last executing test programs: 12.324929913s ago: executing program 0 (id=3111): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000001fffffe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) 12.265123416s ago: executing program 0 (id=3112): unshare(0x10000400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0xe, 0xa, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000e90001000900452500140067000009069078ac1e0101ac141444"], 0x26) unshare(0x22000800) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00'}) 11.767350914s ago: executing program 0 (id=3119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)}, 0x8}], 0x1, 0x12000, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000100)=""/177, &(0x7f0000000000)=0xb1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)}, 0x8}], 0x1, 0x12000, 0x0) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000100)=""/177, &(0x7f0000000000)=0xb1) (async) 11.569139792s ago: executing program 0 (id=3121): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r3, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f00000002c0)=ANY=[@ANYBLOB="a9000000000800000100004000000000310dee6710b7c30030246f4b87595042b4a02d5bb1db718b3eb14c03c22cb435f0e179cb5ad476155f63ac7da8227fe43adc65377c811dbdd197dbd62f9afaa172ade411e9c0ade4225cc3ab21869bdc"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 10.68364808s ago: executing program 0 (id=3131): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept(r0, 0x0, &(0x7f0000000400)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@rand_addr, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="8724e1ea98c8c1c22eef2d69e4c945c97ae6ca83d3c7112117e256226a7dbb31af1eb627914dbfe2a95d641a9c8db3d9fdd0a377dcc86c8cdea04573949d8976b5c8b11dae72b660c4c28b0a101fb14adef8539295f6617ea456abb74bbe4c93e20598511056328fa8982b0919", 0x6d}, {&(0x7f0000000380)="f775cf8b00b542ed0955ddb7935c96d13ae711add5749aed65", 0x19}], 0x2}], 0x1, 0x20040090) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x30, 0x1412, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xffe0, 0x2}, {0x0, 0xd}}}, 0x24}}, 0x20004055) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x7}, 0x8) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x9b9223a7e2860121}) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @link_local}) unshare(0x22020600) r10 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r10, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x0, 0x4}}], 0x38, 0x4855}, 0x24000052) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12090000013f5b1efe6ec3f2b447000000001000", @ANYRES32=r2, @ANYBLOB="0400"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="03000000010000000100"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000580)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000040000701040042800c00018006000600800a0000200002801a00148004000d0004000d802989ec60d7affcdd6a21cd9076d50000"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r11, &(0x7f0000000500), 0x0}, 0x20) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="000000000011000014002b80080003001900000008000100", @ANYRES8=r11, @ANYBLOB="08001b0000000000"], 0x3c}}, 0x0) 9.621223665s ago: executing program 0 (id=3137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000110008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.901222164s ago: executing program 2 (id=3184): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, 0x0, 0x0, 0x8001, 0x80) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f00000000c0)={0x8}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@deltclass={0x38, 0x29, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0x6}, {0x1, 0x6}, {0xa, 0x1b}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xa}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x0, 0x2000000}, {0x1d00}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000559d0707ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@delqdisc={0x5c, 0x25, 0x8, 0x70bd26, 0x2ddfdbfe, {0x0, 0x0, 0x0, r7, {0xfff2, 0xfff3}, {0x2, 0xc}, {0x6, 0xe130292bc986c574}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xfa, 0x2}}, @TCA_RATE={0x6, 0x5, {0x94, 0x4}}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240040a4}, 0x4028040) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029680000001f0a05010000000000000000070000000900020073797a31000000000900010073797a30000000003c0003"], 0xec}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.609373685s ago: executing program 2 (id=3188): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a0000008975000000200000460e00009a300400", @ANYRES32, @ANYBLOB="01000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005"], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000020000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff000000000000000033"], 0x254}}, 0x0) 3.32113442s ago: executing program 2 (id=3191): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0xea, r1, 0x8000, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200448e0}, 0x4000) 3.017202434s ago: executing program 2 (id=3194): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002401800000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d90ffffffffc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a32000000000c0005800800014000000088140000001100010000000000000000000000000a"], 0x29c}}, 0x4048010) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000010000000000000000000000000a0000000000000026ee2b8a9fb87da2de5c36e8e00400040004000b00"], 0x20}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES8=r0], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x58, &(0x7f0000007200)}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000700)=@ethtool_gstrings={0x1b, 0x1}}) recvmmsg(r5, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16}, {&(0x7f0000002180)=""/4096}, {&(0x7f0000000a40)=""/248}, {&(0x7f0000000b40)=""/190}], 0x0, &(0x7f0000000c40)=""/114}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189}, {&(0x7f0000003180)=""/176}, {&(0x7f0000003240)=""/90}]}, 0x2}], 0xf00, 0x0, 0x0) shutdown(r5, 0x0) 2.797193512s ago: executing program 1 (id=3198): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="66d683701a9c8300e30ae8aa0ea128db348cf392914e99a42c6de08764db25d09007a48ee9c5d8eaa243638981d9cf89e4e7051aed2ffe2e2fcf675ac248fc3074053f5317fe2b3761b5e66e893eca62731bfbbead53e1a7e48875a6a3281ae8e620ca722451359fc191002fc5055faae1a42ba1c243f121e6b6ee30399a3c0807f03f1a90f6b7e36ac15d14ff43aaa0", 0x90}, {&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000500)="dbdf4b3d9ce934882250dacef3e658e3ca25a8181f64e22303b42bf814d28df0373525ada2c6cacc9a86b39b64ca049a0b000e65821f27c671f09abfdd23b540a68ee9792d12d3d0c9d359a6fe35e05778e231893eed4d190d16550f2d7883e86fec705ff4a96c09b9fae9912ed7f0173920e3bfdcd1e6f51ae1213f41dbfc77a992cb7385c44212803055d2c06742667b4e63233215788be498c0aa260b33134413a92a38c52c877e83d5f320c4b3dda4f31a0361c214099f85e82a00ca1e12a2a711a6d86e3ca5171f7e41694372e56ee605aa4eb8d61751072649a9522bae3af23a746f77460e904ef1e3cca67ecd2e7cb0ed1f23e0", 0xf7}, {&(0x7f0000000380)="901e22efbbe9da83fcc6a7c318f23ca6618d58f0bb1a62dbf1d95e263a52d8e1ec4ddd2bab7612cfbc2de841222aef148c9c5efcd6292b92044c9836d9823f7980785ded7897a78fa0deb65f67b57a68a7c4395431b1ae553154c7776d0c678cc25bcf6cea3ae8e87a7d75077e3ab40919506858fc3c775c8ffe34f309e14f20b23df43525f9631fc2aa71b598c3804afd3d2414e7450feb079ca760aa9f4ff3ab", 0xa1}, {&(0x7f0000000040)="29e7d4d4e5e5c1d2c0b9ff4f2049b8144d25d6e8355d56e1be9d64229dfc230b8038b90f9aada8459461e453b83a8f1c9e63f217ba366a38b5065c4fb4793ee3419a7a8e2940e8c125a13b", 0x4b}, {&(0x7f0000000680)="86e233cb9b6efd69c3d847565c5daed656f8e6a04b09fc942a9baa72c8a6b4a852b6b261257267362e4f34190d92d7cd6d3901390f7f542ad7b05b2020c18afe72e637d1", 0x44}], 0x7, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa8b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbe}}], 0x30}}], 0x1, 0x40045) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.766779227s ago: executing program 2 (id=3201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x1f0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x29}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0x0, 0x0, 'pimreg1\x00', 'nr0\x00'}, 0xfa03, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x4, 0x6}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x73}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 2.645147104s ago: executing program 1 (id=3202): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200080000000c001b08000d000100040008000200477e0400591cd0658f82025d1782580000000000"], 0x38}}, 0x0) 2.637300426s ago: executing program 2 (id=3203): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4040850}, 0x40) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x4, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2f, 0x64, 0x0, 0xb, 0x67, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x2b}}, "2197e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d6624"}}, 0x3d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40), 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000001300)={0xac, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "6421761077a7c0cdbff35a698d75cd4ffc8b8619"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40810}, 0x40841) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) socket(0xa, 0x80000, 0x7) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000640)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000002c0)={{}, "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"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) r6 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r5, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB="140003007600"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x7, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 2.625196201s ago: executing program 3 (id=3204): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0xed, r1, 0x8000, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200448e0}, 0x4000) 2.229147402s ago: executing program 1 (id=3205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xffffffffffffffcd, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) (async) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) (async) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f00000003c0)=@in6={0xa, 0x4e23, 0xbe3c, @local, 0xffffff88}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="b6c9f7e595b809a2b371bb6ca7dd7a403a7ec53e512cbf88767c7532812d4cff061b215d74930094e27d3d0629a8e6411d86c425f7bb18ff9048857d25b42b2add5be0e50d4bd7f4a0047e737bc0828156e909456580974e814c9cb7e7910dab33eb7c9fa1f983"], 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x104, 0x0, 0x0, 0x0, 0x6e, &(0x7f0000000000)='pimreg\x00', 0x2, 0xc, 0xfffe}) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x35, r2}) (async) r6 = socket(0xa, 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) (async) ioctl(r6, 0x8936, &(0x7f0000000000)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r9, &(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) 2.228469317s ago: executing program 3 (id=3206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffffac1414150000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000010000000000000000000000000000000a"], 0xf8}}, 0x24000000) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000000000000000000088feffffac14142900000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa8700000000000000000000000000000000000000000000000000000000000000000a"], 0xf8}}, 0x0) 2.144650083s ago: executing program 3 (id=3207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000003a00000000000000000114000400fc0100000000000000000000000000000c00028005000100000000003c0001800c00028005000100000000002c00018014000300fe00000000000000000000000000003c1400040000000000000000000000ffffac1414bb08000740000000013c000e802c000180140003"], 0xd0}}, 0x44800) 1.849703517s ago: executing program 3 (id=3208): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000ffffffffffffffa4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) 1.773020048s ago: executing program 1 (id=3209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_request_blocks\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1.743781817s ago: executing program 3 (id=3210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000091400078008001140000000000500150001000000050005000a000000050001000700000005000400000000000900020073797a32000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x0) 1.602366897s ago: executing program 1 (id=3211): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}, 0x1, 0x6000000}, 0x8000) 1.465005371s ago: executing program 3 (id=3212): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000800)}], 0x1}}], 0x2, 0x931766f6119eed40) (async) shutdown(r1, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_MASK={0x8, 0x6, 0x200}]}}]}, 0x80}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) (async, rerun: 64) sendto$inet(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000d40)=ANY=[@ANYBLOB="107a00002300000126bd7000fcdbdf25"], 0x10}, {&(0x7f0000000400)=ANY=[@ANYBLOB="10ffdbdf25d20d10dccec3421a7cd333b1c6e85fb19c431f0b226af8449cb2846a980397a02a20d038de103782789ef465f1edad8d401017a7739be1dd4bbe0dfed5bbe8863f9cc6a0caef203afac08561bea194805385e6175291291b583bab9011b2e8666f49b8480ec4eb8ce7a0d1b26557d0cd53a9a98a843d3f9c11d1f73eab7f08eca355ac9fe79aa2c6471f1eaa492a09b5cc43783f9d7c21b9007a7a06e917ff185d3ef25409ef00ab28df9b79b711bfb7aff8e21920565108fbcd384f4cea31b6846aebedcef975da4eac"], 0x10}], 0x2, 0x0, 0x0, 0x10}, 0x40000090) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x51}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)={@loopback, @rand_addr=0x64010102, 0x1, 0xa, [@loopback, @broadcast, @empty, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100]}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf25350000000800030027e7462c5cf017dca445d387532791957d11d4be211b8db5c588f7fab52538350131b8d5b1cf5aa88a9e8a03371f7b83e5cd9efeb8706d342c4987f240d0d56077002890cbb001ad29add151c6bdf059502c08a35fcb19cf5b8dad736dbc52441c46c0e1819981015d383bc9ee664f5889b9340c206711881d0afaec235c890af1804de358610882ed65cc40430bedd89769b9e40013de75c50ecde1652057a96dfc16f02be8d598b63b51a2ae6236f22d46a2945aadd1f2e7bc72443c6ab2da4245946ef5aef1e762d4f1a52e559acbd6470f9658836b91b9b4952650df157f14ff2d", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00L'], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x54) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) 1.392907905s ago: executing program 4 (id=3213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x3, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.206140894s ago: executing program 1 (id=3214): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d8, 0x308, 0x220, 0x0, 0x308, 0x4d8, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x140, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x20}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x838) 1.156158225s ago: executing program 4 (id=3215): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe"], 0x190) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe80000000000000000000e0030000bbff0200000000000000ffff6a02000001"], 0x0) 1.127908862s ago: executing program 4 (id=3216): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 1.056869556s ago: executing program 4 (id=3217): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x1000000000000}}, {0x28}}}}, 0x2b0) 977.134913ms ago: executing program 4 (id=3218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e26}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r2, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0x8, 0x60000000}, 0x50) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r12 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r12, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r12, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/65, 0x41}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x4}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r10, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0xb8, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xec}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xde}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'virt_wifi0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 0s ago: executing program 4 (id=3219): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x4000000000000}}, {0x28}}}}, 0x2b0) kernel console output (not intermixed with test programs): Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.050457][T13897] Call Trace: [ 366.050467][T13897] [ 366.050477][T13897] dump_stack_lvl+0x189/0x250 [ 366.050512][T13897] ? __pfx____ratelimit+0x10/0x10 [ 366.050542][T13897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.050572][T13897] ? __pfx__printk+0x10/0x10 [ 366.050598][T13897] ? __pfx___might_resched+0x10/0x10 [ 366.050622][T13897] ? fs_reclaim_acquire+0x7d/0x100 [ 366.050662][T13897] should_fail_ex+0x414/0x560 [ 366.050701][T13897] should_failslab+0xa8/0x100 [ 366.050727][T13897] __kmalloc_cache_noprof+0x6f/0x6f0 [ 366.050759][T13897] ? hsr_add_port+0x1e0/0x980 [ 366.050785][T13897] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 366.050818][T13897] hsr_add_port+0x1e0/0x980 [ 366.050845][T13897] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 366.050879][T13897] ? __pfx_hsr_add_port+0x10/0x10 [ 366.050917][T13897] hsr_dev_finalize+0x43a/0xaa0 [ 366.050955][T13897] hsr_newlink+0x8ad/0x9f0 [ 366.050979][T13897] ? validate_linkmsg+0x765/0x950 [ 366.051011][T13897] ? __pfx_hsr_newlink+0x10/0x10 [ 366.051044][T13897] ? __pfx_hsr_newlink+0x10/0x10 [ 366.051072][T13897] rtnl_newlink_create+0x310/0xb00 [ 366.051102][T13897] ? __lock_acquire+0xab9/0xd20 [ 366.051130][T13897] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 