last executing test programs: 3.465286665s ago: executing program 0 (id=2045): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000500)=""/16, 0x26, 0x10, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, 0x0, 0x44080) sendmsg$nl_route_sched(r0, 0x0, 0x4c050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) getsockname$l2tp6(0xffffffffffffffff, 0x0, &(0x7f0000000400)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0xffff}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x17, 0x1a, 0x0, @multicast1}}}}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8) 2.940030846s ago: executing program 2 (id=2050): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x2014, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0xffffffffffffff55) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000007c0)=@device_b, &(0x7f0000000800)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x579c}, @device_b, @device_a, @from_mac=@device_b, {0xf, 0x4}}, 0x80, 0xb6b, @broadcast, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x1, 0x0, 0x5, 0x0, {0x355e, 0x1ffd, 0x0, 0x308, 0x0, 0x1, 0x1, 0x1}, 0x1b01, 0xfffffff8, 0x3}}, [{0xdd, 0x37, "e81ce481592fbe8cfdf04e5e0cc28cbdc92400b21e6d535785769f56c447c62c2034a4b964516b4c58eac2c1caf750ddba785c92113179"}, {0xdd, 0x53, "6e48c25e63b7819a37fbbf1bb0bcc964cbfb6728d33915eb357621a9e06073e183afa8c62a6bd854f8570a855e7d0d09dcddd4ffee840b024dfeac25f0735e712f07285766356d2925ef40c0b7cf34fbac243d"}, {0xdd, 0x2b, "d2008cf80c7bcbd2e9a5cb454b960a666e70129a0baebdbd88e9d1ff7e69c881a4dd26ce7a3d2bbe38aa64"}, {0xdd, 0x29, "35dcfc5cb51513a88b8c6ce2698015fb17d20b639be8f424075ef4d4f845f8c9f0c05ec6f3f4a3320d"}, {0xdd, 0x63, "a6fd48f7c31d0a917c617c3942c28e4e9bc87f43ddaf094dbdc8abb0b18dd755484c472f646efdce327127da12c4793b692a4e75b1e9b42ccf3246b6d4bcb17b5ab42096a3ed7a3e91ea6b7d3d811b5ebd9b763877ff1d0b4f0a980e37af1a763d3379"}, {0xdd, 0x26, "a20d2d34b4ecd90074015a6c89aea1564ec18447eaa324cc87c1d33e45157c209d1fd018f4c0"}, {0xdd, 0x94, "95db7973aa6db7a89cc715cb3b8d783cb895a5542d3cc2bf1023c02d77a67e44cb8b0a5e04bf0ca1e3e6d4452f5bb275c7fa39fd9ae15511d47e9e505f18ba0bef73a5604e410193c025e877fa8e5ca6f34e79b6ad57e7da878671849dbe62eae8d118e2cdf2dc9077e6070555a509dce70fde2858560ac67ad04bb4d9e5c68d03464cc0e697ac39ef12d5913bc63fb2ddaca88b"}, {0xdd, 0x50, "d40900db35ff07360477ac0d940e5c85a3a28796c293276baf3cfd34229f536c6211bee163bf38eb1fedcda841eb2afdcb6910654a5e6bab74ecedd85a456f0f1449ee5fc0b6477709a0645113cff874"}, {0xdd, 0x8d, "8c986c6d74386fc0751c467705224928ad1a23b80f02fde27c1ea5895ea34dc796436098f471c19f61d8f0b776938571c7034f468fc53a64bb95c88badf1c7397a2762e5cfa3340b4bc12e39bbb8c5219a47eab9f090710d7d69a7baa9fde4d50a965cdae48cf5943febace44c670131378282a94c1a2edd2079341620697f64ac40ffdbe9212393367e9b6d58"}]}, 0x330) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2d, 0x2, 0x0) setsockopt(r5, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r5, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "000000000000080118000200000006000a00"}, 0x80, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r8, &(0x7f0000008400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3772c5fb44797bb7, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x9, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x0, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x80}, 0x94) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r9, r10, 0x36, 0x0, @val=@kprobe_multi=@syms={0x0, 0x2, &(0x7f0000000740)=[&(0x7f0000000080)='vxcan1\x00', &(0x7f0000000700)='&-}\x00'], 0x0, 0x5}}, 0x30) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) pwritev(r2, &(0x7f00000006c0)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x80008001, 0x80) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r13, 0x10e, 0x3, 0xfffffffffffffffd, &(0x7f0000000740)) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB="f9cd07946ec090d88f9d44225acb5765773a39fd4b6e151bb71e19f2c904023c7fd8b5bf70a6ad393d0f449d7b4adb4f556cf67f84044fc7394c5deb94dfc9077886be7b88f16204ba44f7f4070da90b94820b55d1697ca8e9324cc1e1bfe91b4d10a762f33f54328e164033f5ec424cdf34b2105a1b4a55e52217627ac44b2f45c9cb65f1e09433bac05aaaf13f0c24b8729cf14f2e17691a277afeaf710600000000000000"], 0x60}, 0x1, 0x600}, 0x8000) 2.834099561s ago: executing program 3 (id=2051): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000006c0)=[@in6={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), 0x4) (async, rerun: 64) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000001c0)=""/169, &(0x7f0000000280)=0xa9) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) (async) sendmsg$inet(r3, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000140)="9745edff0000000001008cc5ffffffff", 0x10}, {&(0x7f0000000000)="74145fdae5ca0070777c079c", 0xc}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101}}}], 0x20}, 0x4044040) (async, rerun: 32) recvmsg$unix(r3, &(0x7f00000003c0)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)=""/196, 0xc4}], 0x1, &(0x7f0000000300)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x10000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080006"], 0x44}}, 0x2000800) 2.717546567s ago: executing program 4 (id=2054): r0 = socket$netlink(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x10}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x40000002}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) (async) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000080)) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000890000000800000002"], 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48581, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="fffffa00fcff8000000000"]) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r9, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) (async) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000040)={r12}, &(0x7f0000000100)=0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000480), &(0x7f0000000280)=@udp=r9, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r7, &(0x7f0000000380), 0x0}, 0x20) socket$l2tp(0x2, 0x2, 0x73) 2.633766129s ago: executing program 0 (id=2055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x49, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x4000840) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) getsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r4 = socket(0x1f, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000feffffff00000000060000001801000020756ca500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0f00008500000006000000b7080000000000007b8af8ff00000000b7080000000000877b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r4, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000feffffff00000000060000001801000020756ca500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0f00008500000006000000b7080000000000007b8af8ff00000000b7080000000000877b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r4, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="88066343669531e72e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r9, &(0x7f00000006c0)={0x1d, r10}, 0xfffffffffffffe9f) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80801, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80801, 0x0) 2.527377187s ago: executing program 4 (id=2057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000004000000000000400000000011e7f1a375b76eab711c45763706f1127ff016a8b11148129c97c676df677a94155d772413783c194dc47fde7b792db09cc7793e7131459c15b4798cf8b18a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x10, 0x5, 0xfffffffc) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x1) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000300000002000000ff"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000ba0000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340006f0803140000001104000000000000000000000000000a"], 0x64}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100300008004500002c0000000000069078ac1414bbac9414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002cb379078000204020302"], 0x0) 2.413772679s ago: executing program 0 (id=2058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060128750000000006000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x2000000, 0x0, 0x20000810}, 0x20004000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8, 0x1, 0x0}, &(0x7f0000000780)=0x40) 2.379433223s ago: executing program 1 (id=2060): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca3", 0x4}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000340)=[@iv={0x60, 0x117, 0x2, 0x48, "7c66b74a866184c3f2174e22d76c97f77645bc6980ed35b0359123e7299a67ddf6d5f40f24a995bc211879c47836d55e1a9035dcac01c353041ae4dce16a9f650fc3057b3727d706"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x78, 0x4a1ab295fe1da1cb}], 0x1, 0x40800) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000080), 0x4) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/97, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xfffffffffffffefd}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r9, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) sendmsg$NFT_BATCH(r5, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x81) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 2.201443848s ago: executing program 4 (id=2061): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macsec0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000440)=""/8, 0x8, 0x0, &(0x7f0000000480)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000e00000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000001800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r11, 0x4058587a, &(0x7f0000000b00)={{r10, &(0x7f0000000380)=':&]@!\x00', 0x200000, &(0x7f00000005c0)={@align, {0x1, 0x9, 0x3, 0x8}}, 0x5, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000a40)=0x4}, {[0x10001, 0x7, 0x2, 0x80000001]}, 0x1000, 0x58, &(0x7f0000000a80)=""/88}) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r14}, &(0x7f0000000040), &(0x7f0000000140)=r13}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x23, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @exit, @generic={0x4c, 0x2, 0x2, 0x1, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x7, 0x0, 0x0, 0x0, 0x9, 0x20, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', r3, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x5, 0xfea3, 0x91}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[r5, r6, r7, r9, r10, r12, 0xffffffffffffffff, r14], &(0x7f0000000700)=[{0x0, 0x2, 0x10, 0x1}, {0x2, 0x4, 0x3, 0x7}], 0x10, 0x6}, 0x94) unshare(0x20400) r15 = socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x48) bind$unix(r15, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) close(r15) 2.048877361s ago: executing program 1 (id=2062): ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd6067060000000600000000", 0x1d}, {&(0x7f0000000100)="a1c6757dfaadb021e548300000006a61a823efff3b4653473c82c035f5340400006cf0c0a85f932dcb0e5b5564dd8dccb9", 0x31}, {&(0x7f0000000440)="cb", 0x1}], 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x2, 0x3, 0x2) close(r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg0\x00'}) r6 = socket$kcm(0x2, 0x3, 0x2) shutdown(0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x800) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}], 0x2, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x53}, @multicast1}}}], 0x20}, 0x10) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) ioctl$sock_ifreq(r7, 0xcdfc, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010405000000000000000000000000000a0002003deb1e7b07d1"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004004}, 0x40814) 2.017232119s ago: executing program 2 (id=2063): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x9, 0x5f, 0xc08, 0x3ff, 0xc3, 0x1, 0x62, 'syz1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000080007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000040)={0x7000000, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 2.013055851s ago: executing program 4 (id=2064): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) 1.933724439s ago: executing program 0 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="54c50100028000005800128008000100736974004c000280080014006c040000080002006401010205000a0001000000050005000c0000000500090004000000080002007f000001060011004e21000006001000000800000800030000000000080003"], 0x80}}, 0x4000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@allocspi={0x128, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, {0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0xfffff811}, 0x70bd2d, 0x0, 0x0, 0x4, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@remote, 0xa, 0x96, 0x9}}]}, 0x128}, 0x1, 0x0, 0x0, 0x24024041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r8, 0x0) accept4(r8, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0xf8, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gretap0\x00', {0x2}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@ttl={{0x28}, {0x0, 0x6}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xffff, 0x2, [0x16, 0x1, 0x677, 0x10, 0x3, 0x14, 0x8, 0x8, 0x18, 0x8, 0x4, 0x3, 0x36, 0x24, 0xd, 0x14], 0x1, 0x0, 0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x7, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="620ac4ff000000007110b10000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a523ffff850000000400000095"], &(0x7f0000000400)='GPL\x00'}, 0x94) 1.85012189s ago: executing program 3 (id=2066): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000240)=0x148, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r2, 0x0, 0x0, 0x2022, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000280)={0x18, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x51, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x18, 0x0, 0x0, 0x900}, 0x20004020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000006c00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000006bc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x3840}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000000) 1.810192837s ago: executing program 4 (id=2067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff1}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x5, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x6, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x40, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x9, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.720302401s ago: executing program 2 (id=2068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0007080001000000000014"], 0x4a) 1.71982002s ago: executing program 1 (id=2069): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x80000, 0x6) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x2a, 0x0, 0x1, 0xe2}, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r4, 0x0) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) (rerun: 32) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) (rerun: 64) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d6163736500"/32, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="0500110001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (rerun: 64) 1.633527637s ago: executing program 3 (id=2070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) syz_emit_ethernet(0x85, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a8435004f0601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e228edbae77a5"], 0x0) 1.480468067s ago: executing program 3 (id=2071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000004000000000000400000000011e7f1a375b76eab711c45763706f1127ff016a8b11148129c97c676df677a94155d772413783c194dc47fde7b792db09cc7793e7131459c15b4798cf8b18a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x10, 0x5, 0xfffffffc) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x1) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000300000002000000ff"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000ba0000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340006f0803140000001104000000000000000000000000000a"], 0x64}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100300008004500002c0000000000069078ac1414bbac9414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002cb379078000204020302"], 0x0) 1.44167963s ago: executing program 2 (id=2072): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) close(r1) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164030073742d6c696e6b00220c000f800800040000000100"], 0x38}}, 0x8000) 1.073215778s ago: executing program 4 (id=2073): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x44) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x8, 0x4, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0x40106183, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0}) recvfrom$inet(r3, &(0x7f00000000c0)=""/82, 0x52, 0x40000000, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000003c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80, 0x0}, 0x0) 1.065426536s ago: executing program 3 (id=2074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000840)={0x0, 0x29, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001b14010029bd7000ffdbe825080045006d46e539"], 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0xc0) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007007f0000017f00000111"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x921}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xfffffffffffffd3c}, {0x14}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) 1.023665803s ago: executing program 2 (id=2075): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x44) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1, {0x0, 0xff}, 0xfe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 905.300002ms ago: executing program 0 (id=2076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000054000100"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 778.302005ms ago: executing program 3 (id=2077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 739.190687ms ago: executing program 1 (id=2078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20700, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) pread64(r0, 0x0, 0x0, 0x7) 669.865393ms ago: executing program 2 (id=2079): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8949, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000240)={'bridge0\x00', @ifru_ivalue=0x10}) 635.786076ms ago: executing program 0 (id=2080): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000180100800c00018008000400", @ANYRES32=r2], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x6, 0x8, 0x2b6}]}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61]}}, 0x0, 0x44, 0x0, 0x4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x103000, 0x800, 0x9}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0xfd, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) 372.422289ms ago: executing program 1 (id=2081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) syz_emit_ethernet(0x85, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a8435004f0601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e228edbae77a5"], 0x0) 0s ago: executing program 1 (id=2082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0007080001000000000014"], 0x4a) kernel console output (not intermixed with test programs): ered promiscuous mode [ 178.810204][ T8627] tunl0: entered promiscuous mode [ 178.819842][ T8627] gre0: entered promiscuous mode [ 178.831977][ T8627] gretap0: entered promiscuous mode [ 178.834887][ T8627] erspan0: entered promiscuous mode [ 178.837454][ T8627] ip_vti0: entered promiscuous mode [ 178.840358][ T8627] ip6_vti0: entered promiscuous mode [ 178.865444][ T8627] sit0: entered promiscuous mode [ 178.868483][ T8627] ip6tnl0: entered promiscuous mode [ 178.870280][ T8627] ip6gre0: entered promiscuous mode [ 178.892018][ T8627] syz_tun: entered promiscuous mode [ 178.896045][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.896518][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.898076][ T8627] bridge0: entered promiscuous mode [ 178.925155][ T8627] vcan0: entered promiscuous mode [ 178.937532][ T8627] team0: entered promiscuous mode [ 178.937555][ T8627] team_slave_0: entered promiscuous mode [ 178.937775][ T8627] team_slave_1: entered promiscuous mode [ 178.946009][ T8627] nlmon0: entered promiscuous mode [ 178.957943][ T8627] batadv0: entered promiscuous mode [ 178.969028][ T8627] vxcan0: entered promiscuous mode [ 178.969770][ T8627] vxcan1: entered promiscuous mode [ 178.971553][ T8627] veth0: entered promiscuous mode [ 178.978189][ T8627] veth1: entered promiscuous mode [ 178.994251][ T8627] wg0: entered promiscuous mode [ 178.998631][ T8627] wg1: entered promiscuous mode [ 179.000363][ T8627] wg2: entered promiscuous mode [ 179.016262][ T8627] veth0_to_bridge: entered promiscuous mode [ 179.028884][ T8627] veth1_to_bridge: entered promiscuous mode [ 179.038989][ T8627] veth0_to_bond: entered promiscuous mode [ 179.043019][ T8627] bond_slave_0: entered promiscuous mode [ 179.053271][ T8627] veth1_to_bond: entered promiscuous mode [ 179.055722][ T8627] bond_slave_1: entered promiscuous mode [ 179.055946][ T8627] veth0_to_team: entered promiscuous mode [ 179.059895][ T8627] veth1_to_team: entered promiscuous mode [ 179.085099][ T8627] veth1_to_batadv: entered promiscuous mode [ 179.087141][ T8627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.087178][ T8627] batadv_slave_1: entered promiscuous mode [ 179.089258][ T8627] xfrm0: entered promiscuous mode [ 179.095603][ T8627] veth0_to_hsr: entered promiscuous mode [ 179.107977][ T8627] veth1_to_hsr: entered promiscuous mode [ 179.123438][ T8627] hsr0: entered promiscuous mode [ 179.135285][ T8627] veth1_virt_wifi: entered promiscuous mode [ 179.137099][ T8627] veth0_virt_wifi: entered promiscuous mode [ 179.139043][ T8627] virt_wifi0: entered promiscuous mode [ 179.160072][ T8627] vlan0: entered promiscuous mode [ 179.168379][ T8627] vlan1: entered promiscuous mode [ 179.176749][ T8627] macvlan0: entered promiscuous mode [ 179.178998][ T8627] macvlan1: entered promiscuous mode [ 179.186180][ T8627] ipvlan0: entered promiscuous mode [ 179.186991][ T8627] ipvlan1: entered promiscuous mode [ 179.192641][ T8627] geneve0: entered promiscuous mode [ 179.205496][ T8627] geneve1: entered promiscuous mode [ 179.216276][ T8627] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 179.218240][ T8627] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 179.220117][ T8627] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 179.247994][ T8627] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 179.249275][ T8627] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 179.249395][ T8627] syztnl1: entered promiscuous mode [ 179.249967][ T8627] vxlan0: entered promiscuous mode [ 179.274356][ T8627] bond1: entered promiscuous mode [ 179.278156][ T8627] vlan2: entered promiscuous mode [ 179.289270][ T8627] ipvlan2: entered promiscuous mode [ 179.289389][ T8627] ipvlan3: entered promiscuous mode [ 179.301682][ T8627] bridge2: entered promiscuous mode [ 179.302926][ T8627] bridge3: entered promiscuous mode [ 179.304667][ T8627] bond3: entered promiscuous mode [ 179.304772][ T8627] : entered promiscuous mode [ 179.304880][ T8627] veth2: entered promiscuous mode [ 179.304995][ T8627] veth3: entered promiscuous mode [ 179.305104][ T8627] dummy1: entered promiscuous mode [ 179.305235][ T8627] veth4: entered promiscuous mode [ 179.305344][ T8627] veth5: entered promiscuous mode [ 179.381585][ T137] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.381623][ T137] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.381667][ T137] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.381696][ T137] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.381736][ T137] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.381764][ T137] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.381803][ T137] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.381832][ T137] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.604855][ T8640] __nla_validate_parse: 7 callbacks suppressed [ 179.604876][ T8640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.659'. [ 179.604894][ T8640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.659'. [ 179.605504][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.659'. [ 179.979806][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.665'. [ 180.001822][ T8670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.667'. [ 180.080339][ T8671] netlink: 100 bytes leftover after parsing attributes in process `syz.0.667'. [ 180.140850][ T8671] netlink: 100 bytes leftover after parsing attributes in process `syz.0.667'. [ 180.144855][ T8678] netlink: 56 bytes leftover after parsing attributes in process `syz.1.665'. [ 180.146337][ T8671] netlink: 100 bytes leftover after parsing attributes in process `syz.0.667'. [ 180.186992][ T8671] netlink: 100 bytes leftover after parsing attributes in process `syz.0.667'. [ 180.442599][ T8695] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 180.759940][ T8710] 0·: renamed from hsr0 (while UP) [ 180.798145][ T8710] 0·: entered allmulticast mode [ 180.798172][ T8710] hsr_slave_0: entered allmulticast mode [ 180.798189][ T8710] hsr_slave_1: entered allmulticast mode [ 180.798740][ T8710] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 180.919073][ T8717] FAULT_INJECTION: forcing a failure. [ 180.919073][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.919111][ T8717] CPU: 1 UID: 0 PID: 8717 Comm: syz.0.673 Not tainted syzkaller #0 PREEMPT(full) [ 180.919136][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.919150][ T8717] Call Trace: [ 180.919159][ T8717] [ 180.919168][ T8717] dump_stack_lvl+0xe8/0x150 [ 180.919206][ T8717] should_fail_ex+0x410/0x560 [ 180.919237][ T8717] _copy_from_user+0x2d/0xb0 [ 180.919265][ T8717] do_tcp_setsockopt+0x504/0x1f80 [ 180.919302][ T8717] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 180.919340][ T8717] ? aa_sock_opt_perm+0xe1/0x1e0 [ 180.919371][ T8717] ? sock_common_setsockopt+0x36/0xc0 [ 180.919391][ T8717] ? tcp_setsockopt+0x3d/0xe0 [ 180.919419][ T8717] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.919444][ T8717] do_sock_setsockopt+0x17c/0x1b0 [ 180.919477][ T8717] __x64_sys_setsockopt+0x13d/0x1b0 [ 180.919511][ T8717] do_syscall_64+0x166/0x520 [ 180.919534][ T8717] ? trace_irq_disable+0x3b/0x140 [ 180.919557][ T8717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.919584][ T8717] ? clear_bhb_loop+0x70/0xc0 [ 180.919618][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.919641][ T8717] RIP: 0033:0x7fb61cf9e159 [ 180.919662][ T8717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.919680][ T8717] RSP: 002b:00007fb61de9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.919704][ T8717] RAX: ffffffffffffffda RBX: 00007fb61d225fa0 RCX: 00007fb61cf9e159 [ 180.919721][ T8717] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000003 [ 180.919734][ T8717] RBP: 00007fb61de9f090 R08: 0000000000000004 R09: 0000000000000000 [ 180.919748][ T8717] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 180.919762][ T8717] R13: 00007fb61d226038 R14: 00007fb61d225fa0 R15: 00007ffd8fdf8c98 [ 180.919806][ T8717] [ 181.968129][ T8771] FAULT_INJECTION: forcing a failure. [ 181.968129][ T8771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.968166][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.4.688 Not tainted syzkaller #0 PREEMPT(full) [ 181.968191][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.968205][ T8771] Call Trace: [ 181.968214][ T8771] [ 181.968224][ T8771] dump_stack_lvl+0xe8/0x150 [ 181.968263][ T8771] should_fail_ex+0x410/0x560 [ 181.968295][ T8771] _copy_to_user+0x31/0xb0 [ 181.968327][ T8771] simple_read_from_buffer+0xe1/0x170 [ 181.968366][ T8771] proc_fail_nth_read+0x1bb/0x230 [ 181.968401][ T8771] ? common_file_perm+0x20e/0x2b0 [ 181.968440][ T8771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.968480][ T8771] ? rw_verify_area+0x24a/0x4c0 [ 181.968516][ T8771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.968551][ T8771] vfs_read+0x213/0xa80 [ 181.968591][ T8771] ? __pfx___mutex_lock+0x10/0x10 [ 181.968621][ T8771] ? __pfx_vfs_read+0x10/0x10 [ 181.968656][ T8771] ? __fget_files+0x2a/0x420 [ 181.968692][ T8771] ? __fget_files+0x3a2/0x420 [ 181.968722][ T8771] ? __fget_files+0x2a/0x420 [ 181.968764][ T8771] ksys_read+0x150/0x270 [ 181.968800][ T8771] ? __pfx_ksys_read+0x10/0x10 [ 181.968847][ T8771] do_syscall_64+0x166/0x520 [ 181.968871][ T8771] ? trace_irq_disable+0x3b/0x140 [ 181.968893][ T8771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.968917][ T8771] ? clear_bhb_loop+0x70/0xc0 [ 181.968946][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.968969][ T8771] RIP: 0033:0x7fcfa155e98e [ 181.968990][ T8771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.969008][ T8771] RSP: 002b:00007fcfa2511fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.969033][ T8771] RAX: ffffffffffffffda RBX: 00007fcfa25126c0 RCX: 00007fcfa155e98e [ 181.969050][ T8771] RDX: 000000000000000f RSI: 00007fcfa25120a0 RDI: 0000000000000004 [ 181.969065][ T8771] RBP: 00007fcfa2512090 R08: 0000000000000000 R09: 0000000000000000 [ 181.969079][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.969092][ T8771] R13: 00007fcfa1826038 R14: 00007fcfa1825fa0 R15: 00007ffcd9587798 [ 181.969129][ T8771] [ 182.775271][ T8803] IPv6: addrconf: prefix option has invalid lifetime [ 182.925990][ T8806] bridge0: port 3(wlan1) entered blocking state [ 182.926094][ T8806] bridge0: port 3(wlan1) entered disabled state [ 182.926332][ T8806] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 182.995691][ T8806] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 183.346637][ T8817] ip6gre1: entered promiscuous mode [ 183.346662][ T8817] ip6gre1: entered allmulticast mode [ 183.638600][ T8845] sctp: [Deprecated]: syz.4.707 (pid 8845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.638600][ T8845] Use struct sctp_sack_info instead [ 183.680975][ T8845] syzkaller1: entered promiscuous mode [ 183.681001][ T8845] syzkaller1: entered allmulticast mode [ 184.342350][ T8878] ip_tables: iptables: counters copy to user failed while replacing table [ 184.512235][ T1494] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 184.512286][ T1494] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 184.512325][ T1494] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 184.512362][ T1494] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 184.785675][ T8894] x_tables: duplicate underflow at hook 1 [ 184.851247][ T8886] syzkaller1: entered promiscuous mode [ 184.851273][ T8886] syzkaller1: entered allmulticast mode [ 185.047315][ T8905] openvswitch: netlink: Key type 39 is out of range max 32 [ 185.246410][ T8916] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 185.246435][ T8916] netlink: 'syz.1.725': attribute type 4 has an invalid length. [ 185.246449][ T8916] __nla_validate_parse: 11 callbacks suppressed [ 185.246462][ T8916] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.725'. [ 185.257680][ T8916] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 185.257736][ T8916] netlink: 'syz.1.725': attribute type 4 has an invalid length. [ 185.257769][ T8916] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.725'. [ 185.456559][ T8921] ip_tables: iptables: counters copy to user failed while replacing table [ 185.769101][ T8929] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 186.084068][ T8946] syzkaller0: entered promiscuous mode [ 186.084092][ T8946] syzkaller0: entered allmulticast mode [ 187.488151][ T9010] tipc: Started in network mode [ 187.488184][ T9010] tipc: Node identity 56715476ef6d, cluster identity 4711 [ 187.502437][ T9010] tipc: Enabled bearer , priority 0 [ 187.595676][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 187.595702][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 187.595727][ T9017] netlink: 'syz.4.752': attribute type 18 has an invalid length. [ 187.667528][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 187.667554][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 187.667580][ T9023] netlink: 'syz.4.752': attribute type 18 has an invalid length. [ 187.787355][ T9031] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 187.802847][ T9027] x_tables: duplicate underflow at hook 1 [ 187.803878][ T9026] x_tables: duplicate underflow at hook 1 [ 188.169598][ T9046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.359613][ T59] tipc: Subscription rejected, illegal request [ 188.407018][ T9058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.765'. [ 188.616841][ T5719] tipc: Node number set to 3105641590 [ 188.651286][ T9065] netlink: 52 bytes leftover after parsing attributes in process `syz.3.766'. [ 188.670666][ T9067] ip6gretap1: entered allmulticast mode [ 188.713997][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 188.720078][ T9065] netlink: 52 bytes leftover after parsing attributes in process `syz.3.766'. [ 188.755664][ T5795] bridge0: entered promiscuous mode [ 189.206145][ T9092] sctp: [Deprecated]: syz.2.771 (pid 9092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.206145][ T9092] Use struct sctp_sack_info instead [ 189.346070][ T9096] netlink: 'syz.0.772': attribute type 9 has an invalid length. [ 189.417572][ T9096] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 189.417586][ T9100] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 189.501716][ T9100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.525352][ T9096] ip6gretap0: entered promiscuous mode [ 189.544062][ T9105] dummy0: left promiscuous mode [ 189.598011][ T9105] bond4: (slave dummy0): making interface the new active one [ 189.623954][ T9105] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 189.627324][ T9100] : renamed from dummy0 (while UP) [ 189.813014][ T9117] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 189.879290][ T9117] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.997101][ T9123] bond5: (slave veth3): Enslaving as an active interface with a down link [ 190.019929][ T9128] erspan0: entered promiscuous mode [ 190.028652][ T9128] vlan3: entered promiscuous mode [ 190.076620][ T9117] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.076860][ T9117] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 190.309504][ T9136] IPVS: rr: FWM 3 0x00000003 - no destination available [ 190.368566][ T9139] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 190.368590][ T9139] __nla_validate_parse: 75 callbacks suppressed [ 190.368604][ T9139] netlink: 228 bytes leftover after parsing attributes in process `syz.0.785'. [ 190.634135][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 190.639159][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 190.663730][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 190.668146][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 190.668787][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 190.702891][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 191.015563][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 191.018113][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 191.066923][ T9166] bridge3: entered promiscuous mode [ 191.292021][ T9177] netlink: 880 bytes leftover after parsing attributes in process `syz.0.793'. [ 191.346061][ T9181] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 191.393714][ T9177] syzkaller0: entered promiscuous mode [ 191.393740][ T9177] syzkaller0: entered allmulticast mode [ 191.465196][ T9184] ip_tables: iptables: counters copy to user failed while replacing table [ 192.494583][ T9235] batadv_slave_0: entered promiscuous mode [ 192.560299][ T9235] batadv_slave_0 (unregistering): left promiscuous mode [ 193.416315][ T9273] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 193.460045][ T9271] veth0_to_bond: left promiscuous mode [ 193.476310][ T9271] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 193.803016][ T9284] openvswitch: netlink: Key type 10756 is out of range max 32 [ 194.126395][ T9288] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20001 [ 194.128035][ T9286] syzkaller0: entered promiscuous mode [ 194.128056][ T9286] syzkaller0: entered allmulticast mode [ 194.295321][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.311377][ T9338] macvlan2: entered promiscuous mode [ 195.311405][ T9338] macvlan2: entered allmulticast mode [ 195.343804][ T9338] bond5: entered promiscuous mode [ 195.355470][ T9338] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.373207][ T9338] bond5: left promiscuous mode [ 195.748469][ T9364] ip6gre1: entered promiscuous mode [ 195.748495][ T9364] ip6gre1: entered allmulticast mode [ 195.866754][ T9368] __nla_validate_parse: 44 callbacks suppressed [ 195.866776][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 196.082296][ T9374] erspan1: entered allmulticast mode [ 196.163839][ T9374] syz.4.840 (9374) used obsolete PPPIOCDETACH ioctl [ 196.179895][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 196.187793][ T9374] netlink: 100 bytes leftover after parsing attributes in process `syz.4.840'. [ 196.223223][ T9374] netlink: 100 bytes leftover after parsing attributes in process `syz.4.840'. [ 197.196482][ T9443] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 197.663692][ T9427] syzkaller1: entered promiscuous mode [ 197.663720][ T9427] syzkaller1: entered allmulticast mode [ 198.072894][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 198.114699][ T9475] macsec2: entered promiscuous mode [ 198.325275][ T9495] xt_TCPMSS: Only works on TCP SYN packets [ 198.672006][ T9511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.874'. [ 198.802455][ T9518] syzkaller1: entered promiscuous mode [ 198.802480][ T9518] syzkaller1: entered allmulticast mode [ 199.799523][ T9552] netlink: 'syz.0.891': attribute type 7 has an invalid length. [ 199.799547][ T9552] netlink: 'syz.0.891': attribute type 3 has an invalid length. [ 199.799561][ T9552] netlink: 224 bytes leftover after parsing attributes in process `syz.0.891'. [ 199.855513][ T9553] netlink: 'syz.0.891': attribute type 1 has an invalid length. [ 199.855538][ T9553] netlink: 224 bytes leftover after parsing attributes in process `syz.0.891'. [ 200.169048][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 200.189187][ T9570] syzkaller0: left promiscuous mode [ 200.189211][ T9570] syzkaller0: left allmulticast mode [ 200.190197][ T9571] netlink: 'syz.3.895': attribute type 16 has an invalid length. [ 200.190217][ T9571] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.895'. [ 201.011896][ T9611] netlink: 'syz.1.907': attribute type 4 has an invalid length. [ 201.018184][ T9614] netlink: 'syz.1.907': attribute type 4 has an invalid length. [ 201.095521][ T9599] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.102265][ T9599] Cannot find map_set index 2 as target [ 201.133883][ T9173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.133909][ T9173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.618526][ T9637] netlink: 'syz.2.912': attribute type 39 has an invalid length. [ 201.744233][ T9639] __nla_validate_parse: 2 callbacks suppressed [ 201.744251][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 202.119903][ T9653] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 202.136943][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 202.137199][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 202.172785][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 202.207339][ T9661] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.917'. [ 202.228945][ T9658] netlink: 136 bytes leftover after parsing attributes in process `syz.3.917'. [ 202.254498][ T9659] bridge0: port 3(vlan3) entered blocking state [ 202.254599][ T9659] bridge0: port 3(vlan3) entered disabled state [ 202.254768][ T9659] vlan3: entered allmulticast mode [ 202.254786][ T9659] geneve0: entered allmulticast mode [ 202.274951][ T9659] vlan3: entered promiscuous mode [ 202.718911][ T9668] syz_tun: entered allmulticast mode [ 202.737410][ T9666] syz_tun: left allmulticast mode [ 202.760993][ T9678] netlink: 52 bytes leftover after parsing attributes in process `syz.4.921'. [ 202.781488][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.784090][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.818777][ T9680] netlink: 76 bytes leftover after parsing attributes in process `syz.4.921'. [ 202.835530][ T9680] netlink: 52 bytes leftover after parsing attributes in process `syz.4.921'. [ 203.073265][ T9686] xt_l2tp: unknown flags: e7 [ 203.079841][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 203.301794][ T9691] team0 (unregistering): Port device team_slave_0 removed [ 203.323382][ T9691] team0 (unregistering): Port device team_slave_1 removed [ 203.661673][ T9719] openvswitch: netlink: Unknown key attributes 2 [ 204.319811][ T9721] geneve2: left promiscuous mode [ 204.319837][ T9721] geneve2: left allmulticast mode [ 204.327360][ T9721] vlan2: left allmulticast mode [ 204.327424][ T9721] dummy0: left allmulticast mode [ 204.411741][ T9173] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.411857][ T9173] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.411899][ T9173] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.880856][ T9772] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 204.954381][ T9772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.959284][ T9777] ip_tables: iptables: counters copy to user failed while replacing table [ 205.007543][ T9771] bond0: (slave bond_slave_0): Releasing backup interface [ 205.015570][ T9771] bond0: (slave bond_slave_1): Releasing backup interface [ 205.034567][ T9771] team0: Port device team_slave_0 removed [ 205.045820][ T9771] team0: Port device team_slave_1 removed [ 205.046775][ T9771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.089856][ T9779] netlink: 'syz.2.943': attribute type 16 has an invalid length. [ 205.089879][ T9779] netlink: 'syz.2.943': attribute type 17 has an invalid length. [ 205.128761][ T9779] lo: left promiscuous mode [ 205.143221][ T9779] tunl0: left promiscuous mode [ 205.147167][ T9779] gre0: left promiscuous mode [ 205.166644][ T9779] gretap0: left promiscuous mode [ 205.181773][ T9779] erspan0: left promiscuous mode [ 205.187831][ T9779] ip_vti0: left promiscuous mode [ 205.205174][ T9779] ip6_vti0: left promiscuous mode [ 205.213576][ T9779] sit0: left promiscuous mode [ 205.242956][ T9779] ip6tnl0: left promiscuous mode [ 205.255277][ T9779] ip6gre0: left promiscuous mode [ 205.273108][ T9779] bridge0: left promiscuous mode [ 205.278035][ T9779] vcan0: left promiscuous mode [ 205.291623][ T9779] team0: left promiscuous mode [ 205.297816][ T9779] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.317119][ T9779] nlmon0: left promiscuous mode [ 205.318595][ T9779] batadv0: left promiscuous mode [ 205.319433][ T9779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.339885][ T9779] vxcan0: left promiscuous mode [ 205.346828][ T9779] vxcan1: left promiscuous mode [ 205.347873][ T9779] veth0: left promiscuous mode [ 205.349355][ T9779] veth1: left promiscuous mode [ 205.371798][ T9779] wg0: left promiscuous mode [ 205.379559][ T9779] wg1: left promiscuous mode [ 205.400076][ T9779] wg2: left promiscuous mode [ 205.412352][ T9779] veth0_to_bridge: left promiscuous mode [ 205.415282][ T9779] veth1_to_bridge: left promiscuous mode [ 205.419689][ T9779] bond_slave_0: left promiscuous mode [ 205.420344][ T9779] veth1_to_bond: left promiscuous mode [ 205.446662][ T9779] bond_slave_1: left promiscuous mode [ 205.455968][ T9779] veth0_to_team: left promiscuous mode [ 205.457317][ T9779] team_slave_0: left promiscuous mode [ 205.458556][ T9779] veth1_to_team: left promiscuous mode [ 205.459746][ T9779] team_slave_1: left promiscuous mode [ 205.484502][ T9779] veth1_to_batadv: left promiscuous mode [ 205.486129][ T9779] batadv_slave_1: left promiscuous mode [ 205.486977][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.487463][ T9779] xfrm0: left promiscuous mode [ 205.489440][ T9779] veth0_to_hsr: left promiscuous mode [ 205.521892][ T9779] veth1_to_hsr: left promiscuous mode [ 205.524077][ T9779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.524100][ T9779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.524168][ T9779] hsr0: left promiscuous mode [ 205.525538][ T9779] veth1_virt_wifi: left promiscuous mode [ 205.526933][ T9779] veth0_virt_wifi: left promiscuous mode [ 205.528115][ T9779] virt_wifi0: left promiscuous mode [ 205.528136][ T9779] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 205.697451][ T9791] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.717092][ T9791] bond6: (slave bond7): Enslaving as an active interface with an up link [ 205.726374][ T9783] bond6: (slave bond7): Error -95 calling ndo_bpf [ 205.771223][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.771340][ T6981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.799940][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.800052][ T6981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.491084][ T9827] syzkaller0: entered promiscuous mode [ 206.491107][ T9827] syzkaller0: entered allmulticast mode [ 206.516286][ T9824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.902980][ T9846] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 207.001255][ T9846] 8021q: adding VLAN 0 to HW filter on device bond8 [ 207.060796][ T9852] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 207.110333][ T9846] __nla_validate_parse: 8 callbacks suppressed [ 207.110356][ T9846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.960'. [ 207.239567][ T9858] netlink: 'syz.2.963': attribute type 21 has an invalid length. [ 207.239848][ T9858] netlink: 'syz.2.963': attribute type 21 has an invalid length. [ 207.240101][ T9858] netlink: 'syz.2.963': attribute type 21 has an invalid length. [ 207.240333][ T9858] netlink: 'syz.2.963': attribute type 21 has an invalid length. [ 207.273646][ T9858] netlink: 'syz.2.963': attribute type 21 has an invalid length. [ 207.273904][ T9858] netlink: 'syz.2.963': attribute type 21 has an invalid length. [ 207.486743][ T9869] netlink: 120 bytes leftover after parsing attributes in process `syz.2.963'. [ 207.937197][ T9882] netlink: 116 bytes leftover after parsing attributes in process `syz.3.968'. [ 208.407760][ T9906] bond9: entered promiscuous mode [ 208.409368][ T9906] bond9: entered allmulticast mode [ 208.409805][ T9906] 8021q: adding VLAN 0 to HW filter on device bond9 [ 208.476633][ T9907] erspan2: entered allmulticast mode [ 208.492740][ T9907] bond9: (slave erspan2): making interface the new active one [ 208.492765][ T9907] erspan2: entered promiscuous mode [ 208.496081][ T9907] bond9: (slave erspan2): Enslaving as an active interface with an up link [ 208.962755][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 209.404965][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.981'. [ 209.423243][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.981'. [ 209.678697][ T9962] netlink: 164 bytes leftover after parsing attributes in process `syz.1.986'. [ 209.891216][ T6979] wlan0: Trigger new scan to find an IBSS to join [ 209.899565][ T9969] netlink: 256 bytes leftover after parsing attributes in process `syz.3.989'. [ 209.979721][ T9969] syzkaller0: left promiscuous mode [ 209.979749][ T9969] syzkaller0: left allmulticast mode [ 210.577750][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 210.609656][ T9997] IPVS: set_ctl: invalid protocol: 50 172.30.1.4:20004 [ 210.627684][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 210.906699][T10013] macvlan0: entered promiscuous mode [ 210.906962][T10013] macvlan0: entered allmulticast mode [ 210.906979][T10013] veth1_vlan: entered allmulticast mode [ 211.737576][ T52] Bluetooth: hci0: command 0x0c20 tx timeout [ 211.737622][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 211.737648][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 211.737673][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 212.346941][T10087] __nla_validate_parse: 3 callbacks suppressed [ 212.346963][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 212.934247][ T6979] wlan0: Trigger new scan to find an IBSS to join [ 213.030367][T10085] lo speed is unknown, defaulting to 1000 [ 213.092389][T10109] validate_nla: 30 callbacks suppressed [ 213.092414][T10109] netlink: 'syz.2.1018': attribute type 23 has an invalid length. [ 213.269723][T10110] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1019'. [ 213.661827][T10130] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 213.661850][T10130] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1024'. [ 213.723965][T10136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 213.724025][T10136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 213.805558][T10125] netlink: 'syz.2.1022': attribute type 1 has an invalid length. [ 213.810965][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 213.905341][T10085] wg2 speed is unknown, defaulting to 1000 [ 213.910298][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'. [ 213.975688][T10125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.050487][T10138] bond4: (slave veth7): Enslaving as an active interface with a down link [ 214.078931][T10144] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 214.089319][T10144] bond4: (slave batadv1): making interface the new active one [ 214.103659][T10144] batadv1: entered promiscuous mode [ 214.104302][T10144] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 214.129368][T10131] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 214.129388][T10131] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1024'. [ 214.283711][T10153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1031'. [ 214.319632][T10153] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1031'. [ 214.547569][T10162] syzkaller0: create flow: hash 3282047909 index 1 [ 214.605292][T10166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1033'. [ 214.675052][T10170] netlink: 'syz.1.1034': attribute type 9 has an invalid length. [ 214.740148][T10171] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 214.792514][T10164] xt_CT: No such helper "snmp" [ 215.366476][T10154] syzkaller0: delete flow: hash 3282047909 index 1 [ 215.896398][ T137] wlan0: Trigger new scan to find an IBSS to join [ 216.784099][ T9172] wlan0: Creating new IBSS network, BSSID ee:7f:54:e5:62:91 [ 217.502030][T10190] nbd0: detected capacity change from 0 to 63 [ 217.717224][ T5625] block nbd0: Receive control failed (result -104) [ 218.132622][T10213] Unsupported ieee802154 address type: 0 [ 218.447061][T10237] netlink: 'syz.3.1054': attribute type 1 has an invalid length. [ 218.753470][T10251] syzkaller1: entered promiscuous mode [ 218.755412][T10251] syzkaller1: entered allmulticast mode [ 219.025874][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 219.155647][T10267] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1063'. [ 219.408681][T10277] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1064'. [ 219.411377][T10277] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 219.411439][T10277] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1064'. [ 219.748559][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 219.778474][T10296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'. [ 219.800576][T10296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1069'. [ 220.401256][T10312] sctp: [Deprecated]: syz.0.1075 (pid 10312) Use of int in maxseg socket option. [ 220.401256][T10312] Use struct sctp_assoc_value instead [ 221.510652][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1085'. [ 221.638497][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1087'. [ 221.654921][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1087'. [ 222.019239][T10364] netlink: 'syz.3.1090': attribute type 8 has an invalid length. [ 222.093635][T10352] tipc: Resetting bearer [ 222.181939][ T5718] wg2 speed is unknown, defaulting to 1000 [ 222.182661][ T5726] wg2 speed is unknown, defaulting to 1000 [ 223.284280][ T6981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.284304][ T6981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.336571][ T9173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.336593][ T9173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.282560][T10453] netlink: 'syz.4.1106': attribute type 8 has an invalid length. [ 224.310681][T10453] __nla_validate_parse: 8 callbacks suppressed [ 224.310704][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 224.398308][T10453] veth3: entered allmulticast mode [ 224.706375][ T5625] Bluetooth: hci4: connection err: -111 [ 224.706595][T10476] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 225.201540][ T9173] batadv1: left promiscuous mode [ 225.447777][T10498] openvswitch: netlink: IP tunnel dst address not specified [ 225.734354][T10511] gre1: entered promiscuous mode [ 225.945739][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 