last executing test programs: 11.55148626s ago: executing program 0 (id=8536): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf25050000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@initdev, 0x0}, &(0x7f0000000180)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000e9", @ANYRES16=r5, @ANYBLOB="040026bd7000fcdbdf250500000008000300080000003800018008000300640101010800060008000000060001000200000014000400fe80000000000000000000000000001505000200f400000008000300070000002c000680050002000900000008000700", @ANYRES32=r6, @ANYBLOB="060001000000000006000100020000000600010002000000"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f00000000c0)={0x27, r7, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r3) close(r0) r9 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000001440)={'batadv_slave_0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20000001, 0x0, 0x7ff, 0x900, 0x0, 0xfffffffc}}) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x4) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xfdec}}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) 9.951014528s ago: executing program 4 (id=8542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}, 0x58fd0000}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) 9.614617355s ago: executing program 0 (id=8544): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20040004) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1a0008", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xd}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @mld={0x83, 0x0, 0x0, 0xb, 0xc033, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x4000080) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000f80), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x800002) 9.612511409s ago: executing program 4 (id=8545): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{r2}, &(0x7f00000019c0), &(0x7f0000001a00)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xe2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x47f}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x2bd, 0x4) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) 9.050827125s ago: executing program 3 (id=8549): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004340)=[{{&(0x7f0000000840)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}}, {{&(0x7f0000000980)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x4000800) 8.697891721s ago: executing program 3 (id=8550): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r6, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@cgroup=r3, r6, 0x2f, 0x8, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="22b1c1b6d474eb34edd5b4038d764518e2d7aad655444db74bac759258363c3b7bbd5ccf4ae54842b55c0b55778afffd77f8c307b029d6634758d3043cd4a5fd3340933a2a1b38d068c035e2bd843d3503a98bafb9d5ab3bcdf3b224f592adcaf52607ad3bdc9f7e53003854bdb6e20468bbe7a4f3bbd6e5d9fadce9e9edb161d5634a6ca2e2fffe206e9a0d9c594dc86668eb22d84c5345daff77fd2ac2d9bf196549fc9f45b6d16199932a4030b50be91a2bcb093a1dc89ee95a15", @ANYBLOB="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", @ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000040) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x6a, 0x4, 0x0, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x10}], 0x5}, 0x24000000) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24004842}, 0x8000) 8.638216719s ago: executing program 2 (id=8552): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x30bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) 8.158049666s ago: executing program 2 (id=8553): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xff, 0x0, 0xff], 'bridge_slave_0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x5, 0x49}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000300)={'wlan1\x00', {0x2, 0x0, @multicast2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5d}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}}, &(0x7f0000000200)='GPL\x00', 0xf, 0x79, &(0x7f0000000300)=""/121, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r6, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x40000001}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@initdev, 0x0}, &(0x7f0000000500)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x0, 0x2, {{0x26, 0x4, 0x1, 0x38, 0x98, 0x65, 0x0, 0x5, 0x29, 0x0, @empty, @local, {[@rr={0x7, 0x13, 0x72, [@dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x26}, @local]}, @timestamp_prespec={0x44, 0x2c, 0xdd, 0x3, 0x8, [{@rand_addr=0x64010102, 0x2}, {@remote}, {@loopback, 0x69d}, {@loopback, 0x8}, {@local, 0x5}]}, @end, @lsrr={0x83, 0x7, 0xf2, [@local]}, @ssrr={0x89, 0x7, 0x31, [@private=0xa010101]}, @lsrr={0x83, 0xb, 0x4f, [@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010100]}, @end, @rr={0x7, 0x17, 0x2f, [@multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, @remote, @multicast2]}, @generic={0x44, 0x12, "4c673744f81e0b14203d8de3d42e877b"}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)={0x300, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa43}}}]}}, {{0x8, 0x1, r18}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xac}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x300}, 0x1, 0x0, 0x0, 0x480}, 0x4000004) 7.900122991s ago: executing program 4 (id=8554): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00', 0x400802, &(0x7f00000000c0)={@align=0x6b9, {0xc, 0x4, 0x81, 0x1ff}}, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x10}) bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x3, @private=0xa010102}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, r3, 0x215eb000) socket$inet(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x16}, [@typed={0x4}]}, 0x18}}, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 7.711152952s ago: executing program 3 (id=8556): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) socket(0x1e, 0x4, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600)={0x4}) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x82316000) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket(0x2, 0x80805, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 7.706917302s ago: executing program 0 (id=8557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) socket$xdp(0x2c, 0x3, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="2e000300010003", 0x7) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = accept(r5, 