0x2ce0 [ 637.744931][T27406] ? __lock_acquire+0xab9/0xd20 [ 637.745006][T27406] __gup_longterm_locked+0xde9/0x1660 [ 637.745055][T27406] ? sanity_check_pinned_pages+0x123a/0x1300 [ 637.745089][T27406] gup_fast_fallback+0x1e6a/0x2010 [ 637.745157][T27406] ? __pfx_gup_fast_fallback+0x10/0x10 [ 637.745191][T27406] ? rcu_is_watching+0x15/0xb0 [ 637.745210][T27406] ? is_valid_gup_args+0x11f/0x200 [ 637.745238][T27406] ? pin_user_pages_fast+0x4d/0xb0 [ 637.745268][T27406] rds_info_getsockopt+0x1fb/0x470 [ 637.745306][T27406] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 637.745340][T27406] ? __might_fault+0xb0/0x130 [ 637.745374][T27406] ? rds_getsockopt+0x31d/0x500 [ 637.745396][T27406] ? __pfx_rds_getsockopt+0x10/0x10 [ 637.745422][T27406] do_sock_getsockopt+0x372/0x450 [ 637.745451][T27406] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 637.745473][T27406] ? write_ibpb+0x30/0x40 [ 637.745491][T27406] ? __fget_files+0x3a0/0x420 [ 637.745509][T27406] ? __fget_files+0x2a/0x420 [ 637.745537][T27406] __x64_sys_getsockopt+0x1a5/0x250 [ 637.745560][T27406] ? write_ibpb+0x30/0x40 [ 637.745581][T27406] ? write_ibpb+0x30/0x40 [ 637.745605][T27406] do_syscall_64+0xfa/0x3b0 [ 637.745627][T27406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.745667][T27406] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.745688][T27406] ? clear_bhb_loop+0x60/0xb0 [ 637.745715][T27406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.745735][T27406] RIP: 0033:0x7f8d7e38eba9 [ 637.745756][T27406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.745773][T27406] RSP: 002b:00007f8d7f27d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 637.745795][T27406] RAX: ffffffffffffffda RBX: 00007f8d7e5d5fa0 RCX: 00007f8d7e38eba9 [ 637.745811][T27406] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 637.745825][T27406] RBP: 00007f8d7f27d090 R08: 0000200000000280 R09: 0000000000000000 [ 637.745840][T27406] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 637.745854][T27406] R13: 00007f8d7e5d6038 R14: 00007f8d7e5d5fa0 R15: 00007ffebfc18328 [ 637.745891][T27406] [ 638.173548][T27413] validate_nla: 1 callbacks suppressed [ 638.173571][T27413] netlink: 'syz.0.6903': attribute type 21 has an invalid length. [ 638.279741][T27419] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 638.334412][T27419] syzkaller0: entered promiscuous mode [ 638.341973][T27419] syzkaller0: entered allmulticast mode [ 638.395967][T27424] netlink: 'syz.0.6906': attribute type 10 has an invalid length. [ 638.419709][T27427] netlink: 'syz.4.6908': attribute type 7 has an invalid length. [ 640.147412][ T5234] udevd[5234]: worker [24325] /devices/virtual/block/nbd1 is taking a long time [ 640.245925][T27438] sit2: entered promiscuous mode [ 640.275809][T27438] sit2: entered allmulticast mode [ 640.563902][T27458] netlink: 'syz.3.6916': attribute type 2 has an invalid length. [ 640.754243][T27467] netlink: 'syz.3.6921': attribute type 10 has an invalid length. [ 641.058074][T27482] netlink: 'syz.3.6925': attribute type 1 has an invalid length. [ 641.405228][T27496] syzkaller0: entered allmulticast mode [ 641.614458][T27504] syzkaller1: entered promiscuous mode [ 641.639505][T27504] syzkaller1: entered allmulticast mode [ 641.703378][T27508] netlink: 'syz.1.6933': attribute type 10 has an invalid length. [ 642.032115][T27525] __nla_validate_parse: 6 callbacks suppressed [ 642.032139][T27525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6937'. [ 642.073643][T27525] xfrm1: entered promiscuous mode [ 642.080317][T27525] xfrm1: entered allmulticast mode [ 642.085953][T27529] netlink: 'syz.2.6938': attribute type 4 has an invalid length. [ 642.106668][T27534] netlink: 'syz.2.6938': attribute type 4 has an invalid length. [ 642.115386][T27525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6937'. [ 642.136491][T27529] netlink: 'syz.2.6938': attribute type 1 has an invalid length. [ 642.161184][T27529] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6938'. [ 642.171792][T27529] nbd: couldn't find device at index 1048576 [ 642.201794][T27538] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6940'. [ 642.784129][T27570] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6952'. [ 642.803172][T27572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.899392][T27576] FAULT_INJECTION: forcing a failure. [ 642.899392][T27576] name failslab, interval 1, probability 0, space 0, times 0 [ 642.914438][T27576] CPU: 1 UID: 0 PID: 27576 Comm: syz.4.6955 Not tainted syzkaller #0 PREEMPT(full) [ 642.914467][T27576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.914481][T27576] Call Trace: [ 642.914491][T27576] [ 642.914501][T27576] dump_stack_lvl+0x189/0x250 [ 642.914532][T27576] ? __pfx____ratelimit+0x10/0x10 [ 642.914564][T27576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.914598][T27576] ? __pfx__printk+0x10/0x10 [ 642.914643][T27576] ? __pfx___might_resched+0x10/0x10 [ 642.914663][T27576] ? fs_reclaim_acquire+0x7d/0x100 [ 642.914702][T27576] should_fail_ex+0x414/0x560 [ 642.914738][T27576] should_failslab+0xa8/0x100 [ 642.914771][T27576] __kmalloc_cache_noprof+0x70/0x3d0 [ 642.914799][T27576] ? nfnetlink_rcv+0xeff/0x2520 [ 642.914834][T27576] nfnetlink_rcv+0xeff/0x2520 [ 642.914907][T27576] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 642.914956][T27576] ? ref_tracker_free+0x63a/0x7d0 [ 642.915023][T27576] ? __netlink_deliver_tap+0x807/0x850 [ 642.915056][T27576] ? netlink_deliver_tap+0x2e/0x1b0 [ 642.915112][T27576] netlink_unicast+0x82f/0x9e0 [ 642.915153][T27576] ? __pfx_netlink_unicast+0x10/0x10 [ 642.915185][T27576] ? netlink_sendmsg+0x642/0xb30 [ 642.915203][T27576] ? skb_put+0x11b/0x210 [ 642.915230][T27576] netlink_sendmsg+0x805/0xb30 [ 642.915262][T27576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.915287][T27576] ? aa_sock_msg_perm+0xf1/0x1d0 [ 642.915311][T27576] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.915335][T27576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.915356][T27576] __sock_sendmsg+0x219/0x270 [ 642.915390][T27576] ____sys_sendmsg+0x505/0x830 [ 642.915421][T27576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.915458][T27576] ? import_iovec+0x74/0xa0 [ 642.915496][T27576] ___sys_sendmsg+0x21f/0x2a0 [ 642.915524][T27576] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.915605][T27576] ? __fget_files+0x2a/0x420 [ 642.915623][T27576] ? __fget_files+0x3a0/0x420 [ 642.915656][T27576] __x64_sys_sendmsg+0x19b/0x260 [ 642.915684][T27576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.915722][T27576] ? __pfx_ksys_write+0x10/0x10 [ 642.915747][T27576] ? rcu_is_watching+0x15/0xb0 [ 642.915777][T27576] ? do_syscall_64+0xbe/0x3b0 [ 642.915802][T27576] do_syscall_64+0xfa/0x3b0 [ 642.915821][T27576] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.915852][T27576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.915873][T27576] ? clear_bhb_loop+0x60/0xb0 [ 642.915900][T27576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.915921][T27576] RIP: 0033:0x7f8d7e38eba9 [ 642.915940][T27576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.915959][T27576] RSP: 002b:00007f8d7f27d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.915983][T27576] RAX: ffffffffffffffda RBX: 00007f8d7e5d5fa0 RCX: 00007f8d7e38eba9 [ 642.915999][T27576] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 642.916013][T27576] RBP: 00007f8d7f27d090 R08: 0000000000000000 R09: 0000000000000000 [ 642.916027][T27576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.916040][T27576] R13: 00007f8d7e5d6038 R14: 00007f8d7e5d5fa0 R15: 00007ffebfc18328 [ 642.916078][T27576] [ 642.972757][T27579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6956'. [ 643.024088][T27580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6957'. [ 643.468545][T27592] pim6reg1: entered promiscuous mode [ 643.486328][T27592] pim6reg1: entered allmulticast mode [ 643.533216][T27601] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6963'. [ 643.566161][T27600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.653843][T27607] netlink: 'syz.4.6966': attribute type 1 has an invalid length. [ 643.726739][T27607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6966'. [ 644.215525][T27644] netlink: 'syz.3.6980': attribute type 10 has an invalid length. [ 644.249968][T27644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 644.567210][ T36] nci: nci_rsp_packet: unsupported rsp opcode 0xf21 [ 644.583193][T27661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.605158][T27672] netlink: 'syz.1.6989': attribute type 1 has an invalid length. [ 645.209722][T27705] syzkaller1: entered promiscuous mode [ 645.215356][T27705] syzkaller1: entered allmulticast mode [ 645.579341][T27717] netlink: 'syz.4.7003': attribute type 1 has an invalid length. [ 645.617902][T27717] netlink: 'syz.4.7003': attribute type 1 has an invalid length. [ 645.933340][T27735] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 646.179300][T27746] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 646.230651][T27754] netlink: 'syz.0.7015': attribute type 1 has an invalid length. [ 646.679821][T27774] syzkaller1: entered promiscuous mode [ 646.685453][T27774] syzkaller1: entered allmulticast mode [ 646.734485][T27772] netem: change failed [ 647.673031][T27827] syzkaller1: entered promiscuous mode [ 647.695773][T27827] syzkaller1: entered allmulticast mode [ 647.819097][T27833] netlink: 'syz.4.7038': attribute type 10 has an invalid length. [ 648.086683][T27839] __nla_validate_parse: 12 callbacks suppressed [ 648.086707][T27839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7039'. [ 648.276584][T27856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7040'. [ 648.333507][T27839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7039'. [ 648.603947][T27863] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 649.076419][T27888] netlink: 'syz.1.7049': attribute type 10 has an invalid length. [ 649.411054][T27909] tipc: Enabling of bearer rejected, already enabled [ 649.421189][T27910] netlink: 'syz.1.7056': attribute type 1 has an invalid length. [ 649.434317][T27910] netlink: 'syz.1.7056': attribute type 2 has an invalid length. [ 649.457724][T27910] netlink: 'syz.1.7056': attribute type 1 has an invalid length. [ 649.465914][T27910] netlink: 'syz.1.7056': attribute type 2 has an invalid length. [ 649.878952][T27931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7062'. [ 650.098113][T27941] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7065'. [ 650.215103][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7067'. [ 650.263249][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7067'. [ 650.300082][T27950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7069'. [ 650.486106][T27965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7072'. [ 650.502962][T27965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7072'. [ 650.514359][T27965] netlink: 'syz.0.7072': attribute type 11 has an invalid length. [ 665.488031][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 667.408945][ T123] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 90 seconds [ 667.419974][ T123] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 90 seconds [ 667.430989][ T123] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 90 seconds [ 667.442061][ T123] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 90 seconds [ 686.019131][T13079] lec:lec_start_xmit: lec0:No lecd attached [ 691.088278][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 691.096354][ C0] lec:lec_tx_timeout: lec0 [ 691.103053][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 696.118062][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 696.126115][ C0] lec:lec_tx_timeout: lec0 [ 697.498040][ T123] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 120 seconds [ 697.509337][ T123] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 120 seconds [ 697.520730][ T123] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 120 seconds [ 697.532432][ T123] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 120 seconds [ 712.298949][T28030] netlink: 'syz.0.7090': attribute type 10 has an invalid length. [ 712.306851][T28030] __nla_validate_parse: 5 callbacks suppressed [ 712.306872][T28030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7090'. [ 712.349045][T28034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7092'. [ 712.361757][T28030] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 712.392111][T28038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7093'. [ 712.420096][T28035] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 712.486466][T28041] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7095'. [ 712.534694][T28045] netlink: 'syz.4.7096': attribute type 21 has an invalid length. [ 712.566131][T28045] netlink: 'syz.4.7096': attribute type 6 has an invalid length. [ 712.597003][T28045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7096'. [ 712.654220][T28045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7096'. [ 712.684741][T28045] dummy0: left allmulticast mode [ 712.702455][T28045] bridge0: port 1(dummy0) entered disabled state [ 712.880699][T28063] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7099'. [ 713.177149][T28070] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 713.211277][T28075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7105'. [ 713.265138][T28077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7107'. [ 713.480753][T28091] syzkaller1: entered promiscuous mode [ 713.486338][T28091] syzkaller1: entered allmulticast mode [ 713.648732][T28099] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7114'. [ 714.096193][T28119] syzkaller1: entered promiscuous mode [ 714.103047][T28119] syzkaller1: entered allmulticast mode [ 714.988032][T28167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.083161][T28170] syzkaller1: entered promiscuous mode [ 715.093741][T28170] syzkaller1: entered allmulticast mode [ 716.096619][T28231] syzkaller1: entered promiscuous mode [ 716.141417][T28231] syzkaller1: entered allmulticast mode [ 716.257426][T28238] netlink: 'syz.1.7152': attribute type 10 has an invalid length. [ 716.318839][T28241] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 716.428689][ T1168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.480935][T28243] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 716.812395][T28269] tap0: tun_chr_ioctl cmd 1074025678 [ 716.817824][T28269] tap0: group set to 0 [ 716.980694][ T1168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 717.241204][T28283] syzkaller1: entered promiscuous mode [ 717.250993][T28283] syzkaller1: entered allmulticast mode [ 718.637079][T28294] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 718.971392][T28321] __nla_validate_parse: 46 callbacks suppressed [ 718.971423][T28321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7179'. [ 718.988076][T28323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7178'. [ 719.278269][T28341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7184'. [ 719.438439][T28350] netlink: 'syz.2.7187': attribute type 10 has an invalid length. [ 719.499371][T28350] geneve1: entered allmulticast mode [ 719.516555][T28350] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 719.566655][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 719.585915][T28347] syzkaller1: entered promiscuous mode [ 719.592239][T28347] syzkaller1: entered allmulticast mode [ 719.645533][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 719.666763][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 719.694791][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 719.765043][T28363] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 719.924280][T28374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7195'. [ 720.137921][T28389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7200'. [ 720.307641][T28398] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 720.366847][T28395] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 721.128985][T28449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7227'. [ 721.160729][T28449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7227'. [ 721.990090][T28499] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.7247'. [ 722.172747][T28505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7250'. [ 722.192038][T28507] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7253'. [ 722.262276][T28505] batadv_slave_1 (unregistering): left promiscuous mode [ 722.731052][T28542] netlink: 'syz.0.7262': attribute type 39 has an invalid length. [ 723.534573][T28594] FAULT_INJECTION: forcing a failure. [ 723.534573][T28594] name failslab, interval 1, probability 0, space 0, times 0 [ 723.574797][T28595] netlink: 'syz.4.7274': attribute type 11 has an invalid length. [ 723.583803][T28595] netlink: 'syz.4.7274': attribute type 11 has an invalid length. [ 723.603119][T28594] CPU: 0 UID: 0 PID: 28594 Comm: syz.0.7277 Not tainted syzkaller #0 PREEMPT(full) [ 723.603149][T28594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 723.603163][T28594] Call Trace: [ 723.603172][T28594] [ 723.603187][T28594] dump_stack_lvl+0x189/0x250 [ 723.603219][T28594] ? __pfx____ratelimit+0x10/0x10 [ 723.603252][T28594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.603278][T28594] ? __pfx__printk+0x10/0x10 [ 723.603313][T28594] ? __pfx___might_resched+0x10/0x10 [ 723.603333][T28594] ? fs_reclaim_acquire+0x7d/0x100 [ 723.603369][T28594] should_fail_ex+0x414/0x560 [ 723.603402][T28594] should_failslab+0xa8/0x100 [ 723.603435][T28594] __kmalloc_noprof+0xcb/0x4f0 [ 723.603462][T28594] ? rds_message_alloc+0x47/0x1f0 [ 723.603497][T28594] rds_message_alloc+0x47/0x1f0 [ 723.603527][T28594] rds_sendmsg+0xb11/0x1f00 [ 723.603565][T28594] ? __pfx_rds_sendmsg+0x10/0x10 [ 723.603582][T28594] ? aa_sk_perm+0x81e/0x950 [ 723.603616][T28594] ? __pfx_aa_sk_perm+0x10/0x10 [ 723.603644][T28594] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 723.603675][T28594] ? aa_sock_msg_perm+0xf1/0x1d0 [ 723.603697][T28594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.603719][T28594] ? __pfx_rds_sendmsg+0x10/0x10 [ 723.603739][T28594] __sock_sendmsg+0x219/0x270 [ 723.603772][T28594] ____sys_sendmsg+0x505/0x830 [ 723.603804][T28594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.603840][T28594] ? import_iovec+0x74/0xa0 [ 723.603869][T28594] ___sys_sendmsg+0x21f/0x2a0 [ 723.603896][T28594] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.603964][T28594] ? __fget_files+0x2a/0x420 [ 723.603982][T28594] ? __fget_files+0x3a0/0x420 [ 723.604022][T28594] __x64_sys_sendmsg+0x19b/0x260 [ 723.604051][T28594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.604087][T28594] ? __pfx_ksys_write+0x10/0x10 [ 723.604113][T28594] ? rcu_is_watching+0x15/0xb0 [ 723.604142][T28594] ? do_syscall_64+0xbe/0x3b0 [ 723.604167][T28594] do_syscall_64+0xfa/0x3b0 [ 723.604185][T28594] ? lockdep_hardirqs_on+0x9c/0x150 [ 723.604217][T28594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.604238][T28594] ? clear_bhb_loop+0x60/0xb0 [ 723.604264][T28594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.604285][T28594] RIP: 0033:0x7f5c6258eba9 [ 723.604305][T28594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.604323][T28594] RSP: 002b:00007f5c63404038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.604346][T28594] RAX: ffffffffffffffda RBX: 00007f5c627d5fa0 RCX: 00007f5c6258eba9 [ 723.604362][T28594] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 723.604375][T28594] RBP: 00007f5c63404090 R08: 0000000000000000 R09: 0000000000000000 [ 723.604388][T28594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.604401][T28594] R13: 00007f5c627d6038 R14: 00007f5c627d5fa0 R15: 00007ffcb78d8bc8 [ 723.604437][T28594] [ 724.451667][T28624] syzkaller1: entered promiscuous mode [ 724.470848][T28624] syzkaller1: entered allmulticast mode [ 724.482560][T28630] __nla_validate_parse: 8 callbacks suppressed [ 724.482583][T28630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7288'. [ 724.509156][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7289'. [ 724.526890][T28630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7288'. [ 724.547117][T28630] netlink: 'syz.1.7288': attribute type 2 has an invalid length. [ 724.566588][T28630] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7288'. [ 724.807118][T28644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7292'. [ 724.866418][T28644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7292'. [ 725.185882][T28663] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7296'. [ 725.203772][T28663] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7296'. [ 725.383652][T28670] netlink: 45 bytes leftover after parsing attributes in process `syz.4.7298'. [ 725.423841][T28670] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 725.812081][T28698] syzkaller1: entered promiscuous mode [ 725.905741][T28698] syzkaller1: entered allmulticast mode [ 726.396264][T28729] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 726.483190][T28732] FAULT_INJECTION: forcing a failure. [ 726.483190][T28732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.516755][T28732] CPU: 1 UID: 0 PID: 28732 Comm: syz.4.7316 Not tainted syzkaller #0 PREEMPT(full) [ 726.516787][T28732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.516801][T28732] Call Trace: [ 726.516815][T28732] [ 726.516825][T28732] dump_stack_lvl+0x189/0x250 [ 726.516856][T28732] ? __pfx____ratelimit+0x10/0x10 [ 726.516888][T28732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.516913][T28732] ? __pfx__printk+0x10/0x10 [ 726.516950][T28732] ? __might_fault+0xb0/0x130 [ 726.516994][T28732] should_fail_ex+0x414/0x560 [ 726.517029][T28732] _copy_from_user+0x2d/0xb0 [ 726.517056][T28732] ___sys_sendmsg+0x158/0x2a0 [ 726.517084][T28732] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.517152][T28732] ? __fget_files+0x2a/0x420 [ 726.517169][T28732] ? __fget_files+0x3a0/0x420 [ 726.517201][T28732] __x64_sys_sendmsg+0x19b/0x260 [ 726.517229][T28732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.517265][T28732] ? __pfx_ksys_write+0x10/0x10 [ 726.517291][T28732] ? rcu_is_watching+0x15/0xb0 [ 726.517319][T28732] ? do_syscall_64+0xbe/0x3b0 [ 726.517344][T28732] do_syscall_64+0xfa/0x3b0 [ 726.517362][T28732] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.517392][T28732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.517413][T28732] ? clear_bhb_loop+0x60/0xb0 [ 726.517439][T28732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.517465][T28732] RIP: 0033:0x7f8d7e38eba9 [ 726.517485][T28732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.517504][T28732] RSP: 002b:00007f8d7f27d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.517527][T28732] RAX: ffffffffffffffda RBX: 00007f8d7e5d5fa0 RCX: 00007f8d7e38eba9 [ 726.517569][T28732] RDX: 0000000004040004 RSI: 0000200000000000 RDI: 0000000000000003 [ 726.517584][T28732] RBP: 00007f8d7f27d090 R08: 0000000000000000 R09: 0000000000000000 [ 726.517597][T28732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.517610][T28732] R13: 00007f8d7e5d6038 R14: 00007f8d7e5d5fa0 R15: 00007ffebfc18328 [ 726.517647][T28732] [ 726.846859][T28739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7318'. [ 726.946032][T28742] netlink: 'syz.2.7317': attribute type 2 has an invalid length. [ 727.568403][ T123] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 150 seconds [ 727.579747][ T123] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 150 seconds [ 727.594947][ T123] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 150 seconds [ 727.606765][ T123] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 150 seconds [ 727.846769][T28799] pimreg: entered allmulticast mode [ 728.976411][T28850] hsr_slave_1 (unregistering): left promiscuous mode [ 728.992333][T28854] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 729.184615][T28866] netlink: 'syz.2.7360': attribute type 7 has an invalid length. [ 729.338435][T28868] ip6gretap0: entered promiscuous mode [ 729.353990][T28868] syz_tun: entered promiscuous mode [ 729.375922][T28868] debugfs: 'hsr1' already exists in 'hsr' [ 729.386747][T28868] Cannot create hsr debugfs directory [ 729.403288][T28868] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 729.439101][T28868] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 729.549555][T28880] __nla_validate_parse: 9 callbacks suppressed [ 729.549578][T28880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7365'. [ 729.642106][T28885] netlink: 'syz.2.7367': attribute type 1 has an invalid length. [ 729.657891][T28885] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7367'. [ 729.825296][T28888] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 730.165308][T28912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7377'. [ 730.186974][T28912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7377'. [ 730.251817][T28912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7377'. [ 730.428807][T28928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7382'. [ 730.484400][T28934] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 730.615130][T28941] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 730.981141][T28962] netlink: 348 bytes leftover after parsing attributes in process `syz.0.7396'. [ 731.012404][T28962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7396'. [ 731.025335][T28964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7397'. [ 731.041891][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7396'. [ 731.210475][T28974] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 731.265155][T28974] FAULT_INJECTION: forcing a failure. [ 731.265155][T28974] name failslab, interval 1, probability 0, space 0, times 0 [ 731.323208][T28974] CPU: 1 UID: 0 PID: 28974 Comm: syz.3.7400 Not tainted syzkaller #0 PREEMPT(full) [ 731.323237][T28974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 731.323258][T28974] Call Trace: [ 731.323266][T28974] [ 731.323275][T28974] dump_stack_lvl+0x189/0x250 [ 731.323304][T28974] ? __pfx____ratelimit+0x10/0x10 [ 731.323335][T28974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.323360][T28974] ? __pfx__printk+0x10/0x10 [ 731.323396][T28974] ? __pfx___might_resched+0x10/0x10 [ 731.323415][T28974] ? fs_reclaim_acquire+0x7d/0x100 [ 731.323453][T28974] should_fail_ex+0x414/0x560 [ 731.323487][T28974] should_failslab+0xa8/0x100 [ 731.323525][T28974] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 731.323556][T28974] ? __alloc_skb+0x112/0x2d0 [ 731.323582][T28974] __alloc_skb+0x112/0x2d0 [ 731.323607][T28974] netlink_ack+0x146/0xa50 [ 731.323635][T28974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 731.323663][T28974] ? ref_tracker_free+0x63a/0x7d0 [ 731.323693][T28974] ? __asan_memcpy+0x40/0x70 [ 731.323722][T28974] ? __pfx_ref_tracker_free+0x10/0x10 [ 731.323762][T28974] netlink_rcv_skb+0x28c/0x470 [ 731.323794][T28974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 731.323828][T28974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.323875][T28974] ? netlink_deliver_tap+0x2e/0x1b0 [ 731.323917][T28974] netlink_unicast+0x82f/0x9e0 [ 731.323957][T28974] ? __pfx_netlink_unicast+0x10/0x10 [ 731.323989][T28974] ? netlink_sendmsg+0x642/0xb30 [ 731.324007][T28974] ? skb_put+0x11b/0x210 [ 731.324031][T28974] netlink_sendmsg+0x805/0xb30 [ 731.324063][T28974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.324088][T28974] ? aa_sock_msg_perm+0xf1/0x1d0 [ 731.324111][T28974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 731.324134][T28974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.324155][T28974] __sock_sendmsg+0x219/0x270 [ 731.324188][T28974] ____sys_sendmsg+0x505/0x830 [ 731.324220][T28974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.324263][T28974] ? import_iovec+0x74/0xa0 [ 731.324294][T28974] ___sys_sendmsg+0x21f/0x2a0 [ 731.324321][T28974] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.324390][T28974] ? __fget_files+0x2a/0x420 [ 731.324408][T28974] ? __fget_files+0x3a0/0x420 [ 731.324440][T28974] __x64_sys_sendmsg+0x19b/0x260 [ 731.324466][T28974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 731.324500][T28974] ? __pfx_ksys_write+0x10/0x10 [ 731.324521][T28974] ? rcu_is_watching+0x15/0xb0 [ 731.324544][T28974] ? do_syscall_64+0xbe/0x3b0 [ 731.324566][T28974] do_syscall_64+0xfa/0x3b0 [ 731.324585][T28974] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.324614][T28974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.324635][T28974] ? clear_bhb_loop+0x60/0xb0 [ 731.324661][T28974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.324682][T28974] RIP: 0033:0x7fd49858eba9 [ 731.324701][T28974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.324717][T28974] RSP: 002b:00007fd4967f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.324740][T28974] RAX: ffffffffffffffda RBX: 00007fd4987d5fa0 RCX: 00007fd49858eba9 [ 731.324756][T28974] RDX: 0000000004040004 RSI: 0000200000000000 RDI: 0000000000000003 [ 731.324769][T28974] RBP: 00007fd4967f6090 R08: 0000000000000000 R09: 0000000000000000 [ 731.324782][T28974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.324794][T28974] R13: 00007fd4987d6038 R14: 00007fd4987d5fa0 R15: 00007ffc31e4c548 [ 731.324827][T28974] [ 731.801034][T28988] FAULT_INJECTION: forcing a failure. [ 731.801034][T28988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.837490][T28988] CPU: 1 UID: 0 PID: 28988 Comm: syz.0.7406 Not tainted syzkaller #0 PREEMPT(full) [ 731.837520][T28988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 731.837533][T28988] Call Trace: [ 731.837542][T28988] [ 731.837552][T28988] dump_stack_lvl+0x189/0x250 [ 731.837582][T28988] ? __pfx____ratelimit+0x10/0x10 [ 731.837614][T28988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.837639][T28988] ? __pfx__printk+0x10/0x10 [ 731.837668][T28988] ? __might_fault+0xb0/0x130 [ 731.837708][T28988] should_fail_ex+0x414/0x560 [ 731.837747][T28988] _copy_from_user+0x2d/0xb0 [ 731.837773][T28988] ___sys_sendmsg+0x158/0x2a0 [ 731.837800][T28988] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.837862][T28988] ? __fget_files+0x2a/0x420 [ 731.837880][T28988] ? __fget_files+0x3a0/0x420 [ 731.837912][T28988] __x64_sys_sendmsg+0x19b/0x260 [ 731.837939][T28988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 731.837975][T28988] ? __pfx_ksys_write+0x10/0x10 [ 731.838007][T28988] ? rcu_is_watching+0x15/0xb0 [ 731.838034][T28988] ? do_syscall_64+0xbe/0x3b0 [ 731.838058][T28988] do_syscall_64+0xfa/0x3b0 [ 731.838077][T28988] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.838108][T28988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.838129][T28988] ? clear_bhb_loop+0x60/0xb0 [ 731.838155][T28988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.838175][T28988] RIP: 0033:0x7f5c6258eba9 [ 731.838196][T28988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.838215][T28988] RSP: 002b:00007f5c63404038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.838238][T28988] RAX: ffffffffffffffda RBX: 00007f5c627d5fa0 RCX: 00007f5c6258eba9 [ 731.838253][T28988] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 731.838267][T28988] RBP: 00007f5c63404090 R08: 0000000000000000 R09: 0000000000000000 [ 731.838280][T28988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.838302][T28988] R13: 00007f5c627d6038 R14: 00007f5c627d5fa0 R15: 00007ffcb78d8bc8 [ 731.838339][T28988] [ 732.266518][T29002] bond0: (slave geneve1): Releasing backup interface [ 732.309897][T29002] geneve1: left allmulticast mode [ 732.345407][ T36] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 732.369476][ T36] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 732.407395][T29008] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 732.491691][ T36] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 732.535443][ T36] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 732.951599][T29042] netlink: 'syz.4.7428': attribute type 1 has an invalid length. [ 734.221598][T29120] netlink: 'syz.0.7453': attribute type 1 has an invalid length. [ 734.686777][T29153] __nla_validate_parse: 11 callbacks suppressed [ 734.686804][T29153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7466'. [ 734.865939][T29165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7470'. [ 734.952236][T29175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7471'. [ 735.230779][T29189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7478'. [ 735.295918][T29190] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 735.708940][T29215] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7486'. [ 735.741233][T29215] FAULT_INJECTION: forcing a failure. [ 735.741233][T29215] name failslab, interval 1, probability 0, space 0, times 0 [ 735.788208][T29215] CPU: 1 UID: 0 PID: 29215 Comm: syz.0.7486 Not tainted syzkaller #0 PREEMPT(full) [ 735.788238][T29215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.788251][T29215] Call Trace: [ 735.788264][T29215] [ 735.788273][T29215] dump_stack_lvl+0x189/0x250 [ 735.788305][T29215] ? __pfx____ratelimit+0x10/0x10 [ 735.788337][T29215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.788363][T29215] ? __pfx__printk+0x10/0x10 [ 735.788397][T29215] ? __pfx___might_resched+0x10/0x10 [ 735.788417][T29215] ? fs_reclaim_acquire+0x7d/0x100 [ 735.788456][T29215] should_fail_ex+0x414/0x560 [ 735.788491][T29215] should_failslab+0xa8/0x100 [ 735.788524][T29215] __kmalloc_noprof+0xcb/0x4f0 [ 735.788551][T29215] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 735.788586][T29215] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 735.788624][T29215] genl_family_rcv_msg_doit+0xb8/0x300 [ 735.788659][T29215] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 735.788697][T29215] ? apparmor_capable+0x137/0x1b0 [ 735.788725][T29215] ? bpf_lsm_capable+0x9/0x20 [ 735.788752][T29215] ? security_capable+0x7e/0x2e0 [ 735.788790][T29215] genl_rcv_msg+0x60e/0x790 [ 735.788824][T29215] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.788858][T29215] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 735.788902][T29215] netlink_rcv_skb+0x208/0x470 [ 735.788932][T29215] ? __lock_acquire+0xab9/0xd20 [ 735.788964][T29215] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.788991][T29215] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.789049][T29215] ? down_read+0x1ad/0x2e0 [ 735.789074][T29215] genl_rcv+0x28/0x40 [ 735.789096][T29215] netlink_unicast+0x82f/0x9e0 [ 735.789138][T29215] ? __pfx_netlink_unicast+0x10/0x10 [ 735.789171][T29215] ? netlink_sendmsg+0x642/0xb30 [ 735.789188][T29215] ? skb_put+0x11b/0x210 [ 735.789215][T29215] netlink_sendmsg+0x805/0xb30 [ 735.789247][T29215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.789273][T29215] ? aa_sock_msg_perm+0xf1/0x1d0 [ 735.789295][T29215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.789318][T29215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.789340][T29215] __sock_sendmsg+0x219/0x270 [ 735.789374][T29215] ____sys_sendmsg+0x505/0x830 [ 735.789406][T29215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.789442][T29215] ? import_iovec+0x74/0xa0 [ 735.789472][T29215] ___sys_sendmsg+0x21f/0x2a0 [ 735.789500][T29215] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.789570][T29215] ? __fget_files+0x2a/0x420 [ 735.789588][T29215] ? __fget_files+0x3a0/0x420 [ 735.789621][T29215] __x64_sys_sendmsg+0x19b/0x260 [ 735.789649][T29215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.789687][T29215] ? __pfx_ksys_write+0x10/0x10 [ 735.789712][T29215] ? rcu_is_watching+0x15/0xb0 [ 735.789740][T29215] ? do_syscall_64+0xbe/0x3b0 [ 735.789766][T29215] do_syscall_64+0xfa/0x3b0 [ 735.789784][T29215] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.789815][T29215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.789836][T29215] ? clear_bhb_loop+0x60/0xb0 [ 735.789871][T29215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.789891][T29215] RIP: 0033:0x7f5c6258eba9 [ 735.789911][T29215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.789929][T29215] RSP: 002b:00007f5c63404038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.789952][T29215] RAX: ffffffffffffffda RBX: 00007f5c627d5fa0 RCX: 00007f5c6258eba9 [ 735.789966][T29215] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 735.789980][T29215] RBP: 00007f5c63404090 R08: 0000000000000000 R09: 0000000000000000 [ 735.789993][T29215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.790005][T29215] R13: 00007f5c627d6038 R14: 00007f5c627d5fa0 R15: 00007ffcb78d8bc8 [ 735.790043][T29215] [ 736.162461][T29217] netlink: 'syz.1.7487': attribute type 1 has an invalid length. [ 736.180490][T29227] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7489'. [ 736.965041][T29243] syzkaller1: entered promiscuous mode [ 736.971982][T29243] syzkaller1: entered allmulticast mode [ 737.202300][T29275] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20000 [ 737.276988][T29282] netlink: 'syz.1.7506': attribute type 1 has an invalid length. [ 737.315750][T29282] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7506'. [ 737.411982][T29288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7507'. [ 737.465487][T29288] IPVS: Error connecting to the multicast addr [ 737.489999][T29288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7507'. [ 737.933390][T29323] netlink: 'syz.4.7518': attribute type 1 has an invalid length. [ 738.002659][T29323] netlink: 'syz.4.7518': attribute type 2 has an invalid length. [ 738.022878][T29330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7520'. [ 738.049183][T29325] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 738.089820][ T6423] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.118121][T15529] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.153231][T15529] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.191119][T15529] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.371468][T29345] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 738.548631][T29349] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 739.059203][T29376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 739.578192][T29410] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 739.915480][T29434] syzkaller1: entered promiscuous mode [ 739.931201][T29434] syzkaller1: entered allmulticast mode [ 740.125774][T29446] __nla_validate_parse: 8 callbacks suppressed [ 740.125799][T29446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7555'. [ 740.184453][T29443] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 740.266088][T29454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7557'. [ 740.282828][T29450] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7556'. [ 740.332729][T29450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7556'. [ 740.504706][T29465] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7561'. [ 740.653056][T29474] FAULT_INJECTION: forcing a failure. [ 740.653056][T29474] name failslab, interval 1, probability 0, space 0, times 0 [ 740.696156][T29474] CPU: 1 UID: 0 PID: 29474 Comm: syz.3.7565 Not tainted syzkaller #0 PREEMPT(full) [ 740.696185][T29474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.696199][T29474] Call Trace: [ 740.696208][T29474] [ 740.696226][T29474] dump_stack_lvl+0x189/0x250 [ 740.696276][T29474] ? __pfx____ratelimit+0x10/0x10 [ 740.696310][T29474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.696336][T29474] ? __pfx__printk+0x10/0x10 [ 740.696372][T29474] ? __pfx___might_resched+0x10/0x10 [ 740.696406][T29474] should_fail_ex+0x414/0x560 [ 740.696441][T29474] should_failslab+0xa8/0x100 [ 740.696475][T29474] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 740.696505][T29474] ? __alloc_skb+0x112/0x2d0 [ 740.696532][T29474] __alloc_skb+0x112/0x2d0 [ 740.696557][T29474] netlink_sendmsg+0x5c6/0xb30 [ 740.696591][T29474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.696615][T29474] ? aa_sock_msg_perm+0xf1/0x1d0 [ 740.696639][T29474] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 740.696662][T29474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.696684][T29474] __sock_sendmsg+0x219/0x270 [ 740.696719][T29474] ____sys_sendmsg+0x505/0x830 [ 740.696750][T29474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.696784][T29474] ? import_iovec+0x74/0xa0 [ 740.696814][T29474] ___sys_sendmsg+0x21f/0x2a0 [ 740.696841][T29474] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.696909][T29474] ? __fget_files+0x2a/0x420 [ 740.696927][T29474] ? __fget_files+0x3a0/0x420 [ 740.696959][T29474] __x64_sys_sendmsg+0x19b/0x260 [ 740.696987][T29474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 740.697024][T29474] ? __pfx_ksys_write+0x10/0x10 [ 740.697049][T29474] ? rcu_is_watching+0x15/0xb0 [ 740.697078][T29474] ? do_syscall_64+0xbe/0x3b0 [ 740.697112][T29474] do_syscall_64+0xfa/0x3b0 [ 740.697131][T29474] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.697161][T29474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.697183][T29474] ? clear_bhb_loop+0x60/0xb0 [ 740.697209][T29474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.697229][T29474] RIP: 0033:0x7fd49858eba9 [ 740.697249][T29474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.697266][T29474] RSP: 002b:00007fd4967f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.697288][T29474] RAX: ffffffffffffffda RBX: 00007fd4987d5fa0 RCX: 00007fd49858eba9 [ 740.697304][T29474] RDX: 0000000024004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 740.697318][T29474] RBP: 00007fd4967f6090 R08: 0000000000000000 R09: 0000000000000000 [ 740.697331][T29474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.697344][T29474] R13: 00007fd4987d6038 R14: 00007fd4987d5fa0 R15: 00007ffc31e4c548 [ 740.697386][T29474] [ 740.971019][T29475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 