226.223477][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.223589][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.223687][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.223785][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.223882][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.223991][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.224089][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.224185][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.224303][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.224402][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.224501][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.224599][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.224703][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.224799][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.224899][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.231262][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.231570][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.231831][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.232143][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.232412][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.232736][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.232997][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.233249][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.233534][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.233801][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.234070][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.234325][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.234585][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.234846][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.235126][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.235380][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.235627][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.235885][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.236132][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.236406][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.236640][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.236892][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.237154][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.237411][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.237665][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.237809][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.237909][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.238011][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.283616][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.284063][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.284341][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.285899][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.286943][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.287056][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.287156][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.287255][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.287360][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.287624][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.288807][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.289316][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.289588][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.289842][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.290108][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.298987][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.311394][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.312887][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.313214][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.314810][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.335629][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.335951][T10536] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 226.351128][T10537] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 226.755980][T10537] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1128'. [ 226.779186][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 226.987723][T10538] syzkaller1: entered promiscuous mode [ 226.987743][T10538] syzkaller1: entered allmulticast mode [ 227.313824][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 227.454591][T10572] netlink: 'syz.3.1136': attribute type 30 has an invalid length. [ 227.651535][T10572] netlink: 'syz.3.1136': attribute type 30 has an invalid length. [ 227.742809][T10577] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.993618][T10591] lo speed is unknown, defaulting to 1000 [ 227.993691][T10591] lo speed is unknown, defaulting to 1000 [ 227.994536][T10591] lo speed is unknown, defaulting to 1000 [ 228.028345][T10591] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 228.028391][T10591] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 228.028438][T10591] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 228.055570][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1143'. [ 228.103967][T10591] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 228.213052][T10591] lo speed is unknown, defaulting to 1000 [ 228.219559][T10591] lo speed is unknown, defaulting to 1000 [ 228.235702][T10591] lo speed is unknown, defaulting to 1000 [ 228.250062][T10591] lo speed is unknown, defaulting to 1000 [ 228.261751][T10591] lo speed is unknown, defaulting to 1000 [ 228.478308][T10610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1147'. [ 228.590243][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 228.665437][T10613] bond6: entered allmulticast mode [ 228.832981][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 229.283370][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 229.308497][T10618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.405795][T10647] __nla_validate_parse: 1 callbacks suppressed [ 229.405819][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 229.535437][T10652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1159'. [ 230.219872][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 230.219930][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 230.272270][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 230.272309][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 230.541015][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'. [ 231.006379][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 231.121045][T10722] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 231.199451][T10722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.236349][T10722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.262762][T10722] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 231.285462][T10722] bond0 (unregistering): Released all slaves [ 231.326267][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1177'. [ 231.935451][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 232.576020][T10780] netlink: 'syz.0.1188': attribute type 10 has an invalid length. [ 232.661195][T10780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.705540][T10780] team0: Port device netdevsim1 added [ 232.867438][T10792] netlink: 'syz.3.1192': attribute type 17 has an invalid length. [ 233.499220][T10819] netlink: 'syz.0.1200': attribute type 2 has an invalid length. [ 233.814449][T10828] netlink: 'syz.3.1204': attribute type 17 has an invalid length. [ 234.504505][T10860] bridge0: entered allmulticast mode [ 234.532407][T10860] pim6reg: entered allmulticast mode [ 234.979292][T10881] sctp: [Deprecated]: syz.3.1217 (pid 10881) Use of int in maxseg socket option. [ 234.979292][T10881] Use struct sctp_assoc_value instead [ 235.072830][T10886] __nla_validate_parse: 5 callbacks suppressed [ 235.072852][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 235.168175][T10893] 8021q: VLANs not supported on lo [ 235.327012][T10896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1224'. [ 235.331670][T10896] Cannot find set identified by id 0 to match [ 235.534346][T10904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1229'. [ 235.649271][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 235.649311][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 235.704814][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 235.704853][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 235.705783][T10904] bond10: entered promiscuous mode [ 235.705806][T10904] bond10: entered allmulticast mode [ 235.931000][ T137] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 235.931094][ T137] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 235.931173][ T137] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 235.939522][T10930] netlink: 'syz.1.1232': attribute type 4 has an invalid length. [ 236.039831][T10925] lo speed is unknown, defaulting to 1000 [ 236.039871][T10925] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 236.046318][ T170] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 236.085336][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 236.116741][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 236.148294][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 236.306668][T10943] syzkaller0: entered promiscuous mode [ 236.306695][T10943] syzkaller0: entered allmulticast mode [ 236.789164][T10962] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 237.210006][T10978] lo: entered promiscuous mode [ 237.210375][T10978] lo: entered allmulticast mode [ 237.263387][T10978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.284193][T11007] syzkaller1: entered promiscuous mode [ 238.284219][T11007] syzkaller1: entered allmulticast mode [ 239.015205][T11035] Bluetooth: MGMT ver 1.23 [ 239.162045][T11036] sock: sock_timestamping_bind_phc: sock not bind to device [ 239.338076][T10925] lo speed is unknown, defaulting to 1000 [ 239.547284][T11050] ip6gre1: entered promiscuous mode [ 239.547346][T11050] ip6gre1: entered allmulticast mode [ 239.587483][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.587835][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.611435][T10925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.820714][T10925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.010538][T11067] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 240.015965][T11067] xt_NETMAP: bad MAP_IPS. [ 240.196776][T11073] __nla_validate_parse: 10 callbacks suppressed [ 240.196803][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'. [ 240.351170][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 240.372615][T10927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.652814][T11080] vlan4: entered allmulticast mode [ 240.652879][T11080] bridge8: entered allmulticast mode [ 240.873493][T11089] syzkaller0: entered promiscuous mode [ 240.873519][T11089] syzkaller0: entered allmulticast mode [ 240.939346][T11094] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1281'. [ 241.123277][T11094] hsr_slave_1 (unregistering): left promiscuous mode [ 241.245571][T11094] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1281'. [ 241.245802][T11094] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1281'. [ 241.247898][T11094] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1281'. [ 241.248139][T11094] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1281'. [ 241.249685][T11094] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1281'. [ 241.250601][T11094] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1281'. [ 241.250827][T11094] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1281'. [ 241.616044][T11103] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 242.036590][T11103] xt_CT: No such helper "netbios-ns" [ 242.618163][T11144] macvlan0: entered promiscuous mode [ 242.968094][T11156] Cannot find set identified by id 0 to match [ 243.650697][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.115976][T11220] IPVS: starting estimator thread 0... [ 245.116854][T11236] syzkaller0: entered promiscuous mode [ 245.116876][T11236] syzkaller0: entered allmulticast mode [ 245.202760][T11245] IPVS: using max 27 ests per chain, 64800 per kthread [ 245.428071][T11249] __nla_validate_parse: 35 callbacks suppressed [ 245.428093][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1318'. [ 245.470712][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 245.552986][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 245.805141][T11258] netlink: 'syz.1.1321': attribute type 21 has an invalid length. [ 246.060817][T11270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1323'. [ 246.568227][T11288] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 247.062788][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1337'. [ 247.218557][T11311] tc_dump_action: action bad kind [ 247.846398][T11319] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 247.968649][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1341'. [ 248.060734][ T1680] block nbd0: Possible stuck request ffff8880274b7000: control (read@0,1024B). Runtime 30 seconds [ 248.061550][ T1680] block nbd0: Possible stuck request ffff8880274b71c0: control (read@1024,1024B). Runtime 30 seconds [ 248.061622][ T1680] block nbd0: Possible stuck request ffff8880274b7380: control (read@2048,1024B). Runtime 30 seconds [ 248.061689][ T1680] block nbd0: Possible stuck request ffff8880274b7540: control (read@3072,1024B). Runtime 30 seconds [ 248.924737][T11346] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 248.930327][T11346] bond8 (unregistering): Released all slaves [ 248.987238][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1349'. [ 249.077847][ T6977] IPVS: starting estimator thread 0... [ 249.162558][T11359] IPVS: using max 25 ests per chain, 60000 per kthread [ 249.315100][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 249.339151][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 251.890675][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.348288][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 259.457396][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 259.457951][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 259.458470][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 259.459031][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 259.483839][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 259.485273][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 259.485858][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 259.486481][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 259.487020][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1353'. [ 260.477846][T11412] syzkaller0: entered promiscuous mode [ 260.477875][T11412] syzkaller0: entered allmulticast mode [ 260.606287][T11417] netlink: 'syz.0.1374': attribute type 5 has an invalid length. [ 260.883227][T11422] syzkaller0: entered promiscuous mode [ 260.883255][T11422] syzkaller0: entered allmulticast mode [ 260.929621][T11422] tipc: Enabled bearer , priority 0 [ 261.034338][T11422] tipc: Resetting bearer [ 261.098849][ T5625] Bluetooth: hci4: link tx timeout [ 261.099084][ T5625] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 261.109477][ T5625] Bluetooth: hci4: link tx timeout [ 261.109495][ T5625] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.116638][T11420] tipc: Resetting bearer [ 261.282332][T11420] tipc: Disabling bearer [ 261.402568][T11442] syzkaller0: left promiscuous mode [ 261.402627][T11442] syzkaller0: left allmulticast mode [ 262.220104][T11464] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 262.385120][T11473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 262.900893][T11493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.174299][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 263.324688][T11501] netlink: 'syz.1.1409': attribute type 1 has an invalid length. [ 263.484002][T11501] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.527952][T11501] netlink: 'syz.1.1409': attribute type 10 has an invalid length. [ 263.616214][T11505] bond4: (slave veth9): Enslaving as an active interface with a down link [ 263.677350][T11510] bond4: (slave dummy0): making interface the new active one [ 263.699338][T11510] dummy0: entered promiscuous mode [ 263.699889][T11510] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 263.742402][T11501] bond4: (slave dummy0): Releasing active interface [ 263.883276][T11519] syzkaller0: entered promiscuous mode [ 263.883339][T11519] syzkaller0: entered allmulticast mode [ 264.476385][T11540] syzkaller1: entered promiscuous mode [ 264.476450][T11540] syzkaller1: entered allmulticast mode [ 264.628744][T11542] __nla_validate_parse: 8 callbacks suppressed [ 264.628767][T11542] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1423'. [ 264.654796][T11534] syzkaller0: entered promiscuous mode [ 264.654865][T11534] syzkaller0: entered allmulticast mode [ 265.331194][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 265.501263][T11572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1429'. [ 265.978297][T11584] lo speed is unknown, defaulting to 1000 [ 266.932448][T11624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1442'. [ 266.939572][T11624] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 267.018066][T11626] netlink: 'syz.4.1443': attribute type 2 has an invalid length. [ 267.018095][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 267.067793][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 267.265987][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1445'. [ 267.526438][T11584] wg2 speed is unknown, defaulting to 1000 [ 267.547826][T11584] lo speed is unknown, defaulting to 1000 [ 267.741936][T11640] bond8: option updelay: invalid value (18446744073709518847) [ 267.741966][T11640] bond8: option updelay: allowed values 0 - 2147483647 [ 267.780503][T11640] bond8 (unregistering): Released all slaves [ 267.853314][T11643] IPv6: addrconf: prefix option has invalid lifetime [ 268.210494][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 268.660202][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 268.716761][T11665] ip6gre2: entered promiscuous mode [ 268.716789][T11665] ip6gre2: entered allmulticast mode [ 268.834333][T11667] tipc: Enabled bearer , priority 0 [ 268.943902][T11667] syzkaller0: entered promiscuous mode [ 268.943932][T11667] syzkaller0: entered allmulticast mode [ 268.949580][T11667] tipc: Resetting bearer [ 268.985485][T11666] tipc: Resetting bearer [ 269.253451][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1459'. [ 270.292115][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 270.331402][T11705] xt_NETMAP: bad rangesize 37. [ 272.637118][T11666] tipc: Disabling bearer [ 272.652515][T10927] tipc: Node number set to 682249472 [ 273.050806][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 273.305815][T11703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.715327][T11724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1465'. [ 273.716128][T11724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1465'. [ 273.716407][T11724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1465'. [ 273.719895][T11724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1465'. [ 273.720186][T11724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1465'. [ 273.794069][T11724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1465'. [ 273.794395][T11724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1465'. [ 273.794735][T11724] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1465'. [ 274.772378][T11776] FAULT_INJECTION: forcing a failure. [ 274.772378][T11776] name failslab, interval 1, probability 0, space 0, times 0 [ 274.772441][T11776] CPU: 1 UID: 0 PID: 11776 Comm: syz.1.1475 Not tainted syzkaller #0 PREEMPT(full) [ 274.772470][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.772484][T11776] Call Trace: [ 274.772492][T11776] [ 274.772503][T11776] dump_stack_lvl+0xe8/0x150 [ 274.772541][T11776] should_fail_ex+0x410/0x560 [ 274.772572][T11776] should_failslab+0xa8/0x100 [ 274.772601][T11776] __kmalloc_cache_noprof+0xa3/0x600 [ 274.772624][T11776] ? __mutex_unlock_slowpath+0x731/0x900 [ 274.772653][T11776] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 274.772683][T11776] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 274.772722][T11776] __xdp_reg_mem_model+0x1e9/0x5a0 [ 274.772760][T11776] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 274.772802][T11776] xdp_reg_mem_model+0x22/0x40 [ 274.772834][T11776] bpf_test_run_xdp_live+0x292/0x1c20 [ 274.772874][T11776] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 274.772905][T11776] ? __mutex_unlock_slowpath+0x731/0x900 [ 274.772938][T11776] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.772969][T11776] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 274.773005][T11776] ? 