0x0, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240023a80002050000000000000000000200000c06000740b3929616000100000800094000000810"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000022c0)="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", 0x1000, 0x4801, &(0x7f00000032c0)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x884c}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000200)={r12, 0x0, 0x20, 0x3, 0x22ba}, &(0x7f0000000240)=0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000018000100000000000000000002", @ANYRES32], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x4008044}, 0x4048004) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x28011, r0, 0x0) 6.466762967s ago: executing program 1 (id=8558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x5, 0x8400, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.403202384s ago: executing program 2 (id=8559): r0 = socket(0x11, 0xa, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="400000001000b3209bb311d5a00700000000000000", @ANYRES32=0x0, @ANYBLOB="00000000040000002000128008000100736974001400028005000a0000000000060008000b000000"], 0x40}}, 0x4010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000001600)) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001240)=0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) 6.324774963s ago: executing program 0 (id=8560): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x22109074, 0x7, 0xffff6fee, 0x22000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r4, r5}, 0xc) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000580)) sendmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)='s', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002b40)='f', 0x1}], 0x1}}], 0x2, 0x2000c084) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r10, r8, 0x0, r7}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'pimreg\x00', &(0x7f00000003c0)=@ethtool_dump={0x3e, 0x8001, 0x10001, 0xab, "ef75d9e7692651b940d663d702e805287dbbcea22cb0ed48ee27d57f39ea6e4546f1c57920a84c472f1e6762ac9c4734587311a0028a7818600702bb456c03f1bd15d1ffe58d5c512167bff8605995c45f522c13e1168f1333aa493e0f218eb399f74dd61c08a9958335e83623c033d1a08b3329f96e3761163cae56bb167f0d0c574d2aa66c51fd7da25e120371d27d55fc08a93b95de6f7e4870b341df66c40f7ce76c31fd3e6f4a84d6"}}) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 6.233907429s ago: executing program 1 (id=8561): r0 = epoll_create1(0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000000000604000000080000000100000ff7ffffff0400000001000000fffffff70030615f5f002e305f"], 0x0, 0x46}, 0x28) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40840, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe25, 0x0, @empty, 0xfffffffd}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r5 = epoll_create1(0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r5, @ANYRESOCT=r8, @ANYRES32=r8, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r9, &(0x7f0000000100)={0xa000000d}) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f00000001c0)={'pim6reg\x00', {0x2, 0x0, @empty}}) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000000140)={0x60000008}) 5.758179226s ago: executing program 2 (id=8562): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) unshare(0x22020600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b15, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) 5.506095212s ago: executing program 1 (id=8563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) read(r2, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x2000000}, @TCA_FQ_PLIMIT={0x1300, 0x1, 0x5}]}}]}, 0x48}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000640)=@raw=[@alu={0x4, 0x1, 0xb3189db6b0bd243d, 0x0, 0x3, 0xffffffffffffff21, 0x4}, @jmp={0x5, 0x0, 0x8, 0x2, 0x1, 0xfffffffffffffff4, 0x8}, @ldst={0x0, 0x1, 0x2, 0x4, 0x1, 0xfffffffffffffff0, 0x10}, @jmp={0x5, 0x0, 0x8, 0x3, 0xb, 0x4, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xc, 0xb, 0x0, 0x0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x8a}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000740)='GPL\x00', 0x9, 0x5f, &(0x7f0000000780)=""/95, 0x40f00, 0xc, '\x00', r7, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x8, 0x7, 0x2}, 0x10, 0xbff5, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0x1], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80080000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008440)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r9, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 5.118064045s ago: executing program 4 (id=8564): close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x3, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x1}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) 5.02386697s ago: executing program 0 (id=8565): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r0}) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) r1 = epoll_create1(0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0xa], 0x1, [0x5, 0x4, 0x2, 0x0, 0xc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={r7, @broadcast, @empty}, 0xc) close(r2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x4) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x48, 0x1, 0xc, 0x5}, {0x6}]}) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) write$cgroup_type(r9, &(0x7f0000000280), 0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa}) 4.686754059s ago: executing program 1 (id=8566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x9f, "a6c74d00be8fd52fd330e4802cbba3d8fd5fab65f9d06e6afde62c96ae95d8a904ed024464b4761b88b955166e15a82a23c13869ebec3c9c624037e5873fa02a940d74105be7e0cf9a3092163adaaf520140bfaf432b8c41f0fb4296fdd76b671e116df3b22dcab2d9e2bb409959bf96cfe46b47fd04cfcdcbb3912cb5b68d056478ecb45ab750a2ccd5d0d3f739a4bd88c0f7ac08121deeae192a1d12edfc"}, &(0x7f0000000200)=0xa7) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000240)={r5, 0x9}, &(0x7f0000000300)=0x8) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="81010000000000000000030000000800010000000000700007800c00018008000100", @ANYRES32=r2], 0xbc}}, 0x20040404) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@bridge_newvlan={0x50, 0x70, 0x100, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x14, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x5}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) 