366.051157][T13897] ? __pfx___mutex_lock+0x10/0x10 [ 366.051201][T13897] ? ns_capable+0x8a/0xf0 [ 366.051245][T13897] rtnl_newlink+0x16e4/0x1c80 [ 366.051298][T13897] ? __pfx_rtnl_newlink+0x10/0x10 [ 366.051339][T13897] ? is_bpf_text_address+0x26/0x2b0 [ 366.051370][T13897] ? is_bpf_text_address+0x292/0x2b0 [ 366.051393][T13897] ? is_bpf_text_address+0x26/0x2b0 [ 366.051422][T13897] ? __lock_acquire+0xab9/0xd20 [ 366.051458][T13897] ? __lock_acquire+0xab9/0xd20 [ 366.051503][T13897] ? is_bpf_text_address+0x26/0x2b0 [ 366.051530][T13897] ? is_bpf_text_address+0x292/0x2b0 [ 366.051552][T13897] ? is_bpf_text_address+0x26/0x2b0 [ 366.051585][T13897] ? __lock_acquire+0xab9/0xd20 [ 366.051634][T13897] ? __pfx_rtnl_newlink+0x10/0x10 [ 366.051666][T13897] rtnetlink_rcv_msg+0x7cf/0xb70 [ 366.051698][T13897] ? __lock_acquire+0xab9/0xd20 [ 366.051721][T13897] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 366.051754][T13897] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.051809][T13897] netlink_rcv_skb+0x208/0x470 [ 366.051828][T13897] ? __lock_acquire+0xab9/0xd20 [ 366.051850][T13897] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.051886][T13897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.051922][T13897] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.051953][T13897] netlink_unicast+0x82f/0x9e0 [ 366.051998][T13897] ? __pfx_netlink_unicast+0x10/0x10 [ 366.052032][T13897] ? netlink_sendmsg+0x642/0xb30 [ 366.052052][T13897] ? skb_put+0x11b/0x210 [ 366.052078][T13897] netlink_sendmsg+0x805/0xb30 [ 366.052112][T13897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.052138][T13897] ? aa_sock_msg_perm+0xf1/0x1d0 [ 366.052173][T13897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.052194][T13897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.052224][T13897] __sock_sendmsg+0x21c/0x270 [ 366.052257][T13897] ____sys_sendmsg+0x505/0x830 [ 366.052288][T13897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.052322][T13897] ? import_iovec+0x74/0xa0 [ 366.052353][T13897] ___sys_sendmsg+0x21f/0x2a0 [ 366.052379][T13897] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.052447][T13897] ? __fget_files+0x2a/0x420 [ 366.052466][T13897] ? __fget_files+0x3a0/0x420 [ 366.052499][T13897] __x64_sys_sendmsg+0x19b/0x260 [ 366.052526][T13897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.052563][T13897] ? __pfx_ksys_write+0x10/0x10 [ 366.052599][T13897] ? do_syscall_64+0xbe/0xfa0 [ 366.052634][T13897] do_syscall_64+0xfa/0xfa0 [ 366.052663][T13897] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.052692][T13897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.052713][T13897] ? clear_bhb_loop+0x60/0xb0 [ 366.052740][T13897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.052762][T13897] RIP: 0033:0x7f4da2b8f6c9 [ 366.052781][T13897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.052800][T13897] RSP: 002b:00007f4da3ab1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.052824][T13897] RAX: ffffffffffffffda RBX: 00007f4da2de5fa0 RCX: 00007f4da2b8f6c9 [ 366.052840][T13897] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 366.052853][T13897] RBP: 00007f4da3ab1090 R08: 0000000000000000 R09: 0000000000000000 [ 366.052867][T13897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.052879][T13897] R13: 00007f4da2de6038 R14: 00007f4da2de5fa0 R15: 00007ffdda759e68 [ 366.052917][T13897] [ 366.763313][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2412'. [ 366.819163][T13914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2410'. [ 366.929736][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 366.934118][T13926] x_tables: duplicate underflow at hook 1 [ 366.948679][T13926] FAULT_INJECTION: forcing a failure. [ 366.948679][T13926] name failslab, interval 1, probability 0, space 0, times 0 [ 366.961854][T13926] CPU: 0 UID: 0 PID: 13926 Comm: syz.1.2415 Not tainted syzkaller #0 PREEMPT(full) [ 366.961884][T13926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.961897][T13926] Call Trace: [ 366.961906][T13926] [ 366.961916][T13926] dump_stack_lvl+0x189/0x250 [ 366.961952][T13926] ? __pfx____ratelimit+0x10/0x10 [ 366.961981][T13926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.962011][T13926] ? __pfx__printk+0x10/0x10 [ 366.962041][T13926] ? __pfx___might_resched+0x10/0x10 [ 366.962080][T13926] should_fail_ex+0x414/0x560 [ 366.962119][T13926] should_failslab+0xa8/0x100 [ 366.962143][T13926] kmem_cache_alloc_node_noprof+0x77/0x710 [ 366.962175][T13926] ? __alloc_skb+0x112/0x2d0 [ 366.962202][T13926] __alloc_skb+0x112/0x2d0 [ 366.962228][T13926] netlink_ack+0x146/0xa50 [ 366.962246][T13926] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.962272][T13926] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 366.962302][T13926] ? __pfx_nl802154_post_doit+0x10/0x10 [ 366.962350][T13926] netlink_rcv_skb+0x28c/0x470 [ 366.962368][T13926] ? __lock_acquire+0xab9/0xd20 [ 366.962390][T13926] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.962420][T13926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.962462][T13926] ? down_read+0x1ad/0x2e0 [ 366.962486][T13926] genl_rcv+0x28/0x40 [ 366.962511][T13926] netlink_unicast+0x82f/0x9e0 [ 366.962554][T13926] ? __pfx_netlink_unicast+0x10/0x10 [ 366.962588][T13926] ? netlink_sendmsg+0x642/0xb30 [ 366.962608][T13926] ? skb_put+0x11b/0x210 [ 366.962633][T13926] netlink_sendmsg+0x805/0xb30 [ 366.962667][T13926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.962692][T13926] ? aa_sock_msg_perm+0xf1/0x1d0 [ 366.962727][T13926] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.962748][T13926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.962772][T13926] __sock_sendmsg+0x21c/0x270 [ 366.962805][T13926] ____sys_sendmsg+0x505/0x830 [ 366.962837][T13926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.962871][T13926] ? import_iovec+0x74/0xa0 [ 366.962904][T13926] ___sys_sendmsg+0x21f/0x2a0 [ 366.962931][T13926] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.962998][T13926] ? __fget_files+0x2a/0x420 [ 366.963017][T13926] ? __fget_files+0x3a0/0x420 [ 366.963050][T13926] __x64_sys_sendmsg+0x19b/0x260 [ 366.963083][T13926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.963119][T13926] ? __pfx_ksys_write+0x10/0x10 [ 366.963155][T13926] ? do_syscall_64+0xbe/0xfa0 [ 366.963189][T13926] do_syscall_64+0xfa/0xfa0 [ 366.963218][T13926] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.963246][T13926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.963268][T13926] ? clear_bhb_loop+0x60/0xb0 [ 366.963295][T13926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.963316][T13926] RIP: 0033:0x7f725318f6c9 [ 366.963336][T13926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.963356][T13926] RSP: 002b:00007f7253f4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.963379][T13926] RAX: ffffffffffffffda RBX: 00007f72533e5fa0 RCX: 00007f725318f6c9 [ 366.963395][T13926] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000006 [ 366.963408][T13926] RBP: 00007f7253f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 366.963421][T13926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.963434][T13926] R13: 00007f72533e6038 R14: 00007f72533e5fa0 R15: 00007ffda2601068 [ 366.963472][T13926] [ 368.414139][T13969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.497908][T13972] Cannot find del_set index 2 as target [ 368.612573][T13978] netlink: 'syz.2.2433': attribute type 7 has an invalid length. [ 368.624582][T13978] netlink: 'syz.2.2433': attribute type 8 has an invalid length. [ 368.634031][T13978] FAULT_INJECTION: forcing a failure. [ 368.634031][T13978] name failslab, interval 1, probability 0, space 0, times 0 [ 368.651754][T13978] CPU: 1 UID: 0 PID: 13978 Comm: syz.2.2433 Not tainted syzkaller #0 PREEMPT(full) [ 368.651783][T13978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.651796][T13978] Call Trace: [ 368.651803][T13978] [ 368.651812][T13978] dump_stack_lvl+0x189/0x250 [ 368.651847][T13978] ? __pfx____ratelimit+0x10/0x10 [ 368.651885][T13978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.651914][T13978] ? __pfx__printk+0x10/0x10 [ 368.651948][T13978] ? __pfx___might_resched+0x10/0x10 [ 368.651977][T13978] should_fail_ex+0x414/0x560 [ 368.652016][T13978] should_failslab+0xa8/0x100 [ 368.652040][T13978] __kmalloc_noprof+0xcb/0x7f0 [ 368.652070][T13978] ? ethnl_default_notify+0x1af/0xb70 [ 368.652101][T13978] ethnl_default_notify+0x1af/0xb70 [ 368.652125][T13978] ? hsr_dev_finalize+0x43a/0xaa0 [ 368.652148][T13978] ? rtnl_newlink+0x16e4/0x1c80 [ 368.652180][T13978] ? netlink_unicast+0x82f/0x9e0 [ 368.652209][T13978] ? netlink_sendmsg+0x805/0xb30 [ 368.652230][T13978] ? ____sys_sendmsg+0x505/0x830 [ 368.652252][T13978] ? __pfx_ethnl_default_notify+0x10/0x10 [ 368.652274][T13978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.652317][T13978] ? mutex_is_locked+0x17/0x50 [ 368.652340][T13978] ? rtnl_is_locked+0x15/0x20 [ 368.652365][T13978] ethnl_netdev_event+0xe2/0x160 [ 368.652392][T13978] notifier_call_chain+0x1b6/0x3e0 [ 368.652427][T13978] netdev_update_features+0xa3/0xe0 [ 368.652460][T13978] ? __pfx_netdev_update_features+0x10/0x10 [ 368.652495][T13978] ? hsr_add_port+0x1e0/0x980 [ 368.652523][T13978] ? hsr_port_get_hsr+0x8a/0xa0 [ 368.652546][T13978] hsr_add_port+0x506/0x980 [ 368.652581][T13978] ? __pfx_hsr_add_port+0x10/0x10 [ 368.652620][T13978] hsr_dev_finalize+0x43a/0xaa0 [ 368.652657][T13978] hsr_newlink+0x8ad/0x9f0 [ 368.652681][T13978] ? validate_linkmsg+0x765/0x950 [ 368.652711][T13978] ? __pfx_hsr_newlink+0x10/0x10 [ 368.652743][T13978] ? __pfx_hsr_newlink+0x10/0x10 [ 368.652769][T13978] rtnl_newlink_create+0x310/0xb00 [ 368.652798][T13978] ? __lock_acquire+0xab9/0xd20 [ 368.652826][T13978] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 368.652854][T13978] ? __pfx___mutex_lock+0x10/0x10 [ 368.652904][T13978] ? ns_capable+0x8a/0xf0 [ 368.652932][T13978] rtnl_newlink+0x16e4/0x1c80 [ 368.652981][T13978] ? __pfx_rtnl_newlink+0x10/0x10 [ 368.653021][T13978] ? is_bpf_text_address+0x26/0x2b0 [ 368.653051][T13978] ? is_bpf_text_address+0x292/0x2b0 [ 368.653073][T13978] ? is_bpf_text_address+0x26/0x2b0 [ 368.653102][T13978] ? __lock_acquire+0xab9/0xd20 [ 368.653138][T13978] ? __lock_acquire+0xab9/0xd20 [ 368.653183][T13978] ? is_bpf_text_address+0x26/0x2b0 [ 368.653212][T13978] ? is_bpf_text_address+0x292/0x2b0 [ 368.653235][T13978] ? is_bpf_text_address+0x26/0x2b0 [ 368.653268][T13978] ? __lock_acquire+0xab9/0xd20 [ 368.653320][T13978] ? __pfx_rtnl_newlink+0x10/0x10 [ 368.653353][T13978] rtnetlink_rcv_msg+0x7cf/0xb70 [ 368.653385][T13978] ? __lock_acquire+0xab9/0xd20 [ 368.653408][T13978] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 368.653439][T13978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.653494][T13978] netlink_rcv_skb+0x208/0x470 [ 368.653514][T13978] ? __lock_acquire+0xab9/0xd20 [ 368.653535][T13978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.653571][T13978] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.653607][T13978] ? netlink_deliver_tap+0x2e/0x1b0 [ 368.653639][T13978] netlink_unicast+0x82f/0x9e0 [ 368.653683][T13978] ? __pfx_netlink_unicast+0x10/0x10 [ 368.653718][T13978] ? netlink_sendmsg+0x642/0xb30 [ 368.653738][T13978] ? skb_put+0x11b/0x210 [ 368.653764][T13978] netlink_sendmsg+0x805/0xb30 [ 368.653798][T13978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.653825][T13978] ? aa_sock_msg_perm+0xf1/0x1d0 [ 368.653859][T13978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.653887][T13978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.653910][T13978] __sock_sendmsg+0x21c/0x270 [ 368.653944][T13978] ____sys_sendmsg+0x505/0x830 [ 368.653975][T13978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.654010][T13978] ? import_iovec+0x74/0xa0 [ 368.654042][T13978] ___sys_sendmsg+0x21f/0x2a0 [ 368.654069][T13978] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.654138][T13978] ? __fget_files+0x2a/0x420 [ 368.654158][T13978] ? __fget_files+0x3a0/0x420 [ 368.654191][T13978] __x64_sys_sendmsg+0x19b/0x260 [ 368.654219][T13978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.654255][T13978] ? __pfx_ksys_write+0x10/0x10 [ 368.654290][T13978] ? do_syscall_64+0xbe/0xfa0 [ 368.654326][T13978] do_syscall_64+0xfa/0xfa0 [ 368.654356][T13978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.654377][T13978] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.654398][T13978] ? clear_bhb_loop+0x60/0xb0 [ 368.654426][T13978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.654446][T13978] RIP: 0033:0x7fde0678f6c9 [ 368.654467][T13978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.654486][T13978] RSP: 002b:00007fde075e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.654509][T13978] RAX: ffffffffffffffda RBX: 00007fde069e5fa0 RCX: 00007fde0678f6c9 [ 368.654525][T13978] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 368.654538][T13978] RBP: 00007fde075e7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.654552][T13978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.654564][T13978] R13: 00007fde069e6038 R14: 00007fde069e5fa0 R15: 00007fffb5996458 [ 368.654603][T13978] [ 369.322785][T13990] netlink: 'syz.1.2436': attribute type 12 has an invalid length. [ 369.338669][T13990] netlink: 'syz.1.2436': attribute type 4 has an invalid length. [ 369.403273][T13988] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 369.471777][ T5930] lo speed is unknown, defaulting to 1000 [ 369.491808][ T5930] syz1: Port: 1 Link DOWN [ 369.517443][T13999] Cannot find set identified by id 65534 to match [ 369.721530][T14010] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 369.739153][T14007] 8021q: adding VLAN 0 to HW filter on device bond13 [ 369.921967][T14016] syzkaller0: entered promiscuous mode [ 369.928126][T14016] syzkaller0: entered allmulticast mode [ 370.051103][T13991] lo speed is unknown, defaulting to 1000 [ 370.053272][T14022] FAULT_INJECTION: forcing a failure. [ 370.053272][T14022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.071282][T14022] CPU: 1 UID: 0 PID: 14022 Comm: syz.4.2446 Not tainted syzkaller #0 PREEMPT(full) [ 370.071312][T14022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.071326][T14022] Call Trace: [ 370.071335][T14022] [ 370.071345][T14022] dump_stack_lvl+0x189/0x250 [ 370.071379][T14022] ? __pfx____ratelimit+0x10/0x10 [ 370.071409][T14022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.071439][T14022] ? __pfx__printk+0x10/0x10 [ 370.071462][T14022] ? __might_fault+0xb0/0x130 [ 370.071507][T14022] should_fail_ex+0x414/0x560 [ 370.071546][T14022] _copy_from_user+0x2d/0xb0 [ 370.071575][T14022] sock_do_ioctl+0x182/0x300 [ 370.071608][T14022] ? __pfx_sock_do_ioctl+0x10/0x10 [ 370.071656][T14022] sock_ioctl+0x576/0x790 [ 370.071687][T14022] ? __pfx_sock_ioctl+0x10/0x10 [ 370.071719][T14022] ? __fget_files+0x3a0/0x420 [ 370.071739][T14022] ? __fget_files+0x2a/0x420 [ 370.071764][T14022] ? bpf_lsm_file_ioctl+0x9/0x20 [ 370.071788][T14022] ? __pfx_sock_ioctl+0x10/0x10 [ 370.071816][T14022] __se_sys_ioctl+0xfc/0x170 [ 370.071854][T14022] do_syscall_64+0xfa/0xfa0 [ 370.071883][T14022] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.071912][T14022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.071934][T14022] ? clear_bhb_loop+0x60/0xb0 [ 370.071961][T14022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.071982][T14022] RIP: 0033:0x7fb3a898f6c9 [ 370.072001][T14022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.072020][T14022] RSP: 002b:00007fb3a975b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.072044][T14022] RAX: ffffffffffffffda RBX: 00007fb3a8be5fa0 RCX: 00007fb3a898f6c9 [ 370.072060][T14022] RDX: 0000200000000240 RSI: 0000000000008927 RDI: 0000000000000004 [ 370.072074][T14022] RBP: 00007fb3a975b090 R08: 0000000000000000 R09: 0000000000000000 [ 370.072087][T14022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.072100][T14022] R13: 00007fb3a8be6038 R14: 00007fb3a8be5fa0 R15: 00007fffcd69f4c8 [ 370.072139][T14022] [ 370.766619][T14042] __nla_validate_parse: 7 callbacks suppressed [ 370.766640][T14042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2451'. [ 370.794870][T14042] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 371.136140][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'. [ 371.249749][T14064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2459'. [ 371.281647][T14064] netlink: 'syz.3.2459': attribute type 7 has an invalid length. [ 371.298783][T14064] netlink: 'syz.3.2459': attribute type 8 has an invalid length. [ 371.306699][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2459'. [ 371.332550][T14064] FAULT_INJECTION: forcing a failure. [ 371.332550][T14064] name failslab, interval 1, probability 0, space 0, times 0 [ 371.347734][T14064] CPU: 1 UID: 0 PID: 14064 Comm: syz.3.2459 Not tainted syzkaller #0 PREEMPT(full) [ 371.347764][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.347778][T14064] Call Trace: [ 371.347786][T14064] [ 371.347795][T14064] dump_stack_lvl+0x189/0x250 [ 371.347829][T14064] ? __pfx____ratelimit+0x10/0x10 [ 371.347856][T14064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.347884][T14064] ? __pfx__printk+0x10/0x10 [ 371.347911][T14064] ? __pfx___might_resched+0x10/0x10 [ 371.347939][T14064] should_fail_ex+0x414/0x560 [ 371.347980][T14064] should_failslab+0xa8/0x100 [ 371.348003][T14064] __kmalloc_noprof+0xcb/0x7f0 [ 371.348031][T14064] ? ethnl_default_notify+0x1af/0xb70 [ 371.348069][T14064] ethnl_default_notify+0x1af/0xb70 [ 371.348093][T14064] ? hsr_dev_finalize+0x43a/0xaa0 [ 371.348115][T14064] ? rtnl_newlink+0x16e4/0x1c80 [ 371.348147][T14064] ? netlink_unicast+0x82f/0x9e0 [ 371.348175][T14064] ? netlink_sendmsg+0x805/0xb30 [ 371.348194][T14064] ? ____sys_sendmsg+0x505/0x830 [ 