0xffffffffa0404540 [ 274.773078][T11776] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 274.773123][T11776] ? _copy_from_user+0x94/0xb0 [ 274.773152][T11776] ? bpf_test_init+0x113/0x150 [ 274.773183][T11776] ? xdp_convert_md_to_buff+0x5b/0x330 [ 274.773221][T11776] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 274.773281][T11776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.773321][T11776] ? __fget_files+0x2a/0x420 [ 274.773358][T11776] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.773394][T11776] bpf_prog_test_run+0x2c5/0x340 [ 274.773427][T11776] __sys_bpf+0xa22/0xd90 [ 274.773461][T11776] ? __pfx___sys_bpf+0x10/0x10 [ 274.773499][T11776] ? __fget_files+0x2a/0x420 [ 274.773565][T11776] ? ksys_write+0x242/0x270 [ 274.773603][T11776] ? __pfx_ksys_write+0x10/0x10 [ 274.773642][T11776] __x64_sys_bpf+0xba/0xd0 [ 274.773668][T11776] do_syscall_64+0x166/0x520 [ 274.773693][T11776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.773717][T11776] ? clear_bhb_loop+0x70/0xc0 [ 274.773746][T11776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.773770][T11776] RIP: 0033:0x7fcdffd9e159 [ 274.773791][T11776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.773811][T11776] RSP: 002b:00007fce00d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.773837][T11776] RAX: ffffffffffffffda RBX: 00007fce00026090 RCX: 00007fcdffd9e159 [ 274.773855][T11776] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 274.773870][T11776] RBP: 00007fce00d08090 R08: 0000000000000000 R09: 0000000000000000 [ 274.773885][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.773899][T11776] R13: 00007fce00026128 R14: 00007fce00026090 R15: 00007ffca931e1a8 [ 274.773935][T11776] [ 274.908837][T11779] netlink: 'syz.4.1476': attribute type 1 has an invalid length. [ 277.213698][T11755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.411596][T11791] __nla_validate_parse: 10 callbacks suppressed [ 277.411620][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 277.725073][T11798] sit0: left promiscuous mode [ 277.886331][T11798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.065758][T11798] bridge2: left promiscuous mode [ 278.133755][ T1680] block nbd0: Possible stuck request ffff8880274b7000: control (read@0,1024B). Runtime 60 seconds [ 278.133876][ T1680] block nbd0: Possible stuck request ffff8880274b71c0: control (read@1024,1024B). Runtime 60 seconds [ 278.133947][ T1680] block nbd0: Possible stuck request ffff8880274b7380: control (read@2048,1024B). Runtime 60 seconds [ 278.134015][ T1680] block nbd0: Possible stuck request ffff8880274b7540: control (read@3072,1024B). Runtime 60 seconds [ 278.137228][T11798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.219114][T11798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.243399][T11798] syzkaller0: left promiscuous mode [ 278.299588][T11798] gre1: left promiscuous mode [ 278.317781][T11798] ip6gre1: left promiscuous mode [ 278.340014][T11798] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 278.356303][T11798] macsec2: left promiscuous mode [ 278.359106][T11798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.378884][T11798] bond9: left promiscuous mode [ 278.378909][T11798] erspan2: left promiscuous mode [ 278.394826][T11798] 8021q: adding VLAN 0 to HW filter on device bond10 [ 278.398180][T11798] 8021q: adding VLAN 0 to HW filter on device bond11 [ 278.415130][T11798] 8021q: adding VLAN 0 to HW filter on device bond12 [ 278.417419][T11798] 8021q: adding VLAN 0 to HW filter on device bond13 [ 278.428520][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.428834][ T9172] bridge0: port 2(bridge_slave_1) entered listening state [ 278.478937][T10924] bond_slave_0: entered promiscuous mode [ 278.478982][T10924] bond_slave_1: entered promiscuous mode [ 278.479274][T10924] bridge0: entered promiscuous mode [ 278.511592][ T6983] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 278.511880][ T6983] bond5: (slave veth3): making interface the new active one [ 278.514840][ T6983] bond5: active interface up! [ 278.695676][T11829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1490'. [ 278.958078][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 279.012476][ T9172] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.014880][ T9172] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.014929][ T9172] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.014968][ T9172] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.084309][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 279.293167][T11838] bond14: option arp_all_targets: invalid value (3) [ 279.299132][T11838] bond14 (unregistering): Released all slaves [ 279.317586][T11853] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 280.153677][T11882] FAULT_INJECTION: forcing a failure. [ 280.153677][T11882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.153715][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.2.1504 Not tainted syzkaller #0 PREEMPT(full) [ 280.153741][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.153756][T11882] Call Trace: [ 280.153768][T11882] [ 280.153778][T11882] dump_stack_lvl+0xe8/0x150 [ 280.153817][T11882] should_fail_ex+0x410/0x560 [ 280.153850][T11882] _copy_to_user+0x31/0xb0 [ 280.153883][T11882] bpf_test_finish+0x4ea/0x690 [ 280.153928][T11882] ? __pfx_bpf_test_finish+0x10/0x10 [ 280.153970][T11882] ? _copy_from_user+0x94/0xb0 [ 280.153998][T11882] ? bpf_test_init+0x113/0x150 [ 280.154035][T11882] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 280.154088][T11882] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 280.154129][T11882] ? __fget_files+0x2a/0x420 [ 280.154175][T11882] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 280.154212][T11882] bpf_prog_test_run+0x2c5/0x340 [ 280.154246][T11882] __sys_bpf+0xa22/0xd90 [ 280.154281][T11882] ? __pfx___sys_bpf+0x10/0x10 [ 280.154320][T11882] ? __fget_files+0x2a/0x420 [ 280.154371][T11882] ? ksys_write+0x242/0x270 [ 280.154410][T11882] ? __pfx_ksys_write+0x10/0x10 [ 280.154451][T11882] __x64_sys_bpf+0xba/0xd0 [ 280.154479][T11882] do_syscall_64+0x166/0x520 [ 280.154504][T11882] ? trace_irq_disable+0x3b/0x140 [ 280.154527][T11882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.154552][T11882] ? clear_bhb_loop+0x70/0xc0 [ 280.154581][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.154605][T11882] RIP: 0033:0x7fc7bcb9e159 [ 280.154627][T11882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.154653][T11882] RSP: 002b:00007fc7bda39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.154678][T11882] RAX: ffffffffffffffda RBX: 00007fc7bce25fa0 RCX: 00007fc7bcb9e159 [ 280.154696][T11882] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 280.154711][T11882] RBP: 00007fc7bda39090 R08: 0000000000000000 R09: 0000000000000000 [ 280.154727][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.154741][T11882] R13: 00007fc7bce26038 R14: 00007fc7bce25fa0 R15: 00007ffe309c3888 [ 280.154777][T11882] [ 280.206770][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 280.416700][T11887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1505'. [ 280.485552][T11891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1506'. [ 280.558400][T11891] xt_connbytes: Forcing CT accounting to be enabled [ 280.710595][T11891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.767724][T11893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.013128][T11905] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1509'. [ 281.589782][T11926] FAULT_INJECTION: forcing a failure. [ 281.589782][T11926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.589819][T11926] CPU: 0 UID: 0 PID: 11926 Comm: syz.4.1518 Not tainted syzkaller #0 PREEMPT(full) [ 281.589845][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.589858][T11926] Call Trace: [ 281.589867][T11926] [ 281.589877][T11926] dump_stack_lvl+0xe8/0x150 [ 281.589915][T11926] should_fail_ex+0x410/0x560 [ 281.589946][T11926] _copy_to_user+0x31/0xb0 [ 281.589978][T11926] bpf_test_finish+0x52e/0x690 [ 281.590023][T11926] ? __pfx_bpf_test_finish+0x10/0x10 [ 281.590066][T11926] ? _copy_from_user+0x94/0xb0 [ 281.590094][T11926] ? bpf_test_init+0x113/0x150 [ 281.590127][T11926] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 281.590181][T11926] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.590240][T11926] ? __fget_files+0x2a/0x420 [ 281.590279][T11926] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.590315][T11926] bpf_prog_test_run+0x2c5/0x340 [ 281.590356][T11926] __sys_bpf+0xa22/0xd90 [ 281.590390][T11926] ? __pfx___sys_bpf+0x10/0x10 [ 281.590427][T11926] ? __fget_files+0x2a/0x420 [ 281.590478][T11926] ? ksys_write+0x242/0x270 [ 281.590516][T11926] ? __pfx_ksys_write+0x10/0x10 [ 281.590557][T11926] __x64_sys_bpf+0xba/0xd0 [ 281.590584][T11926] do_syscall_64+0x166/0x520 [ 281.590610][T11926] ? trace_irq_disable+0x3b/0x140 [ 281.590632][T11926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.590656][T11926] ? clear_bhb_loop+0x70/0xc0 [ 281.590686][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.590709][T11926] RIP: 0033:0x7fcfa159e159 [ 281.590731][T11926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.590751][T11926] RSP: 002b:00007fcfa2512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.590776][T11926] RAX: ffffffffffffffda RBX: 00007fcfa1825fa0 RCX: 00007fcfa159e159 [ 281.590794][T11926] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 281.590809][T11926] RBP: 00007fcfa2512090 R08: 0000000000000000 R09: 0000000000000000 [ 281.590823][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.590838][T11926] R13: 00007fcfa1826038 R14: 00007fcfa1825fa0 R15: 00007ffcd9587798 [ 281.590874][T11926] [ 281.885895][T11923] bridge0: port 3(wlan1) entered disabled state [ 282.046173][T11938] netlink: 940 bytes leftover after parsing attributes in process `syz.4.1520'. [ 282.167663][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1521'. [ 283.461726][T11973] openvswitch: netlink: IP tunnel TTL not specified. [ 283.543159][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 283.907384][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 284.088201][T11988] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 284.179477][T11988] bond5: option mode: invalid value (70) [ 284.183347][T11995] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 284.203568][T11988] bond5 (unregistering): Released all slaves [ 284.271969][T11991] dummy0: left promiscuous mode [ 284.272449][T11986] : renamed from dummy0 [ 284.596067][T12004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1537'. [ 285.227186][T12020] sctp: [Deprecated]: syz.4.1544 (pid 12020) Use of int in max_burst socket option deprecated. [ 285.227186][T12020] Use struct sctp_assoc_value instead [ 285.474457][T12031] IPVS: set_ctl: invalid protocol: 58 172.20.20.17:20001 [ 285.536122][T12034] FAULT_INJECTION: forcing a failure. [ 285.536122][T12034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.536160][T12034] CPU: 0 UID: 0 PID: 12034 Comm: syz.1.1547 Not tainted syzkaller #0 PREEMPT(full) [ 285.536186][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.536201][T12034] Call Trace: [ 285.536210][T12034] [ 285.536220][T12034] dump_stack_lvl+0xe8/0x150 [ 285.536259][T12034] should_fail_ex+0x410/0x560 [ 285.536295][T12034] _copy_from_user+0x2d/0xb0 [ 285.536325][T12034] __sys_connect+0x155/0x450 [ 285.536356][T12034] ? __pfx___sys_connect+0x10/0x10 [ 285.536394][T12034] ? __pfx_ksys_write+0x10/0x10 [ 285.536439][T12034] __x64_sys_connect+0x7a/0x90 [ 285.536468][T12034] do_syscall_64+0x166/0x520 [ 285.536495][T12034] ? trace_irq_disable+0x3b/0x140 [ 285.536519][T12034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.536544][T12034] ? clear_bhb_loop+0x70/0xc0 [ 285.536575][T12034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.536599][T12034] RIP: 0033:0x7fcdffd9e159 [ 285.536621][T12034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.536642][T12034] RSP: 002b:00007fce00d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 285.536668][T12034] RAX: ffffffffffffffda RBX: 00007fce00025fa0 RCX: 00007fcdffd9e159 [ 285.536686][T12034] RDX: 000000000000000e RSI: 0000200000000040 RDI: 0000000000000004 [ 285.536701][T12034] RBP: 00007fce00d29090 R08: 0000000000000000 R09: 0000000000000000 [ 285.536718][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.536733][T12034] R13: 00007fce00026038 R14: 00007fce00025fa0 R15: 00007ffca931e1a8 [ 285.536768][T12034] [ 286.114611][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 286.201804][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1553'. [ 286.326461][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1554'. [ 286.491187][T12065] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1557'. [ 286.630158][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.650567][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.210591][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1560'. [ 288.273480][ T6731] udevd[6731]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 288.755139][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 288.841482][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1571'. [ 289.879974][T12162] netlink: del zone limit has 4 unknown bytes [ 290.517812][ T1010] IPVS: starting estimator thread 0... [ 290.601372][T12174] IPVS: using max 28 ests per chain, 67200 per kthread [ 290.821186][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1587'. [ 291.360974][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 291.362234][T12199] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1593'. [ 291.362256][T12199] openvswitch: netlink: Flow key attr not present in new flow. [ 291.946048][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 292.376974][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'. [ 292.539005][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 293.444884][T12273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.493264][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 293.602548][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'. [ 293.966736][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1622'. [ 294.423161][T12317] netlink: 'syz.0.1628': attribute type 3 has an invalid length. [ 294.423186][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 295.111028][T12339] tipc: Started in network mode [ 295.111073][T12339] tipc: Node identity fe80000000000000000000000000001, cluster identity 8 [ 295.111129][T12339] tipc: Enabling of bearer rejected, failed to enable media [ 295.378791][T12343] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 295.549430][T12343] 8021q: adding VLAN 0 to HW filter on device bond12 [ 295.757018][T12343] bond12: (slave geneve2): making interface the new active one [ 295.775044][T12343] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 295.828247][T12352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1638'. [ 296.917688][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1646'. [ 296.948389][T12388] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 297.097870][T12388] can: request_module (can-proto-0) failed. [ 297.224315][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 297.452705][T12398] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 297.452729][T12398] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1648'. [ 297.815696][T12410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1651'. [ 297.959399][T12413] netlink: 'syz.2.1652': attribute type 2 has an invalid length. [ 298.021741][T12413] : entered promiscuous mode [ 298.054488][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 299.426319][T12456] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1658'. [ 299.501855][T12456] netlink: zone id is out of range [ 299.501910][T12456] netlink: zone id is out of range [ 299.501920][T12456] netlink: zone id is out of range [ 299.501947][T12456] netlink: zone id is out of range [ 299.501974][T12456] netlink: zone id is out of range [ 299.501984][T12456] netlink: zone id is out of range [ 299.502012][T12456] netlink: zone id is out of range [ 