4.640157101s ago: executing program 2 (id=8567): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20040004) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1a0008", 0x18, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xd}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @mld={0x83, 0x0, 0x0, 0xb, 0xc033, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 49) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x4000080) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000f80), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x800002) 4.561194702s ago: executing program 4 (id=8568): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmmsg$inet(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200040c0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xde, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r6, &(0x7f0000000500), 0x0}, 0x20) close(r0) 4.547595923s ago: executing program 3 (id=8569): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r1, 0x0, 0x0, 0x20050, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e25, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES8=r4], 0x18}, 0x40c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00000000002f9078e00000e7df0000012480655800000000000010000800e800000086dd86dd88be00000000100000000100000000000000080022eb04000000200000000200000000000000000000000800655800000000"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f00000001c0)=0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f3, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xa}, 0x18}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0xc8, 0x8, 0x1f8, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xff, 0xff000000], [0xff, 0xffffff00, 0x0, 0xff], 'dvmrp0\x00', 'batadv0\x00', {}, {}, 0x3a, 0xbb, 0x0, 0x20}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0xea, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@ipv6header={{0x28}, {0x60, 0x9a, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xe, 0x3, 0x21, '\x00', 'syz1\x00', {0xffffffffffff8001}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'bridge0\x00', 'veth0_to_bond\x00', {}, {}, 0x3c, 0x8, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 4.038507109s ago: executing program 1 (id=8570): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty, 0x8}, 0x1c) (async) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvfrom$inet(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "002b228078c8"}]}}}}}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a000004090000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000140900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000020a0102000000000000000000000002140000001100010000000000000000000100000a000000000000000bcb71baa49e2d4564d6ca95a5cc5b36a0a16d"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180136012000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc8e339395c23277d000014000200fc020000000000000000000000006fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750823fc076eb43d9621dc08c029d1608a46cf26ffcfffffff7cb81bff81a8b9482565856555ee923c65973de90a99b962bc4fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6077de0e14dcef1869ed4eefed64115f9c24a6233bd8c460d98fe3fa370d47eb640dc5061d00"/294], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 3.685007377s ago: executing program 3 (id=8571): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x30, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_skbprio={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtclass={0x74, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x2}}]}, 0x74}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e38, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x2}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x700, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async, rerun: 32) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (rerun: 32) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x58b}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0xa, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff4, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xaf}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xff1, &(0x7f0000001cc0)=""/4081, 0x41100, 0x22}, 0x94) 3.342168032s ago: executing program 1 (id=8572): r0 = socket(0x11, 0xa, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=ANY=[@ANYBLOB="400000001000b3209bb311d5a00700000000000000", @ANYRES32=0x0, @ANYBLOB="00000000040000002000128008000100736974001400028005000a0000000000060008000b000000"], 0x40}}, 0x4010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001240)=0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) 2.605318103s ago: executing program 0 (id=8573): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd700000f900000400000004000e0004001d"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32, @ANYRESOCT=r1], 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="180007000800c91b484a9e318a9f00001811000084760adb301cbb28970931d30184b345add58e56da4d9db77f1d1dd3db7662a3668cd476df860c7c3c4638b3c4ec66babf43256e612d31b158435ca0caf2995752b5fbbdd9f0205505a75483f352792d2bdc04cbb7fb856a5e1f099a26cb418beb2ed9c356ebfea535ee9d5af058c24bfe8ce2536cda929d630c999d58fe830fb5bfebc56814a5e8bbf5d210caa3b24f4a2de014b7df144cea81372c286a91a3f830684d8aa269ffc45664518e0aaeaecb780aea0ac2c55f7315b07ab330f1af7bb81aedf8ad32756fd56a90da08799df6359030ed", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000009d0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r5, &(0x7f00000006c0)="600000000014334000e4331e26bff073b302d6b8b34123ca000000000000000000000000000001000013099acf00000000000000", 0x34, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x43, 0x0, "42ba93022f71eaee1febb9de3f1399d494af3c3762416f7a93ebc1a205165f8bc9d57194f7e332522553f128fa8c603c27ba9bce534da005594663aac36831a6f3afd3f9a23e0e5d437a0f2c32797cf7"}, 0xd8) 2.150443192s ago: executing program 2 (id=8574): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180", @ANYRES32], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0x47) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8e}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @random="200000001000"}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x3000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) sendmsg$rds(r1, &(0x7f0000001780)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/57, 