371.348217][T14064] ? __pfx_ethnl_default_notify+0x10/0x10 [ 371.348239][T14064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.348281][T14064] ? mutex_is_locked+0x17/0x50 [ 371.348303][T14064] ? rtnl_is_locked+0x15/0x20 [ 371.348331][T14064] ethnl_netdev_event+0xe2/0x160 [ 371.348359][T14064] notifier_call_chain+0x1b6/0x3e0 [ 371.348393][T14064] netdev_update_features+0xa3/0xe0 [ 371.348424][T14064] ? __pfx_netdev_update_features+0x10/0x10 [ 371.348468][T14064] ? hsr_add_port+0x1e0/0x980 [ 371.348495][T14064] ? hsr_port_get_hsr+0x8a/0xa0 [ 371.348517][T14064] hsr_add_port+0x506/0x980 [ 371.348550][T14064] ? __pfx_hsr_add_port+0x10/0x10 [ 371.348588][T14064] hsr_dev_finalize+0x43a/0xaa0 [ 371.348626][T14064] hsr_newlink+0x8ad/0x9f0 [ 371.348650][T14064] ? validate_linkmsg+0x765/0x950 [ 371.348679][T14064] ? __pfx_hsr_newlink+0x10/0x10 [ 371.348712][T14064] ? __pfx_hsr_newlink+0x10/0x10 [ 371.348739][T14064] rtnl_newlink_create+0x310/0xb00 [ 371.348769][T14064] ? __mutex_lock+0x5bb/0x1350 [ 371.348806][T14064] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 371.348833][T14064] ? __pfx___mutex_lock+0x10/0x10 [ 371.348874][T14064] ? ns_capable+0x8a/0xf0 [ 371.348901][T14064] rtnl_newlink+0x16e4/0x1c80 [ 371.348953][T14064] ? __pfx_rtnl_newlink+0x10/0x10 [ 371.348991][T14064] ? is_bpf_text_address+0x26/0x2b0 [ 371.349020][T14064] ? is_bpf_text_address+0x292/0x2b0 [ 371.349043][T14064] ? is_bpf_text_address+0x26/0x2b0 [ 371.349072][T14064] ? __lock_acquire+0xab9/0xd20 [ 371.349107][T14064] ? __lock_acquire+0xab9/0xd20 [ 371.349153][T14064] ? is_bpf_text_address+0x26/0x2b0 [ 371.349182][T14064] ? is_bpf_text_address+0x292/0x2b0 [ 371.349203][T14064] ? is_bpf_text_address+0x26/0x2b0 [ 371.349238][T14064] ? __lock_acquire+0xab9/0xd20 [ 371.349287][T14064] ? __pfx_rtnl_newlink+0x10/0x10 [ 371.349319][T14064] rtnetlink_rcv_msg+0x7cf/0xb70 [ 371.349350][T14064] ? __lock_acquire+0xab9/0xd20 [ 371.349373][T14064] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 371.349404][T14064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 371.349466][T14064] netlink_rcv_skb+0x208/0x470 [ 371.349486][T14064] ? __lock_acquire+0xab9/0xd20 [ 371.349508][T14064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 371.349542][T14064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.349578][T14064] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.349610][T14064] netlink_unicast+0x82f/0x9e0 [ 371.349653][T14064] ? __pfx_netlink_unicast+0x10/0x10 [ 371.349688][T14064] ? netlink_sendmsg+0x642/0xb30 [ 371.349708][T14064] ? skb_put+0x11b/0x210 [ 371.349734][T14064] netlink_sendmsg+0x805/0xb30 [ 371.349767][T14064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.349793][T14064] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.349827][T14064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.349849][T14064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.349872][T14064] __sock_sendmsg+0x21c/0x270 [ 371.349906][T14064] ____sys_sendmsg+0x505/0x830 [ 371.349937][T14064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.349972][T14064] ? import_iovec+0x74/0xa0 [ 371.350005][T14064] ___sys_sendmsg+0x21f/0x2a0 [ 371.350032][T14064] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.350101][T14064] ? __fget_files+0x2a/0x420 [ 371.350120][T14064] ? __fget_files+0x3a0/0x420 [ 371.350154][T14064] __x64_sys_sendmsg+0x19b/0x260 [ 371.350182][T14064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.350219][T14064] ? __pfx_ksys_write+0x10/0x10 [ 371.350254][T14064] ? do_syscall_64+0xbe/0xfa0 [ 371.350290][T14064] do_syscall_64+0xfa/0xfa0 [ 371.350318][T14064] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.350348][T14064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.350369][T14064] ? clear_bhb_loop+0x60/0xb0 [ 371.350397][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.350418][T14064] RIP: 0033:0x7f4d0838f6c9 [ 371.350437][T14064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.350463][T14064] RSP: 002b:00007f4d092f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.350486][T14064] RAX: ffffffffffffffda RBX: 00007f4d085e5fa0 RCX: 00007f4d0838f6c9 [ 371.350503][T14064] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 371.350516][T14064] RBP: 00007f4d092f7090 R08: 0000000000000000 R09: 0000000000000000 [ 371.350529][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.350542][T14064] R13: 00007f4d085e6038 R14: 00007f4d085e5fa0 R15: 00007ffe0cfc36f8 [ 371.350580][T14064] [ 371.365771][T14066] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 371.421975][T14068] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2461'. [ 371.546561][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2463'. [ 371.915527][T14073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2463'. [ 372.202082][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2468'. [ 372.240842][T14087] netlink: 'syz.3.2465': attribute type 12 has an invalid length. [ 372.377012][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'. [ 372.425887][T14095] netlink: 'syz.2.2472': attribute type 10 has an invalid length. [ 372.618385][T14098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.970734][T14108] FAULT_INJECTION: forcing a failure. [ 372.970734][T14108] name failslab, interval 1, probability 0, space 0, times 0 [ 372.982315][T14105] syzkaller0: entered promiscuous mode [ 372.989171][T14105] syzkaller0: entered allmulticast mode [ 373.005734][T14108] CPU: 0 UID: 0 PID: 14108 Comm: syz.2.2475 Not tainted syzkaller #0 PREEMPT(full) [ 373.005767][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.005781][T14108] Call Trace: [ 373.005790][T14108] [ 373.005799][T14108] dump_stack_lvl+0x189/0x250 [ 373.005835][T14108] ? __pfx____ratelimit+0x10/0x10 [ 373.005863][T14108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.005892][T14108] ? __pfx__printk+0x10/0x10 [ 373.005918][T14108] ? __pfx___might_resched+0x10/0x10 [ 373.005943][T14108] ? fs_reclaim_acquire+0x7d/0x100 [ 373.005982][T14108] should_fail_ex+0x414/0x560 [ 373.006021][T14108] should_failslab+0xa8/0x100 [ 373.006045][T14108] __kmalloc_cache_noprof+0x6f/0x6f0 [ 373.006076][T14108] ? __request_module+0x2b5/0x5e0 [ 373.006102][T14108] __request_module+0x2b5/0x5e0 [ 373.006128][T14108] ? __pfx___request_module+0x10/0x10 [ 373.006168][T14108] ? security_capable+0x7e/0x2e0 [ 373.006203][T14108] ? dev_load+0x21/0x1f0 [ 373.006234][T14108] dev_load+0x190/0x1f0 [ 373.006266][T14108] dev_ioctl+0x429/0x1150 [ 373.006303][T14108] sock_do_ioctl+0x22c/0x300 [ 373.006337][T14108] ? __pfx_sock_do_ioctl+0x10/0x10 [ 373.006385][T14108] sock_ioctl+0x576/0x790 [ 373.006416][T14108] ? __pfx_sock_ioctl+0x10/0x10 [ 373.006447][T14108] ? __fget_files+0x3a0/0x420 [ 373.006476][T14108] ? __fget_files+0x2a/0x420 [ 373.006497][T14108] ? bpf_lsm_file_ioctl+0x9/0x20 [ 373.006520][T14108] ? __pfx_sock_ioctl+0x10/0x10 [ 373.006545][T14108] __se_sys_ioctl+0xfc/0x170 [ 373.006577][T14108] do_syscall_64+0xfa/0xfa0 [ 373.006606][T14108] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.006636][T14108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.006658][T14108] ? clear_bhb_loop+0x60/0xb0 [ 373.006690][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.006711][T14108] RIP: 0033:0x7fde0678f6c9 [ 373.006731][T14108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.006751][T14108] RSP: 002b:00007fde075e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.006774][T14108] RAX: ffffffffffffffda RBX: 00007fde069e5fa0 RCX: 00007fde0678f6c9 [ 373.006791][T14108] RDX: 0000200000000240 RSI: 0000000000008927 RDI: 0000000000000004 [ 373.006805][T14108] RBP: 00007fde075e7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.006818][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.006831][T14108] R13: 00007fde069e6038 R14: 00007fde069e5fa0 R15: 00007fffb5996458 [ 373.006868][T14108] [ 373.960019][T14147] wg1: entered promiscuous mode [ 373.965020][T14147] wg1: entered allmulticast mode [ 374.375251][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 375.151716][T14198] x_tables: duplicate underflow at hook 4 [ 375.294427][T14207] syzkaller0: entered promiscuous mode [ 375.310956][T14207] syzkaller0: entered allmulticast mode [ 375.354158][T14159] lo speed is unknown, defaulting to 1000 [ 376.521612][T14247] __nla_validate_parse: 1 callbacks suppressed [ 376.521636][T14247] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2515'. [ 376.568955][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 376.785489][T14235] lo speed is unknown, defaulting to 1000 [ 376.812773][T14259] Cannot find del_set index 2 as target [ 376.855799][T14260] netlink: 'syz.1.2523': attribute type 298 has an invalid length. [ 376.918228][T14263] Cannot find set identified by id 65534 to match [ 377.026655][T14271] x_tables: duplicate underflow at hook 1 [ 377.088772][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 377.305967][T14287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.530767][T14296] No such timeout policy "syz1" [ 378.055227][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2537'. [ 378.078360][T14313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2537'. [ 378.299161][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2541'. [ 378.443417][T14334] bond24: entered promiscuous mode [ 378.449317][T14334] macvlan5: entered promiscuous mode [ 378.454807][T14334] macvlan5: entered allmulticast mode [ 378.462449][T14334] bond24: entered allmulticast mode [ 378.469121][T14334] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 378.582704][T14344] netlink: 'syz.4.2547': attribute type 10 has an invalid length. [ 378.710642][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 378.746046][T14352] netlink: 'syz.4.2551': attribute type 2 has an invalid length. [ 378.774878][T14352] netlink: 'syz.4.2551': attribute type 1 has an invalid length. [ 378.822074][T14352] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 378.844914][T14353] syzkaller0: entered promiscuous mode [ 378.851280][T14353] syzkaller0: entered allmulticast mode [ 379.043771][T14362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2553'. [ 379.070693][T14364] FAULT_INJECTION: forcing a failure. [ 379.070693][T14364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.084488][T14364] CPU: 1 UID: 0 PID: 14364 Comm: syz.3.2555 Not tainted syzkaller #0 PREEMPT(full) [ 379.084518][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.084531][T14364] Call Trace: [ 379.084540][T14364] [ 379.084549][T14364] dump_stack_lvl+0x189/0x250 [ 379.084599][T14364] ? __pfx____ratelimit+0x10/0x10 [ 379.084637][T14364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.084668][T14364] ? __pfx__printk+0x10/0x10 [ 379.084691][T14364] ? __might_fault+0xb0/0x130 [ 379.084735][T14364] should_fail_ex+0x414/0x560 [ 379.084773][T14364] _copy_from_user+0x2d/0xb0 [ 379.084802][T14364] ___sys_sendmsg+0x158/0x2a0 [ 379.084830][T14364] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.084897][T14364] ? __fget_files+0x2a/0x420 [ 379.084916][T14364] ? __fget_files+0x3a0/0x420 [ 379.084949][T14364] __x64_sys_sendmsg+0x19b/0x260 [ 379.084977][T14364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.085012][T14364] ? __pfx_ksys_write+0x10/0x10 [ 379.085048][T14364] ? do_syscall_64+0xbe/0xfa0 [ 379.085083][T14364] do_syscall_64+0xfa/0xfa0 [ 379.085129][T14364] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.085159][T14364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.085180][T14364] ? clear_bhb_loop+0x60/0xb0 [ 379.085208][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.085228][T14364] RIP: 0033:0x7f4d0838f6c9 [ 379.085248][T14364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.085267][T14364] RSP: 002b:00007f4d092f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.085290][T14364] RAX: ffffffffffffffda RBX: 00007f4d085e5fa0 RCX: 00007f4d0838f6c9 [ 379.085307][T14364] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 379.085320][T14364] RBP: 00007f4d092f7090 R08: 0000000000000000 R09: 0000000000000000 [ 379.085333][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.085347][T14364] R13: 00007f4d085e6038 R14: 00007f4d085e5fa0 R15: 00007ffe0cfc36f8 [ 379.085383][T14364] [ 379.585801][T14370] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 379.757836][T14383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2562'. [ 379.764115][T14372] lo speed is unknown, defaulting to 1000 [ 379.944178][T14390] netlink: 'syz.2.2563': attribute type 1 has an invalid length. [ 380.019685][T14396] xt_hashlimit: max too large, truncated to 1048576 [ 380.081302][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 380.192811][T14405] netlink: 'syz.4.2569': attribute type 10 has an invalid length. [ 380.265122][T14401] bond8 (unregistering): Released all slaves [ 380.306485][T14410] netlink: 'syz.2.2566': attribute type 16 has an invalid length. [ 380.356069][T14410] netlink: 'syz.2.2566': attribute type 17 has an invalid length. [ 380.487038][T14417] IPv6: NLM_F_REPLACE set, but no existing node found! [ 380.714979][ T49] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.787696][ T49] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.806279][ T49] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.825296][ T49] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.277613][T14455] FAULT_INJECTION: forcing a failure. [ 381.277613][T14455] name failslab, interval 1, probability 0, space 0, times 0 [ 381.290947][T14455] CPU: 0 UID: 0 PID: 14455 Comm: syz.3.2588 Not tainted syzkaller #0 PREEMPT(full) [ 381.290978][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.290991][T14455] Call Trace: [ 381.291001][T14455] [ 381.291011][T14455] dump_stack_lvl+0x189/0x250 [ 381.291046][T14455] ? __pfx____ratelimit+0x10/0x10 [ 381.291076][T14455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.291106][T14455] ? __pfx__printk+0x10/0x10 [ 381.291137][T14455] ? __pfx___might_resched+0x10/0x10 [ 381.291160][T14455] ? fs_reclaim_acquire+0x7d/0x100 [ 381.291201][T14455] should_fail_ex+0x414/0x560 [ 381.291240][T14455] should_failslab+0xa8/0x100 [ 381.291265][T14455] __kvmalloc_node_noprof+0x158/0x910 [ 381.291300][T14455] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 381.291337][T14455] alloc_netdev_mqs+0xa4b/0x11b0 [ 381.291374][T14455] rtnl_create_link+0x31f/0xd10 [ 381.291411][T14455] rtnl_newlink_create+0x25c/0xb00 [ 381.291441][T14455] ? __lock_acquire+0xab9/0xd20 [ 381.291470][T14455] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 381.291498][T14455] ? __pfx___mutex_lock+0x10/0x10 [ 381.291543][T14455] ? ns_capable+0x8a/0xf0 [ 381.291571][T14455] rtnl_newlink+0x16e4/0x1c80 [ 381.291625][T14455] ? __pfx_rtnl_newlink+0x10/0x10 [ 381.291665][T14455] ? is_bpf_text_address+0x26/0x2b0 [ 381.291696][T14455] ? is_bpf_text_address+0x292/0x2b0 [ 381.291726][T14455] ? is_bpf_text_address+0x26/0x2b0 [ 381.291756][T14455] ? __lock_acquire+0xab9/0xd20 [ 381.291791][T14455] ? __lock_acquire+0xab9/0xd20 [ 381.291835][T14455] ? is_bpf_text_address+0x26/0x2b0 [ 381.291865][T14455] ? is_bpf_text_address+0x292/0x2b0 [ 381.291888][T14455] ? is_bpf_text_address+0x26/0x2b0 [ 381.291923][T14455] ? __lock_acquire+0xab9/0xd20 [ 381.291976][T14455] ? __pfx_rtnl_newlink+0x10/0x10 [ 381.292008][T14455] rtnetlink_rcv_msg+0x7cf/0xb70 [ 381.292041][T14455] ? __lock_acquire+0xab9/0xd20 [ 381.292065][T14455] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 381.292097][T14455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.292151][T14455] netlink_rcv_skb+0x208/0x470 [ 381.292172][T14455] ? __lock_acquire+0xab9/0xd20 [ 381.292194][T14455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.292229][T14455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.292266][T14455] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.292297][T14455] netlink_unicast+0x82f/0x9e0 [ 381.292341][T14455] ? __pfx_netlink_unicast+0x10/0x10 [ 381.292375][T14455] ? netlink_sendmsg+0x642/0xb30 [ 381.292395][T14455] ? skb_put+0x11b/0x210 [ 381.292421][T14455] netlink_sendmsg+0x805/0xb30 [ 381.292456][T14455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.292484][T14455] ? aa_sock_msg_perm+0xf1/0x1d0 [ 381.292518][T14455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.292540][T14455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.292564][T14455] __sock_sendmsg+0x21c/0x270 [ 381.292598][T14455] ____sys_sendmsg+0x505/0x830 [ 381.292629][T14455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.292664][T14455] ? import_iovec+0x74/0xa0 [ 381.292697][T14455] ___sys_sendmsg+0x21f/0x2a0 [ 381.292731][T14455] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.292801][T14455] ? __fget_files+0x2a/0x420 [ 381.292821][T14455] ? __fget_files+0x3a0/0x420 [ 381.292854][T14455] __x64_sys_sendmsg+0x19b/0x260 [ 381.292882][T14455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.292917][T14455] ? __pfx_ksys_write+0x10/0x10 [ 381.292954][T14455] ? do_syscall_64+0xbe/0xfa0 [ 381.292990][T14455] do_syscall_64+0xfa/0xfa0 [ 381.293019][T14455] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.293049][T14455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.293071][T14455] ? clear_bhb_loop+0x60/0xb0 [ 381.293098][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.293120][T14455] RIP: 0033:0x7f4d0838f6c9 [ 381.293139][T14455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.293158][T14455] RSP: 002b:00007f4d092f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.293182][T14455] RAX: ffffffffffffffda RBX: 00007f4d085e5fa0 RCX: 00007f4d0838f6c9 [ 381.293198][T14455] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 381.293212][T14455] RBP: 00007f4d092f7090 R08: 0000000000000000 R09: 0000000000000000 [ 381.293225][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.293238][T14455] R13: 