740.976602][T29480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7568'. [ 741.361589][T29488] syzkaller1: entered promiscuous mode [ 741.388681][T29488] syzkaller1: entered allmulticast mode [ 741.648517][T29514] netlink: 'syz.4.7577': attribute type 1 has an invalid length. [ 741.687966][T29514] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7577'. [ 741.848231][T29516] syzkaller1: entered promiscuous mode [ 741.853785][T29516] syzkaller1: entered allmulticast mode [ 742.177194][T29540] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7583'. [ 742.256766][T29548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7583'. [ 742.266872][T29545] netlink: 'syz.2.7585': attribute type 29 has an invalid length. [ 742.436756][T29553] tipc: Enabled bearer , priority 0 [ 742.538197][T29553] syzkaller0: entered promiscuous mode [ 742.544037][T29553] syzkaller0: entered allmulticast mode [ 742.576529][T29552] tipc: Resetting bearer [ 742.627035][T29552] tipc: Disabling bearer [ 742.878653][T29572] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7593'. [ 743.181572][T29589] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 743.694053][T29621] netlink: 'syz.1.7605': attribute type 1 has an invalid length. [ 744.042753][T29635] netlink: 'syz.3.7611': attribute type 1 has an invalid length. [ 744.314006][T29640] syzkaller1: entered promiscuous mode [ 744.350161][T29640] syzkaller1: entered allmulticast mode [ 744.632974][T29669] netlink: 'syz.2.7619': attribute type 1 has an invalid length. [ 744.811716][T29673] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 745.288384][T29698] netlink: 'syz.0.7627': attribute type 1 has an invalid length. [ 745.327831][T29698] netlink: 'syz.0.7627': attribute type 2 has an invalid length. [ 745.363710][T29698] netlink: 'syz.0.7627': attribute type 1 has an invalid length. [ 745.581733][T29711] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 745.678683][T29716] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 745.916641][T29727] __nla_validate_parse: 11 callbacks suppressed [ 745.916663][T29727] netlink: 576 bytes leftover after parsing attributes in process `syz.3.7636'. [ 745.999818][T29730] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7637'. [ 746.074203][T29734] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7638'. [ 746.345343][T29748] netlink: 'syz.3.7643': attribute type 1 has an invalid length. [ 746.378425][T29748] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7643'. [ 746.563128][T29761] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 746.605481][T29764] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7650'. [ 746.692725][T29766] netlink: 'syz.0.7651': attribute type 10 has an invalid length. [ 746.722386][T29766] bridge_slave_1: entered promiscuous mode [ 746.743994][T29766] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 746.936049][T29778] IPv6: NLM_F_CREATE should be specified when creating new route [ 746.992354][T29786] netlink: 'syz.0.7660': attribute type 1 has an invalid length. [ 747.017315][T29786] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7660'. [ 747.133510][T29785] tipc: Enabled bearer , priority 0 [ 747.267906][T29801] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7665'. [ 747.304361][T29802] tipc: Resetting bearer [ 747.507572][T29813] netlink: 'syz.0.7668': attribute type 21 has an invalid length. [ 747.547635][T29813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7668'. [ 747.574792][T29816] warn_alloc: 1 callbacks suppressed [ 747.574814][T29816] syz.4.7669: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 747.604641][T29816] CPU: 0 UID: 0 PID: 29816 Comm: syz.4.7669 Not tainted syzkaller #0 PREEMPT(full) [ 747.604671][T29816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 747.604684][T29816] Call Trace: [ 747.604693][T29816] [ 747.604702][T29816] dump_stack_lvl+0x189/0x250 [ 747.604737][T29816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.604777][T29816] ? __pfx__printk+0x10/0x10 [ 747.604806][T29816] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 747.604833][T29816] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 747.604860][T29816] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 747.604888][T29816] warn_alloc+0x214/0x310 [ 747.604929][T29816] ? __pfx_warn_alloc+0x10/0x10 [ 747.604973][T29816] ? __get_vm_area_node+0x28f/0x300 [ 747.605004][T29816] ? packet_set_ring+0x6f4/0x2350 [ 747.605037][T29816] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 747.605106][T29816] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 747.605140][T29816] ? alloc_pages_mpol+0x3cd/0x4a0 [ 747.605173][T29816] ? packet_set_ring+0x6f4/0x2350 [ 747.605200][T29816] vzalloc_noprof+0xb2/0xf0 [ 747.605230][T29816] ? packet_set_ring+0x6f4/0x2350 [ 747.605258][T29816] packet_set_ring+0x6f4/0x2350 [ 747.605311][T29816] ? __pfx_packet_set_ring+0x10/0x10 [ 747.605363][T29816] ? _copy_from_user+0x94/0xb0 [ 747.605395][T29816] packet_setsockopt+0xc5a/0x12c0 [ 747.605426][T29816] ? __pfx_packet_setsockopt+0x10/0x10 [ 747.605459][T29816] ? __lock_acquire+0xab9/0xd20 [ 747.605497][T29816] ? aa_sk_perm+0x81e/0x950 [ 747.605536][T29816] ? __pfx_aa_sk_perm+0x10/0x10 [ 747.605571][T29816] ? __fget_files+0x2a/0x420 [ 747.605591][T29816] ? aa_sock_opt_perm+0xff/0x1b0 [ 747.605616][T29816] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 747.605639][T29816] ? __pfx_packet_setsockopt+0x10/0x10 [ 747.605668][T29816] do_sock_setsockopt+0x179/0x1b0 [ 747.605699][T29816] __x64_sys_setsockopt+0x13f/0x1b0 [ 747.605728][T29816] do_syscall_64+0xfa/0x3b0 [ 747.605747][T29816] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.605785][T29816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.605806][T29816] ? clear_bhb_loop+0x60/0xb0 [ 747.605833][T29816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.605854][T29816] RIP: 0033:0x7f8d7e38eba9 [ 747.605873][T29816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.605892][T29816] RSP: 002b:00007f8d7f27d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 747.605914][T29816] RAX: ffffffffffffffda RBX: 00007f8d7e5d5fa0 RCX: 00007f8d7e38eba9 [ 747.605930][T29816] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000007 [ 747.605943][T29816] RBP: 00007f8d7e411e19 R08: 000000000000001c R09: 0000000000000000 [ 747.605956][T29816] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 747.605970][T29816] R13: 00007f8d7e5d6038 R14: 00007f8d7e5d5fa0 R15: 00007ffebfc18328 [ 747.606005][T29816] [ 747.908539][T29816] Mem-Info: [ 747.911725][T29816] active_anon:6038 inactive_anon:0 isolated_anon:0 [ 747.911725][T29816] active_file:3489 inactive_file:40117 isolated_file:0 [ 747.911725][T29816] unevictable:768 dirty:72 writeback:0 [ 747.911725][T29816] slab_reclaimable:12806 slab_unreclaimable:116790 [ 747.911725][T29816] mapped:30772 shmem:1377 pagetables:1365 [ 747.911725][T29816] sec_pagetables:0 bounce:0 [ 747.911725][T29816] kernel_misc_reclaimable:0 [ 747.911725][T29816] free:1300375 free_pcp:14322 free_cma:0 [ 747.957623][T29816] Node 0 active_anon:24152kB inactive_anon:0kB active_file:13956kB inactive_file:160264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123088kB dirty:288kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12812kB pagetables:5292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 747.990771][T29816] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 748.021880][T29816] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 748.051521][T29816] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 748.057445][T29816] Node 0 DMA32 free:1297500kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24004kB inactive_anon:0kB active_file:13956kB inactive_file:158688kB unevictable:1536kB writepending:288kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:37032kB local_pcp:20752kB free_cma:0kB [ 748.091298][T29816] lowmem_reserve[]: 0 0 1 1 1 [ 748.096070][T29816] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 748.125462][T29816] lowmem_reserve[]: 0 0 0 0 0 [ 748.130641][T29816] Node 1 Normal free:3888628kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20084kB local_pcp:10116kB free_cma:0kB [ 748.162918][T29816] lowmem_reserve[]: 0 0 0 0 0 [ 748.167691][T29816] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 748.180913][T29816] Node 0 DMA32: 1291*4kB (UM) 789*8kB (UME) 448*16kB (UM) 627*32kB (UME) 194*64kB (UME) 71*128kB (UM) 56*256kB (U) 54*512kB (UME) 29*1024kB (UME) 11*2048kB (UME) 279*4096kB (UM) = 1297204kB [ 748.184448][T29784] tipc: Disabling bearer [ 748.201017][T29816] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 748.218764][T29816] Node 1 Normal: 205*4kB (UE) 54*8kB (UME) 41*16kB (UME) 98*32kB (UME) 23*64kB (UME) 13*128kB (UME) 4*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3888628kB [ 748.237693][T29816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 748.247648][T29816] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 748.257600][T29816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 748.268393][T29816] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 748.279179][T29828] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7671'. [ 748.288731][T29816] 44979 total pagecache pages [ 748.297566][T29816] 0 pages in swap cache [ 748.302218][T29816] Free swap = 124996kB [ 748.306593][T29816] Total swap = 124996kB [ 748.314097][T29816] 2097051 pages RAM [ 748.318637][T29816] 0 pages HighMem/MovableOnly [ 748.323486][T29816] 425667 pages reserved [ 748.328314][T29816] 0 pages cma reserved [ 748.474254][T29834] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20003 [ 748.495503][T29836] netlink: 'syz.1.7675': attribute type 1 has an invalid length. [ 748.530355][T29836] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7675'. [ 748.542259][T29834] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20003 [ 748.833541][T29858] netlink: 'syz.3.7682': attribute type 1 has an invalid length. [ 749.105586][T29874] netlink: 'syz.2.7686': attribute type 1 has an invalid length. [ 749.212726][T29881] netlink: 'syz.4.7690': attribute type 1 has an invalid length. [ 749.243594][T13079] lec:lec_start_xmit: lec0:No lecd attached [ 749.281336][T29874] 8021q: adding VLAN 0 to HW filter on device bond12 [ 749.837635][T29918] netlink: 'syz.4.7703': attribute type 10 has an invalid length. [ 749.846482][T29918] dummy0: left promiscuous mode [ 750.006850][T29924] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 750.181351][T29936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.043683][T29981] tipc: Enabling of bearer rejected, failed to enable media [ 751.454386][T30004] __nla_validate_parse: 11 callbacks suppressed [ 751.454409][T30004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7733'. [ 751.476420][T30007] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 751.505772][T30005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7732'. [ 751.715492][T30014] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 752.418326][T30052] tipc: Enabled bearer , priority 0 [ 752.448218][T30052] syzkaller0: entered promiscuous mode [ 752.463721][T30052] syzkaller0: entered allmulticast mode [ 752.597463][T30052] tipc: Resetting bearer [ 752.633952][T30064] netlink: 'syz.3.7752': attribute type 1 has an invalid length. [ 752.651923][T30051] tipc: Resetting bearer [ 752.668150][T30064] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7752'. [ 752.836738][T30051] tipc: Disabling bearer [ 753.147609][T30083] netlink: 'syz.4.7758': attribute type 10 has an invalid length. [ 753.210125][T30083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7758'. [ 753.373433][T30095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7765'. [ 753.539175][T30103] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 753.897669][T30125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7776'. [ 753.979282][T30125] vlan1: entered allmulticast mode [ 753.994668][T30125] bridge0: entered allmulticast mode [ 754.003194][T30125] bridge19: port 1(vlan1) entered blocking state [ 754.017066][T30125] bridge19: port 1(vlan1) entered disabled state [ 754.029625][T30125] vlan1: entered promiscuous mode [ 754.034728][T30125] bridge0: entered promiscuous mode [ 754.142255][T30145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7780'. [ 754.194544][T30147] vlan1: left promiscuous mode [ 754.203849][T30147] bridge0: left promiscuous mode [ 754.209748][T30147] bridge19: port 1(vlan1) entered disabled state [ 754.258099][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 754.266195][ C0] lec:lec_tx_timeout: lec0 [ 754.271256][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 754.320468][T30147] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 754.844205][T30180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7790'. [ 754.910712][T30180] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 754.934041][T30182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7791'. [ 754.947105][T30180] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7790'. [ 754.968276][T30183] erspan0: entered allmulticast mode [ 754.997060][T30180] macsec1: entered promiscuous mode [ 755.003319][T30180] macsec1: entered allmulticast mode [ 755.566837][T30225] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 755.822920][T30241] bond0: (slave bridge_slave_1): Releasing backup interface [ 755.854346][T30241] bridge_slave_1: left promiscuous mode [ 755.897055][T30245] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 755.924009][ T8645] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 755.963665][T30250] netlink: 'syz.2.7814': attribute type 1 has an invalid length. [ 756.278258][ T8645] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 756.337306][T30265] netlink: 'syz.0.7819': attribute type 19 has an invalid length. [ 756.512053][T30276] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 756.890444][T30290] __nla_validate_parse: 3 callbacks suppressed [ 