299.502023][T12456] netlink: zone id is out of range [ 299.502105][T12456] netlink: zone id is out of range [ 299.502115][T12456] netlink: zone id is out of range [ 299.770725][T12466] netlink: 'syz.2.1661': attribute type 11 has an invalid length. [ 300.314985][T12476] bond0: (slave veth0_to_bond): Releasing active interface [ 300.514203][T12476] bridge4: entered promiscuous mode [ 300.921441][T12496] netlink: 'syz.3.1667': attribute type 4 has an invalid length. [ 300.921505][T12496] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1667'. [ 300.985142][ T6983] nci: nci_rx_work: unknown MT 0x6 [ 301.426501][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1672'. [ 301.570987][T12513] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 301.571020][T12513] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 302.127075][T12523] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1676'. [ 302.314992][T12533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1678'. [ 302.731986][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 302.732021][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 302.732049][T12544] netlink: 'syz.0.1681': attribute type 14 has an invalid length. [ 303.090975][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.564227][T12489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.793181][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1688'. [ 303.793453][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1688'. [ 303.793682][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1688'. [ 304.074652][T12579] v: renamed from veth0_vlan (while UP) [ 304.300465][T12581] tc_dump_action: action bad kind [ 304.397805][T12582] netlink: 'syz.3.1692': attribute type 21 has an invalid length. [ 304.397894][T12582] netlink: 'syz.3.1692': attribute type 4 has an invalid length. [ 304.397910][T12582] netlink: 'syz.3.1692': attribute type 3 has an invalid length. [ 304.674999][T12602] netlink: 'syz.1.1696': attribute type 11 has an invalid length. [ 304.789607][T12598] netlink: 'syz.1.1696': attribute type 28 has an invalid length. [ 304.789633][T12598] __nla_validate_parse: 31 callbacks suppressed [ 304.789646][T12598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1696'. [ 304.939015][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1701'. [ 305.021990][T12614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1701'. [ 305.928751][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 306.119265][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1712'. [ 306.194119][T12660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1714'. [ 306.715451][T12679] syzkaller1: entered promiscuous mode [ 306.715480][T12679] syzkaller1: entered allmulticast mode [ 306.719789][T12688] syzkaller0: entered promiscuous mode [ 306.813802][T12688] tipc: Enabling of bearer rejected, already enabled [ 306.852826][T12688] net_ratelimit: 6 callbacks suppressed [ 306.852848][T12688] syzkaller0: mtu less than device minimum [ 306.979321][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'. [ 307.314478][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 307.718802][T12738] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1735'. [ 307.769482][T12740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.769511][T12740] IPv6: NLM_F_CREATE should be set when creating new route [ 307.982322][T12745] IPv6: NLM_F_CREATE should be specified when creating new route [ 308.212518][ T1680] block nbd0: Possible stuck request ffff8880274b7000: control (read@0,1024B). Runtime 90 seconds [ 308.212566][ T1680] block nbd0: Possible stuck request ffff8880274b71c0: control (read@1024,1024B). Runtime 90 seconds [ 308.212597][ T1680] block nbd0: Possible stuck request ffff8880274b7380: control (read@2048,1024B). Runtime 90 seconds [ 308.212626][ T1680] block nbd0: Possible stuck request ffff8880274b7540: control (read@3072,1024B). Runtime 90 seconds [ 308.482802][T12767] netlink: 'syz.3.1744': attribute type 4 has an invalid length. [ 308.508921][T12767] netlink: 'syz.3.1744': attribute type 4 has an invalid length. [ 308.850528][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.850554][ C0] bridge0: topology change detected, propagating [ 309.128469][T12802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1752'. [ 309.452925][T12818] netlink: 'syz.1.1756': attribute type 23 has an invalid length. [ 309.735700][T12832] vlan7: entered allmulticast mode [ 309.735729][T12832] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 309.736021][T12832] bridge0: port 4(vlan7) entered blocking state [ 309.736250][T12832] bridge0: port 4(vlan7) entered disabled state [ 309.738802][T12832] vlan7: entered promiscuous mode [ 309.738826][T12832] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 309.960707][T12837] bond13: entered allmulticast mode [ 310.127374][T12845] __nla_validate_parse: 2 callbacks suppressed [ 310.127396][T12845] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1766'. [ 310.127520][T12845] 1·: renamed from c0· (while UP) [ 310.272012][T12845] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 310.510327][T12852] syzkaller1: entered promiscuous mode [ 310.510505][T12852] syzkaller1: entered allmulticast mode [ 310.612638][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 310.971165][T12879] netlink: 'syz.2.1772': attribute type 83 has an invalid length. [ 311.005274][T12879] netlink: 'syz.2.1772': attribute type 2 has an invalid length. [ 311.005301][T12879] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1772'. [ 311.059264][T12886] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 311.201060][T12889] syz.4.1775: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 311.201210][T12889] CPU: 1 UID: 0 PID: 12889 Comm: syz.4.1775 Not tainted syzkaller #0 PREEMPT(full) [ 311.201237][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.201256][T12889] Call Trace: [ 311.201265][T12889] [ 311.201275][T12889] dump_stack_lvl+0xe8/0x150 [ 311.201313][T12889] warn_alloc+0x24d/0x270 [ 311.201337][T12889] ? kasan_save_track+0x4f/0x80 [ 311.201361][T12889] ? kasan_save_track+0x3e/0x80 [ 311.201386][T12889] ? __pfx_warn_alloc+0x10/0x10 [ 311.201405][T12889] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 311.201435][T12889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.201480][T12889] __vmalloc_node_range_noprof+0x127/0x1540 [ 311.201538][T12889] ? rcu_is_watching+0x16/0xb0 [ 311.201573][T12889] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.201608][T12889] ? __kmalloc_cache_noprof+0x321/0x600 [ 311.201641][T12889] ? __kmalloc_cache_noprof+0x14d/0x600 [ 311.201663][T12889] ? xskq_create+0x56/0x220 [ 311.201691][T12889] xskq_create+0x148/0x220 [ 311.201713][T12889] ? xsk_init_queue+0x8a/0xe0 [ 311.201750][T12889] xsk_init_queue+0x8a/0xe0 [ 311.201789][T12889] xsk_setsockopt+0x52a/0x960 [ 311.201827][T12889] ? __pfx_xsk_setsockopt+0x10/0x10 [ 311.201862][T12889] ? __pfx_aa_sk_perm+0x10/0x10 [ 311.201900][T12889] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 311.201930][T12889] ? __pfx_xsk_setsockopt+0x10/0x10 [ 311.201967][T12889] do_sock_setsockopt+0x17c/0x1b0 [ 311.202001][T12889] __x64_sys_setsockopt+0x13d/0x1b0 [ 311.202035][T12889] do_syscall_64+0x166/0x520 [ 311.202060][T12889] ? trace_irq_disable+0x3b/0x140 [ 311.202084][T12889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.202111][T12889] ? clear_bhb_loop+0x70/0xc0 [ 311.202142][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.202165][T12889] RIP: 0033:0x7fcfa159e159 [ 311.202187][T12889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.202208][T12889] RSP: 002b:00007fcfa2512028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.202232][T12889] RAX: ffffffffffffffda RBX: 00007fcfa1825fa0 RCX: 00007fcfa159e159 [ 311.202250][T12889] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 311.202264][T12889] RBP: 00007fcfa163506b R08: 0000000000000004 R09: 0000000000000000 [ 311.202279][T12889] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.202294][T12889] R13: 00007fcfa1826038 R14: 00007fcfa1825fa0 R15: 00007ffcd9587798 [ 311.202333][T12889] [ 311.202428][T12889] Mem-Info: [ 311.202439][T12889] active_anon:6033 inactive_anon:0 isolated_anon:0 [ 311.202439][T12889] active_file:0 inactive_file:43542 isolated_file:0 [ 311.202439][T12889] unevictable:0 dirty:150 writeback:0 [ 311.202439][T12889] slab_reclaimable:11054 slab_unreclaimable:105736 [ 311.202439][T12889] mapped:29657 shmem:648 pagetables:1178 [ 311.202439][T12889] sec_pagetables:0 bounce:0 [ 311.202439][T12889] kernel_misc_reclaimable:0 [ 311.202439][T12889] free:1323295 free_pcp:8331 free_cma:0 [ 311.202507][T12889] Node 0 active_anon:24132kB inactive_anon:0kB active_file:0kB inactive_file:173968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118628kB dirty:600kB writeback:0kB shmem:2592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15060kB pagetables:4556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 311.202570][T12889] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 311.202641][T12889] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.202709][T12889] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 311.202756][T12889] Node 0 DMA32 free:1332116kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24132kB inactive_anon:0kB active_file:0kB inactive_file:173968kB unevictable:0kB writepending:600kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:33324kB local_pcp:14800kB free_cma:0kB [ 311.202827][T12889] lowmem_reserve[]: 0 0 0 0 0 [ 311.202869][T12889] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.202937][T12889] lowmem_reserve[]: 0 0 0 0 0 [ 311.202979][T12889] Node 1 Normal free:3945704kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.203046][T12889] lowmem_reserve[]: 0 0 0 0 0 [ 311.203088][T12889] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 311.203309][T12889] Node 0 DMA32: 1161*4kB (UME) 772*8kB (UME) 273*16kB (UM) 364*32kB (UME) 98*64kB (UME) 15*128kB (UME) 1*256kB (U) 3*512kB (UME) 3*1024kB (UE) 5*2048kB (UME) 313*4096kB (UM) = 1332180kB [ 311.203579][T12889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.203735][T12889] Node 1 Normal: 2*4kB (M) 6*8kB (UM) 5*16kB (UM) 7*32kB (UM) 6*64kB (UM) 2*128kB (UM) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 962*4096kB (M) = 3945704kB [ 311.203921][T12889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.203940][T12889] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.203969][T12889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.203988][T12889] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.204006][T12889] 44186 total pagecache pages [ 311.204020][T12889] 0 pages in swap cache [ 311.204029][T12889] Free swap = 124996kB [ 311.204038][T12889] Total swap = 124996kB [ 311.204048][T12889] 2097051 pages RAM [ 311.204056][T12889] 0 pages HighMem/MovableOnly [ 311.204064][T12889] 428782 pages reserved [ 311.204072][T12889] 0 pages cma reserved [ 311.935096][T12903] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-alb(6) [ 311.955974][T12903] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1776'. [ 311.969544][T12903] SET target dimension over the limit! [ 312.047668][T12908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1776'. [ 312.167105][T12910] netlink: 'syz.0.1778': attribute type 11 has an invalid length. [ 312.755209][T12936] block nbd1: Unsupported socket: should be TCP or UNIX. [ 312.816658][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 314.967872][T13022] tunl0: entered promiscuous mode [ 314.968065][T13022] gre0: entered promiscuous mode [ 314.968192][T13022] gretap0: entered promiscuous mode [ 314.968315][T13022] erspan0: entered promiscuous mode [ 314.969270][T13022] ip_vti0: entered promiscuous mode [ 314.969437][T13022] ip6_vti0: entered promiscuous mode [ 314.969724][T13022] sit0: entered promiscuous mode [ 314.969855][T13022] ip6tnl0: entered promiscuous mode [ 314.969978][T13022] ip6gre0: entered promiscuous mode [ 315.022656][T13022] ip6gretap0: entered promiscuous mode [ 315.022808][T13022] vcan0: entered promiscuous mode [ 315.022984][T13022] bond0: entered promiscuous mode [ 315.023268][T13022] team0: entered promiscuous mode [ 315.023449][T13022] dummy0: entered promiscuous mode [ 315.024574][T13022] nlmon0: entered promiscuous mode [ 315.026035][T13022] veth0: entered promiscuous mode [ 315.026223][T13022] veth1: entered promiscuous mode [ 315.026432][T13022] wg0: entered promiscuous mode [ 315.026603][T13022] wg1: entered promiscuous mode [ 315.026772][T13022] wg2: entered promiscuous mode [ 315.029430][T13022] veth0_to_bridge: entered promiscuous mode [ 315.029654][T13022] bridge_slave_0: entered promiscuous mode [ 315.029829][T13022] veth1_to_bridge: entered promiscuous mode [ 315.030002][T13022] bridge_slave_1: entered promiscuous mode [ 315.030194][T13022] veth0_to_bond: entered promiscuous mode [ 315.101119][T13022] bond_slave_0: entered promiscuous mode [ 315.102178][T13022] veth1_to_bond: entered promiscuous mode [ 315.103864][T13022] bond_slave_1: entered promiscuous mode [ 315.104931][T13022] veth0_to_team: entered promiscuous mode [ 315.105392][T13022] team_slave_0: entered promiscuous mode [ 315.108082][T13022] veth1_to_team: entered promiscuous mode [ 315.142988][T13022] team_slave_1: entered promiscuous mode [ 315.143519][T13022] veth1_to_batadv: entered promiscuous mode [ 315.150235][T13022] batadv_slave_1: entered promiscuous mode [ 315.176847][T13022] xfrm0: entered promiscuous mode [ 315.177017][T13022] veth0_to_hsr: entered promiscuous mode [ 315.177318][T13022] veth1_to_hsr: entered promiscuous mode [ 315.177603][T13022] hsr0: entered promiscuous mode [ 315.179039][T13022] veth1_virt_wifi: entered promiscuous mode [ 315.188745][T13022] veth0_virt_wifi: entered promiscuous mode [ 315.191788][T13022] vlan0: entered promiscuous mode [ 315.194164][T13022] vlan1: entered promiscuous mode [ 315.255865][T13022] macvlan1: entered promiscuous mode [ 315.256025][T13022] ipvlan0: entered promiscuous mode [ 315.256153][T13022] ipvlan1: entered promiscuous mode [ 315.256540][T13022] macvtap0: entered promiscuous mode [ 315.283954][T13022] macsec0: entered promiscuous mode [ 315.284725][T13022] geneve0: entered promiscuous mode [ 315.284932][T13022] geneve1: entered promiscuous mode [ 315.285064][T13022] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 315.285184][T13022] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 315.285271][T13022] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 315.285364][T13022] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 315.285471][T13022] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 315.285594][T13022] geneve2: entered promiscuous mode [ 315.285701][T13022] mac80211_hwsim hwsim9 nicf0: entered promiscuous mode [ 315.289577][T13022] vlan2: entered promiscuous mode [ 315.289872][T13022] bridge1: entered promiscuous mode [ 315.289987][T13022] bridge0: entered promiscuous mode [ 315.290075][T13022] bond1: entered promiscuous mode [ 315.290166][T13022] bridge2: entered promiscuous mode [ 315.290277][T13022] bond2: entered promiscuous mode [ 315.291767][T13022] vlan3: entered promiscuous mode [ 315.292539][T13022] bond3: entered promiscuous mode [ 315.324188][T13022] macvlan1.3: entered promiscuous mode [ 315.367707][T13022] bond4: entered promiscuous mode [ 315.395444][T13022] bridge3: entered promiscuous mode [ 315.414320][T13022] bond5: entered promiscuous mode [ 315.424061][T13022] pim6reg: entered promiscuous mode [ 315.424641][T13022] bridge4: entered promiscuous mode [ 315.424775][T13022] bridge5: entered promiscuous mode [ 315.424869][T13022] syztnl0: entered promiscuous mode [ 315.424983][T13022] sit1: entered promiscuous mode [ 315.425096][T13022] mac80211_hwsim hwsim27 wlan2: entered promiscuous mode [ 315.633466][T13032] bridge0: left promiscuous mode [ 315.772944][T13037] lo speed is unknown, defaulting to 1000 [ 316.055303][T13042] batman_adv: batadv0: Adding interface: macvtap1 [ 316.055325][T13042] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.055357][T13042] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 316.182617][T13042] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.182784][T13042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.183121][T13042] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.183232][T13042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.482155][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'. [ 316.539385][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1813'. [ 316.540321][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1813'. [ 316.839747][T13037] wg2 speed is unknown, defaulting to 1000 [ 316.842100][T13037] lo speed is unknown, defaulting to 1000 [ 316.918838][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 316.957665][T13066] bond0: option miimon: invalid value (18446744073675997440) [ 316.957693][T13066] bond0: option miimon: allowed values 0 - 2147483647 [ 317.342855][T13083] FAULT_INJECTION: forcing a failure. [ 317.342855][T13083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.342893][T13083] CPU: 0 UID: 0 PID: 13083 Comm: syz.1.1821 Not tainted syzkaller #0 PREEMPT(full) [ 317.342919][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.342933][T13083] Call Trace: [ 317.342942][T13083] [ 317.342952][T13083] dump_stack_lvl+0xe8/0x150 [ 317.342990][T13083] should_fail_ex+0x410/0x560 [ 317.343023][T13083] _copy_from_iter+0x1d3/0x1660 [ 317.343050][T13083] ? __alloc_skb+0x27a/0x7a0 [ 317.343077][T13083] ? __alloc_skb+0x27a/0x7a0 [ 317.343114][T13083] ? __alloc_skb+0x27a/0x7a0 [ 317.343138][T13083] ? __pfx__copy_from_iter+0x10/0x10 [ 317.343162][T13083] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 317.343197][T13083] ? __alloc_skb+0x27a/0x7a0 [ 317.343220][T13083] ? __alloc_skb+0x27a/0x7a0 [ 317.343252][T13083] ? netlink_sendmsg+0x650/0xb40 [ 317.343284][T13083] ? skb_put+0x112/0x210 [ 317.343313][T13083] netlink_sendmsg+0x6c0/0xb40 [ 