00007f4d085e6038 R14: 00007f4d085e5fa0 R15: 00007ffe0cfc36f8 [ 381.293276][T14455] [ 381.350999][T14456] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 382.069180][T14483] xt_hashlimit: max too large, truncated to 1048576 [ 382.167571][T14494] netlink: 'syz.2.2600': attribute type 10 has an invalid length. [ 383.063605][T14535] FAULT_INJECTION: forcing a failure. [ 383.063605][T14535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.091964][T14535] CPU: 0 UID: 0 PID: 14535 Comm: syz.1.2615 Not tainted syzkaller #0 PREEMPT(full) [ 383.091995][T14535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.092008][T14535] Call Trace: [ 383.092017][T14535] [ 383.092027][T14535] dump_stack_lvl+0x189/0x250 [ 383.092063][T14535] ? __pfx____ratelimit+0x10/0x10 [ 383.092092][T14535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.092122][T14535] ? __pfx__printk+0x10/0x10 [ 383.092145][T14535] ? __might_fault+0xb0/0x130 [ 383.092189][T14535] should_fail_ex+0x414/0x560 [ 383.092238][T14535] _copy_from_user+0x2d/0xb0 [ 383.092268][T14535] __sys_bpf+0x1e3/0x860 [ 383.092292][T14535] ? __pfx___sys_bpf+0x10/0x10 [ 383.092332][T14535] ? ksys_write+0x22a/0x250 [ 383.092366][T14535] ? __pfx_ksys_write+0x10/0x10 [ 383.092404][T14535] __x64_sys_bpf+0x7c/0x90 [ 383.092437][T14535] do_syscall_64+0xfa/0xfa0 [ 383.092466][T14535] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.092496][T14535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.092518][T14535] ? clear_bhb_loop+0x60/0xb0 [ 383.092544][T14535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.092565][T14535] RIP: 0033:0x7f725318f6c9 [ 383.092584][T14535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.092603][T14535] RSP: 002b:00007f7253f4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.092626][T14535] RAX: ffffffffffffffda RBX: 00007f72533e5fa0 RCX: 00007f725318f6c9 [ 383.092641][T14535] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 383.092655][T14535] RBP: 00007f7253f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 383.092669][T14535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.092681][T14535] R13: 00007f72533e6038 R14: 00007f72533e5fa0 R15: 00007ffda2601068 [ 383.092718][T14535] [ 383.564005][T14514] lo speed is unknown, defaulting to 1000 [ 383.607264][T14557] __nla_validate_parse: 2 callbacks suppressed [ 383.607284][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 383.853089][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2627'. [ 383.864318][T14562] syzkaller0: entered promiscuous mode [ 383.871057][T14562] syzkaller0: entered allmulticast mode [ 383.996065][T14567] netlink: 'syz.1.2626': attribute type 54 has an invalid length. [ 383.998616][T14568] bond0: entered promiscuous mode [ 384.009949][T14568] macvlan0: entered promiscuous mode [ 384.015398][T14568] macvlan0: entered allmulticast mode [ 384.021306][T14568] bond0: entered allmulticast mode [ 384.026975][T14568] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 384.131077][T14515] lo speed is unknown, defaulting to 1000 [ 384.307823][T14578] FAULT_INJECTION: forcing a failure. [ 384.307823][T14578] name failslab, interval 1, probability 0, space 0, times 0 [ 384.321776][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2631'. [ 384.338021][T14578] CPU: 1 UID: 0 PID: 14578 Comm: syz.2.2630 Not tainted syzkaller #0 PREEMPT(full) [ 384.338049][T14578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.338063][T14578] Call Trace: [ 384.338072][T14578] [ 384.338081][T14578] dump_stack_lvl+0x189/0x250 [ 384.338116][T14578] ? __pfx____ratelimit+0x10/0x10 [ 384.338149][T14578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.338178][T14578] ? __pfx__printk+0x10/0x10 [ 384.338203][T14578] ? __pfx___might_resched+0x10/0x10 [ 384.338223][T14578] ? fs_reclaim_acquire+0x7d/0x100 [ 384.338262][T14578] should_fail_ex+0x414/0x560 [ 384.338302][T14578] should_failslab+0xa8/0x100 [ 384.338324][T14578] __kvmalloc_node_noprof+0x158/0x910 [ 384.338359][T14578] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 384.338396][T14578] alloc_netdev_mqs+0xa4b/0x11b0 [ 384.338441][T14578] rtnl_create_link+0x31f/0xd10 [ 384.338478][T14578] rtnl_newlink_create+0x25c/0xb00 [ 384.338509][T14578] ? __lock_acquire+0xab9/0xd20 [ 384.338537][T14578] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 384.338565][T14578] ? __pfx___mutex_lock+0x10/0x10 [ 384.338609][T14578] ? ns_capable+0x8a/0xf0 [ 384.338637][T14578] rtnl_newlink+0x16e4/0x1c80 [ 384.338690][T14578] ? __pfx_rtnl_newlink+0x10/0x10 [ 384.338730][T14578] ? is_bpf_text_address+0x26/0x2b0 [ 384.338760][T14578] ? is_bpf_text_address+0x292/0x2b0 [ 384.338782][T14578] ? is_bpf_text_address+0x26/0x2b0 [ 384.338812][T14578] ? __lock_acquire+0xab9/0xd20 [ 384.338848][T14578] ? __lock_acquire+0xab9/0xd20 [ 384.338893][T14578] ? is_bpf_text_address+0x26/0x2b0 [ 384.338923][T14578] ? is_bpf_text_address+0x292/0x2b0 [ 384.338946][T14578] ? is_bpf_text_address+0x26/0x2b0 [ 384.338980][T14578] ? __lock_acquire+0xab9/0xd20 [ 384.339032][T14578] ? __pfx_rtnl_newlink+0x10/0x10 [ 384.339065][T14578] rtnetlink_rcv_msg+0x7cf/0xb70 [ 384.339098][T14578] ? __lock_acquire+0xab9/0xd20 [ 384.339121][T14578] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 384.339153][T14578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.339208][T14578] netlink_rcv_skb+0x208/0x470 [ 384.339227][T14578] ? __lock_acquire+0xab9/0xd20 [ 384.339248][T14578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.339283][T14578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.339319][T14578] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.339351][T14578] netlink_unicast+0x82f/0x9e0 [ 384.339394][T14578] ? __pfx_netlink_unicast+0x10/0x10 [ 384.339434][T14578] ? netlink_sendmsg+0x642/0xb30 [ 384.339455][T14578] ? skb_put+0x11b/0x210 [ 384.339479][T14578] netlink_sendmsg+0x805/0xb30 [ 384.339509][T14578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.339534][T14578] ? aa_sock_msg_perm+0xf1/0x1d0 [ 384.339568][T14578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.339590][T14578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.339612][T14578] __sock_sendmsg+0x21c/0x270 [ 384.339644][T14578] ____sys_sendmsg+0x505/0x830 [ 384.339673][T14578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.339706][T14578] ? import_iovec+0x74/0xa0 [ 384.339733][T14578] ___sys_sendmsg+0x21f/0x2a0 [ 384.339756][T14578] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.339813][T14578] ? __fget_files+0x2a/0x420 [ 384.339830][T14578] ? __fget_files+0x3a0/0x420 [ 384.339858][T14578] __x64_sys_sendmsg+0x19b/0x260 [ 384.339882][T14578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.339913][T14578] ? __pfx_ksys_write+0x10/0x10 [ 384.339944][T14578] ? do_syscall_64+0xbe/0xfa0 [ 384.339974][T14578] do_syscall_64+0xfa/0xfa0 [ 384.339999][T14578] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.340025][T14578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.340043][T14578] ? clear_bhb_loop+0x60/0xb0 [ 384.340082][T14578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.340100][T14578] RIP: 0033:0x7fde0678f6c9 [ 384.340117][T14578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.340133][T14578] RSP: 002b:00007fde075e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.340154][T14578] RAX: ffffffffffffffda RBX: 00007fde069e5fa0 RCX: 00007fde0678f6c9 [ 384.340167][T14578] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 384.340179][T14578] RBP: 00007fde075e7090 R08: 0000000000000000 R09: 0000000000000000 [ 384.340190][T14578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.340201][T14578] R13: 00007fde069e6038 R14: 00007fde069e5fa0 R15: 00007fffb5996458 [ 384.340234][T14578] [ 384.368518][T14582] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 384.531656][T14544] lo speed is unknown, defaulting to 1000 [ 385.504382][T14600] ip6t_srh: unknown srh invflags BA61 [ 385.891544][T14603] wg1 speed is unknown, defaulting to 1000 [ 385.897620][T14603] wg1 speed is unknown, defaulting to 1000 [ 385.907668][T14603] wg1 speed is unknown, defaulting to 1000 [ 385.956127][T14603] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 386.101323][T14603] wg1 speed is unknown, defaulting to 1000 [ 386.146562][T14603] wg1 speed is unknown, defaulting to 1000 [ 386.184071][T14603] wg1 speed is unknown, defaulting to 1000 [ 386.225835][T14603] wg1 speed is unknown, defaulting to 1000 [ 386.260648][T14603] wg1 speed is unknown, defaulting to 1000 [ 386.497223][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2644'. [ 386.584031][T14626] bond25: entered promiscuous mode [ 386.590665][T14626] macvlan6: entered promiscuous mode [ 386.596230][T14626] macvlan6: entered allmulticast mode [ 386.602617][T14626] bond25: entered allmulticast mode [ 386.609023][T14626] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 386.801954][T14643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2650'. [ 387.187875][T14662] netlink: 'syz.3.2654': attribute type 2 has an invalid length. [ 387.855382][T14675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.088796][T14695] FAULT_INJECTION: forcing a failure. [ 388.088796][T14695] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 388.110741][T14695] CPU: 0 UID: 0 PID: 14695 Comm: syz.4.2668 Not tainted syzkaller #0 PREEMPT(full) [ 388.110772][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.110786][T14695] Call Trace: [ 388.110794][T14695] [ 388.110803][T14695] dump_stack_lvl+0x189/0x250 [ 388.110839][T14695] ? __pfx____ratelimit+0x10/0x10 [ 388.110868][T14695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.110898][T14695] ? __pfx__printk+0x10/0x10 [ 388.110923][T14695] ? fs_reclaim_acquire+0x7d/0x100 [ 388.110967][T14695] should_fail_ex+0x414/0x560 [ 388.111006][T14695] prepare_alloc_pages+0x213/0x610 [ 388.111035][T14695] __alloc_frozen_pages_noprof+0x123/0x370 [ 388.111062][T14695] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.111101][T14695] ? policy_nodemask+0x27c/0x720 [ 388.111121][T14695] ? __lock_acquire+0xab9/0xd20 [ 388.111146][T14695] alloc_pages_mpol+0x232/0x4a0 [ 388.111175][T14695] alloc_pages_noprof+0xa9/0x190 [ 388.111199][T14695] get_free_pages_noprof+0xf/0x80 [ 388.111221][T14695] kasan_populate_vmalloc+0x38/0x270 [ 388.111252][T14695] ? do_raw_spin_unlock+0x122/0x240 [ 388.111288][T14695] alloc_vmap_area+0xd7a/0x14c0 [ 388.111330][T14695] ? __get_vm_area_node+0x13f/0x300 [ 388.111362][T14695] ? __pfx_alloc_vmap_area+0x10/0x10 [ 388.111388][T14695] ? __kasan_kmalloc+0x93/0xb0 [ 388.111425][T14695] ? __get_vm_area_node+0x13f/0x300 [ 388.111456][T14695] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 388.111480][T14695] __get_vm_area_node+0x1f8/0x300 [ 388.111517][T14695] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 388.111550][T14695] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 388.111575][T14695] ? __lock_acquire+0xab9/0xd20 [ 388.111613][T14695] ? __lock_acquire+0xab9/0xd20 [ 388.111641][T14695] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 388.111675][T14695] ? __might_fault+0xb0/0x130 [ 388.111714][T14695] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 388.111739][T14695] __vmalloc_noprof+0xb1/0xf0 [ 388.111796][T14695] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 388.111821][T14695] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 388.111848][T14695] bpf_prog_alloc+0x3c/0x1a0 [ 388.111872][T14695] bpf_prog_load+0x735/0x19e0 [ 388.111908][T14695] ? __pfx_bpf_prog_load+0x10/0x10 [ 388.111956][T14695] ? bpf_lsm_bpf+0x9/0x20 [ 388.111979][T14695] ? security_bpf+0x7e/0x300 [ 388.112009][T14695] __sys_bpf+0x507/0x860 [ 388.112033][T14695] ? __pfx___sys_bpf+0x10/0x10 [ 388.112072][T14695] ? ksys_write+0x22a/0x250 [ 388.112113][T14695] ? __pfx_ksys_write+0x10/0x10 [ 388.112151][T14695] __x64_sys_bpf+0x7c/0x90 [ 388.112183][T14695] do_syscall_64+0xfa/0xfa0 [ 388.112212][T14695] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.112243][T14695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.112265][T14695] ? clear_bhb_loop+0x60/0xb0 [ 388.112292][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.112313][T14695] RIP: 0033:0x7fb3a898f6c9 [ 388.112332][T14695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.112351][T14695] RSP: 002b:00007fb3a975b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.112375][T14695] RAX: ffffffffffffffda RBX: 00007fb3a8be5fa0 RCX: 00007fb3a898f6c9 [ 388.112391][T14695] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 388.112405][T14695] RBP: 00007fb3a975b090 R08: 0000000000000000 R09: 0000000000000000 [ 388.112418][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.112431][T14695] R13: 00007fb3a8be6038 R14: 00007fb3a8be5fa0 R15: 00007fffcd69f4c8 [ 388.112468][T14695] [ 388.115161][T14695] syz.4.2668: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 388.158638][T14697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2670'. [ 388.192709][T14695] ,cpuset=/,mems_allowed=0-1 [ 388.493376][T14695] CPU: 0 UID: 0 PID: 14695 Comm: syz.4.2668 Not tainted syzkaller #0 PREEMPT(full) [ 388.493403][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.493418][T14695] Call Trace: [ 388.493426][T14695] [ 388.493435][T14695] dump_stack_lvl+0x189/0x250 [ 388.493471][T14695] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 388.493506][T14695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.493535][T14695] ? __pfx__printk+0x10/0x10 [ 388.493558][T14695] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 388.493588][T14695] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 388.493626][T14695] warn_alloc+0x214/0x310 [ 388.493658][T14695] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.493693][T14695] ? __pfx_warn_alloc+0x10/0x10 [ 388.493733][T14695] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 388.493756][T14695] ? __get_vm_area_node+0x211/0x300 [ 388.493801][T14695] __vmalloc_node_range_noprof+0x331/0x12d0 [ 388.493836][T14695] ? __lock_acquire+0xab9/0xd20 [ 388.493873][T14695] ? __lock_acquire+0xab9/0xd20 [ 388.493902][T14695] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 388.493936][T14695] ? __might_fault+0xb0/0x130 [ 388.493974][T14695] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 388.493995][T14695] __vmalloc_noprof+0xb1/0xf0 [ 388.494025][T14695] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 388.494050][T14695] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 388.494076][T14695] bpf_prog_alloc+0x3c/0x1a0 [ 388.494098][T14695] bpf_prog_load+0x735/0x19e0 [ 388.494132][T14695] ? __pfx_bpf_prog_load+0x10/0x10 [ 388.494178][T14695] ? bpf_lsm_bpf+0x9/0x20 [ 388.494200][T14695] ? security_bpf+0x7e/0x300 [ 388.494231][T14695] __sys_bpf+0x507/0x860 [ 388.494254][T14695] ? __pfx___sys_bpf+0x10/0x10 [ 388.494292][T14695] ? ksys_write+0x22a/0x250 [ 388.494324][T14695] ? __pfx_ksys_write+0x10/0x10 [ 388.494360][T14695] __x64_sys_bpf+0x7c/0x90 [ 388.494391][T14695] do_syscall_64+0xfa/0xfa0 [ 388.494420][T14695] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.494449][T14695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.494470][T14695] ? clear_bhb_loop+0x60/0xb0 [ 388.494496][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.494513][T14695] RIP: 0033:0x7fb3a898f6c9 [ 388.494529][T14695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.494544][T14695] RSP: 002b:00007fb3a975b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.494563][T14695] RAX: ffffffffffffffda RBX: 00007fb3a8be5fa0 RCX: 00007fb3a898f6c9 [ 388.494576][T14695] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 388.494587][T14695] RBP: 00007fb3a975b090 R08: 0000000000000000 R09: 0000000000000000 [ 388.494599][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.494609][T14695] R13: 00007fb3a8be6038 R14: 00007fb3a8be5fa0 R15: 00007fffcd69f4c8 [ 388.494638][T14695] [ 388.494676][T14695] Mem-Info: [ 388.792353][T14708] xt_hashlimit: max too large, truncated to 1048576 [ 388.808262][T14695] active_anon:3925 inactive_anon:0 isolated_anon:0 [ 388.808262][T14695] active_file:3479 inactive_file:39996 isolated_file:0 [ 388.808262][T14695] unevictable:768 dirty:254 writeback:0 [ 388.808262][T14695] slab_reclaimable:12307 slab_unreclaimable:138664 [ 388.808262][T14695] mapped:29365 shmem:1360 pagetables:1010 [ 388.808262][T14695] sec_pagetables:0 bounce:0 [ 388.808262][T14695] kernel_misc_reclaimable:0 [ 388.808262][T14695] free:1286193 free_pcp:14619 free_cma:0 [ 388.859143][T14695] Node 0 active_anon:15700kB inactive_anon:0kB active_file:13916kB inactive_file:159780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117460kB dirty:1016kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14660kB pagetables:3928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 388.928322][T14695] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 388.958741][T14695] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.015055][T14695] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 389.030587][T14695] Node 0 DMA32 free:1233312kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15500kB inactive_anon:0kB active_file:13916kB inactive_file:159780kB unevictable:1536kB writepending:1016kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:43132kB local_pcp:22164kB free_cma:0kB [ 389.069423][T14713] netlink: 26732 bytes leftover after parsing attributes in process `syz.3.2675'. [ 389.080020][T14717] netlink: 26732 bytes leftover after parsing attributes in process `syz.3.2675'. [ 389.099010][T14713] netlink: 'syz.3.2675': attribute type 10 has an invalid length. [ 389.106896][T14713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2675'. [ 389.116651][T14695] lowmem_reserve[]: 0 0 0 0 0 [ 389.122241][T14695] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.173032][T14713] team0: Port device geneve0 added [ 389.178335][T14695] lowmem_reserve[]: 0 0 0 0 0 [ 389.183140][T14695] Node 1 Normal free:3896700kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15584kB local_pcp:7232kB free_cma:0kB [ 389.224474][ T8273] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.233476][ T8273] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.258309][T14695] lowmem_reserve[]: 0 0 0 0 0 [ 389.263172][T14695] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 389.266919][T14725] debugfs: 'netdev:nicvf0' already exists in 'phy3' [ 389.284963][T14695] Node 0 DMA32: 1128*4kB (UM) 746*8kB (UME) 284*16kB (UM) 476*32kB (UME) 109*64kB (UM) 64*128kB (UM) 40*256kB (UM) 20*512kB (UME) 7*1024kB (UM) 5*2048kB (UME) 281*4096kB (M) = 1234288kB [ 389.304482][T14695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 389.308517][ T8273] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.316477][T14695] Node 1 Normal: 167*4kB (UME) 52*8kB (UME) 48*16kB (UME) 164*32kB (UME) 43*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3896700kB [ 389.343163][ T8273] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.354736][T14695] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.394742][T14695] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 389.412373][T14695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.428948][T14695] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 389.439062][T14695] 44832 total pagecache pages [ 389.443992][T14695] 0 pages in swap cache [ 389.448319][T14695] Free swap = 124996kB [ 389.452787][T14695] Total swap = 124996kB [ 389.457139][T14695] 2097051 pages RAM [ 389.466089][T14695] 0 pages HighMem/MovableOnly [ 389.472558][T14695] 424120 pages reserved [ 389.480117][T14695] 0 pages cma reserved [ 389.701132][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'. [ 389.977956][T14764] x_tables: duplicate underflow at hook 1 [ 389.988528][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'. [ 390.135619][T14771] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 390.258491][T14777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2691'. [ 390.467220][T14784] sctp: [Deprecated]: syz.0.2693 (pid 14784) Use of int in max_burst socket option. [ 390.467220][T14784] Use struct sctp_assoc_value instead [ 390.483195][T14781] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 390.541959][T14788] xt_HMARK: spi-set and port-set can't be combined [ 390.946271][T14803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2699'. [ 390.967802][T14803] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2699'. [ 390.982191][T14803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2699'. [ 390.993527][T14803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2699'. [ 391.047969][T14808] netlink: 'syz.1.2698': attribute type 12 has an invalid length. [ 391.073071][T14808] netlink: 'syz.1.2698': attribute type 4 has an invalid length. [ 391.401800][T14794] lo speed is unknown, defaulting to 1000 [ 391.433025][T14794] wg1 speed is unknown, defaulting to 1000 [ 391.777318][T14816] lo speed is unknown, defaulting to 1000 [ 391.792790][T14816] wg1 speed is unknown, defaulting to 1000 [ 392.590750][T14850] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 392.832645][T14853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.100501][T14870] sctp: [Deprecated]: syz.0.2719 (pid 14870) Use of int in max_burst socket option. [ 393.100501][T14870] Use struct sctp_assoc_value instead [ 393.131477][T14872] netlink: 'syz.3.2718': attribute type 16 has an invalid length. [ 393.148386][T14872] netlink: 'syz.3.2718': attribute type 17 has an invalid length. [ 393.191326][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.234060][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.244382][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.270669][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.649632][T14888] syzkaller0: entered promiscuous mode [ 393.655204][T14888] syzkaller0: entered allmulticast mode [ 394.144196][T14896] __nla_validate_parse: 7 callbacks suppressed [ 394.144219][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2724'. [ 394.338852][T14909] x_tables: duplicate underflow at hook 1 [ 394.405434][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2728'. [ 394.460592][T14912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.669424][T14915] No such timeout policy "syz1" [ 395.043100][T14903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.172575][T14920] netlink: 'syz.4.2731': attribute type 10 has an invalid length. [ 396.401454][T14967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.760936][T14977] syzkaller0: entered promiscuous mode [ 396.766490][T14977] syzkaller0: entered allmulticast mode [ 396.867804][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2747'. [ 396.905151][T14982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2747'. [ 396.945391][T14986] Cannot find del_set index 49151 as target [ 397.059311][T14988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2751'. [ 397.145706][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2753'. [ 397.165997][T14998] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 397.346910][T15002] netlink: 'syz.4.2755': attribute type 3 has an invalid length. [ 398.586445][T14990] batman_adv: batadv0: Adding interface: dummy0 [ 398.592937][T14990] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.618354][T14990] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 398.780812][T15016] Cannot find set identified by id 65534 to match [ 399.010388][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 399.134089][T15037] netlink: 'syz.0.2767': attribute type 10 has an invalid length. [ 399.177583][T15035] 8021q: adding VLAN 0 to HW filter on device bond8 [ 399.189390][T15037] team0: Device ipvlan1 failed to register rx_handler [ 399.229250][T15035] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 399.260000][T15035] bond8: (slave macvlan3): Enslaving as an active interface with an up link [ 399.281168][T15044] syzkaller0: entered promiscuous mode [ 399.286721][T15044] syzkaller0: entered allmulticast mode [ 399.349339][T15047] xt_hashlimit: max too large, truncated to 1048576 [ 399.507176][T15051] syzkaller0: entered promiscuous mode [ 399.513904][T15051] syzkaller0: entered allmulticast mode [ 401.379127][T15080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2780'. [ 401.416321][T15081] geneve3: entered promiscuous mode [ 401.459613][T15087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 401.482984][T15083] 8021q: adding VLAN 0 to HW filter on device bond14 [ 401.543351][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.556558][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.688243][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.719814][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.743368][T15066] lo speed is unknown, defaulting to 1000 [ 401.780038][T15066] wg1 speed is unknown, defaulting to 1000 [ 402.109636][T15113] syzkaller0: entered promiscuous mode [ 402.115197][T15113] syzkaller0: entered allmulticast mode [ 402.215345][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2796'. [ 402.492310][T15127] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 402.494533][T15131] Cannot find del_set index 2 as target [ 402.629604][T15135] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 403.399767][T15141] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 403.806277][T15134] FAULT_INJECTION: forcing a failure. [ 403.806277][T15134] name failslab, interval 1, probability 0, space 0, times 0 [ 403.819518][T15134] CPU: 1 UID: 0 PID: 15134 Comm: syz.3.2798 Not tainted syzkaller #0 PREEMPT(full) [ 403.819548][T15134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.819569][T15134] Call Trace: [ 403.819577][T15134] [ 403.819586][T15134] dump_stack_lvl+0x189/0x250 [ 403.819621][T15134] ? __pfx____ratelimit+0x10/0x10 [ 403.819651][T15134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.819681][T15134] ? __pfx__printk+0x10/0x10 [ 403.819710][T15134] ? __pfx___might_resched+0x10/0x10 [ 403.819741][T15134] should_fail_ex+0x414/0x560 [ 403.819779][T15134] should_failslab+0xa8/0x100 [ 403.819804][T15134] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 403.819837][T15134] ? __alloc_workqueue+0x6a9/0x1b80 [ 403.819875][T15134] __alloc_workqueue+0x6a9/0x1b80 [ 403.819925][T15134] alloc_workqueue_noprof+0xd4/0x210 [ 403.819957][T15134] ? net_generic+0x1e/0x240 [ 403.819982][T15134] ? net_generic+0x1e/0x240 [ 403.820005][T15134] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 403.820039][T15134] ? net_generic+0x1e/0x240 [ 403.820062][T15134] ? net_generic+0x1e/0x240 [ 403.820095][T15134] bond_init+0xd4/0x860 [ 403.820124][T15134] ? __pfx_bond_init+0x10/0x10 [ 403.820145][T15134] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 403.820187][T15134] register_netdevice+0x6bf/0x1ae0 [ 403.820222][T15134] ? rcu_is_watching+0x15/0xb0 [ 403.820247][T15134] ? trace_kmalloc+0x1f/0xd0 [ 403.820274][T15134] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 403.820309][T15134] ? __pfx_register_netdevice+0x10/0x10 [ 403.820342][T15134] ? validate_linkmsg+0x765/0x950 [ 403.820388][T15134] bond_newlink+0x48/0xd0 [ 403.820411][T15134] ? __pfx_bond_newlink+0x10/0x10 [ 403.820439][T15134] rtnl_newlink_create+0x310/0xb00 [ 403.820468][T15134] ? __mutex_lock+0x5bb/0x1350 [ 403.820506][T15134] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 403.820534][T15134] ? __pfx___mutex_lock+0x10/0x10 [ 403.820584][T15134] ? ns_capable+0x8a/0xf0 [ 403.820613][T15134] rtnl_newlink+0x16e4/0x1c80 [ 403.820665][T15134] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.820706][T15134] ? __lock_acquire+0xab9/0xd20 [ 403.820743][T15134] ? __lock_acquire+0xab9/0xd20 [ 403.820780][T15134] ? __lock_acquire+0xab9/0xd20 [ 403.820826][T15134] ? is_bpf_text_address+0x26/0x2b0 [ 403.820857][T15134] ? is_bpf_text_address+0x292/0x2b0 [ 403.820879][T15134] ? is_bpf_text_address+0x26/0x2b0 [ 403.820914][T15134] ? __lock_acquire+0xab9/0xd20 [ 403.820966][T15134] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.820999][T15134] rtnetlink_rcv_msg+0x7cf/0xb70 [ 403.821031][T15134] ? __lock_acquire+0xab9/0xd20 [ 403.821054][T15134] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 403.821087][T15134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.821141][T15134] netlink_rcv_skb+0x208/0x470 [ 403.821160][T15134] ? __lock_acquire+0xab9/0xd20 [ 403.821182][T15134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.821217][T15134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.821253][T15134] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.821285][T15134] netlink_unicast+0x82f/0x9e0 [ 403.821329][T15134] ? __pfx_netlink_unicast+0x10/0x10 [ 403.821364][T15134] ? netlink_sendmsg+0x642/0xb30 [ 403.821383][T15134] ? skb_put+0x11b/0x210 [ 403.821409][T15134] netlink_sendmsg+0x805/0xb30 [ 403.821443][T15134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.821469][T15134] ? aa_sock_msg_perm+0xf1/0x1d0 [ 403.821503][T15134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.821524][T15134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.821548][T15134] __sock_sendmsg+0x21c/0x270 [ 403.821588][T15134] ____sys_sendmsg+0x505/0x830 [ 403.821618][T15134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.821654][T15134] ? import_iovec+0x74/0xa0 [ 403.821686][T15134] ___sys_sendmsg+0x21f/0x2a0 [ 403.821714][T15134] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.821782][T15134] ? __fget_files+0x2a/0x420 [ 403.821802][T15134] ? __fget_files+0x3a0/0x420 [ 403.821836][T15134] __x64_sys_sendmsg+0x19b/0x260 [ 403.821864][T15134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.821899][T15134] ? __pfx_ksys_write+0x10/0x10 [ 403.821934][T15134] ? do_syscall_64+0xbe/0xfa0 [ 403.821969][T15134] do_syscall_64+0xfa/0xfa0 [ 403.821997][T15134] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.822026][T15134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.822048][T15134] ? clear_bhb_loop+0x60/0xb0 [ 403.822076][T15134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.822096][T15134] RIP: 0033:0x7f4d0838f6c9 [ 403.822116][T15134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.822134][T15134] RSP: 002b:00007f4d092f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.822158][T15134] RAX: ffffffffffffffda RBX: 00007f4d085e5fa0 RCX: 00007f4d0838f6c9 [ 403.822174][T15134] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 403.822188][T15134] RBP: 00007f4d092f7090 R08: 0000000000000000 R09: 0000000000000000 [ 403.822201][T15134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.822214][T15134] R13: 00007f4d085e6038 R14: 00007f4d085e5fa0 R15: 00007ffe0cfc36f8 [ 403.822253][T15134] [ 404.438539][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'. [ 404.594688][T15154] Cannot find del_set index 49151 as target [ 404.608972][T15150] bond9: entered promiscuous mode [ 404.614449][T15150] macvlan4: entered promiscuous mode [ 404.620128][T15150] macvlan4: entered allmulticast mode [ 404.625596][T15150] bond9: entered allmulticast mode [ 404.631412][T15150] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 404.861587][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 404.880380][T15166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2807'. [ 405.264220][T15183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.319065][T15185] x_tables: duplicate underflow at hook 1 [ 405.384266][T15183] No such timeout policy "syz1" [ 405.389638][T15181] syzkaller0: entered promiscuous mode [ 405.395245][T15181] syzkaller0: entered allmulticast mode [ 405.604170][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.614310][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.626056][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.640605][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.648993][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.535305][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'. [ 407.595743][T15229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2824'. [ 407.678415][ T5844] Bluetooth: hci5: command tx timeout [ 407.719987][T15195] lo speed is unknown, defaulting to 1000 [ 407.731978][T15232] bond12: entered promiscuous mode [ 407.740299][T15232] macvlan4: entered promiscuous mode [ 407.749980][T15232] macvlan4: entered allmulticast mode [ 407.770956][T15232] bond12: entered allmulticast mode [ 407.778580][T15232] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 407.786463][T15195] wg1 speed is unknown, defaulting to 1000 [ 408.154660][T15252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.301940][T15255] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 408.315580][T15255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.366020][T15255] bond0: entered promiscuous mode [ 408.378474][T15255] ÿ: entered promiscuous mode [ 408.383765][T15255] bond_slave_1: entered promiscuous mode [ 408.393971][T15255] dummy0: entered promiscuous mode [ 408.414595][T15255] batadv0: entered promiscuous mode [ 408.429914][T15255] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 408.448385][T15255] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 408.479705][T15255] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 408.645591][ T8273] vlan2: left promiscuous mode [ 408.658673][ T8273] bridge0: port 3(vlan2) entered disabled state [ 408.677087][ T8273] bridge_slave_1: left allmulticast mode [ 408.693161][ T8273] bridge_slave_1: left promiscuous mode [ 408.707214][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.723782][ T8273] bridge_slave_0: left promiscuous mode [ 408.733161][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.896381][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 409.280203][ T8273] dvmrp0 (unregistering): left allmulticast mode [ 409.435440][T15292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2842'. [ 409.543183][ T8273] bond1 (unregistering): Released all slaves [ 409.647432][ T8273] bond2 (unregistering): Released all slaves [ 409.747569][ T8273] bond3 (unregistering): Released all slaves [ 409.758539][ T5844] Bluetooth: hci5: command tx timeout [ 409.848079][ T8273] bond4 (unregistering): Released all slaves [ 409.949170][ T8273] bond5 (unregistering): Released all slaves [ 410.044638][ T8273] bond6 (unregistering): Released all slaves [ 410.141093][ T8273] bond7 (unregistering): Released all slaves [ 410.246247][ T8273] bond8 (unregistering): Released all slaves [ 410.352029][ T8273] bond9 (unregistering): Released all slaves [ 410.445411][ T8273] bond10 (unregistering): Released all slaves [ 410.470111][ T8273] bond11 (unregistering): Released all slaves [ 410.484067][ T8273] bond0 (unregistering): left promiscuous mode [ 410.509298][ T8273] bond0 (unregistering): Released all slaves [ 410.550432][T15264] syzkaller0: entered promiscuous mode [ 410.555947][T15264] syzkaller0: entered allmulticast mode [ 411.854039][ T5844] Bluetooth: hci5: command tx timeout [ 412.116556][T15195] chnl_net:caif_netlink_parms(): no params data found [ 412.144278][ T8273] tipc: Left network mode [ 412.233145][T15300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 412.349702][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2848'. [ 412.607244][T15324] Cannot find del_set index 49151 as target [ 412.659987][T15195] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.667305][T15195] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.679016][T15195] bridge_slave_0: entered allmulticast mode [ 412.691017][T15195] bridge_slave_0: entered promiscuous mode [ 412.709384][T15195] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.717184][T15195] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.728432][T15195] bridge_slave_1: entered allmulticast