756.890469][T30290] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7826'. [ 756.903868][T30295] netlink: 'syz.0.7829': attribute type 10 has an invalid length. [ 756.959338][T30295] bridge_slave_1: entered promiscuous mode [ 756.984203][T30295] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 757.055889][T30292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 757.205227][T30307] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 757.262617][T30313] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7834'. [ 757.369383][T30316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7832'. [ 757.423821][T30323] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 757.424874][T30316] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7832'. [ 757.657885][ T123] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 180 seconds [ 757.668984][ T123] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 180 seconds [ 757.681557][ T123] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 180 seconds [ 757.692998][ T123] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 180 seconds [ 757.992987][T30349] bond0: (slave bridge_slave_1): Releasing backup interface [ 758.033939][T30349] bridge_slave_1: left promiscuous mode [ 758.077003][T30353] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 758.085890][T30357] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7847'. [ 758.109712][ T44] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 758.195768][T30358] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 758.478249][T30374] netlink: 'syz.2.7851': attribute type 1 has an invalid length. [ 758.486271][T30374] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7851'. [ 758.648003][ T44] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 758.696860][T30385] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7856'. [ 758.774804][T30389] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 759.083636][T30405] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 759.162858][T30409] netlink: 'syz.1.7865': attribute type 1 has an invalid length. [ 759.173310][T30409] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7865'. [ 759.447561][T30422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.474896][T30422] veth0_to_bridge: entered promiscuous mode [ 759.501481][T30420] veth0_to_bridge: left promiscuous mode [ 759.980443][T30444] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 760.207757][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5940 ms [ 760.215878][ C0] lec:lec_tx_timeout: lec0 [ 760.231434][T30456] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 760.544416][ T5234] udevd[5234]: worker [24325] /devices/virtual/block/nbd1 timeout; kill it [ 760.577580][ T5234] udevd[5234]: seq 22388 '/devices/virtual/block/nbd1' killed [ 761.251854][T30503] 8021q: VLANs not supported on gre0 [ 761.305557][T30505] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 761.452287][T30515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7903'. [ 761.757307][T30531] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7906'. [ 761.940566][T30542] netlink: 'syz.2.7911': attribute type 1 has an invalid length. [ 761.960083][T30542] __nla_validate_parse: 1 callbacks suppressed [ 761.960102][T30542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7911'. [ 762.123752][T30550] netlink: 'syz.4.7913': attribute type 15 has an invalid length. [ 762.140491][T30550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7913'. [ 762.179733][T30553] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7915'. [ 762.309196][T30555] syzkaller1: entered promiscuous mode [ 762.315842][T30555] syzkaller1: entered allmulticast mode [ 762.365978][T30564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7919'. [ 762.710308][T30581] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7924'. [ 763.633292][T30627] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7937'. [ 763.866098][T30639] netlink: 'syz.4.7940': attribute type 1 has an invalid length. [ 763.912658][T30639] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7940'. [ 763.922701][T30643] netlink: 'syz.1.7942': attribute type 10 has an invalid length. [ 763.979153][T30645] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7943'. [ 764.092486][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7945'. [ 764.363624][T30652] ÿ speed is unknown, defaulting to 1000 [ 764.386817][T30663] tipc: Enabled bearer , priority 0 [ 764.408764][T30663] syzkaller0: entered promiscuous mode [ 764.414978][T30663] syzkaller0: entered allmulticast mode [ 764.474355][T30673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7947'. [ 764.486872][T30663] tipc: Resetting bearer [ 764.652315][T30658] tipc: Resetting bearer [ 764.687076][T30658] tipc: Disabling bearer [ 764.967167][T30652] wg1 speed is unknown, defaulting to 1000 [ 767.634773][T30839] FAULT_INJECTION: forcing a failure. [ 767.634773][T30839] name failslab, interval 1, probability 0, space 0, times 0 [ 767.678641][T30839] CPU: 0 UID: 0 PID: 30839 Comm: syz.2.8000 Not tainted syzkaller #0 PREEMPT(full) [ 767.678672][T30839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.678686][T30839] Call Trace: [ 767.678695][T30839] [ 767.678705][T30839] dump_stack_lvl+0x189/0x250 [ 767.678737][T30839] ? __pfx____ratelimit+0x10/0x10 [ 767.678769][T30839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.678795][T30839] ? __pfx__printk+0x10/0x10 [ 767.678832][T30839] ? __pfx___might_resched+0x10/0x10 [ 767.678859][T30839] should_fail_ex+0x414/0x560 [ 767.678894][T30839] should_failslab+0xa8/0x100 [ 767.678927][T30839] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 767.678957][T30839] ? __alloc_skb+0x112/0x2d0 [ 767.678983][T30839] __alloc_skb+0x112/0x2d0 [ 767.679009][T30839] netlink_sendmsg+0x5c6/0xb30 [ 767.679042][T30839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.679067][T30839] ? aa_sock_msg_perm+0xf1/0x1d0 [ 767.679090][T30839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 767.679113][T30839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.679135][T30839] __sock_sendmsg+0x219/0x270 [ 767.679168][T30839] ____sys_sendmsg+0x505/0x830 [ 767.679207][T30839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.679243][T30839] ? import_iovec+0x74/0xa0 [ 767.679273][T30839] ___sys_sendmsg+0x21f/0x2a0 [ 767.679300][T30839] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.679368][T30839] ? __fget_files+0x2a/0x420 [ 767.679385][T30839] ? __fget_files+0x3a0/0x420 [ 767.679417][T30839] __x64_sys_sendmsg+0x19b/0x260 [ 767.679445][T30839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.679480][T30839] ? __pfx_ksys_write+0x10/0x10 [ 767.679515][T30839] ? do_syscall_64+0xbe/0x3b0 [ 767.679540][T30839] do_syscall_64+0xfa/0x3b0 [ 767.679558][T30839] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.679588][T30839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.679610][T30839] ? clear_bhb_loop+0x60/0xb0 [ 767.679636][T30839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.679656][T30839] RIP: 0033:0x7ff6c258eba9 [ 767.679675][T30839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.679693][T30839] RSP: 002b:00007ff6c34dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.679715][T30839] RAX: ffffffffffffffda RBX: 00007ff6c27d6090 RCX: 00007ff6c258eba9 [ 767.679731][T30839] RDX: 0000000004000810 RSI: 00002000000003c0 RDI: 0000000000000008 [ 767.679745][T30839] RBP: 00007ff6c34dc090 R08: 0000000000000000 R09: 0000000000000000 [ 767.679759][T30839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.679772][T30839] R13: 00007ff6c27d6128 R14: 00007ff6c27d6090 R15: 00007ffe5d5c3e58 [ 767.679808][T30839] [ 768.086084][T30848] __nla_validate_parse: 7 callbacks suppressed [ 768.086108][T30848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8004'. [ 768.123033][T30850] netlink: 'syz.1.8003': attribute type 2 has an invalid length. [ 768.855566][T30886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.885116][T30883] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 769.354032][T30905] bridge10: entered promiscuous mode [ 769.381408][T30905] bridge10: entered allmulticast mode [ 769.664679][T30921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8026'. [ 769.744503][T30916] syzkaller1: entered promiscuous mode [ 769.750140][T30916] syzkaller1: entered allmulticast mode [ 770.042191][T30933] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8028'. [ 770.065020][T30935] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8028'. [ 770.179062][T30939] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 770.733028][T30969] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.8038'. [ 770.757305][T30969] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 771.044061][T30977] tipc: Resetting bearer [ 771.512626][T30980] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8042'. [ 771.671928][T31003] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 771.907018][T31019] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 771.934095][T31020] netlink: 'syz.3.8055': attribute type 13 has an invalid length. [ 771.949738][T31020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8055'. [ 772.213027][T31034] netlink: 'syz.0.8060': attribute type 30 has an invalid length. [ 772.245232][T31038] netlink: 'syz.2.8062': attribute type 11 has an invalid length. [ 772.269163][T31038] netlink: 'syz.2.8062': attribute type 11 has an invalid length. [ 772.287066][T31038] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8062'. [ 773.128053][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8072'. [ 773.214039][T31079] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 773.254422][T31079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.732532][T31101] FAULT_INJECTION: forcing a failure. [ 773.732532][T31101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.810030][T31101] CPU: 0 UID: 0 PID: 31101 Comm: syz.0.8077 Not tainted syzkaller #0 PREEMPT(full) [ 773.810060][T31101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.810074][T31101] Call Trace: [ 773.810082][T31101] [ 773.810092][T31101] dump_stack_lvl+0x189/0x250 [ 773.810123][T31101] ? __pfx____ratelimit+0x10/0x10 [ 773.810155][T31101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.810181][T31101] ? __pfx__printk+0x10/0x10 [ 773.810227][T31101] should_fail_ex+0x414/0x560 [ 773.810262][T31101] _copy_to_user+0x31/0xb0 [ 773.810290][T31101] simple_read_from_buffer+0xe1/0x170 [ 773.810327][T31101] proc_fail_nth_read+0x1b3/0x220 [ 773.810366][T31101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.810394][T31101] ? rw_verify_area+0x2a6/0x4d0 [ 773.810425][T31101] ? __lock_acquire+0xab9/0xd20 [ 773.810453][T31101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.810480][T31101] vfs_read+0x200/0xa30 [ 773.810506][T31101] ? fdget_pos+0x247/0x320 [ 773.810531][T31101] ? __pfx___mutex_lock+0x10/0x10 [ 773.810552][T31101] ? __pfx_vfs_read+0x10/0x10 [ 773.810582][T31101] ? __fget_files+0x2a/0x420 [ 773.810606][T31101] ? __fget_files+0x3a0/0x420 [ 773.810624][T31101] ? __fget_files+0x2a/0x420 [ 773.810654][T31101] ksys_read+0x145/0x250 [ 773.810685][T31101] ? __pfx_ksys_read+0x10/0x10 [ 773.810719][T31101] ? do_syscall_64+0xbe/0x3b0 [ 773.810744][T31101] do_syscall_64+0xfa/0x3b0 [ 773.810763][T31101] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.810792][T31101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.810813][T31101] ? clear_bhb_loop+0x60/0xb0 [ 773.810840][T31101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.810860][T31101] RIP: 0033:0x7f5c6258d5bc [ 773.810879][T31101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 773.810897][T31101] RSP: 002b:00007f5c633e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 773.810920][T31101] RAX: ffffffffffffffda RBX: 00007f5c627d6090 RCX: 00007f5c6258d5bc [ 773.810935][T31101] RDX: 000000000000000f RSI: 00007f5c633e30a0 RDI: 0000000000000006 [ 773.810949][T31101] RBP: 00007f5c633e3090 R08: 0000000000000000 R09: 0000000000000000 [ 773.810962][T31101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.810975][T31101] R13: 00007f5c627d6128 R14: 00007f5c627d6090 R15: 00007ffcb78d8bc8 [ 773.811012][T31101] [ 774.126062][T31110] netlink: 'syz.4.8080': attribute type 1 has an invalid length. [ 774.133962][T31110] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8080'. [ 774.196983][T31108] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 774.263949][T31119] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 774.394722][T31122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8082'. [ 774.711098][T31135] syzkaller1: entered promiscuous mode [ 774.716636][T31135] syzkaller1: entered allmulticast mode [ 774.791819][T31142] gre0: entered promiscuous mode [ 775.253195][T31171] netlink: 'syz.1.8097': attribute type 10 has an invalid length. [ 775.758310][T31193] wg1: entered allmulticast mode [ 775.964153][T31203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8108'. [ 775.995410][T31203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.270908][T31259] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8122'. [ 777.363058][T31262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8124'. [ 777.383235][T31263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8125'. [ 777.684432][T31274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8128'. [ 777.716784][T31271] veth0: entered promiscuous mode [ 777.722819][T31271] veth0: left promiscuous mode [ 777.955812][T31285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8133'. [ 778.151305][T31293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8135'. [ 778.220563][T31283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8125'. [ 778.245325][T31298] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 778.371143][T31302] netlink: 'syz.1.8140': attribute type 1 has an invalid length. [ 778.379485][T31304] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 