317.343356][T13083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.343399][T13083] ? apparmor_socket_sendmsg+0x98/0x360 [ 317.343426][T13083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.343459][T13083] sock_sendmsg_nosec+0x13a/0x180 [ 317.343498][T13083] ____sys_sendmsg+0x54e/0x850 [ 317.343534][T13083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.343573][T13083] ? import_iovec+0x73/0xa0 [ 317.343605][T13083] ___sys_sendmsg+0x2a5/0x360 [ 317.343634][T13083] ? __lock_acquire+0x747/0x2de0 [ 317.343663][T13083] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.343732][T13083] ? __fget_files+0x2a/0x420 [ 317.343763][T13083] ? __fget_files+0x3a2/0x420 [ 317.343808][T13083] __x64_sys_sendmsg+0x1b1/0x290 [ 317.343841][T13083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.343895][T13083] do_syscall_64+0x166/0x520 [ 317.343919][T13083] ? trace_irq_disable+0x3b/0x140 [ 317.343942][T13083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.343965][T13083] ? clear_bhb_loop+0x70/0xc0 [ 317.343994][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.344017][T13083] RIP: 0033:0x7fcdffd9e159 [ 317.344038][T13083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.344059][T13083] RSP: 002b:00007fce00d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.344084][T13083] RAX: ffffffffffffffda RBX: 00007fce00025fa0 RCX: 00007fcdffd9e159 [ 317.344109][T13083] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000003 [ 317.344124][T13083] RBP: 00007fce00d29090 R08: 0000000000000000 R09: 0000000000000000 [ 317.344138][T13083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.344152][T13083] R13: 00007fce00026038 R14: 00007fce00025fa0 R15: 00007ffca931e1a8 [ 317.344189][T13083] [ 318.605571][T13124] FAULT_INJECTION: forcing a failure. [ 318.605571][T13124] name failslab, interval 1, probability 0, space 0, times 0 [ 318.605610][T13124] CPU: 1 UID: 0 PID: 13124 Comm: syz.1.1834 Not tainted syzkaller #0 PREEMPT(full) [ 318.605636][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.605650][T13124] Call Trace: [ 318.605660][T13124] [ 318.605669][T13124] dump_stack_lvl+0xe8/0x150 [ 318.605707][T13124] should_fail_ex+0x410/0x560 [ 318.605738][T13124] should_failslab+0xa8/0x100 [ 318.605769][T13124] __kmalloc_noprof+0xfe/0x720 [ 318.605791][T13124] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 318.605819][T13124] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 318.605855][T13124] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 318.605892][T13124] genl_family_rcv_msg_doit+0xda/0x340 [ 318.605926][T13124] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 318.605962][T13124] ? apparmor_capable+0x126/0x170 [ 318.605998][T13124] ? bpf_lsm_capable+0x9/0x20 [ 318.606018][T13124] ? security_capable+0x7e/0x2c0 [ 318.606052][T13124] genl_rcv_msg+0x614/0x7a0 [ 318.606085][T13124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.606109][T13124] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 318.606141][T13124] ? __pfx_nl80211_del_key+0x10/0x10 [ 318.606173][T13124] ? __pfx_nl80211_post_doit+0x10/0x10 [ 318.606218][T13124] netlink_rcv_skb+0x226/0x4a0 [ 318.606252][T13124] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.606280][T13124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.606331][T13124] ? down_read+0x2be/0x330 [ 318.606365][T13124] genl_rcv+0x28/0x40 [ 318.606388][T13124] netlink_unicast+0x7bd/0x940 [ 318.606430][T13124] netlink_sendmsg+0x813/0xb40 [ 318.606473][T13124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.606524][T13124] ? apparmor_socket_sendmsg+0x98/0x360 [ 318.606553][T13124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.606585][T13124] sock_sendmsg_nosec+0x13a/0x180 [ 318.606625][T13124] ____sys_sendmsg+0x54e/0x850 [ 318.606660][T13124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.606701][T13124] ? import_iovec+0x73/0xa0 [ 318.606734][T13124] ___sys_sendmsg+0x2a5/0x360 [ 318.606762][T13124] ? __lock_acquire+0x747/0x2de0 [ 318.606791][T13124] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.606862][T13124] ? __fget_files+0x2a/0x420 [ 318.606894][T13124] ? __fget_files+0x3a2/0x420 [ 318.606938][T13124] __x64_sys_sendmsg+0x1b1/0x290 [ 318.606972][T13124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.607025][T13124] do_syscall_64+0x166/0x520 [ 318.607050][T13124] ? trace_irq_disable+0x3b/0x140 [ 318.607073][T13124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.607096][T13124] ? clear_bhb_loop+0x70/0xc0 [ 318.607124][T13124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.607146][T13124] RIP: 0033:0x7fcdffd9e159 [ 318.607167][T13124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.607187][T13124] RSP: 002b:00007fce00d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.607213][T13124] RAX: ffffffffffffffda RBX: 00007fce00025fa0 RCX: 00007fcdffd9e159 [ 318.607230][T13124] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000003 [ 318.607245][T13124] RBP: 00007fce00d29090 R08: 0000000000000000 R09: 0000000000000000 [ 318.607260][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.607273][T13124] R13: 00007fce00026038 R14: 00007fce00025fa0 R15: 00007ffca931e1a8 [ 318.607311][T13124] [ 319.265406][T13142] xt_IDLETIMER: timeout value is too big [ 319.300569][T13128] v: left promiscuous mode [ 319.302580][T13128] v: entered promiscuous mode [ 319.525838][ T1010] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 319.570113][T13142] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1840'. [ 320.014060][T13167] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1846'. [ 320.014256][T13167] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1846'. [ 320.014537][T13167] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1846'. [ 320.014818][T13167] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1846'. [ 320.015082][T13167] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1846'. [ 320.118391][T13173] FAULT_INJECTION: forcing a failure. [ 320.118391][T13173] name failslab, interval 1, probability 0, space 0, times 0 [ 320.118419][T13173] CPU: 0 UID: 0 PID: 13173 Comm: syz.1.1847 Not tainted syzkaller #0 PREEMPT(full) [ 320.118437][T13173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.118446][T13173] Call Trace: [ 320.118453][T13173] [ 320.118459][T13173] dump_stack_lvl+0xe8/0x150 [ 320.118487][T13173] should_fail_ex+0x410/0x560 [ 320.118509][T13173] should_failslab+0xa8/0x100 [ 320.118530][T13173] __kmalloc_noprof+0xfe/0x720 [ 320.118547][T13173] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 320.118567][T13173] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 320.118592][T13173] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 320.118616][T13173] genl_family_rcv_msg_doit+0xda/0x340 [ 320.118648][T13173] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.118672][T13173] ? apparmor_capable+0x126/0x170 [ 320.118698][T13173] ? bpf_lsm_capable+0x9/0x20 [ 320.118712][T13173] ? security_capable+0x7e/0x2c0 [ 320.118735][T13173] genl_rcv_msg+0x614/0x7a0 [ 320.118757][T13173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.118774][T13173] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 320.118794][T13173] ? __pfx_nl80211_del_key+0x10/0x10 [ 320.118816][T13173] ? __pfx_nl80211_post_doit+0x10/0x10 [ 320.118872][T13173] netlink_rcv_skb+0x226/0x4a0 [ 320.118907][T13173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.118934][T13173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.118985][T13173] ? down_read+0x2be/0x330 [ 320.119020][T13173] genl_rcv+0x28/0x40 [ 320.119036][T13173] netlink_unicast+0x7bd/0x940 [ 320.119065][T13173] netlink_sendmsg+0x813/0xb40 [ 320.119095][T13173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.119127][T13173] ? apparmor_socket_sendmsg+0x98/0x360 [ 320.119146][T13173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.119169][T13173] sock_sendmsg_nosec+0x13a/0x180 [ 320.119197][T13173] ____sys_sendmsg+0x54e/0x850 [ 320.119222][T13173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.119249][T13173] ? import_iovec+0x73/0xa0 [ 320.119272][T13173] ___sys_sendmsg+0x2a5/0x360 [ 320.119291][T13173] ? __lock_acquire+0x747/0x2de0 [ 320.119311][T13173] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.119357][T13173] ? __fget_files+0x2a/0x420 [ 320.119379][T13173] ? __fget_files+0x3a2/0x420 [ 320.119408][T13173] __x64_sys_sendmsg+0x1b1/0x290 [ 320.119431][T13173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.119469][T13173] do_syscall_64+0x166/0x520 [ 320.119486][T13173] ? trace_irq_disable+0x3b/0x140 [ 320.119502][T13173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.119519][T13173] ? clear_bhb_loop+0x70/0xc0 [ 320.119538][T13173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.119554][T13173] RIP: 0033:0x7fcdffd9e159 [ 320.119568][T13173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.119582][T13173] RSP: 002b:00007fce00d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.119599][T13173] RAX: ffffffffffffffda RBX: 00007fce00025fa0 RCX: 00007fcdffd9e159 [ 320.119611][T13173] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000003 [ 320.119627][T13173] RBP: 00007fce00d29090 R08: 0000000000000000 R09: 0000000000000000 [ 320.119637][T13173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.119646][T13173] R13: 00007fce00026038 R14: 00007fce00025fa0 R15: 00007ffca931e1a8 [ 320.119671][T13173] [ 320.914233][T13190] syzkaller1: entered promiscuous mode [ 320.914258][T13190] syzkaller1: entered allmulticast mode [ 320.948864][T13193] unsupported nla_type 216 [ 321.138790][T13202] FAULT_INJECTION: forcing a failure. [ 321.138790][T13202] name failslab, interval 1, probability 0, space 0, times 0 [ 321.138826][T13202] CPU: 0 UID: 0 PID: 13202 Comm: syz.0.1859 Not tainted syzkaller #0 PREEMPT(full) [ 321.138852][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.138866][T13202] Call Trace: [ 321.138874][T13202] [ 321.138884][T13202] dump_stack_lvl+0xe8/0x150 [ 321.138922][T13202] should_fail_ex+0x410/0x560 [ 321.138952][T13202] ? __alloc_skb+0x1db/0x7a0 [ 321.138979][T13202] should_failslab+0xa8/0x100 [ 321.139012][T13202] ? __alloc_skb+0x1db/0x7a0 [ 321.139035][T13202] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 321.139071][T13202] ? __alloc_skb+0x18d/0x7a0 [ 321.139097][T13202] ? __alloc_skb+0x1db/0x7a0 [ 321.139129][T13202] __alloc_skb+0x1db/0x7a0 [ 321.139159][T13202] netlink_ack+0x136/0xb30 [ 321.139189][T13202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.139216][T13202] ? __pfx_nl80211_post_doit+0x10/0x10 [ 321.139262][T13202] netlink_rcv_skb+0x2a4/0x4a0 [ 321.139297][T13202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.139325][T13202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.139375][T13202] ? down_read+0x2be/0x330 [ 321.139406][T13202] genl_rcv+0x28/0x40 [ 321.139430][T13202] netlink_unicast+0x7bd/0x940 [ 321.139472][T13202] netlink_sendmsg+0x813/0xb40 [ 321.139514][T13202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.139558][T13202] ? apparmor_socket_sendmsg+0x98/0x360 [ 321.139586][T13202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.139619][T13202] sock_sendmsg_nosec+0x13a/0x180 [ 321.139658][T13202] ____sys_sendmsg+0x54e/0x850 [ 321.139701][T13202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.139741][T13202] ? import_iovec+0x73/0xa0 [ 321.139774][T13202] ___sys_sendmsg+0x2a5/0x360 [ 321.139801][T13202] ? __lock_acquire+0x747/0x2de0 [ 321.139830][T13202] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.139898][T13202] ? __fget_files+0x2a/0x420 [ 321.139929][T13202] ? __fget_files+0x3a2/0x420 [ 321.139970][T13202] __x64_sys_sendmsg+0x1b1/0x290 [ 321.140003][T13202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.140056][T13202] do_syscall_64+0x166/0x520 [ 321.140080][T13202] ? trace_irq_disable+0x3b/0x140 [ 321.140103][T13202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.140126][T13202] ? clear_bhb_loop+0x70/0xc0 [ 321.140154][T13202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.140177][T13202] RIP: 0033:0x7fb61cf9e159 [ 321.140199][T13202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.140219][T13202] RSP: 002b:00007fb61de9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.140244][T13202] RAX: ffffffffffffffda RBX: 00007fb61d225fa0 RCX: 00007fb61cf9e159 [ 321.140261][T13202] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000003 [ 321.140276][T13202] RBP: 00007fb61de9f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.140291][T13202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.140305][T13202] R13: 00007fb61d226038 R14: 00007fb61d225fa0 R15: 00007ffd8fdf8c98 [ 321.140342][T13202] [ 321.492647][T13208] __nla_validate_parse: 4 callbacks suppressed [ 321.492671][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'. [ 321.575788][T13211] bond14: entered promiscuous mode [ 321.576326][T13211] 8021q: adding VLAN 0 to HW filter on device bond14 [ 321.876425][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1866'. [ 321.876456][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1866'. [ 321.876477][T13224] netlink: 'syz.0.1866': attribute type 4 has an invalid length. [ 321.943609][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 322.757398][T13263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.362513][T13282] 8021q: adding VLAN 0 to HW filter on device bond15 [ 323.389055][T13282] team0: Port device bond15 added [ 323.650591][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 323.687695][T13292] netlink: get zone limit has 4 unknown bytes [ 323.688677][T13292] sctp: [Deprecated]: syz.0.1886 (pid 13292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.688677][T13292] Use struct sctp_sack_info instead [ 323.693018][T13294] sctp: [Deprecated]: syz.0.1886 (pid 13294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.693018][T13294] Use struct sctp_sack_info instead [ 323.781824][T13297] netlink: 'syz.4.1888': attribute type 8 has an invalid length. [ 325.407726][T13354] veth0: entered promiscuous mode [ 325.505259][T13356] bond14: option updelay: invalid value (18446744073709518847) [ 325.505289][T13356] bond14: option updelay: allowed values 0 - 2147483647 [ 325.546695][T13356] bond14 (unregistering): Released all slaves [ 325.637575][T13351] veth0: left promiscuous mode [ 325.702999][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'. [ 326.320317][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 326.403603][T13389] ip6gretap0: entered promiscuous mode [ 326.425584][ T9743] lo speed is unknown, defaulting to 1000 [ 326.425610][ T9743] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 326.481199][T13388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.819662][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 326.892651][T13411] IPVS: sh: FWM 3 0x00000003 - no destination available [ 327.027865][T13417] syzkaller0: left promiscuous mode [ 327.027891][T13417] syzkaller0: left allmulticast mode [ 327.234973][T13428] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1924'. [ 327.235163][T13428] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1924'. [ 328.077879][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1934'. [ 328.342538][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 328.372836][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.373166][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.373442][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.373708][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.373977][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.374248][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.374588][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.375706][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.375985][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.376253][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 328.816679][T13487] syzkaller1: entered promiscuous mode [ 328.816707][T13487] syzkaller1: entered allmulticast mode [ 328.876183][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 328.997709][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 328.997891][T13493] IPVS: length: 28 != 3489684232 [ 329.055633][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1940'. [ 329.521609][T13518] sctp: [Deprecated]: syz.3.1945 (pid 13518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.521609][T13518] Use struct sctp_sack_info instead [ 330.282669][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1950'. [ 330.288100][T13542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1950'. [ 330.315512][ T5615] block nbd1: Receive control failed (result -32) [ 331.890789][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 331.959327][T13604] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 332.289713][T13626] tipc: Failed to obtain node identity [ 332.289750][T13626] tipc: Enabling of bearer rejected, failed to enable media [ 333.536582][T13664] net_ratelimit: 211 callbacks suppressed [ 333.536605][T13664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.836426][T13670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1979'. [ 334.009647][T13674] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1980'. [ 334.798562][T13694] netlink: 'syz.1.1987': attribute type 11 has an invalid length. [ 334.808902][T13696] netlink: 'syz.1.1987': attribute type 2 has an invalid length. [ 334.838907][T13698] netlink: 'syz.0.1988': attribute type 1 has an invalid length. [ 334.838930][T13698] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1988'. [ 335.160690][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1990'. [ 336.128584][T13695] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 336.128614][T13695] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 336.128795][T13695] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 336.282592][T13696] D†'|o: entered promiscuous mode [ 336.350421][T13715] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 336.350448][T13715] syzkaller1: Linktype set failed because interface is up [ 336.419391][T13719] xt_bpf: check failed: parse error [ 