mode [ 412.737641][T15195] bridge_slave_1: entered promiscuous mode [ 412.840408][T15326] syzkaller0: entered promiscuous mode [ 412.845992][T15326] syzkaller0: entered allmulticast mode [ 413.320726][T15355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.644242][T15361] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2868'. [ 413.919074][ T5844] Bluetooth: hci5: command tx timeout [ 414.583555][T15359] netlink: 'syz.0.2868': attribute type 29 has an invalid length. [ 414.631383][T15195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.653236][T15195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.722617][T15366] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2869'. [ 414.761305][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'. [ 414.823195][T15372] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2872'. [ 414.921939][T15195] team0: Port device team_slave_0 added [ 414.961276][T15195] team0: Port device team_slave_1 added [ 415.035026][T15382] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2871'. [ 415.073800][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'. [ 415.230946][T15195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.281830][T15195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.334102][T15195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.370016][T15195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.384381][T15195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.422330][T15195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.476943][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2883'. [ 415.565575][T15403] syzkaller0: entered promiscuous mode [ 415.571957][T15403] syzkaller0: entered allmulticast mode [ 415.695817][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'. [ 416.704161][T15466] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2889'. [ 417.449234][T15441] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR [ 417.507604][ T8273] hsr_slave_0: left promiscuous mode [ 417.527338][ T8273] hsr_slave_1: left promiscuous mode [ 417.543259][ T8273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.566418][ T8273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.735447][T15479] netlink: 'syz.2.2892': attribute type 10 has an invalid length. [ 418.097686][ T8273] team0 (unregistering): Port device team_slave_1 removed [ 418.141728][ T8273] team0 (unregistering): Port device team_slave_0 removed [ 418.541919][T15464] tun1: tun_chr_ioctl cmd 1074025675 [ 418.547410][T15464] tun1: persist enabled [ 418.551773][T15465] tun1: tun_chr_ioctl cmd 1074025675 [ 418.557101][T15465] tun1: persist enabled [ 418.562205][T15466] 0ªX¹¦À: renamed from caif0 [ 418.574971][T15466] 0ªX¹¦À: entered allmulticast mode [ 418.580629][T15466] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 418.629547][T15195] hsr_slave_0: entered promiscuous mode [ 418.636426][T15195] hsr_slave_1: entered promiscuous mode [ 418.645682][T15195] debugfs: 'hsr0' already exists in 'hsr' [ 418.651783][T15195] Cannot create hsr debugfs directory [ 418.666968][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2892'. [ 418.685064][T15473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2892'. [ 418.745931][T15483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2895'. [ 418.845757][T15488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.876034][T15483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2895'. [ 418.898316][T15483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2895'. [ 418.910039][T15490] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2898'. [ 419.265194][ T8273] IPVS: stop unused estimator thread 0... [ 419.516469][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 419.725678][T15195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.742730][T15195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.764401][T15195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.791669][T15195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.839323][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 419.873848][T15492] lo speed is unknown, defaulting to 1000 [ 419.912228][T15492] wg1 speed is unknown, defaulting to 1000 [ 419.932271][T15527] xt_hashlimit: max too large, truncated to 1048576 [ 420.205833][T15195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.213540][T15536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2912'. [ 420.227187][T15538] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2913'. [ 420.245677][T15195] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.273502][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.280854][T15415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.322199][T15416] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.329476][T15416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.416550][T15506] lo speed is unknown, defaulting to 1000 [ 420.472208][T15545] Cannot find del_set index 49151 as target [ 420.498912][T15506] wg1 speed is unknown, defaulting to 1000 [ 420.955255][T15564] FAULT_INJECTION: forcing a failure. [ 420.955255][T15564] name failslab, interval 1, probability 0, space 0, times 0 [ 420.973394][T15564] CPU: 1 UID: 0 PID: 15564 Comm: syz.1.2922 Not tainted syzkaller #0 PREEMPT(full) [ 420.973424][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.973438][T15564] Call Trace: [ 420.973447][T15564] [ 420.973454][T15564] dump_stack_lvl+0x189/0x250 [ 420.973487][T15564] ? __pfx____ratelimit+0x10/0x10 [ 420.973515][T15564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.973544][T15564] ? __pfx__printk+0x10/0x10 [ 420.973567][T15564] ? __pfx___might_resched+0x10/0x10 [ 420.973588][T15564] ? fs_reclaim_acquire+0x7d/0x100 [ 420.973622][T15564] should_fail_ex+0x414/0x560 [ 420.973659][T15564] should_failslab+0xa8/0x100 [ 420.973683][T15564] __kmalloc_cache_noprof+0x6f/0x6f0 [ 420.973713][T15564] ? nfnetlink_rcv+0xf97/0x2590 [ 420.973742][T15564] ? __nla_parse+0x40/0x60 [ 420.973770][T15564] nfnetlink_rcv+0xf97/0x2590 [ 420.973842][T15564] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 420.973937][T15564] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.973980][T15564] netlink_unicast+0x82f/0x9e0 [ 420.974022][T15564] ? __pfx_netlink_unicast+0x10/0x10 [ 420.974057][T15564] ? netlink_sendmsg+0x642/0xb30 [ 420.974077][T15564] ? skb_put+0x11b/0x210 [ 420.974102][T15564] netlink_sendmsg+0x805/0xb30 [ 420.974136][T15564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.974163][T15564] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.974197][T15564] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.974218][T15564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.974242][T15564] __sock_sendmsg+0x21c/0x270 [ 420.974276][T15564] ____sys_sendmsg+0x505/0x830 [ 420.974307][T15564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.974342][T15564] ? import_iovec+0x74/0xa0 [ 420.974374][T15564] ___sys_sendmsg+0x21f/0x2a0 [ 420.974401][T15564] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.974468][T15564] ? __fget_files+0x2a/0x420 [ 420.974488][T15564] ? __fget_files+0x3a0/0x420 [ 420.974521][T15564] __x64_sys_sendmsg+0x19b/0x260 [ 420.974548][T15564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.974585][T15564] ? __pfx_ksys_write+0x10/0x10 [ 420.974621][T15564] ? do_syscall_64+0xbe/0xfa0 [ 420.974657][T15564] do_syscall_64+0xfa/0xfa0 [ 420.974684][T15564] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.974715][T15564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.974737][T15564] ? clear_bhb_loop+0x60/0xb0 [ 420.974764][T15564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.974785][T15564] RIP: 0033:0x7f725318f6c9 [ 420.974806][T15564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.974826][T15564] RSP: 002b:00007f7253f4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.974849][T15564] RAX: ffffffffffffffda RBX: 00007f72533e5fa0 RCX: 00007f725318f6c9 [ 420.974866][T15564] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 420.974915][T15564] RBP: 00007f7253f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 420.974929][T15564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.974942][T15564] R13: 00007f72533e6038 R14: 00007f72533e5fa0 R15: 00007ffda2601068 [ 420.974977][T15564] [ 421.006355][T15195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.052651][T15601] syzkaller0: entered promiscuous mode [ 422.058830][T15601] syzkaller0: entered allmulticast mode [ 422.077464][T15603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.115936][T15605] Cannot find del_set index 49151 as target [ 422.155533][T15195] veth0_vlan: entered promiscuous mode [ 422.191144][T15195] veth1_vlan: entered promiscuous mode [ 422.284435][T15606] No such timeout policy "syz1" [ 422.315482][T15195] veth0_macvtap: entered promiscuous mode [ 422.337281][T15614] Cannot find set identified by id 65534 to match [ 422.342383][T15195] veth1_macvtap: entered promiscuous mode [ 422.385238][T15195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.436230][T15195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.478572][T15416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.487714][T15416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.515016][T15416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.543171][T15416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.762898][T15415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.789895][T15415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.797553][T15629] netlink: 'syz.0.2941': attribute type 5 has an invalid length. [ 422.869570][T15446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.877465][T15446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.946629][T15609] lo speed is unknown, defaulting to 1000 [ 422.974686][T15609] wg1 speed is unknown, defaulting to 1000 [ 423.371972][T15653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.474629][T15663] netlink: 'syz.1.2951': attribute type 1 has an invalid length. [ 423.491476][T15663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.707136][T15675] __nla_validate_parse: 11 callbacks suppressed [ 423.707160][T15675] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2954'. [ 423.811591][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2955'. [ 423.847631][T15677] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 423.858862][T15677] macvtap1: entered promiscuous mode [ 424.157155][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2961'. [ 424.821809][T15706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2966'. [ 424.894863][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.905030][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.915090][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.924037][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.936982][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.026193][T15687] lo speed is unknown, defaulting to 1000 [ 425.091612][T15721] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2969'. [ 425.095413][T15687] wg1 speed is unknown, defaulting to 1000 [ 425.604466][T15711] lo speed is unknown, defaulting to 1000 [ 425.630239][T15711] wg1 speed is unknown, defaulting to 1000 [ 425.760672][T15741] FAULT_INJECTION: forcing a failure. [ 425.760672][T15741] name failslab, interval 1, probability 0, space 0, times 0 [ 425.801464][T15741] CPU: 1 UID: 0 PID: 15741 Comm: syz.1.2977 Not tainted syzkaller #0 PREEMPT(full) [ 425.801494][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.801513][T15741] Call Trace: [ 425.801522][T15741] [ 425.801531][T15741] dump_stack_lvl+0x189/0x250 [ 425.801565][T15741] ? __pfx____ratelimit+0x10/0x10 [ 425.801594][T15741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.801623][T15741] ? __pfx__printk+0x10/0x10 [ 425.801652][T15741] ? __pfx___might_resched+0x10/0x10 [ 425.801682][T15741] should_fail_ex+0x414/0x560 [ 425.801720][T15741] should_failslab+0xa8/0x100 [ 425.801745][T15741] __kmalloc_noprof+0xcb/0x7f0 [ 425.801774][T15741] ? kfree+0x4d/0x6d0 [ 425.801797][T15741] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 425.801837][T15741] tomoyo_realpath_from_path+0xe3/0x5d0 [ 425.801872][T15741] ? tomoyo_domain+0xd9/0x130 [ 425.801898][T15741] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 425.801926][T15741] tomoyo_path_number_perm+0x1e8/0x5a0 [ 425.801958][T15741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 425.802029][T15741] ? __fget_files+0x2a/0x420 [ 425.802055][T15741] ? __fget_files+0x3a0/0x420 [ 425.802074][T15741] ? __fget_files+0x2a/0x420 [ 425.802099][T15741] security_file_ioctl+0xcb/0x2d0 [ 425.802128][T15741] __se_sys_ioctl+0x47/0x170 [ 425.802160][T15741] do_syscall_64+0xfa/0xfa0 [ 425.802192][T15741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.802212][T15741] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 425.802234][T15741] ? clear_bhb_loop+0x60/0xb0 [ 425.802260][T15741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.802286][T15741] RIP: 0033:0x7f725318f6c9 [ 425.802306][T15741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.802324][T15741] RSP: 002b:00007f7253f4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.802352][T15741] RAX: ffffffffffffffda RBX: 00007f72533e5fa0 RCX: 00007f725318f6c9 [ 425.802368][T15741] RDX: 0000200000000540 RSI: 00000000800442d2 RDI: 0000000000000004 [ 425.802383][T15741] RBP: 00007f7253f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 425.802396][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.802409][T15741] R13: 00007f72533e6038 R14: 00007f72533e5fa0 R15: 00007ffda2601068 [ 425.802452][T15741] [ 426.033692][T15741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 426.300053][T15747] syzkaller0: entered promiscuous mode [ 426.311203][T15747] syzkaller0: entered allmulticast mode [ 426.332118][T15711] chnl_net:caif_netlink_parms(): no params data found [ 426.456426][T15755] netlink: 'syz.3.2983': attribute type 5 has an invalid length. [ 426.582399][T15760] netlink: 'syz.3.2983': attribute type 33 has an invalid length. [ 426.596773][T15760] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2983'. [ 426.649739][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'. [ 426.679462][T15760] `: renamed from team0 [ 426.768514][T15711] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.777321][T15711] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.786806][T15711] bridge_slave_0: entered allmulticast mode [ 426.797929][T15711] bridge_slave_0: entered promiscuous mode [ 426.809560][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.817062][T15711] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.824927][T15711] bridge_slave_1: entered allmulticast mode [ 426.833546][T15711] bridge_slave_1: entered promiscuous mode [ 426.963861][T15711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.003101][T15711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.040427][ T5844] Bluetooth: hci2: command tx timeout [ 427.079511][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2991'. [ 427.145424][T15791] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 427.158600][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2992'. [ 427.234432][T15711] team0: Port device team_slave_0 added [ 427.251864][T15711] team0: Port device team_slave_1 added [ 427.425723][T15711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.446320][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.529397][T15711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.576022][T15711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.601764][T15711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.672695][T15711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.861044][T15711] hsr_slave_0: entered promiscuous mode [ 427.874216][T15711] hsr_slave_1: entered promiscuous mode [ 427.882834][T15711] debugfs: 'hsr0' already exists in 'hsr' [ 427.888751][T15711] Cannot create hsr debugfs directory [ 427.935774][T15817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.989521][T15817] netlink: 'syz.1.2997': attribute type 10 has an invalid length. [ 428.106646][T15786] lo speed is unknown, defaulting to 1000 [ 428.154748][T15798] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 428.214241][T15786] wg1 speed is unknown, defaulting to 1000 [ 428.245723][T15825] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3001'. [ 428.265597][T15821] bond10: (slave bridge_slave_0): Device is not bonding slave [ 428.288310][T15821] bond10: option active_slave: invalid value (bridge_slave_0) [ 428.298086][T15821] bond10 (unregistering): Released all slaves [ 428.515292][ T8273] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.622289][ T8273] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.635650][ T8273] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.669263][T15839] x_tables: duplicate underflow at hook 1 [ 428.694794][ T8273] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.864569][T15852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.972225][T15853] No such timeout policy "syz1" [ 429.001976][T15711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.034225][T15826] lo speed is unknown, defaulting to 1000 [ 429.041062][T15711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.079155][T15711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.119492][ T5844] Bluetooth: hci2: command tx timeout [ 429.159934][T15826] wg1 speed is unknown, defaulting to 1000 [ 429.219829][T15711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.227276][T15866] xt_hashlimit: max too large, truncated to 1048576 [ 429.400020][T15876] __nla_validate_parse: 5 callbacks suppressed [ 429.400040][T15876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3013'. [ 429.475046][T15876] nbd: socks must be