778.399904][T31302] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8140'. [ 778.838931][T31321] netlink: 'syz.1.8149': attribute type 2 has an invalid length. [ 779.306140][T31355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8155'. [ 779.422469][T31360] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8156'. [ 779.760736][T31375] ip6gre3: entered allmulticast mode [ 780.232701][T31401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8168'. [ 780.302361][T31406] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8169'. [ 780.639129][T31418] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 780.795017][T31428] tipc: Enabled bearer , priority 0 [ 780.831133][T31418] syzkaller0: entered promiscuous mode [ 780.866030][T31418] syzkaller0: entered allmulticast mode [ 780.935109][T31418] tipc: Resetting bearer [ 780.980517][T31416] tipc: Resetting bearer [ 781.094909][T31416] tipc: Disabling bearer [ 781.130612][T31449] netlink: 'syz.4.8180': attribute type 1 has an invalid length. [ 781.238775][T31449] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 781.868994][T31478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 781.991095][T31480] ÿ speed is unknown, defaulting to 1000 [ 782.842329][T31522] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 782.863621][T31521] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8194'. [ 782.890233][T31521] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8194'. [ 782.949909][T31525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8196'. [ 783.494074][T31549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8201'. [ 783.544976][T31553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8202'. [ 783.759175][T31559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8202'. [ 783.770945][T31564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8205'. [ 783.883960][T31480] wg1 speed is unknown, defaulting to 1000 [ 784.274973][T31589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8209'. [ 784.316254][T31591] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8211'. [ 785.058024][T31611] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 785.686870][T31648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8231'. [ 785.884723][T31652] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8233'. [ 786.271515][T31686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8245'. [ 786.320844][T31690] netlink: 'syz.4.8244': attribute type 10 has an invalid length. [ 786.507232][T31699] sctp: [Deprecated]: syz.1.8251 (pid 31699) Use of int in max_burst socket option deprecated. [ 786.507232][T31699] Use struct sctp_assoc_value instead [ 786.704544][T31708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8253'. [ 787.582958][T31753] netlink: 'syz.1.8268': attribute type 11 has an invalid length. [ 787.645743][T31753] netlink: 'syz.1.8268': attribute type 58 has an invalid length. [ 787.665148][T31757] netlink: 'syz.0.8269': attribute type 1 has an invalid length. [ 787.728254][ T123] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 210 seconds [ 787.739545][ T123] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 210 seconds [ 787.752066][ T123] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 210 seconds [ 787.763580][ T123] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 210 seconds [ 787.787595][T31757] 8021q: adding VLAN 0 to HW filter on device bond6 [ 788.406897][T31797] FAULT_INJECTION: forcing a failure. [ 788.406897][T31797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.527806][T31797] CPU: 1 UID: 0 PID: 31797 Comm: syz.3.8285 Not tainted syzkaller #0 PREEMPT(full) [ 788.527836][T31797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.527849][T31797] Call Trace: [ 788.527858][T31797] [ 788.527867][T31797] dump_stack_lvl+0x189/0x250 [ 788.527897][T31797] ? __pfx____ratelimit+0x10/0x10 [ 788.527928][T31797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 788.527953][T31797] ? __pfx__printk+0x10/0x10 [ 788.527982][T31797] ? __might_fault+0xb0/0x130 [ 788.528022][T31797] should_fail_ex+0x414/0x560 [ 788.528055][T31797] _copy_from_iter+0x1de/0x1790 [ 788.528085][T31797] ? rcu_is_watching+0x15/0xb0 [ 788.528109][T31797] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 788.528139][T31797] ? __pfx__copy_from_iter+0x10/0x10 [ 788.528164][T31797] ? __build_skb_around+0x257/0x3e0 [ 788.528188][T31797] ? netlink_sendmsg+0x642/0xb30 [ 788.528206][T31797] ? skb_put+0x11b/0x210 [ 788.528230][T31797] netlink_sendmsg+0x6b2/0xb30 [ 788.528268][T31797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.528293][T31797] ? aa_sock_msg_perm+0xf1/0x1d0 [ 788.528316][T31797] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.528337][T31797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.528358][T31797] __sock_sendmsg+0x219/0x270 [ 788.528391][T31797] ____sys_sendmsg+0x505/0x830 [ 788.528419][T31797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.528452][T31797] ? import_iovec+0x74/0xa0 [ 788.528478][T31797] ___sys_sendmsg+0x21f/0x2a0 [ 788.528503][T31797] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.528564][T31797] ? __fget_files+0x2a/0x420 [ 788.528582][T31797] ? __fget_files+0x3a0/0x420 [ 788.528613][T31797] __x64_sys_sendmsg+0x19b/0x260 [ 788.528646][T31797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 788.528681][T31797] ? __pfx_ksys_write+0x10/0x10 [ 788.528717][T31797] ? do_syscall_64+0xbe/0x3b0 [ 788.528743][T31797] do_syscall_64+0xfa/0x3b0 [ 788.528761][T31797] ? lockdep_hardirqs_on+0x9c/0x150 [ 788.528791][T31797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.528811][T31797] ? clear_bhb_loop+0x60/0xb0 [ 788.528837][T31797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.528857][T31797] RIP: 0033:0x7fd49858eba9 [ 788.528877][T31797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.528895][T31797] RSP: 002b:00007fd4967d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.528917][T31797] RAX: ffffffffffffffda RBX: 00007fd4987d6090 RCX: 00007fd49858eba9 [ 788.528933][T31797] RDX: 0000000000048010 RSI: 0000200000000280 RDI: 0000000000000003 [ 788.528947][T31797] RBP: 00007fd4967d5090 R08: 0000000000000000 R09: 0000000000000000 [ 788.528959][T31797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.528971][T31797] R13: 00007fd4987d6128 R14: 00007fd4987d6090 R15: 00007ffc31e4c548 [ 788.529007][T31797] [ 788.925594][T31799] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 789.157539][T31822] __nla_validate_parse: 5 callbacks suppressed [ 789.157561][T31822] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8293'. [ 789.233662][T31824] tap0: tun_chr_ioctl cmd 1074025677 [ 789.252132][T31824] tap0: linktype set to 65534 [ 789.787544][T31852] dvmrp1: entered allmulticast mode [ 789.936692][T31864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8303'. [ 790.005733][T31819] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 790.122589][T31874] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8307'. [ 790.861509][T31905] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 791.381401][T31940] FAULT_INJECTION: forcing a failure. [ 791.381401][T31940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.418281][T31940] CPU: 0 UID: 0 PID: 31940 Comm: syz.3.8327 Not tainted syzkaller #0 PREEMPT(full) [ 791.418311][T31940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 791.418325][T31940] Call Trace: [ 791.418334][T31940] [ 791.418344][T31940] dump_stack_lvl+0x189/0x250 [ 791.418376][T31940] ? __pfx____ratelimit+0x10/0x10 [ 791.418409][T31940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.418434][T31940] ? __pfx__printk+0x10/0x10 [ 791.418464][T31940] ? __might_fault+0xb0/0x130 [ 791.418507][T31940] should_fail_ex+0x414/0x560 [ 791.418542][T31940] _copy_from_user+0x2d/0xb0 [ 791.418568][T31940] ___sys_sendmsg+0x158/0x2a0 [ 791.418597][T31940] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.418665][T31940] ? __fget_files+0x2a/0x420 [ 791.418683][T31940] ? __fget_files+0x3a0/0x420 [ 791.418707][T31940] __x64_sys_sendmsg+0x19b/0x260 [ 791.418729][T31940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 791.418758][T31940] ? __pfx_ksys_write+0x10/0x10 [ 791.418783][T31940] ? rcu_is_watching+0x15/0xb0 [ 791.418806][T31940] ? do_syscall_64+0xbe/0x3b0 [ 791.418825][T31940] do_syscall_64+0xfa/0x3b0 [ 791.418848][T31940] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.418872][T31940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.418889][T31940] ? clear_bhb_loop+0x60/0xb0 [ 791.418910][T31940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.418926][T31940] RIP: 0033:0x7fd49858eba9 [ 791.418942][T31940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.418957][T31940] RSP: 002b:00007fd4967f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.418975][T31940] RAX: ffffffffffffffda RBX: 00007fd4987d5fa0 RCX: 00007fd49858eba9 [ 791.418988][T31940] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 791.418999][T31940] RBP: 00007fd4967f6090 R08: 0000000000000000 R09: 0000000000000000 [ 791.419009][T31940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.419020][T31940] R13: 00007fd4987d6038 R14: 00007fd4987d5fa0 R15: 00007ffc31e4c548 [ 791.419048][T31940] [ 792.691808][T32007] netlink: 'syz.3.8347': attribute type 9 has an invalid length. [ 792.987359][T32025] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8348'. [ 793.470100][T32047] xt_limit: Overflow, try lower: 271964/0 [ 794.042577][T32076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8366'. [ 794.095643][T32076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8366'. [ 794.277123][T32089] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 794.352197][T32094] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 794.358323][T32095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8371'. [ 794.488946][T32101] netlink: 'syz.4.8374': attribute type 1 has an invalid length. [ 794.556263][T32105] syzkaller0: entered promiscuous mode [ 794.605890][T32105] syzkaller0: entered allmulticast mode [ 794.653317][T32111] tipc: Enabled bearer , priority 0 [ 794.691379][T32114] syzkaller1: entered promiscuous mode [ 794.697102][T32114] syzkaller1: entered allmulticast mode [ 794.723419][T32105] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 794.825998][T32105] tipc: Resetting bearer [ 794.863128][T32103] tipc: Resetting bearer [ 794.959546][T32103] tipc: Disabling bearer [ 795.145521][T32133] pimreg: left allmulticast mode [ 795.464523][T32152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8389'. [ 795.498863][T32152] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 795.525182][T32152] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 795.553690][T32151] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 795.592850][T32152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 795.710580][T32159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8388'. [ 795.762502][T32170] ÿÿÿÿÿÿ: renamed from bond_slave_0 [ 796.236028][T32189] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 796.531738][T32209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8404'. [ 796.732161][T32219] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 796.869694][T32219] syzkaller0: entered promiscuous mode [ 796.876983][T32219] syzkaller0: entered allmulticast mode [ 796.885804][T32226] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 796.913608][T32219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8407'. [ 796.947603][T32235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8412'. [ 799.477366][T32248] netlink: 'syz.0.8416': attribute type 1 has an invalid length. [ 799.513973][T32261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.634788][T32268] netlink: 'syz.0.8419': attribute type 1 has an invalid length. [ 799.700869][T32268] bond7: entered promiscuous mode [ 799.706668][T32268] 8021q: adding VLAN 0 to HW filter on device bond7 [ 799.717019][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8420'. [ 799.863659][T32288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8419'. [ 799.922036][T32274] 8021q: adding VLAN 0 to HW filter on device bond7 [ 799.993230][T32274] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 800.057941][T32274] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 800.155451][T32274] bond7: (slave wireguard0): making interface the new active one [ 800.163625][T32274] wireguard0: entered promiscuous mode [ 800.185564][T32274] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 800.460983][T32316] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 800.488203][T32316] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 800.619620][T32311] "syz.1.8429" (32311) uses obsolete ecb(arc4) skcipher [ 800.682975][T32316] ÿ speed is unknown, defaulting to 1000 [ 800.767090][T32334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 800.844845][T32337] netlink: 'syz.0.8434': attribute type 4 has an invalid length. [ 800.987063][T32339] bridge29: entered promiscuous mode [ 801.028884][T32339] bridge29: entered allmulticast mode [ 802.023779][T32387] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8445'. [ 802.108515][T32390] netlink: 'syz.4.8446': attribute type 3 has an invalid length. [ 802.151246][T32390] netlink: 'syz.4.8446': attribute type 3 has an invalid length. [ 802.169465][T32394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.188198][T32390] netlink: 'syz.4.8446': attribute type 3 has an invalid length. [ 802.230420][T32390] netlink: 'syz.4.8446': attribute type 3 has an invalid length. [ 802.274355][T32390] netlink: 'syz.4.8446': attribute type 3 has an invalid length. [ 802.287964][T32390] netlink: 'syz.4.8446': attribute type 3 has an invalid length. [ 802.298339][T32390] netlink: 'syz.4.8446': attribute type 3 has an invalid length. [ 802.379781][T32402] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 802.544320][T32406] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8450'. [ 802.610337][T32316] wg1 speed is unknown, defaulting to 