0x39}], 0x3, &(0x7f0000001580)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0xffffffe6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000340)=""/4096, 0x1000}, &(0x7f0000001340), 0x32}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x1ff}, &(0x7f0000001380)=0x6, &(0x7f00000013c0)=0x6, 0x80, 0x7ff, 0x2a84, 0x66de, 0x51, 0xfffffffffffffffd}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x9}, &(0x7f0000001400)=0x7, &(0x7f0000001440)=0x7, 0x1, 0x2b8, 0xffffffffffffffff, 0x81, 0x25, 0x9}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfff, 0x2}, &(0x7f0000001480)=0x4, &(0x7f00000014c0)=0x9, 0x4, 0x5, 0x40, 0x9, 0xa, 0xf800000000000000}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, &(0x7f0000001500)=0x3, &(0x7f0000001540), 0x100000000, 0x9, 0x9, 0xb1b, 0x6e, 0x1400000000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_dest={0x18, 0x114, 0x2, {0x8000, 0x5}}], 0x1d8, 0x4004004}, 0x20000000) 141.264138ms ago: executing program 4 (id=8575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="58010000100001000000000800000000ac1414bb000000000000000000000000000000000072b97bb6da61b82e8b360000000000000000000001000200004e20", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aafffffffc33000000ac1414aa0000000100000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a"], 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x240000d8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x29, 0x8, 0x1, 0x40, 0xffffffffffffffff, 0x1}, 0x50) (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000016c0), 0x0}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d1}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x840) 0s ago: executing program 3 (id=8576): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x4, 0x3, 0x3, 0x7fffffffffffffa6, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x3) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x4, 0x3, 0x3, 0x7fffffffffffffa6, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) kernel console output (not intermixed with test programs): 7][ T873] ? pfkey_broadcast+0x39b/0x3e0 [ 1011.679303][ T873] pfkey_broadcast+0x3a8/0x3e0 [ 1011.679323][ T873] ? pfkey_broadcast+0x48/0x3e0 [ 1011.679345][ T873] pfkey_sendmsg+0xf02/0x11d0 [ 1011.679379][ T873] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1011.679421][ T873] ? aa_sock_msg_perm+0x144/0x210 [ 1011.679448][ T873] ? apparmor_socket_sendmsg+0x98/0x360 [ 1011.679478][ T873] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1011.679497][ T873] sock_sendmsg_nosec+0x13a/0x180 [ 1011.679525][ T873] ____sys_sendmsg+0x54e/0x850 [ 1011.679551][ T873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1011.679580][ T873] ? import_iovec+0x73/0xa0 [ 1011.679605][ T873] ___sys_sendmsg+0x2a5/0x360 [ 1011.679624][ T873] ? __lock_acquire+0x6df/0x2e50 [ 1011.679650][ T873] ? __pfx____sys_sendmsg+0x10/0x10 [ 1011.679668][ T873] ? __lock_acquire+0x6df/0x2e50 [ 1011.679691][ T873] ? kstrtouint+0x6e/0xe0 [ 1011.679755][ T873] __sys_sendmmsg+0x273/0x4d0 [ 1011.679781][ T873] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1011.679811][ T873] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1011.679856][ T873] ? ksys_write+0x242/0x270 [ 1011.679886][ T873] ? __pfx_ksys_write+0x10/0x10 [ 1011.679919][ T873] __x64_sys_sendmmsg+0xa0/0xc0 [ 1011.679943][ T873] do_syscall_64+0x166/0x520 [ 1011.679969][ T873] ? trace_irq_disable+0x3b/0x140 [ 1011.679989][ T873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.680011][ T873] ? clear_bhb_loop+0x70/0xc0 [ 1011.680035][ T873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.680055][ T873] RIP: 0033:0x7f5f1559e159 [ 1011.680074][ T873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.680090][ T873] RSP: 002b:00007f5f164f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1011.680113][ T873] RAX: ffffffffffffffda RBX: 00007f5f15825fa0 RCX: 00007f5f1559e159 [ 1011.680127][ T873] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 1011.680140][ T873] RBP: 00007f5f164f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.680153][ T873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1011.680166][ T873] R13: 00007f5f15826038 R14: 00007f5f15825fa0 R15: 00007fff8385f028 [ 1011.680208][ T873] [ 1012.128484][ T885] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7456'. [ 1012.442753][ T901] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7461'. [ 1012.633203][ T903] bond2: option lp_interval: invalid value (0) [ 1012.633265][ T903] bond2: option lp_interval: allowed values 1 - 2147483647 [ 1012.642582][ T903] bond2 (unregistering): Released all slaves [ 1012.814181][ T910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.834024][ T910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.861645][ T910] bond0 (unregistering): Released all slaves [ 1013.196560][ T936] FAULT_INJECTION: forcing a failure. [ 1013.196560][ T936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.214559][ T936] CPU: 0 UID: 0 PID: 936 Comm: syz.3.7473 Not tainted syzkaller #0 PREEMPT(full) [ 1013.214590][ T936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1013.214602][ T936] Call Trace: [ 1013.214611][ T936] [ 1013.214621][ T936] dump_stack_lvl+0xe8/0x150 [ 1013.214658][ T936] should_fail_ex+0x410/0x560 [ 1013.214696][ T936] _copy_from_user+0x2d/0xb0 [ 1013.214720][ T936] ___sys_sendmsg+0x1c6/0x360 [ 1013.214744][ T936] ? __lock_acquire+0x6df/0x2e50 [ 1013.214782][ T936] ? __pfx____sys_sendmsg+0x10/0x10 [ 1013.214845][ T936] ? __fget_files+0x2a/0x420 [ 1013.214872][ T936] ? __fget_files+0x3a2/0x420 [ 1013.214910][ T936] __x64_sys_sendmsg+0x1b1/0x290 [ 1013.214938][ T936] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1013.214985][ T936] do_syscall_64+0x166/0x520 [ 1013.215014][ T936] ? trace_irq_disable+0x3b/0x140 [ 1013.215035][ T936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.215057][ T936] ? clear_bhb_loop+0x70/0xc0 [ 1013.215083][ T936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.215106][ T936] RIP: 0033:0x7fc0f5f9e159 [ 1013.215127][ T936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.215145][ T936] RSP: 002b:00007fc0f6e28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1013.215169][ T936] RAX: ffffffffffffffda RBX: 00007fc0f6225fa0 RCX: 00007fc0f5f9e159 [ 1013.215185][ T936] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1013.215199][ T936] RBP: 00007fc0f6e28090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.215213][ T936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.215225][ T936] R13: 00007fc0f6226038 R14: 00007fc0f6225fa0 R15: 00007ffe2e37e818 [ 1013.215264][ T936] [ 1013.881943][ T964] xt_l2tp: invalid flags combination: 8 [ 1013.882106][ T964] xt_l2tp: invalid flags combination: 8 [ 1013.882233][ T964] xt_l2tp: invalid flags combination: 8 [ 1013.882349][ T964] xt_l2tp: invalid flags combination: 8 [ 1013.882465][ T964] xt_l2tp: invalid flags combination: 8 [ 1013.882578][ T964] xt_l2tp: invalid flags combination: 8 [ 1013.882692][ T964] xt_l2tp: invalid flags combination: 8 [ 1013.882879][ T964] xt_l2tp: invalid flags combination: 8 [ 1013.882992][ T964] xt_l2tp: invalid flags combination: 8 [ 1013.883103][ T964] xt_l2tp: invalid flags combination: 8 [ 1014.049032][ T957] tipc: Resetting bearer [ 1014.049261][ T957] tipc: Resetting bearer [ 1014.093604][ T956] tipc: Resetting bearer [ 1014.151254][ T975] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1014.160642][ T975] syzkaller1: linktype set to 769 [ 1014.761947][ T1001] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1014.909788][ T1002] __nla_validate_parse: 6 callbacks suppressed [ 1014.917262][ T1002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7489'. [ 1015.231210][ T1028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1015.282357][ T1028] xt_connbytes: Forcing CT accounting to be enabled [ 1015.735707][ T1049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7502'. [ 1015.803670][ T1051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1015.803745][ T1051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1015.803762][ T1051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1016.262921][ T1065] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7504'. [ 1016.262980][ T1065] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1016.479351][ T1076] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7508'. [ 1016.829608][ T1092] x_tables: duplicate underflow at hook 1 [ 1016.902688][ T1087] tun0: tun_chr_ioctl cmd 1074025677 [ 1016.912011][ T1087] tun0: linktype set to 0 [ 1017.395999][ T1118] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1018.160646][ T1099] lo speed is unknown, defaulting to 1000 [ 1018.173337][ T1099] wg2 speed is unknown, defaulting to 1000 [ 1018.571817][ T1148] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7535'. [ 1018.991307][ T1157] netlink: 'syz.0.7538': attribute type 1 has an invalid length. [ 1019.018355][ T1157] pim6reg0: tun_chr_ioctl cmd 35111 [ 1020.007616][ T1208] lo: entered allmulticast mode [ 1020.218832][ T1217] __nla_validate_parse: 1 callbacks suppressed [ 1020.220747][ T1217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7556'. [ 1020.383189][ T1216] lo: left allmulticast mode [ 1021.427317][ T1264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7569'. [ 1021.427364][ T1264] tipc: Invalid UDP bearer configuration [ 1021.427463][ T1264] tipc: Enabling of bearer rejected, failed to enable media [ 1021.657500][ T1272] batman_adv: batadv0: Adding interface: macvtap1 [ 1021.657539][ T1272] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.658073][ T1272] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1022.219291][ T1307] bond0 (unregistering): Released all slaves [ 1022.662266][ T1327] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1022.948465][ T1332] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7592'. [ 1023.258828][ T1351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7596'. [ 1023.329244][ T1351] netlink: 'syz.3.7596': attribute type 2 has an invalid length. [ 1024.547960][ T1396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7604'. [ 1024.583007][ T1395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7606'. [ 1024.830192][ T31] audit: type=1804 audit(1788986864.621:13): pid=1407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7611" name="/newroot/326/cgroup.controllers" dev="tmpfs" ino=1688 res=1 errno=0 [ 1024.853351][ T31] audit: type=1800 audit(1788986864.621:14): pid=1407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7611" name="cgroup.controllers" dev="tmpfs" ino=1688 res=0 errno=0 [ 1025.185964][ T1422] syzkaller0: entered promiscuous mode [ 1025.192033][ T1422] syzkaller0: entered allmulticast mode [ 1025.520328][ T1434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7620'. [ 1025.584342][ T1439] FAULT_INJECTION: forcing a failure. [ 1025.584342][ T1439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.584398][ T1439] CPU: 0 UID: 0 PID: 1439 Comm: syz.3.7621 Not tainted syzkaller #0 PREEMPT(full) [ 1025.584427][ T1439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1025.584439][ T1439] Call Trace: [ 1025.584449][ T1439] [ 1025.584457][ T1439] dump_stack_lvl+0xe8/0x150 [ 1025.584493][ T1439] should_fail_ex+0x410/0x560 [ 1025.584532][ T1439] _copy_to_user+0x31/0xb0 [ 1025.584556][ T1439] simple_read_from_buffer+0xe1/0x170 [ 1025.584590][ T1439] proc_fail_nth_read+0x1bb/0x230 [ 1025.584619][ T1439] ? common_file_perm+0x20e/0x2b0 [ 1025.584645][ T1439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1025.584688][ T1439] ? rw_verify_area+0x24a/0x4c0 [ 1025.584727][ T1439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1025.584758][ T1439] vfs_read+0x213/0xa80 [ 1025.584791][ T1439] ? __pfx___mutex_lock+0x10/0x10 [ 1025.584825][ T1439] ? __pfx_vfs_read+0x10/0x10 [ 1025.584855][ T1439] ? __fget_files+0x2a/0x420 [ 1025.584887][ T1439] ? __fget_files+0x3a2/0x420 [ 1025.584913][ T1439] ? __fget_files+0x2a/0x420 [ 1025.584949][ T1439] ksys_read+0x150/0x270 [ 1025.584981][ T1439] ? __pfx_ksys_read+0x10/0x10 [ 1025.585024][ T1439] do_syscall_64+0x166/0x520 [ 1025.585053][ T1439] ? trace_irq_disable+0x3b/0x140 [ 1025.585074][ T1439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.585096][ T1439] ? clear_bhb_loop+0x70/0xc0 [ 1025.585123][ T1439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.585144][ T1439] RIP: 0033:0x7fc0f5f5e98e [ 1025.585164][ T1439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1025.585182][ T1439] RSP: 002b:00007fc0f6e27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1025.585206][ T1439] RAX: ffffffffffffffda RBX: 00007fc0f6e286c0 RCX: 00007fc0f5f5e98e [ 1025.585221][ T1439] RDX: 