embedded in a SOCK_ITEM attr [ 429.710946][T15882] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3014'. [ 429.765075][T15711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.909341][T15711] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.988976][T15445] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.996165][T15445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.999349][T15890] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3017'. [ 430.071031][T15445] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.078276][T15445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.405054][T15899] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 430.415195][T15899] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3018'. [ 430.537048][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 430.606474][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3021'. [ 430.783212][T15914] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3023'. [ 430.859506][T15711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.965065][T15919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.999674][T15920] Cannot find set identified by id 65534 to match [ 431.006587][T15711] veth0_vlan: entered promiscuous mode [ 431.045029][T15711] veth1_vlan: entered promiscuous mode [ 431.086286][T15711] veth0_macvtap: entered promiscuous mode [ 431.109417][T15919] No such timeout policy "syz1" [ 431.121299][T15711] veth1_macvtap: entered promiscuous mode [ 431.172623][T15711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.199755][ T5844] Bluetooth: hci2: command tx timeout [ 431.214556][T15711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.256144][T15443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.277259][T15443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.298840][T15444] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.323492][T15444] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.333211][T15933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3029'. [ 431.512001][T15445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.533764][T15445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.605369][ T8273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.627474][ T8273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.647991][T15942] syzkaller0: entered promiscuous mode [ 431.656119][T15942] syzkaller0: entered allmulticast mode [ 431.765360][T15949] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 431.773430][T15949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.865739][T15951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3036'. [ 431.950550][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3037'. [ 432.080296][T15954] veth0_to_batadv: entered promiscuous mode [ 432.110332][T15954] macvlan2: entered promiscuous mode [ 432.123005][T15954] macvlan2: entered allmulticast mode [ 432.145179][T15954] veth0_to_batadv: entered allmulticast mode [ 432.205391][T15964] netlink: 'syz.2.3041': attribute type 10 has an invalid length. [ 432.300151][T15964] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.309115][T15965] netlink: 'syz.2.3041': attribute type 1 has an invalid length. [ 432.325497][T15964] bond0: (slave team0): Enslaving as an active interface with an up link [ 432.621065][T15973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.819168][T15973] No such timeout policy "syz1" [ 432.840660][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.868585][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.884688][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.893248][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.901213][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.278422][ T5847] Bluetooth: hci2: command tx timeout [ 433.301390][T16001] syzkaller0: entered promiscuous mode [ 433.307196][T16001] syzkaller0: entered allmulticast mode [ 433.479321][T15983] lo speed is unknown, defaulting to 1000 [ 433.644513][T15983] wg1 speed is unknown, defaulting to 1000 [ 433.953760][T15987] lo speed is unknown, defaulting to 1000 [ 434.047069][T15987] wg1 speed is unknown, defaulting to 1000 [ 434.264165][T16003] lo speed is unknown, defaulting to 1000 [ 434.272823][T16003] wg1 speed is unknown, defaulting to 1000 [ 434.397331][T15983] chnl_net:caif_netlink_parms(): no params data found [ 434.444100][T16023] __nla_validate_parse: 4 callbacks suppressed [ 434.444120][T16023] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3058'. [ 434.465296][T16023] geneve0: entered promiscuous mode [ 434.470725][T16023] geneve0: entered allmulticast mode [ 434.536496][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3059'. [ 434.547317][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'. [ 434.611426][ T8273] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.619853][ T8273] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.773110][T16026] team0: left allmulticast mode [ 434.778249][T16026] team_slave_1: left allmulticast mode [ 434.784547][T16026] team0: left promiscuous mode [ 434.789622][T16026] team_slave_1: left promiscuous mode [ 434.795635][T16026] bridge0: port 3(team0) entered disabled state [ 434.822482][T16026] bridge_slave_1: left allmulticast mode [ 434.830580][T16026] bridge_slave_1: left promiscuous mode [ 434.836572][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.852893][T16026] bridge_slave_0: left allmulticast mode [ 434.858811][T16026] bridge_slave_0: left promiscuous mode [ 434.864569][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.954523][ T8273] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.958527][ T5847] Bluetooth: hci0: command tx timeout [ 434.966463][ T8273] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.334555][T16046] xt_hashlimit: max too large, truncated to 1048576 [ 435.368376][T15983] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.382406][T15983] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.392604][T15983] bridge_slave_0: entered allmulticast mode [ 435.410517][T15983] bridge_slave_0: entered promiscuous mode [ 435.427091][T15983] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.435044][T15983] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.452999][T15983] bridge_slave_1: entered allmulticast mode [ 435.470030][T15983] bridge_slave_1: entered promiscuous mode [ 435.557364][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3066'. [ 435.596717][T15983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.606759][T16054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3068'. [ 435.620127][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3067'. [ 435.623478][T15983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.796552][T15983] team0: Port device team_slave_0 added [ 435.817236][T15983] team0: Port device team_slave_1 added [ 435.913377][T16066] netlink: 'syz.0.3073': attribute type 6 has an invalid length. [ 435.916960][T16058] syzkaller0: entered promiscuous mode [ 435.930240][T16058] syzkaller0: entered allmulticast mode [ 435.951339][T15983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.959323][T15983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.986149][T15983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.024014][T15983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.036408][T15983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.063071][T15983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.186720][T16075] netlink: 'syz.2.3075': attribute type 1 has an invalid length. [ 436.196351][T15983] hsr_slave_0: entered promiscuous mode [ 436.204599][T15983] hsr_slave_1: entered promiscuous mode [ 436.211363][T15983] debugfs: 'hsr0' already exists in 'hsr' [ 436.217489][T15983] Cannot create hsr debugfs directory [ 436.394568][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3078'. [ 436.946117][T16103] netlink: 'syz.0.3085': attribute type 2 has an invalid length. [ 436.977859][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3085'. [ 437.040932][ T5847] Bluetooth: hci0: command tx timeout [ 437.208889][T16107] Cannot find del_set index 49151 as target [ 438.884368][T15983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 438.906310][T15983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 438.937915][T15983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 438.965331][T15983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.990949][T16119] tipc: Enabling of bearer rejected, failed to enable media [ 439.118458][ T5847] Bluetooth: hci0: command tx timeout [ 439.166533][T16097] lo speed is unknown, defaulting to 1000 [ 439.192943][T16097] wg1 speed is unknown, defaulting to 1000 [ 439.286313][T16131] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 439.297051][T15983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.344354][T15983] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.420823][T15444] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.428038][T15444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.467251][T15444] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.474528][T15444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.611493][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3093'. [ 439.634027][T16133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3093'. [ 439.919377][T16144] bond1: option arp_validate: invalid value (18446744073491447809) [ 439.931048][T16144] bond1 (unregistering): Released all slaves [ 439.963453][T16151] netlink: 'syz.2.3095': attribute type 13 has an invalid length. [ 440.301885][T16151] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.309873][T16151] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.463256][T16151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.483354][T16151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.813731][T15446] bridge_slave_1: left allmulticast mode [ 440.828272][T15446] bridge_slave_1: left promiscuous mode [ 440.838652][T15446] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.860587][T15446] bridge_slave_0: left promiscuous mode [ 440.866560][T15446] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.009827][T15446] bond3 (unregistering): (slave ip6gretap2): Releasing active interface [ 441.018473][T15446] bond3 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 4a:29:3d:10:24:03 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 441.040658][T15446] bond3 (unregistering): (slave erspan0): making interface the new active one [ 441.189377][T15446] bond3 (unregistering): (slave erspan0): Releasing active interface [ 441.198614][ T5847] Bluetooth: hci0: command tx timeout [ 441.237873][T15446] bond11 (unregistering): (slave gretap1): Releasing active interface [ 441.894921][T15446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.907959][T15446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.919653][T15446] bond0 (unregistering): Released all slaves [ 441.965458][T16178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3105'. [ 442.041991][T15446] bond1 (unregistering): Released all slaves [ 442.070667][T15446] bond2 (unregistering): Released all slaves [ 442.191652][T15446] bond3 (unregistering): (slave veth5): Releasing active interface [ 442.201237][T15446] bond3 (unregistering): Released all slaves [ 442.309137][T15446] bond4 (unregistering): Released all slaves [ 442.441896][T15446] bond5 (unregistering): Released all slaves [ 442.502750][T16180] netlink: 'syz.0.3106': attribute type 8 has an invalid length. [ 442.510723][T16180] netlink: 'syz.0.3106': attribute type 9 has an invalid length. [ 442.518814][T16180] netlink: 'syz.0.3106': attribute type 10 has an invalid length. [ 442.526689][T16180] netlink: 'syz.0.3106': attribute type 11 has an invalid length. [ 442.534704][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3106'. [ 442.607330][T15446] bond6 (unregistering): Released all slaves [ 442.711282][T15446] bond7 (unregistering): Released all slaves [ 442.795696][T16185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3107'. [ 442.821195][T15446] bond8 (unregistering): (slave lo): Releasing backup interface [ 442.829587][T15446] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 442.841399][T15446] bond8 (unregistering): Released all slaves [ 442.966580][T15446] bond9 (unregistering): Released all slaves [ 443.064144][T15446] bond10 (unregistering): Released all slaves [ 443.174058][T15446] bond11 (unregistering): Released all slaves [ 443.278774][T15446] bond12 (unregistering): Released all slaves [ 443.378926][T15446] bond13 (unregistering): Released all slaves [ 443.486370][T15446] bond14 (unregistering): Released all slaves [ 443.500204][T15445] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.509357][T15445] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.597488][T16184] tipc: Enabling of bearer rejected, failed to enable media [ 443.629385][T15445] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.664110][T15445] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.749991][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3109'. [ 443.759764][T15446] : left promiscuous mode [ 443.834974][T16196] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3110'. [ 443.918907][T15983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.926426][T15446] tipc: Left network mode [ 443.991276][T16205] Cannot find add_set index 1 as target [ 444.287556][T16218] netlink: 'syz.3.3117': attribute type 5 has an invalid length. [ 444.354587][T15983] veth0_vlan: entered promiscuous mode [ 444.361814][T16218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3117'. [ 444.413342][T15983] veth1_vlan: entered promiscuous mode [ 444.413411][T16218] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3117'. [ 444.501542][T16225] syzkaller0: entered promiscuous mode [ 444.507091][T16225] syzkaller0: entered allmulticast mode [ 444.535946][T15416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.553329][T15416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.659649][T15983] veth0_macvtap: entered promiscuous mode [ 444.670299][T15983] veth1_macvtap: entered promiscuous mode [ 444.751683][T15983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.793755][T15983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.821483][T16240] Cannot find del_set index 2 as target [ 444.827320][T16237] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 444.915516][T15446] hsr_slave_0: left promiscuous mode [ 444.923326][T15446] hsr_slave_1: left promiscuous mode [ 444.937212][T15446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.977391][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3125'. [ 445.528321][T16265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3130'. [ 445.993765][T15416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.054220][T15416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.074821][T15416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.082996][T16271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3133'. [ 446.127223][T16273] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 446.166534][T15416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.429991][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3134'. [ 446.439585][T15416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.447448][T15416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.453313][T15446] IPVS: stop unused estimator thread 0... [ 446.552711][T16286] syzkaller0: entered promiscuous mode [ 446.561537][T16286] syzkaller0: entered allmulticast mode [ 446.579790][ T8273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.603851][ T8273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.949228][T16305] SET target dimension over the limit! [ 446.956478][T16301] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 447.053735][T16305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3142'. [ 447.082179][T16305] sch_tbf: burst 88 is lower than device erspan0 mtu (1464) ! [ 447.158635][T16309] xt_hashlimit: max too large, truncated to 1048576 [ 447.213124][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3145'. [ 447.521025][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.541608][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.550805][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.559626][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.567936][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.667168][T16326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3152'. [ 447.680663][T16326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3152'. [ 447.796573][T15446] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.825233][T15446] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.002193][T15446] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.050613][T15446] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.119371][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'. [ 448.139880][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'. [ 448.181213][T15446] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.218188][T15446] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.254250][T16319] lo speed is unknown, defaulting to 1000 [ 448.254273][T15443] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.311282][T15443] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.358188][T16319] wg1 speed is unknown, defaulting to 1000 [ 448.373437][T16361] netlink: 'syz.2.3162': attribute type 10 has an invalid length. [ 448.386759][T15443] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.415718][T16355] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 448.436506][T16363] macsec1: entered promiscuous mode [ 448.442473][T16363] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 