1000 [ 803.156209][T32431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8455'. [ 803.175164][T32431] gre0: left promiscuous mode [ 803.210744][T32431] bond0: left allmulticast mode [ 803.243242][T32431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 803.283577][T32446] openvswitch: netlink: IP tunnel TTL not specified. [ 803.454565][T32444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 803.879852][T32456] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8461'. [ 804.000051][T32482] syzkaller1: entered promiscuous mode [ 804.005629][T32482] syzkaller1: entered allmulticast mode [ 804.152547][T32489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8468'. [ 805.075673][T32529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 805.379225][T32548] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8483'. [ 805.500808][T32554] validate_nla: 9 callbacks suppressed [ 805.500832][T32554] netlink: 'syz.0.8487': attribute type 7 has an invalid length. [ 805.525351][T32554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8487'. [ 805.616374][T32562] netlink: 'syz.0.8487': attribute type 1 has an invalid length. [ 805.778679][T32569] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8492'. [ 806.006891][T32582] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8495'. [ 806.019130][T32585] IPVS: length: 157 != 24 [ 806.031468][T32582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8495'. [ 806.640737][T32614] netlink: 'syz.2.8506': attribute type 1 has an invalid length. [ 806.808077][T32614] 8021q: adding VLAN 0 to HW filter on device bond14 [ 806.828611][T32621] IPv6: NLM_F_CREATE should be specified when creating new route [ 806.863209][T32625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8509'. [ 806.904250][T32617] bond14: (slave gretap6): making interface the new active one [ 806.923579][T32617] bond14: (slave gretap6): Enslaving as an active interface with an up link [ 806.953129][T32627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8512'. [ 806.983656][T32627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8512'. [ 807.018502][T32627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8512'. [ 807.202703][T32637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8516'. [ 807.231913][T32641] netlink: 'syz.4.8518': attribute type 11 has an invalid length. [ 807.232638][T32637] netlink: 'syz.2.8516': attribute type 5 has an invalid length. [ 807.412809][T32648] netlink: 'syz.0.8521': attribute type 21 has an invalid length. [ 807.436702][T32648] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 807.694534][T32668] bond0: Error: Cannot enslave bond to itself. [ 807.885414][T32687] FAULT_INJECTION: forcing a failure. [ 807.885414][T32687] name failslab, interval 1, probability 0, space 0, times 0 [ 807.905225][T32687] CPU: 0 UID: 0 PID: 32687 Comm: syz.2.8535 Not tainted syzkaller #0 PREEMPT(full) [ 807.905260][T32687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.905274][T32687] Call Trace: [ 807.905283][T32687] [ 807.905293][T32687] dump_stack_lvl+0x189/0x250 [ 807.905326][T32687] ? __pfx____ratelimit+0x10/0x10 [ 807.905366][T32687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.905392][T32687] ? __pfx__printk+0x10/0x10 [ 807.905429][T32687] ? __pfx___might_resched+0x10/0x10 [ 807.905457][T32687] should_fail_ex+0x414/0x560 [ 807.905491][T32687] should_failslab+0xa8/0x100 [ 807.905525][T32687] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 807.905556][T32687] ? __alloc_skb+0x112/0x2d0 [ 807.905582][T32687] __alloc_skb+0x112/0x2d0 [ 807.905607][T32687] netlink_sendmsg+0x5c6/0xb30 [ 807.905641][T32687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.905666][T32687] ? aa_sock_msg_perm+0xf1/0x1d0 [ 807.905689][T32687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.905712][T32687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.905734][T32687] __sock_sendmsg+0x219/0x270 [ 807.905767][T32687] ____sys_sendmsg+0x505/0x830 [ 807.905798][T32687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.905833][T32687] ? import_iovec+0x74/0xa0 [ 807.905863][T32687] ___sys_sendmsg+0x21f/0x2a0 [ 807.905891][T32687] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.905959][T32687] ? __fget_files+0x2a/0x420 [ 807.905977][T32687] ? __fget_files+0x3a0/0x420 [ 807.906009][T32687] __x64_sys_sendmsg+0x19b/0x260 [ 807.906036][T32687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.906073][T32687] ? __pfx_ksys_write+0x10/0x10 [ 807.906098][T32687] ? rcu_is_watching+0x15/0xb0 [ 807.906125][T32687] ? do_syscall_64+0xbe/0x3b0 [ 807.906150][T32687] do_syscall_64+0xfa/0x3b0 [ 807.906168][T32687] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.906199][T32687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.906220][T32687] ? clear_bhb_loop+0x60/0xb0 [ 807.906246][T32687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.906266][T32687] RIP: 0033:0x7ff6c258eba9 [ 807.906286][T32687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.906304][T32687] RSP: 002b:00007ff6c34fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.906327][T32687] RAX: ffffffffffffffda RBX: 00007ff6c27d5fa0 RCX: 00007ff6c258eba9 [ 807.906351][T32687] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 807.906365][T32687] RBP: 00007ff6c34fd090 R08: 0000000000000000 R09: 0000000000000000 [ 807.906379][T32687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.906391][T32687] R13: 00007ff6c27d6038 R14: 00007ff6c27d5fa0 R15: 00007ffe5d5c3e58 [ 807.906428][T32687] [ 807.918994][T32683] netlink: 'syz.1.8534': attribute type 3 has an invalid length. [ 808.737328][T32722] netlink: 'syz.4.8549': attribute type 1 has an invalid length. [ 808.748510][T32724] IPv6: NLM_F_CREATE should be specified when creating new route [ 808.842281][T32729] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 809.244731][T32758] bond7: (slave wireguard0): Releasing backup interface [ 809.255734][T32758] wireguard0: left promiscuous mode [ 809.309617][T32758] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 809.513548][ T305] ip6gretap0: Device is already in use. [ 809.580647][ T302] batman_adv: batadv0: Adding interface: dummy0 [ 809.618246][ T302] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.660498][ T313] netlink: 'syz.1.8566': attribute type 10 has an invalid length. [ 809.673248][ T315] netlink: 'syz.0.8568': attribute type 10 has an invalid length. [ 809.682134][ T302] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 810.100651][ T340] syzkaller1: entered promiscuous mode [ 810.137928][ T340] syzkaller1: entered allmulticast mode [ 810.383515][ T351] tipc: Enabled bearer , priority 0 [ 810.493813][ T351] tipc: Enabling of bearer rejected, already enabled [ 810.609351][ T351] tipc: Disabling bearer [ 810.688494][ T366] nbd: must specify an index to disconnect [ 810.772872][ T370] __nla_validate_parse: 9 callbacks suppressed [ 810.772896][ T370] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8587'. [ 810.794857][ T375] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8588'. [ 811.039302][ T383] netlink: 'syz.1.8591': attribute type 11 has an invalid length. [ 811.067923][ T383] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8591'. [ 811.495854][ T402] syzkaller1: entered promiscuous mode [ 811.532843][ T402] syzkaller1: entered allmulticast mode [ 811.544445][ T414] netlink: 'syz.2.8602': attribute type 1 has an invalid length. [ 811.571195][ T414] netlink: 'syz.2.8602': attribute type 2 has an invalid length. [ 811.716592][ T421] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8603'. [ 811.787916][ T414] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8602'. [ 811.972211][ T437] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8608'. [ 812.465974][ T466] netlink: 'syz.3.8616': attribute type 10 has an invalid length. [ 812.827073][ T485] syzkaller1: entered promiscuous mode [ 812.835832][ T485] syzkaller1: entered allmulticast mode [ 813.017883][ T490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8622'. [ 813.067535][ T490] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8622'. [ 813.112883][ T498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8625'. [ 813.673169][ T518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8630'. [ 813.734444][ T525] openvswitch: netlink: IPv6 tunnel dst address is zero [ 813.869812][ T532] FAULT_INJECTION: forcing a failure. [ 813.869812][ T532] name failslab, interval 1, probability 0, space 0, times 0 [ 813.898735][ T532] CPU: 1 UID: 0 PID: 532 Comm: syz.4.8634 Not tainted syzkaller #0 PREEMPT(full) [ 813.898808][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.898821][ T532] Call Trace: [ 813.898830][ T532] [ 813.898839][ T532] dump_stack_lvl+0x189/0x250 [ 813.898871][ T532] ? __pfx____ratelimit+0x10/0x10 [ 813.898904][ T532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.898930][ T532] ? __pfx__printk+0x10/0x10 [ 813.898968][ T532] ? __pfx___might_resched+0x10/0x10 [ 813.898988][ T532] ? fs_reclaim_acquire+0x7d/0x100 [ 813.899028][ T532] should_fail_ex+0x414/0x560 [ 813.899063][ T532] should_failslab+0xa8/0x100 [ 813.899097][ T532] __kmalloc_noprof+0xcb/0x4f0 [ 813.899124][ T532] ? kfree+0x4d/0x440 [ 813.899148][ T532] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 813.899177][ T532] tomoyo_realpath_from_path+0xe3/0x5d0 [ 813.899202][ T532] ? tomoyo_domain+0xd9/0x130 [ 813.899232][ T532] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 813.899263][ T532] tomoyo_path_number_perm+0x1e8/0x5a0 [ 813.899296][ T532] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 813.899347][ T532] ? __lock_acquire+0xab9/0xd20 [ 813.899402][ T532] ? __fget_files+0x2a/0x420 [ 813.899426][ T532] ? __fget_files+0x2a/0x420 [ 813.899443][ T532] ? __fget_files+0x3a0/0x420 [ 813.899460][ T532] ? __fget_files+0x2a/0x420 [ 813.899484][ T532] security_file_ioctl+0xcb/0x2d0 [ 813.899516][ T532] __se_sys_ioctl+0x47/0x170 [ 813.899546][ T532] do_syscall_64+0xfa/0x3b0 [ 813.899565][ T532] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.899596][ T532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.899617][ T532] ? clear_bhb_loop+0x60/0xb0 [ 813.899644][ T532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.899664][ T532] RIP: 0033:0x7f8d7e38eba9 [ 813.899684][ T532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.899703][ T532] RSP: 002b:00007f8d7f27d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.899724][ T532] RAX: ffffffffffffffda RBX: 00007f8d7e5d5fa0 RCX: 00007f8d7e38eba9 [ 813.899752][ T532] RDX: 0000200000000040 RSI: 0000000000008922 RDI: 0000000000000003 [ 813.899766][ T532] RBP: 00007f8d7f27d090 R08: 0000000000000000 R09: 0000000000000000 [ 813.899780][ T532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.899792][ T532] R13: 00007f8d7e5d6038 R14: 00007f8d7e5d5fa0 R15: 00007ffebfc18328 [ 813.899829][ T532] [ 813.902131][ T532] ERROR: Out of memory at tomoyo_realpath_from_path. [ 814.006045][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 814.449007][ T546] syzkaller1: entered promiscuous mode [ 814.454588][ T546] syzkaller1: entered allmulticast mode [ 814.499020][ T546] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 814.599105][ T552] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 814.746054][ T564] syzkaller1: entered promiscuous mode [ 814.799603][ T564] syzkaller1: entered allmulticast mode [ 815.809049][ T622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8652'. [ 816.185522][ T638] FAULT_INJECTION: forcing a failure. [ 816.185522][ T638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.253759][ T638] CPU: 0 UID: 0 PID: 638 Comm: syz.4.8659 Not tainted syzkaller #0 PREEMPT(full) [ 816.253796][ T638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 816.253811][ T638] Call Trace: [ 816.253820][ T638] [ 816.253831][ T638] dump_stack_lvl+0x189/0x250 [ 816.253864][ T638] ? __pfx____ratelimit+0x10/0x10 [ 816.253898][ T638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.253925][ T638] ? __pfx__printk+0x10/0x10 [ 816.253955][ T638] ? __might_fault+0xb0/0x130 [ 816.253998][ T638] should_fail_ex+0x414/0x560 [ 816.254033][ T638] _copy_from_user+0x2d/0xb0 [ 816.254059][ T638] sock_do_ioctl+0x182/0x300 [ 816.254092][ T638] ? __pfx_sock_do_ioctl+0x10/0x10 [ 816.254119][ T638] ? __lock_acquire+0xab9/0xd20 [ 816.254170][ T638] sock_ioctl+0x576/0x790 [ 816.254201][ T638] ? __pfx_sock_ioctl+0x10/0x10 [ 816.254228][ T638] ? __fget_files+0x2a/0x420 [ 816.254246][ T638] ? __fget_files+0x3a0/0x420 [ 816.254262][ T638] ? __fget_files+0x2a/0x420 [ 816.254285][ T638] ? bpf_lsm_file_ioctl+0x9/0x20 [ 816.254312][ T638] ? __pfx_sock_ioctl+0x10/0x10 [ 816.254339][ T638] __se_sys_ioctl+0xfc/0x170 [ 816.254367][ T638] do_syscall_64+0xfa/0x3b0 [ 816.254386][ T638] ? lockdep_hardirqs_on+0x9c/0x150 [ 816.254417][ T638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.254437][ T638] ? clear_bhb_loop+0x60/0xb0 [ 816.254463][ T638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.254483][ T638] RIP: 0033:0x7f8d7e38eba9 [ 816.254502][ T638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.254521][ T638] RSP: 002b:00007f8d7f27d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 816.254543][ T638] RAX: ffffffffffffffda RBX: 00007f8d7e5d5fa0 RCX: 00007f8d7e38eba9 [ 816.254559][ T638] RDX: 0000200000000040 RSI: 0000000000008922 RDI: 0000000000000003 [ 816.254574][ T638] RBP: 00007f8d7f27d090 R08: 0000000000000000 R09: 0000000000000000 [ 816.254594][ T638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.254606][ T638] R13: 00007f8d7e5d6038 R14: 00007f8d7e5d5fa0 R15: 00007ffebfc18328 [ 816.254643][ T638] [ 816.648488][ T633] [ 816.650986][ T633] ====================================================== [ 816.658038][ T633] WARNING: possible circular locking dependency detected [ 816.665138][ T633] syzkaller #0 Not tainted [ 816.669601][ T633] ------------------------------------------------------ [ 816.676655][ T633] syz.2.8657/633 is trying to acquire