000000000000000f RSI: 00007fc0f6e280a0 RDI: 0000000000000005 [ 1025.585235][ T1439] RBP: 00007fc0f6e28090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.585248][ T1439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1025.585261][ T1439] R13: 00007fc0f6226038 R14: 00007fc0f6225fa0 R15: 00007ffe2e37e818 [ 1025.585294][ T1439] [ 1025.790596][ T1443] netlink: 67 bytes leftover after parsing attributes in process `syz.4.7622'. [ 1025.978796][ T1446] syzkaller0: entered promiscuous mode [ 1025.978840][ T1446] syzkaller0: entered allmulticast mode [ 1026.005152][ T1453] openvswitch: netlink: nsh attr 270 is out of range max 3 [ 1026.026765][ T1455] openvswitch: netlink: nsh attr 270 is out of range max 3 [ 1026.241053][ T1465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7632'. [ 1026.256955][ T1465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7632'. [ 1026.507898][ T1481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7637'. [ 1026.539778][ T1482] netlink: 'syz.2.7638': attribute type 1 has an invalid length. [ 1026.813001][ T1490] can: request_module (can-proto-0) failed. [ 1026.988234][ T1504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7642'. [ 1027.113661][ T1507] FAULT_INJECTION: forcing a failure. [ 1027.113661][ T1507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.113717][ T1507] CPU: 0 UID: 0 PID: 1507 Comm: syz.0.7643 Not tainted syzkaller #0 PREEMPT(full) [ 1027.113742][ T1507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1027.113754][ T1507] Call Trace: [ 1027.113763][ T1507] [ 1027.113773][ T1507] dump_stack_lvl+0xe8/0x150 [ 1027.113808][ T1507] should_fail_ex+0x410/0x560 [ 1027.113846][ T1507] _copy_to_user+0x31/0xb0 [ 1027.113871][ T1507] simple_read_from_buffer+0xe1/0x170 [ 1027.113903][ T1507] proc_fail_nth_read+0x1bb/0x230 [ 1027.113932][ T1507] ? common_file_perm+0x20e/0x2b0 [ 1027.113957][ T1507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1027.113996][ T1507] ? rw_verify_area+0x24a/0x4c0 [ 1027.114021][ T1507] ? tun_chr_write_iter+0x18a/0x200 [ 1027.114052][ T1507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1027.114082][ T1507] vfs_read+0x213/0xa80 [ 1027.114115][ T1507] ? __pfx___mutex_lock+0x10/0x10 [ 1027.114146][ T1507] ? __pfx_vfs_read+0x10/0x10 [ 1027.114176][ T1507] ? __fget_files+0x2a/0x420 [ 1027.114207][ T1507] ? __fget_files+0x3a2/0x420 [ 1027.114233][ T1507] ? __fget_files+0x2a/0x420 [ 1027.114269][ T1507] ksys_read+0x150/0x270 [ 1027.114300][ T1507] ? __pfx_ksys_read+0x10/0x10 [ 1027.114341][ T1507] do_syscall_64+0x166/0x520 [ 1027.114369][ T1507] ? trace_irq_disable+0x3b/0x140 [ 1027.114387][ T1507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.114404][ T1507] ? clear_bhb_loop+0x70/0xc0 [ 1027.114427][ T1507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.114445][ T1507] RIP: 0033:0x7ff250d5e98e [ 1027.114464][ T1507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1027.114482][ T1507] RSP: 002b:00007ff251d2bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1027.114504][ T1507] RAX: ffffffffffffffda RBX: 00007ff251d2c6c0 RCX: 00007ff250d5e98e [ 1027.114519][ T1507] RDX: 000000000000000f RSI: 00007ff251d2c0a0 RDI: 0000000000000003 [ 1027.114530][ T1507] RBP: 00007ff251d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.114542][ T1507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.114554][ T1507] R13: 00007ff251026038 R14: 00007ff251025fa0 R15: 00007fff364ded18 [ 1027.114586][ T1507] [ 1027.448795][ T1512] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1027.469720][ T1512] bond4 (unregistering): Released all slaves [ 1027.492741][ T1520] netlink: 'syz.3.7646': attribute type 2 has an invalid length. [ 1027.493137][ T1523] netlink: 'syz.3.7646': attribute type 2 has an invalid length. [ 1027.493154][ T1523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7646'. [ 1027.549645][ T1524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7648'. [ 1027.562891][T20125] block nbd3: Receive control failed (result -1) [ 1027.744074][ T1533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7650'. [ 1027.790085][ T1535] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7651'. [ 1028.001928][ T1542] netlink: 'syz.1.7653': attribute type 10 has an invalid length. [ 1028.049514][ T1542] netlink: 'syz.1.7653': attribute type 10 has an invalid length. [ 1028.091225][ T1542] dummy0 (unregistering): left promiscuous mode [ 1028.096518][ T1549] FAULT_INJECTION: forcing a failure. [ 1028.096518][ T1549] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.096550][ T1549] CPU: 0 UID: 0 PID: 1549 Comm: syz.0.7656 Not tainted syzkaller #0 PREEMPT(full) [ 1028.096572][ T1549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1028.096584][ T1549] Call Trace: [ 1028.096592][ T1549] [ 1028.096601][ T1549] dump_stack_lvl+0xe8/0x150 [ 1028.096633][ T1549] should_fail_ex+0x410/0x560 [ 1028.096665][ T1549] ? __alloc_skb+0x1db/0x7a0 [ 1028.096692][ T1549] should_failslab+0xa8/0x100 [ 1028.096716][ T1549] ? __alloc_skb+0x1db/0x7a0 [ 1028.096740][ T1549] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1028.096766][ T1549] ? __alloc_skb+0x18d/0x7a0 [ 1028.096793][ T1549] ? __alloc_skb+0x1db/0x7a0 [ 1028.096825][ T1549] __alloc_skb+0x1db/0x7a0 [ 1028.096855][ T1549] netlink_sendmsg+0x5d4/0xb40 [ 1028.096888][ T1549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1028.096918][ T1549] ? apparmor_socket_sendmsg+0x98/0x360 [ 1028.096947][ T1549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1028.096968][ T1549] sock_sendmsg_nosec+0x13a/0x180 [ 1028.096995][ T1549] ____sys_sendmsg+0x54e/0x850 [ 1028.097021][ T1549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1028.097051][ T1549] ? import_iovec+0x73/0xa0 [ 1028.097083][ T1549] ___sys_sendmsg+0x2a5/0x360 [ 1028.097109][ T1549] ? __pfx____sys_sendmsg+0x10/0x10 [ 1028.097150][ T1549] ? vfs_write+0x9ce/0xba0 [ 1028.097190][ T1549] ? do_sys_openat2+0x14e/0x200 [ 1028.097218][ T1549] __x64_sys_sendmsg+0x1b1/0x290 [ 1028.097242][ T1549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1028.097282][ T1549] do_syscall_64+0x166/0x520 [ 1028.097308][ T1549] ? trace_irq_disable+0x3b/0x140 [ 1028.097326][ T1549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.097346][ T1549] ? clear_bhb_loop+0x70/0xc0 [ 1028.097370][ T1549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.097388][ T1549] RIP: 