448.463226][T15446] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.489320][T15446] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.527370][T15443] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.546035][T16398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.563616][T16398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.576676][T16398] bond0 (unregistering): Released all slaves [ 449.614330][T16319] chnl_net:caif_netlink_parms(): no params data found [ 449.679242][ T5847] Bluetooth: hci4: command tx timeout [ 449.873027][T15446] bond21 (unregistering): (slave ip6gretap1): Releasing active interface [ 449.888447][T15446] bond21 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - b2:55:3b:6f:dc:b6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 449.927179][T15446] bond21 (unregistering): (slave erspan0): making interface the new active one [ 450.200333][T15446] bond21 (unregistering): (slave erspan0): Releasing active interface [ 450.302692][T15446] bond5 (unregistering): (slave gretap1): Releasing active interface [ 450.520076][T15446] team0: Port device bridge2 removed [ 450.703442][T15446] bond2 (unregistering): (slave bond0): Releasing backup interface [ 450.726471][T15446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.736429][T15446] bond_slave_0: left promiscuous mode [ 450.743607][T15446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.753362][T15446] bond_slave_1: left promiscuous mode [ 450.760232][T15446] bond0 (unregistering): Released all slaves [ 450.864080][T15446] bond1 (unregistering): Released all slaves [ 450.958377][T15446] bond2 (unregistering): Released all slaves [ 451.053030][T15446] bond3 (unregistering): Released all slaves [ 451.155282][T15446] bond4 (unregistering): Released all slaves [ 451.170667][T15446] bond5 (unregistering): Released all slaves [ 451.265644][T15446] bond6 (unregistering): Released all slaves [ 451.359565][T15446] bond7 (unregistering): Released all slaves [ 451.374810][T15446] bond8 (unregistering): Released all slaves [ 451.389612][T15446] bond9 (unregistering): Released all slaves [ 451.406061][T15446] bond10 (unregistering): Released all slaves [ 451.424788][T15446] bond11 (unregistering): Released all slaves [ 451.445105][T15446] bond12 (unregistering): Released all slaves [ 451.467152][T15446] bond13 (unregistering): Released all slaves [ 451.482866][T15446] bond14 (unregistering): Released all slaves [ 451.497149][T15446] bond15 (unregistering): Released all slaves [ 451.513047][T15446] bond16 (unregistering): Released all slaves [ 451.531095][T15446] bond17 (unregistering): Released all slaves [ 451.560604][T15446] bond18 (unregistering): Released all slaves [ 451.670723][T15446] bond19 (unregistering): Released all slaves [ 451.768256][ T5847] Bluetooth: hci4: command tx timeout [ 451.769969][T15446] bond20 (unregistering): Released all slaves [ 451.872281][T15446] bond21 (unregistering): (slave veth7): Releasing active interface [ 451.881314][T15446] bond21 (unregistering): Released all slaves [ 451.979725][T15446] bond22 (unregistering): Released all slaves [ 451.994281][T15446] bond23 (unregistering): left promiscuous mode [ 452.012431][T15446] bond23 (unregistering): Released all slaves [ 452.026505][T15446] bond24 (unregistering): left promiscuous mode [ 452.046640][T15446] bond24 (unregistering): Released all slaves [ 452.064189][T15446] bond25 (unregistering): left promiscuous mode [ 452.090863][T15446] bond25 (unregistering): Released all slaves [ 452.168391][T16438] tipc: Started in network mode [ 452.178645][T16438] tipc: Node identity 6a66ba7b2201, cluster identity 4711 [ 452.189302][T16438] tipc: Enabled bearer , priority 0 [ 452.310810][T16438] tipc: Disabling bearer [ 452.354345][T16445] Bluetooth: MGMT ver 1.23 [ 452.360493][T15446] : left promiscuous mode [ 452.376337][T16445] xt_hashlimit: max too large, truncated to 1048576 [ 452.433176][T16449] netlink: 'syz.3.3186': attribute type 39 has an invalid length. [ 452.507114][T16453] __nla_validate_parse: 9 callbacks suppressed [ 452.507133][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3188'. [ 452.544736][T16446] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 452.572467][T15446] tipc: Left network mode [ 452.670344][T16319] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.696321][T16319] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.722162][T16319] bridge_slave_0: entered allmulticast mode [ 452.762183][T16319] bridge_slave_0: entered promiscuous mode [ 452.805687][T16319] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.820834][T16319] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.831646][T16319] bridge_slave_1: entered allmulticast mode [ 452.867630][T16319] bridge_slave_1: entered promiscuous mode [ 452.892358][T16465] netlink: 'syz.3.3192': attribute type 3 has an invalid length. [ 452.924714][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3193'. [ 452.949898][T16465] netlink: 'syz.3.3192': attribute type 3 has an invalid length. [ 452.958544][T16465] netlink: 'syz.3.3192': attribute type 3 has an invalid length. [ 453.082877][T16319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.121865][T16319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.263022][T15446] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 453.348347][T16486] Cannot find add_set index 1 as target [ 453.446585][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3202'. [ 453.574133][T16319] team0: Port device team_slave_0 added [ 453.583213][T16319] team0: Port device team_slave_1 added [ 453.827859][T16483] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.840878][ T5847] Bluetooth: hci4: command tx timeout [ 453.946364][T16319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.959456][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.987391][T16319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.015808][T16319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.023866][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.051744][T16319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.131587][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3207'. [ 454.152729][T16516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3207'. [ 454.284221][T16319] hsr_slave_0: entered promiscuous mode [ 454.299655][T16319] hsr_slave_1: entered promiscuous mode [ 454.314002][T16319] debugfs: 'hsr0' already exists in 'hsr' [ 454.320046][T16319] Cannot create hsr debugfs directory [ 454.790049][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 454.799927][T16531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3213'. [ 454.876803][T15446] hsr_slave_0: left promiscuous mode [ 454.884741][T15446] hsr_slave_1: left promiscuous mode [ 454.906002][T15446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.914661][T15446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.924477][T15446] batman_adv: batadv0: Removing interface: dummy0 [ 455.040186][T16546] Cannot find del_set index 49151 as target [ 455.275853][T15442] smc: removing ib device syz2 [ 455.536615][T15446] team0 (unregistering): Port device team_slave_1 removed [ 455.920935][ T5847] Bluetooth: hci4: command tx timeout [ 456.060604][ T5887] ================================================================== [ 456.068744][ T5887] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 456.077549][ T5887] Read of size 8 at addr ffff88804c8c22e8 by task kworker/0:3/5887 [ 456.085461][ T5887] [ 456.087817][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 456.087839][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.087853][ T5887] Workqueue: events smc_ib_port_event_work [ 456.087880][ T5887] Call Trace: [ 456.087887][ T5887] [ 456.087895][ T5887] dump_stack_lvl+0x189/0x250 [ 456.087920][ T5887] ? rcu_is_watching+0x15/0xb0 [ 456.087939][ T5887] ? __kasan_check_byte+0x12/0x40 [ 456.087956][ T5887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.087979][ T5887] ? rcu_is_watching+0x15/0xb0 [ 456.087998][ T5887] ? lock_release+0x4b/0x3e0 [ 456.088017][ T5887] ? __virt_addr_valid+0x1c8/0x5c0 [ 456.088041][ T5887] ? __virt_addr_valid+0x4a5/0x5c0 [ 456.088066][ T5887] print_report+0xca/0x240 [ 456.088087][ T5887] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 456.088111][ T5887] kasan_report+0x118/0x150 [ 456.088131][ T5887] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 456.088160][ T5887] __ethtool_get_link_ksettings+0x6e/0x190 [ 456.088186][ T5887] ib_get_eth_speed+0x15e/0x7b0 [ 456.088216][ T5887] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 456.088251][ T5887] ? do_raw_spin_unlock+0x122/0x240 [ 456.088294][ T5887] rxe_query_port+0x93/0x3b0 [ 456.088321][ T5887] ib_query_port+0x170/0x830 [ 456.088353][ T5887] smc_ib_port_event_work+0x15a/0x940 [ 456.088387][ T5887] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.088413][ T5887] ? process_scheduled_works+0x9ef/0x17b0 [ 456.088434][ T5887] ? process_scheduled_works+0x9ef/0x17b0 [ 456.088458][ T5887] process_scheduled_works+0xae1/0x17b0 [ 456.088497][ T5887] ? __pfx_process_scheduled_works+0x10/0x10 [ 456.088530][ T5887] worker_thread+0x8a0/0xda0 [ 456.088569][ T5887] kthread+0x711/0x8a0 [ 456.088600][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 456.088622][ T5887] ? __pfx_kthread+0x10/0x10 [ 456.088651][ T5887] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.088677][ T5887] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.088704][ T5887] ? __pfx_kthread+0x10/0x10 [ 456.088732][ T5887] ret_from_fork+0x4bc/0x870 [ 456.088755][ T5887] ? __pfx_ret_from_fork+0x10/0x10 [ 456.088781][ T5887] ? __switch_to_asm+0x39/0x70 [ 456.088799][ T5887] ? __switch_to_asm+0x33/0x70 [ 456.088816][ T5887] ? __pfx_kthread+0x10/0x10 [ 456.088843][ T5887] ret_from_fork_asm+0x1a/0x30 [ 456.088867][ T5887] [ 456.088873][ T5887] [ 456.311778][ T5887] Allocated by task 5831: [ 456.316115][ T5887] kasan_save_track+0x3e/0x80 [ 456.320814][ T5887] __kasan_kmalloc+0x93/0xb0 [ 456.325423][ T5887] __kvmalloc_node_noprof+0x5cd/0x910 [ 456.330813][ T5887] alloc_netdev_mqs+0xa6/0x11b0 [ 456.335678][ T5887] rtnl_create_link+0x31f/0xd10 [ 456.340545][ T5887] rtnl_newlink_create+0x25c/0xb00 [ 456.345666][ T5887] rtnl_newlink+0x16e4/0x1c80 [ 456.350357][ T5887] rtnetlink_rcv_msg+0x7cf/0xb70 [ 456.355325][ T5887] netlink_rcv_skb+0x208/0x470 [ 456.360099][ T5887] netlink_unicast+0x82f/0x9e0 [ 456.364964][ T5887] netlink_sendmsg+0x805/0xb30 [ 456.369735][ T5887] __sock_sendmsg+0x21c/0x270 [ 456.374425][ T5887] __sys_sendto+0x3bd/0x520 [ 456.378932][ T5887] __x64_sys_sendto+0xde/0x100 [ 456.383699][ T5887] do_syscall_64+0xfa/0xfa0 [ 456.388231][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.394141][ T5887] [ 456.396470][ T5887] Freed by task 15446: [ 456.400573][ T5887] kasan_save_track+0x3e/0x80 [ 456.405276][ T5887] __kasan_save_free_info+0x46/0x50 [ 456.410505][ T5887] __kasan_slab_free+0x5c/0x80 [ 456.415284][ T5887] kfree+0x19a/0x6d0 [ 456.419190][ T5887] device_release+0x9c/0x1c0 [ 456.423817][ T5887] kobject_put+0x22b/0x480 [ 456.428248][ T5887] netdev_run_todo+0xd2e/0xea0 [ 456.433022][ T5887] default_device_exit_batch+0x81e/0x890 [ 456.438672][ T5887] ops_undo_list+0x525/0x990 [ 456.443266][ T5887] cleanup_net+0x4d8/0x820 [ 456.447688][ T5887] process_scheduled_works+0xae1/0x17b0 [ 456.453249][ T5887] worker_thread+0x8a0/0xda0 [ 456.457847][ T5887] kthread+0x711/0x8a0 [ 456.461947][ T5887] ret_from_fork+0x4bc/0x870 [ 456.466603][ T5887] ret_from_fork_asm+0x1a/0x30 [ 456.471385][ T5887] [ 456.473731][ T5887] The buggy address belongs to the object at ffff88804c8c2000 [ 456.473731][ T5887] which belongs to the cache kmalloc-cg-4k of size 4096 [ 456.488052][ T5887] The buggy address is located 744 bytes inside of [ 456.488052][ T5887] freed 4096-byte region [ffff88804c8c2000, ffff88804c8c3000) [ 456.501947][ T5887] [ 456.504281][ T5887] The buggy address belongs to the physical page: [ 456.510717][ T5887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c8c0 [ 456.519514][ T5887] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 456.528019][ T5887] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 456.535566][ T5887] page_type: f5(slab) [ 456.539555][ T5887] raw: 00fff00000000040 ffff88801a030500 dead000000000122 0000000000000000 [ 456.548145][ T5887] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 456.556739][ T5887] head: 00fff00000000040 ffff88801a030500 dead000000000122 0000000000000000 [ 456.565443][ T5887] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 456.574147][ T5887] head: 00fff00000000003 ffffea0001323001 00000000ffffffff 00000000ffffffff [ 456.582831][ T5887] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 456.591608][ T5887] page dumped because: kasan: bad access detected [ 456.598036][ T5887] page_owner tracks the page as allocated [ 456.603755][ T5887] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 95407790442, free_ts 32181670574 [ 456.626951][ T5887] post_alloc_hook+0x240/0x2a0 [ 456.631823][ T5887] get_page_from_freelist+0x2365/0x2440 [ 456.637377][ T5887] __alloc_frozen_pages_noprof+0x181/0x370 [ 456.643189][ T5887] alloc_pages_mpol+0x232/0x4a0 [ 456.648050][ T5887] allocate_slab+0x96/0x350 [ 456.652575][ T5887] ___slab_alloc+0xe94/0x18a0 [ 456.657309][ T5887] __slab_alloc+0x65/0x100 [ 456.661749][ T5887] __kvmalloc_node_noprof+0x6ba/0x910 [ 456.667155][ T5887] alloc_netdev_mqs+0xa6/0x11b0 [ 456.672103][ T5887] rtnl_create_link+0x31f/0xd10 [ 456.676963][ T5887] rtnl_newlink_create+0x25c/0xb00 [ 456.682173][ T5887] rtnl_newlink+0x16e4/0x1c80 [ 456.686880][ T5887] rtnetlink_rcv_msg+0x7cf/0xb70 [ 456.691834][ T5887] netlink_rcv_skb+0x208/0x470 [ 456.696634][ T5887] netlink_unicast+0x82f/0x9e0 [ 456.701523][ T5887] netlink_sendmsg+0x805/0xb30 [ 456.706316][ T5887] page last free pid 1 tgid 1 stack trace: [ 456.712125][ T5887] __free_frozen_pages+0xbc4/0xd30 [ 456.717260][ T5887] free_contig_range+0x1bd/0x4a0 [ 456.722209][ T5887] destroy_args+0x69/0x660 [ 456.726642][ T5887] debug_vm_pgtable+0x39f/0x3b0 [ 456.731503][ T5887] do_one_initcall+0x236/0x820 [ 456.736282][ T5887] do_initcall_level+0x104/0x190 [ 456.741238][ T5887] do_initcalls+0x59/0xa0 [ 456.745585][ T5887] kernel_init_freeable+0x334/0x4b0 [ 456.750823][ T5887] kernel_init+0x1d/0x1d0 [ 456.755163][ T5887] ret_from_fork+0x4bc/0x870 [ 456.759774][ T5887] ret_from_fork_asm+0x1a/0x30 [ 456.764546][ T5887] [ 456.766882][ T5887] Memory state around the buggy address: [ 456.772513][ T5887] ffff88804c8c2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.780581][ T5887] ffff88804c8c2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.788654][ T5887] >ffff88804c8c2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.796720][ T5887] ^ [ 456.804188][ T5887] ffff88804c8c2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.812261][ T5887] ffff88804c8c2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.820335][ T5887] ================================================================== [ 456.876818][T16553] Cannot find del_set index 49151 as target [ 456.884112][ T5887] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 456.891362][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 456.900854][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.911028][ T5887] Workqueue: events smc_ib_port_event_work [ 456.916884][ T5887] Call Trace: [ 456.920173][ T5887] [ 456.923214][ T5887] dump_stack_lvl+0x99/0x250 [ 456.927825][ T5887] ? __asan_memcpy+0x40/0x70 [ 456.932432][ T5887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.937673][ T5887] ? __pfx__printk+0x10/0x10 [ 456.942286][ T5887] vpanic+0x237/0x6d0 [ 456.946292][ T5887] ? __pfx_vpanic+0x10/0x10 [ 456.950813][ T5887] ? preempt_schedule+0xae/0xc0 [ 456.955686][ T5887] ? __pfx_preempt_schedule+0x10/0x10 [ 456.961082][ T5887] panic+0xb9/0xc0 [ 456.964821][ T5887] ? __pfx_panic+0x10/0x10 [ 456.969384][ T5887] ? __pfx_panic+0x10/0x10 [ 456.973823][ T5887] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 456.979816][ T5887] check_panic_on_warn+0x89/0xb0 [ 456.984786][ T5887] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 456.990777][ T5887] end_report+0x78/0x160 [ 456.995043][ T5887] kasan_report+0x129/0x150 [ 456.999557][ T5887] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 457.005727][ T5887] __ethtool_get_link_ksettings+0x6e/0x190 [ 457.011552][ T5887] ib_get_eth_speed+0x15e/0x7b0 [ 457.016515][ T5887] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 457.021915][ T5887] ? do_raw_spin_unlock+0x122/0x240 [ 457.027135][ T5887] rxe_query_port+0x93/0x3b0 [ 457.031743][ T5887] ib_query_port+0x170/0x830 [ 457.036368][ T5887] smc_ib_port_event_work+0x15a/0x940 [ 457.041765][ T5887] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.047090][ T5887] ? process_scheduled_works+0x9ef/0x17b0 [ 457.052822][ T5887] ? process_scheduled_works+0x9ef/0x17b0 [ 457.058649][ T5887] process_scheduled_works+0xae1/0x17b0 [ 457.064224][ T5887] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.070313][ T5887] worker_thread+0x8a0/0xda0 [ 457.074927][ T5887] kthread+0x711/0x8a0 [ 457.079014][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 457.084135][ T5887] ? __pfx_kthread+0x10/0x10 [ 457.088741][ T5887] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.093975][ T5887] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.099191][ T5887] ? __pfx_kthread+0x10/0x10 [ 457.103798][ T5887] ret_from_fork+0x4bc/0x870 [ 457.108402][ T5887] ? __pfx_ret_from_fork+0x10/0x10 [ 457.113537][ T5887] ? __switch_to_asm+0x39/0x70 [ 457.118306][ T5887] ? __switch_to_asm+0x33/0x70 [ 457.123074][ T5887] ? __pfx_kthread+0x10/0x10 [ 457.127679][ T5887] ret_from_fork_asm+0x1a/0x30 [ 457.132461][ T5887] [ 457.135793][ T5887] Kernel Offset: disabled [ 457.140127][ T5887] Rebooting in 86400 seconds..