lock: [ 816.682586][ T633] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 816.692235][ T633] [ 816.692235][ T633] but task is already holding lock: [ 816.699729][ T633] ffff888027f5b1b8 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 816.710100][ T633] [ 816.710100][ T633] which lock already depends on the new lock. [ 816.710100][ T633] [ 816.720551][ T633] [ 816.720551][ T633] the existing dependency chain (in reverse order) is: [ 816.729781][ T633] [ 816.729781][ T633] -> #2 (&q->q_usage_counter(io)#70){++++}-{0:0}: [ 816.739122][ T633] lock_acquire+0x120/0x360 [ 816.744381][ T633] blk_alloc_queue+0x538/0x620 [ 816.749963][ T633] __blk_mq_alloc_disk+0x15c/0x340 [ 816.755714][ T633] nbd_dev_add+0x46c/0xae0 [ 816.760680][ T633] nbd_genl_connect+0x919/0x18f0 [ 816.766171][ T633] genl_family_rcv_msg_doit+0x212/0x300 [ 816.772876][ T633] genl_rcv_msg+0x60e/0x790 [ 816.778008][ T633] netlink_rcv_skb+0x208/0x470 [ 816.783416][ T633] genl_rcv+0x28/0x40 [ 816.787940][ T633] netlink_unicast+0x82f/0x9e0 [ 816.793255][ T633] netlink_sendmsg+0x805/0xb30 [ 816.798553][ T633] __sock_sendmsg+0x219/0x270 [ 816.803873][ T633] ____sys_sendmsg+0x505/0x830 [ 816.809557][ T633] ___sys_sendmsg+0x21f/0x2a0 [ 816.814769][ T633] __x64_sys_sendmsg+0x19b/0x260 [ 816.820240][ T633] do_syscall_64+0xfa/0x3b0 [ 816.825406][ T633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.831837][ T633] [ 816.831837][ T633] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 816.839258][ T633] lock_acquire+0x120/0x360 [ 816.844318][ T633] fs_reclaim_acquire+0x72/0x100 [ 816.849871][ T633] prepare_alloc_pages+0x153/0x610 [ 816.855513][ T633] __alloc_frozen_pages_noprof+0x123/0x370 [ 816.861848][ T633] __alloc_pages_noprof+0xa/0x30 [ 816.867346][ T633] pcpu_populate_chunk+0x182/0xb30 [ 816.872996][ T633] pcpu_alloc_noprof+0xcbf/0x16b0 [ 816.878565][ T633] bpf_map_alloc_percpu+0xbc/0x1b0 [ 816.884305][ T633] array_map_alloc+0x385/0x700 [ 816.889595][ T633] map_create+0xaa0/0x14d0 [ 816.894550][ T633] __sys_bpf+0x60f/0x870 [ 816.899340][ T633] __x64_sys_bpf+0x7c/0x90 [ 816.904293][ T633] do_syscall_64+0xfa/0x3b0 [ 816.909334][ T633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.915774][ T633] [ 816.915774][ T633] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 816.923518][ T633] validate_chain+0xb9b/0x2140 [ 816.928906][ T633] __lock_acquire+0xab9/0xd20 [ 816.934145][ T633] lock_acquire+0x120/0x360 [ 816.939205][ T633] __mutex_lock+0x187/0x1350 [ 816.944325][ T633] pcpu_alloc_noprof+0x286/0x16b0 [ 816.949886][ T633] sbitmap_init_node+0x1e1/0x630 [ 816.955357][ T633] sbitmap_queue_init_node+0x3e/0x4d0 [ 816.961262][ T633] blk_mq_init_tags+0x110/0x280 [ 816.966665][ T633] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 816.972665][ T633] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 816.979004][ T633] nbd_start_device+0x17f/0xb10 [ 816.984394][ T633] nbd_genl_connect+0x135b/0x18f0 [ 816.989970][ T633] genl_family_rcv_msg_doit+0x212/0x300 [ 816.996056][ T633] genl_rcv_msg+0x60e/0x790 [ 817.001100][ T633] netlink_rcv_skb+0x208/0x470 [ 817.006539][ T633] genl_rcv+0x28/0x40 [ 817.011188][ T633] netlink_unicast+0x82f/0x9e0 [ 817.016499][ T633] netlink_sendmsg+0x805/0xb30 [ 817.021899][ T633] __sock_sendmsg+0x219/0x270 [ 817.027115][ T633] ____sys_sendmsg+0x505/0x830 [ 817.032410][ T633] ___sys_sendmsg+0x21f/0x2a0 [ 817.037620][ T633] __x64_sys_sendmsg+0x19b/0x260 [ 817.043173][ T633] do_syscall_64+0xfa/0x3b0 [ 817.048208][ T633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.054637][ T633] [ 817.054637][ T633] other info that might help us debug this: [ 817.054637][ T633] [ 817.064943][ T633] Chain exists of: [ 817.064943][ T633] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#70 [ 817.064943][ T633] [ 817.078621][ T633] Possible unsafe locking scenario: [ 817.078621][ T633] [ 817.086270][ T633] CPU0 CPU1 [ 817.091865][ T633] ---- ---- [ 817.097326][ T633] lock(&q->q_usage_counter(io)#70); [ 817.102722][ T633] lock(fs_reclaim); [ 817.109392][ T633] lock(&q->q_usage_counter(io)#70); [ 817.117594][ T633] lock(pcpu_alloc_mutex); [ 817.122128][ T633] [ 817.122128][ T633] *** DEADLOCK *** [ 817.122128][ T633] [ 817.130277][ T633] 6 locks held by syz.2.8657/633: [ 817.135392][ T633] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 817.143602][ T633] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 817.152592][ T633] #2: ffff88803117c188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 817.164012][ T633] #3: ffff88803117c0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 817.175082][ T633] #4: ffff888027f5b1b8 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 817.185832][ T633] #5: ffff888027f5b1f0 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 817.196837][ T633] [ 817.196837][ T633] stack backtrace: [ 817.202847][ T633] CPU: 1 UID: 0 PID: 633 Comm: syz.2.8657 Not tainted syzkaller #0 PREEMPT(full) [ 817.202870][ T633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 817.202882][ T633] Call Trace: [ 817.202891][ T633] [ 817.202902][ T633] dump_stack_lvl+0x189/0x250 [ 817.202929][ T633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.202950][ T633] ? __pfx__printk+0x10/0x10 [ 817.202975][ T633] ? print_lock_name+0xde/0x100 [ 817.203001][ T633] print_circular_bug+0x2ee/0x310 [ 817.203023][ T633] check_noncircular+0x134/0x160 [ 817.203046][ T633] validate_chain+0xb9b/0x2140 [ 817.203076][ T633] __lock_acquire+0xab9/0xd20 [ 817.203105][ T633] ? pcpu_alloc_noprof+0x286/0x16b0 [ 817.203130][ T633] lock_acquire+0x120/0x360 [ 817.203154][ T633] ? pcpu_alloc_noprof+0x286/0x16b0 [ 817.203187][ T633] __mutex_lock+0x187/0x1350 [ 817.203203][ T633] ? pcpu_alloc_noprof+0x286/0x16b0 [ 817.203229][ T633] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 817.203255][ T633] ? kasan_save_track+0x4f/0x80 [ 817.203276][ T633] ? kasan_save_track+0x3e/0x80 [ 817.203296][ T633] ? __kasan_kmalloc+0x93/0xb0 [ 817.203317][ T633] ? blk_mq_init_tags+0x85/0x280 [ 817.203337][ T633] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 817.203364][ T633] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 817.203381][ T633] ? pcpu_alloc_noprof+0x286/0x16b0 [ 817.203405][ T633] ? nbd_genl_connect+0x135b/0x18f0 [ 817.203430][ T633] ? genl_family_rcv_msg_doit+0x212/0x300 [ 817.203453][ T633] ? genl_rcv_msg+0x60e/0x790 [ 817.203473][ T633] ? __pfx___mutex_lock+0x10/0x10 [ 817.203488][ T633] ? ____sys_sendmsg+0x505/0x830 [ 817.203506][ T633] ? do_syscall_64+0xfa/0x3b0 [ 817.203522][ T633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.203547][ T633] pcpu_alloc_noprof+0x286/0x16b0 [ 817.203581][ T633] sbitmap_init_node+0x1e1/0x630 [ 817.203598][ T633] ? __kasan_kmalloc+0x93/0xb0 [ 817.203623][ T633] sbitmap_queue_init_node+0x3e/0x4d0 [ 817.203642][ T633] blk_mq_init_tags+0x110/0x280 [ 817.203665][ T633] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 817.203702][ T633] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 817.203719][ T633] ? kfree+0x18e/0x440 [ 817.203743][ T633] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 817.203771][ T633] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 817.203799][ T633] ? sysfs_add_file_mode_ns+0x259/0x300 [ 817.203831][ T633] nbd_start_device+0x17f/0xb10 [ 817.203860][ T633] ? device_create_file+0xf4/0x1c0 [ 817.203878][ T633] nbd_genl_connect+0x135b/0x18f0 [ 817.203908][ T633] ? __pfx_nbd_genl_connect+0x10/0x10 [ 817.203940][ T633] ? __nla_parse+0x40/0x60 [ 817.203968][ T633] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 817.203994][ T633] genl_family_rcv_msg_doit+0x212/0x300 [ 817.204019][ T633] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 817.204048][ T633] ? stack_trace_save+0x9c/0xe0 [ 817.204072][ T633] genl_rcv_msg+0x60e/0x790 [ 817.204096][ T633] ? __pfx_genl_rcv_msg+0x10/0x10 [ 817.204116][ T633] ? __pfx_nbd_genl_connect+0x10/0x10 [ 817.204148][ T633] netlink_rcv_skb+0x208/0x470 [ 817.204174][ T633] ? __lock_acquire+0xab9/0xd20 [ 817.204199][ T633] ? __pfx_genl_rcv_msg+0x10/0x10 [ 817.204220][ T633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 817.204256][ T633] ? down_read+0x1ad/0x2e0 [ 817.204274][ T633] genl_rcv+0x28/0x40 [ 817.204292][ T633] netlink_unicast+0x82f/0x9e0 [ 817.204321][ T633] ? __pfx_netlink_unicast+0x10/0x10 [ 817.204345][ T633] ? netlink_sendmsg+0x642/0xb30 [ 817.204360][ T633] ? skb_put+0x11b/0x210 [ 817.204378][ T633] netlink_sendmsg+0x805/0xb30 [ 817.204399][ T633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.204417][ T633] ? aa_sock_msg_perm+0xf1/0x1d0 [ 817.204434][ T633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 817.204455][ T633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.204471][ T633] __sock_sendmsg+0x219/0x270 [ 817.204496][ T633] ____sys_sendmsg+0x505/0x830 [ 817.204518][ T633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 817.204542][ T633] ? import_iovec+0x74/0xa0 [ 817.204563][ T633] ___sys_sendmsg+0x21f/0x2a0 [ 817.204583][ T633] ? __pfx____sys_sendmsg+0x10/0x10 [ 817.204620][ T633] ? __fget_files+0x2a/0x420 [ 817.204635][ T633] ? __fget_files+0x3a0/0x420 [ 817.204655][ T633] __x64_sys_sendmsg+0x19b/0x260 [ 817.204675][ T633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 817.204706][ T633] ? rcu_is_watching+0x15/0xb0 [ 817.204725][ T633] ? do_syscall_64+0xbe/0x3b0 [ 817.204743][ T633] do_syscall_64+0xfa/0x3b0 [ 817.204758][ T633] ? lockdep_hardirqs_on+0x9c/0x150 [ 817.204784][ T633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.204801][ T633] ? clear_bhb_loop+0x60/0xb0 [ 817.204820][ T633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.204837][ T633] RIP: 0033:0x7ff6c258eba9 [ 817.204854][ T633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.204870][ T633] RSP: 002b:00007ff6c34dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.204889][ T633] RAX: ffffffffffffffda RBX: 00007ff6c27d6090 RCX: 00007ff6c258eba9 [ 817.204902][ T633] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 817.204914][ T633] RBP: 00007ff6c2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 817.204925][ T633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.204936][ T633] R13: 00007ff6c27d6128 R14: 00007ff6c27d6090 R15: 00007ffe5d5c3e58 [ 817.204957][ T633] [ 817.815688][ T123] block nbd1: Possible stuck request ffff8880253f5080: control (read@0,1024B). Runtime 240 seconds [ 817.826838][ T123] block nbd1: Possible stuck request ffff8880253f5240: control (read@1024,1024B). Runtime 240 seconds [ 817.844278][ T5865] block nbd0: Receive control failed (result -32) [ 817.851203][ T5865] block nbd0: Receive control failed (result -32) [ 817.858098][ T123] block nbd1: Possible stuck request ffff8880253f5400: control (read@2048,1024B). Runtime 240 seconds [ 817.870006][ T123] block nbd1: Possible stuck request ffff8880253f55c0: control (read@3072,1024B). Runtime 240 seconds [ 817.884892][ T633] nbd0: detected capacity change from 0 to 127 [ 817.902711][T24367] block nbd0: Dead connection, failed to find a fallback [ 817.910130][T24367] block nbd0: shutting down sockets [ 817.915363][T24367] blk_print_req_error: 138 callbacks suppressed [ 817.915391][T24367] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.931558][T24367] buffer_io_error: 138 callbacks suppressed [ 817.931575][T24367] Buffer I/O error on dev nbd0, logical block 0, async page read [ 817.945418][T24367] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.958004][T24367] Buffer I/O error on dev nbd0, logical block 1, async page read [ 817.965925][T24367] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.975145][T24367] Buffer I/O error on dev nbd0, logical block 2, async page read [ 817.983253][T24367] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.992450][T24367] Buffer I/O error on dev nbd0, logical block 3, async page read [ 818.000390][T24367] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.009519][T24367] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.017422][T24367] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.026532][T24367] Buffer I/O error on dev nbd0, logical block 1, async page read [ 818.035063][T24367] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.044172][T24367] Buffer I/O error on dev nbd0, logical block 2, async page read [ 818.052197][T24367] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.061303][T24367] Buffer I/O error on dev nbd0, logical block 3, async page read [ 818.069251][T24367] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.078377][T24367] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.086260][T24367] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 818.095510][T24367] Buffer I/O error on dev nbd0, logical block 1, async page read [ 818.105127][T24367] ldm_validate_partition_table(): Disk read failed. [ 818.113221][T24367] Dev nbd0: unable to read RDB block 0 [ 818.120146][T24367] nbd0: unable to read partition table [ 818.151996][T24367] ldm_validate_partition_table(): Disk read failed. [ 818.161504][T24367] Dev nbd0: unable to read RDB block 0 [ 818.168489][T24367] nbd0: unable to read partition table [ 818.223588][T15529] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.232154][T15529] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 818.240746][T15529] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.249144][T15529] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 818.279731][ T677] pimreg: entered allmulticast mode [ 818.286167][T15529] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.295381][T15529] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 818.307224][T15529] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.334880][T15529] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 819.178142][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 819.186442][ C0] lec:lec_tx_timeout: lec0 [ 819.191018][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 824.197912][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 824.206089][ C0] lec:lec_tx_timeout: lec0