0033:0x7ff250d9e159 [ 1028.097406][ T1549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.097426][ T1549] RSP: 002b:00007ff251d2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1028.097448][ T1549] RAX: ffffffffffffffda RBX: 00007ff251025fa0 RCX: 00007ff250d9e159 [ 1028.097463][ T1549] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000004 [ 1028.097474][ T1549] RBP: 00007ff251d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.097487][ T1549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.097499][ T1549] R13: 00007ff251026038 R14: 00007ff251025fa0 R15: 00007fff364ded18 [ 1028.097530][ T1549] [ 1028.141646][ T1542] team0: Port device dummy0 removed [ 1028.294483][ T1546] syzkaller0: entered promiscuous mode [ 1028.294508][ T1546] syzkaller0: entered allmulticast mode [ 1028.368847][ T1546] tipc: Enabled bearer , priority 0 [ 1028.413808][ T1546] tipc: Resetting bearer [ 1028.468466][ T1555] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1028.509402][ T1555] batadv_slave_1: entered promiscuous mode [ 1028.683677][ T1564] netlink: 'syz.2.7661': attribute type 1 has an invalid length. [ 1028.694243][ T1544] tipc: Resetting bearer [ 1028.772306][ T1544] tipc: Disabling bearer [ 1029.340759][ T1604] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1029.906530][ T1619] netlink: 'syz.3.7673': attribute type 1 has an invalid length. [ 1030.058166][ T1622] tipc: Enabling of bearer rejected, media not registered [ 1030.281171][ T1633] netlink: 'syz.2.7681': attribute type 3 has an invalid length. [ 1030.281233][ T1633] netlink: 'syz.2.7681': attribute type 1 has an invalid length. [ 1030.725161][ T1656] netlink: 'syz.3.7686': attribute type 1 has an invalid length. [ 1030.735631][ T1656] IPv6: Can't replace route, no match found [ 1030.736045][ T1656] IPv6: Can't replace route, no match found [ 1030.903348][ T1658] __nla_validate_parse: 13 callbacks suppressed [ 1030.903437][ T1658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7688'. [ 1030.906289][ T1658] siw: device registration error -23 [ 1030.933072][ T1663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7689'. [ 1031.107708][ T1668] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1031.477721][ T1679] bond4: entered promiscuous mode [ 1031.479771][ T1679] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1031.598670][ T1684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7695'. [ 1031.759134][ T1696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7701'. [ 1031.801714][ T1698] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1031.836209][ T1696] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7701'. [ 1032.250506][ T1721] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1032.257627][ T1721] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7708'. [ 1032.257652][ T1721] tc_dump_action: action bad kind [ 1032.429914][ T1721] syz_tun: entered promiscuous mode [ 1032.430123][ T1721] macsec2: entered promiscuous mode [ 1032.430355][ T1721] macsec2: entered allmulticast mode [ 1032.449856][ T1721] syz_tun: left promiscuous mode [ 1032.985922][ T1740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7713'. [ 1032.998460][ T1742] sch_tbf: burst 4095 is lower than device syzkaller0 mtu (65589) ! [ 1033.103003][ T1752] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7717'. [ 1033.113119][ T1752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7717'. [ 1033.123160][ T1752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7717'. [ 1033.149292][ T1742] tipc: Resetting bearer [ 1033.159905][ T1742] tipc: Enabling of bearer rejected, already enabled [ 1033.174053][ T1742] syzkaller0: mtu less than device minimum [ 1033.417180][ T1765] tipc: Enabling of bearer rejected, failed to enable media [ 1033.461881][ T1760] bridge2: entered promiscuous mode [ 1033.467385][ T1760] bridge2: entered allmulticast mode [ 1033.496791][ T1760] team0: Port device bridge2 added [ 1033.511834][ T1763] bridge0: port 3(team0) entered blocking state [ 1033.511952][ T1763] bridge0: port 3(team0) entered disabled state [ 1033.512132][ T1763] team0: entered allmulticast mode [ 1033.512148][ T1763] team_slave_0: entered allmulticast mode [ 1033.512167][ T1763] team_slave_1: entered allmulticast mode [ 1033.607086][ T1763] team0: entered promiscuous mode [ 1033.607139][ T1763] team_slave_0: entered promiscuous mode [ 1033.607330][ T1763] team_slave_1: entered promiscuous mode [ 1033.614854][ T1763] bridge0: port 3(team0) entered blocking state [ 1033.614949][ T1763] bridge0: port 3(team0) entered forwarding state [ 1034.367252][ T1796] ip6gre1: entered promiscuous mode [ 1034.367316][ T1796] ip6gre1: entered allmulticast mode [ 1034.666511][ T1808] validate_nla: 1 callbacks suppressed [ 1034.666565][ T1808] netlink: 'syz.4.7733': attribute type 8 has an invalid length. [ 1034.669837][ T1808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.992015][ T1816] ip6gretap1: entered allmulticast mode [ 1035.002429][ T1816] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1035.009712][ T1816] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.035859][ T1816] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1035.407425][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1036.253804][ T1852] __nla_validate_parse: 10 callbacks suppressed [ 1036.261962][ T1852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7744'. [ 1036.358891][ T1856] sch_tbf: burst 4095 is lower than device syzkaller0 mtu (65589) ! [ 1036.400577][ T1856] tipc: Enabling of bearer rejected, already enabled [ 1036.481151][ T1865] netlink: 'syz.4.7750': attribute type 1 has an invalid length. [ 1036.531548][ T1865] macvtap1: entered allmulticast mode [ 1036.553744][ T1865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7750'. [ 1036.608566][ T1865] macvtap2: entered allmulticast mode [ 1036.648874][ T1865] bond0: (slave bridge1): making interface the new active one [ 1036.659064][ T1865] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 1036.942864][ T1879] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1037.181038][ T1884] netlink: zone id is out of range [ 1037.423765][ T1886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7755'. [ 1037.984071][ T1900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7758'. [ 1038.069392][ T1906] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7761'. [ 