336.455537][T13719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.559230][T13739] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1997'. [ 336.559979][T13739] netlink: 'syz.1.1997': attribute type 21 has an invalid length. [ 336.578614][T13739] netlink: Unknown conntrack attr (type=1029, max=9) [ 336.578654][T13739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.818682][T13749] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 336.818962][T13749] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 336.819256][T13749] veth0_virt_wifi: entered allmulticast mode [ 336.848366][T13749] veth0_virt_wifi: entered promiscuous mode [ 336.849067][T13749] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 336.849172][T13749] bridge0: port 3(veth0_virt_wifi) entered listening state [ 337.069775][T13760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2001'. [ 337.745812][T13782] ip6erspan0: entered allmulticast mode [ 338.111272][T13796] Bluetooth: hci0: unsupported parameter 5135 [ 338.111299][T13796] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 338.166343][T13795] Cannot find map_set index 2 as target [ 338.257798][T13799] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2010'. [ 338.292986][ T1680] block nbd0: Possible stuck request ffff8880274b7000: control (read@0,1024B). Runtime 120 seconds [ 338.293033][ T1680] block nbd0: Possible stuck request ffff8880274b71c0: control (read@1024,1024B). Runtime 120 seconds [ 338.293064][ T1680] block nbd0: Possible stuck request ffff8880274b7380: control (read@2048,1024B). Runtime 120 seconds [ 338.293094][ T1680] block nbd0: Possible stuck request ffff8880274b7540: control (read@3072,1024B). Runtime 120 seconds [ 338.438395][T13806] ip_tables: iptables: counters copy to user failed while replacing table [ 338.463530][T13806] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2013'. [ 338.597656][T13812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2015'. [ 339.140640][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 339.337084][T13857] syzkaller0: entered promiscuous mode [ 339.337109][T13857] syzkaller0: entered allmulticast mode [ 339.596463][T13871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2031'. [ 341.901238][T13828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.901991][T13833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.283056][T13903] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.351278][T13904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2033'. [ 342.465398][T13909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.114029][T13942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2043'. [ 343.543034][T13952] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 343.543242][T13952] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.543845][T13952] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.548777][T13952] bridge0: entered allmulticast mode [ 343.605830][T13956] veth0_virt_wifi: left allmulticast mode [ 343.605861][T13956] veth0_virt_wifi: left promiscuous mode [ 343.606149][T13956] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 343.663168][T13956] bridge_slave_1: left promiscuous mode [ 343.663386][T13956] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.668357][T13956] bridge_slave_0: left allmulticast mode [ 343.668382][T13956] bridge_slave_0: left promiscuous mode [ 343.668591][T13956] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.738417][T13956] bond0: (slave bridge0): Releasing backup interface [ 343.816754][T13962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2048'. [ 343.857477][T13966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.947089][T13970] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 344.011746][T13968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2050'. [ 344.303348][T13993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2057'. [ 344.490972][T14002] vxcan2: entered allmulticast mode [ 345.001765][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 345.391301][T14043] syzkaller0: entered promiscuous mode [ 345.391325][T14043] syzkaller0: entered allmulticast mode [ 345.419319][T14045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.419343][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.450646][T14044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2071'. [ 345.518591][T14045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.518617][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.577661][T14045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.577689][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.639923][T14045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2069'. [ 345.872437][T14063] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 347.893113][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 373.490693][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.612803][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 445.171142][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 446.914404][ T4982] udevd[4982]: worker [5616] /devices/virtual/block/nbd0 timeout; kill it [ 446.914492][ T4982] udevd[4982]: seq 14527 '/devices/virtual/block/nbd0' killed [ 446.961390][ T1680] block nbd0: Possible stuck request ffff8880274b7000: control (read@0,1024B). Runtime 150 seconds [ 446.961448][ T1680] block nbd0: Possible stuck request ffff8880274b71c0: control (read@1024,1024B). Runtime 150 seconds [ 446.961479][ T1680] block nbd0: Possible stuck request ffff8880274b7380: control (read@2048,1024B). Runtime 150 seconds [ 446.961508][ T1680] block nbd0: Possible stuck request ffff8880274b7540: control (read@3072,1024B). Runtime 150 seconds [ 516.850657][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 552.250279][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 552.346650][ C0] rcu: 1-...!: (1 GPs behind) idle=9984/1/0x4000000000000000 softirq=56481/56483 fqs=0 [ 552.356409][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5618/1:b..l [ 552.364349][ C0] rcu: (detected by 0, t=10502 jiffies, g=67497, q=688 ncpus=2) [ 552.372119][ C0] Sending NMI from CPU 0 to CPUs 1: [ 552.377410][ C1] NMI backtrace for cpu 1 [ 552.377462][ C1] CPU: 1 UID: 0 PID: 14066 Comm: syz.4.2073 Not tainted syzkaller #0 PREEMPT(full) [ 552.377486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.377523][ C1] RIP: 0010:__remove_hrtimer+0x1de/0x3e0 [ 552.377592][ C1] Code: 24 e8 f6 59 13 00 49 83 c4 28 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 ed 59 83 00 49 8b 1c 24 eb 0f e8 d2 59 13 00 <48> bb ff ff ff ff ff ff ff 7f 49 83 c7 48 4c 89 f8 48 c1 e8 03 80 [ 552.377609][ C1] RSP: 0018:ffffc90000a18d78 EFLAGS: 00000002 [ 552.377626][ C1] RAX: ffffffff81b470de RBX: 00000000fffffffb RCX: ffff888020773e80 [ 552.377641][ C1] RDX: 0000000001000001 RSI: 0000000001000001 RDI: 0000000000000020 [ 552.377653][ C1] RBP: dffffc0000000000 R08: 0000000001000001 R09: 0000000000000000 [ 552.377666][ C1] R10: ffff888079e34318 R11: ffffed100f3c6865 R12: 0000000000000000 [ 552.377680][ C1] R13: 0000000000000000 R14: ffff888079e34300 R15: ffff8880b8728440 [ 552.377694][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 552.377709][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.377722][ C1] CR2: 00007f37c727231d CR3: 000000000eb48000 CR4: 00000000003526f0 [ 552.377740][ C1] Call Trace: [ 552.377770][ C1] [ 552.377782][ C1] __hrtimer_run_queues+0x295/0xa10 [ 552.377826][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 552.377869][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 552.377893][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 552.377915][ C1] [ 552.377921][ C1] [ 552.377928][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 552.377950][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x80 [ 552.377996][ C1] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 48 25 cd 11 65 48 8b 15 48 25 cd 11 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 [ 552.378011][ C1] RSP: 0018:ffffc90003b67348 EFLAGS: 00000286 [ 552.378028][ C1] RAX: ffffffff8243a919 RBX: 0000000000000001 RCX: ffff888020773e80 [ 552.378042][ C1] RDX: 8000000000000001 RSI: 0000000000000001 RDI: 000000000005b0b3 [ 552.378054][ C1] RBP: ffffc90003b67690 R08: ffffea00016c2cc7 R09: 1ffffd40002d8598 [ 552.378069][ C1] R10: dffffc0000000000 R11: fffff940002d8599 R12: 1ffff110053dccac [ 552.378083][ C1] R13: 00007fcfa0600000 R14: 000000000005b0b3 R15: 00007fcfa04ac000 [ 552.378102][ C1] ? page_table_check_clear+0x19/0x500 [ 552.378128][ C1] page_table_check_clear+0x19/0x500 [ 552.378148][ C1] ? vm_normal_page+0x13c/0x2b0 [ 552.378170][ C1] __zap_vma_range+0x3a12/0x4f80 [ 552.378217][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 552.378243][ C1] ? mas_find+0x6d6/0xcb0 [ 552.378266][ C1] unmap_vmas+0x390/0x550 [ 552.378290][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 552.378308][ C1] ? mas_next_slot+0xc91/0xd70 [ 552.378342][ C1] exit_mmap+0x293/0x9f0 [ 552.378370][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 552.378410][ C1] ? __pfx_exit_aio+0x10/0x10 [ 552.378446][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 552.378474][ C1] __mmput+0x118/0x420 [ 552.378498][ C1] exit_mm+0x221/0x2d0 [ 552.378518][ C1] do_exit+0x6cd/0x2360 [ 552.378540][ C1] ? __pfx_do_exit+0x10/0x10 [ 552.378560][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 552.378591][ C1] do_group_exit+0x22d/0x2f0 [ 552.378609][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.378641][ C1] get_signal+0x121b/0x12c0 [ 552.378677][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 552.378707][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 552.378734][ C1] ? vm_mmap_pgoff+0x353/0x4e0 [ 552.378765][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 552.378785][ C1] ? rcu_is_watching+0x16/0xb0 [ 552.378814][ C1] do_syscall_64+0x328/0x520 [ 552.378835][ C1] ? trace_irq_disable+0x3b/0x140 [ 552.378854][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.378873][ C1] ? clear_bhb_loop+0x70/0xc0 [ 552.378895][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.378914][ C1] RIP: 0033:0x7fcfa159e159 [ 552.378930][ C1] Code: Unable to access opcode bytes at 0x7fcfa159e12f. [ 552.378939][ C1] RSP: 002b:00007fcfa24f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 552.378958][ C1] RAX: 0000200000000000 RBX: 00007fcfa1826090 RCX: 00007fcfa159e159 [ 552.378972][ C1] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 552.378986][ C1] RBP: 00007fcfa163506b R08: ffffffffffffffff R09: 00000000215eb000 [ 552.379000][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 552.379011][ C1] R13: 00007fcfa1826128 R14: 00007fcfa1826090 R15: 00007ffcd9587798 [ 552.379035][ C1] [ 552.824498][ C0] task:syz-executor state:R running task stack:22696 pid:5618 tgid:5618 ppid:5613 task_flags:0x400140 flags:0x00080001 [ 552.838036][ C0] Call Trace: [ 552.841339][ C0] [ 552.844299][ C0] __schedule+0x17db/0x58f0 [ 552.848857][ C0] ? lock_acquire+0x115/0x350 [ 552.853575][ C0] ? __pfx___schedule+0x10/0x10 [ 552.858464][ C0] ? lock_acquire+0x115/0x350 [ 552.863190][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 552.868610][ C0] preempt_schedule_common+0x7f/0xd0 [ 552.873948][ C0] preempt_schedule_thunk+0x16/0x40 [ 552.879200][ C0] _raw_spin_unlock+0x41/0x50 [ 552.883925][ C0] do_wp_page+0x3dca/0x4b80 [ 552.888489][ C0] ? do_wp_page+0x3666/0x4b80 [ 552.893244][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 552.898219][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 552.903286][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 552.908711][ C0] handle_mm_fault+0x15d7/0x3750 [ 552.913697][ C0] ? handle_mm_fault+0xf1/0x3750 [ 552.918688][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 552.924009][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 552.929246][ C0] ? do_sys_openat2+0x14e/0x200 [ 552.934162][ C0] do_user_addr_fault+0xa4f/0x1340 [ 552.939312][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 552.944726][ C0] exc_page_fault+0x6a/0xc0 [ 552.949271][ C0] asm_exc_page_fault+0x26/0x30 [ 552.954159][ C0] RIP: 0033:0x7fcfa1562ce0 [ 552.958601][ C0] RSP: 002b:00007ffcd95879a0 EFLAGS: 00010206 [ 552.964698][ C0] RAX: 00000000000065d1 RBX: 0000000000008040 RCX: 0000555580c1ea30 [ 552.972717][ C0] RDX: 0000000000008041 RSI: 0000555580c169f0 RDI: 0000000000000004 [ 552.980711][ C0] RBP: 0000000000000802 R08: 00007fcfa17f2e20 R09: 0000000000000001 [ 552.988725][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008030 [ 552.996720][ C0] R13: 0000000000000000 R14: 00007fcfa17f2e80 R15: 0000000000000000 [ 553.004738][ C0] [ 553.007787][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g67497 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 553.018833][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 553.028823][ C0] rcu: RCU grace-period kthread stack dump: [ 553.034730][ C0] task:rcu_preempt state:R running task stack:28112 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 553.048274][ C0] Call Trace: [ 553.051579][ C0] [ 553.054539][ C0] __schedule+0x17db/0x58f0 [ 553.059077][ C0] ? __lock_acquire+0x747/0x2de0 [ 553.064065][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 553.069221][ C0] ? __pfx___schedule+0x10/0x10 [ 553.074117][ C0] ? lock_acquire+0x115/0x350 [ 553.078843][ C0] ? schedule+0x90/0x2b0 [ 553.083116][ C0] schedule+0x164/0x2b0 [ 553.087313][ C0] schedule_timeout+0x152/0x2c0 [ 553.092205][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 553.097623][ C0] ? __pfx_process_timeout+0x10/0x10 [ 553.102953][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 553.108802][ C0] ? prepare_to_swait_event+0x322/0x350 [ 553.114396][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 553.119301][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 553.124616][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 553.129863][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 553.135711][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 553.140346][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 553.145572][ C0] ? __kthread_parkme+0x71/0x1f0 [ 553.150557][ C0] ? __kthread_parkme+0x199/0x1f0 [ 553.155632][ C0] kthread+0x38b/0x480 [ 553.159748][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 553.164970][ C0] ? __pfx_kthread+0x10/0x10 [ 553.169591][ C0] ret_from_fork+0x514/0xb70 [ 553.174230][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 553.179394][ C0] ? __switch_to+0xc89/0x1420 [ 553.184112][ C0] ? __pfx_kthread+0x10/0x10 [ 553.188729][ C0] ret_from_fork_asm+0x1a/0x30 [ 553.193554][ C0] [ 553.196595][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 553.202943][ C0] CPU: 0 UID: 0 PID: 5277 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 553.211909][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.221990][ C0] RIP: 0010:smp_call_function_many_cond+0x639/0x1500 [ 553.228730][ C0] Code: 41 83 e7 01 75 07 e8 46 4f 0c 00 eb 3f f3 90 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 0f f7 03 01 00 00 00 74 1d 22 4f 0c 00 eb dc 89 d9 80 e1 07 80 c1 03 38 c1 7c e5 48 89 df [ 553.248360][ C0] RSP: 0018:ffffc9000352f420 EFLAGS: 00000202 [ 553.254466][ C0] RAX: 0000000000000000 RBX: ffff8880b87414c8 RCX: ffff8880263f8000 [ 553.262508][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 553.270523][ C0] RBP: ffffc9000352f570 R08: ffff8880263f959f R09: 1ffff11004c7f2b3 [ 553.278531][ C0] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff110170e8299 [ 553.286533][ C0] R13: 0000000000000001 R14: ffff8880b87414c0 R15: 0000000000000001 [ 553.294554][ C0] FS: 00007fbfe2732780(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 553.303522][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.310129][ C0] CR2: 00007fbfe172f000 CR3: 0000000012af0000 CR4: 00000000003526f0 [ 553.318161][ C0] Call Trace: [ 553.321472][ C0] [ 553.324436][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 553.329713][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 553.336078][ C0] ? rcu_is_watching+0x16/0xb0 [ 553.340879][ C0] ? trace_tlb_flush+0x3c/0x160 [ 553.345782][ C0] flush_tlb_mm_range+0x8ff/0x1090 [ 553.350946][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 553.356616][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 553.362198][ C0] ? mas_next_slot+0xc98/0xd70 [ 553.367020][ C0] ? dup_mmap+0x173e/0x1dc0 [ 553.371564][ C0] ? up_write+0x19d/0x4a0 [ 553.375949][ C0] dup_mmap+0x1758/0x1dc0 [ 553.380350][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 553.385081][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 553.390176][ C0] ? lock_acquire+0x115/0x350 [ 553.394926][ C0] copy_mm+0x11a/0x480 [ 553.399039][ C0] ? copy_process+0xd3c/0x43e0 [ 553.403848][ C0] copy_process+0x1e75/0x43e0 [ 553.408571][ C0] ? copy_process+0xd3c/0x43e0 [ 553.413395][ C0] ? __pfx_copy_process+0x10/0x10 [ 553.418470][ C0] kernel_clone+0x2d7/0x940 [ 553.423014][ C0] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 553.428418][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 553.433534][ C0] __x64_sys_clone+0x1b6/0x230 [ 553.438344][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 553.443778][ C0] ? do_sock_setsockopt+0x185/0x1b0 [ 553.449023][ C0] do_syscall_64+0x166/0x520 [ 553.453640][ C0] ? trace_irq_disable+0x3b/0x140 [ 553.458699][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.464796][ C0] ? clear_bhb_loop+0x70/0xc0 [ 553.469506][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.475443][ C0] RIP: 0033:0x7fbfe2806636 [ 553.479898][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 553.499619][ C0] RSP: 002b:00007ffe739404c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 553.508068][ C0] RAX: ffffffffffffffda RBX: 00007ffe739404c8 RCX: 00007fbfe2806636 [ 553.516072][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 553.524070][ C0] RBP: 00007ffe73960a10 R08: 0000000000000000 R09: 0000000000000001 [ 553.532065][ C0] R10: 00007fbfe2732a50 R11: 0000000000000246 R12: 00007ffe73940600 [ 553.540060][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 000055d844cabac0 [ 553.548079][ C0]