1038.098242][ T1906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7761'. [ 1038.264201][ T1919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7764'. [ 1038.494352][ T1933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7767'. [ 1038.537723][ T1937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7769'. [ 1038.700633][ T1947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7770'. [ 1039.642423][ T1954] §: left promiscuous mode [ 1039.713716][ T1954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.714412][ T1954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.827399][ T1954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.843730][ T1954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.887421][ T1954] veth0_virt_wifi: left allmulticast mode [ 1039.958243][ T1983] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1040.092318][ T1954] batman_adv: batadv0: Interface deactivated: gretap1 [ 1040.112668][ T1954] bond4: left promiscuous mode [ 1040.114788][ T1948] tipc: Enabling of bearer rejected, failed to enable media [ 1040.118073][T12332] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.118107][T12332] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.118147][T12332] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.118173][T12332] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.118211][T12332] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.118235][T12332] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.118270][T12332] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.118296][T12332] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.386872][ T1989] x_tables: unsorted underflow at hook 2 [ 1040.535175][ T2001] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1040.555139][ T2001] ip6_vti0: Caught tx_queue_len zero misconfig [ 1040.572704][ T2000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.592644][ T2005] x_tables: duplicate entry at hook 1 [ 1040.640498][ T2005] veth0_macvtap: entered allmulticast mode [ 1040.869703][ T2014] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1041.989772][ T2044] tipc: Enabling of bearer rejected, failed to enable media [ 1042.217890][ T2065] netlink: 'syz.1.7793': attribute type 3 has an invalid length. [ 1042.217942][ T2065] netlink: 'syz.1.7793': attribute type 3 has an invalid length. [ 1042.242629][ T2059] IPv6: NLM_F_CREATE should be specified when creating new route [ 1042.298490][ T2065] __nla_validate_parse: 5 callbacks suppressed [ 1042.298565][ T2065] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7793'. [ 1042.298591][ T2065] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7793'. [ 1042.549434][ T2074] netlink: 'syz.3.7796': attribute type 8 has an invalid length. [ 1042.576600][ T2077] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1042.591567][ T2077] netlink: 'syz.2.7798': attribute type 10 has an invalid length. [ 1042.603584][ T2077] syz_tun: entered promiscuous mode [ 1042.673094][ T2077] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7798'. [ 1043.850484][ T2129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1044.059111][ T2143] netlink: 'syz.0.7820': attribute type 21 has an invalid length. [ 1044.067403][ T2143] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7820'. [ 1044.142449][ T2143] netlink: 'syz.0.7820': attribute type 4 has an invalid length. [ 1044.142491][ T2143] netlink: 'syz.0.7820': attribute type 5 has an invalid length. [ 1044.142837][ T2143] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7820'. [ 1044.182952][T22837] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1044.247197][ T2150] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7824'. [ 1044.249618][ T2150] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7824'. [ 1044.341411][ T2157] FAULT_INJECTION: forcing a failure. [ 1044.341411][ T2157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.357099][ T2157] CPU: 0 UID: 0 PID: 2157 Comm: syz.1.7826 Not tainted syzkaller #0 PREEMPT(full) [ 1044.357136][ T2157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1044.357150][ T2157] Call Trace: [ 1044.357159][ T2157] [ 1044.357169][ T2157] dump_stack_lvl+0xe8/0x150 [ 1044.357207][ T2157] should_fail_ex+0x410/0x560 [ 1044.357245][ T2157] _copy_from_user+0x2d/0xb0 [ 1044.357271][ T2157] do_ipv6_setsockopt+0x245/0x2960 [ 1044.357302][ T2157] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1044.357322][ T2157] ? aa_inet_opt_perm+0xae4/0xcf0 [ 1044.357345][ T2157] ? get_pid_task+0x20/0x1f0 [ 1044.357405][ T2157] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1044.357446][ T2157] ? ksys_write+0x1e6/0x270 [ 1044.357487][ T2157] ? lock_acquire+0x115/0x350 [ 1044.357521][ T2157] ? aa_sock_opt_perm+0xe1/0x1e0 [ 1044.357548][ T2157] ipv6_setsockopt+0x59/0x170 [ 1044.357569][ T2157] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1044.357600][ T2157] do_sock_setsockopt+0x17c/0x1b0 [ 1044.357626][ T2157] __x64_sys_setsockopt+0x13d/0x1b0 [ 1044.357652][ T2157] do_syscall_64+0x166/0x520 [ 1044.357680][ T2157] ? trace_irq_disable+0x3b/0x140 [ 1044.357699][ T2157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.357721][ T2157] ? clear_bhb_loop+0x70/0xc0 [ 1044.357747][ T2157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.357767][ T2157] RIP: 0033:0x7f5f1559e159 [ 1044.357789][ T2157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.357808][ T2157] RSP: 002b:00007f5f164f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1044.357832][ T2157] RAX: ffffffffffffffda RBX: 00007f5f15825fa0 RCX: 00007f5f1559e159 [ 1044.357849][ T2157] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 1044.357862][ T2157] RBP: 00007f5f164f6090 R08: 0000000000000014 R09: 0000000000000000 [ 1044.357876][ T2157] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1044.357889][ T2157] R13: 00007f5f15826038 R14: 00007f5f15825fa0 R15: 00007fff8385f028 [ 1044.357923][ T2157] [ 1044.420833][T22837] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1045.220645][ T2184] ipt_rpfilter: unknown options [ 1045.250242][ T2184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1045.383274][ T2189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1045.393065][ T2189] syzkaller1: entered promiscuous mode [ 1045.393090][ T2189] syzkaller1: entered allmulticast mode [ 1045.412349][ T2189] syz_tun: left allmulticast mode [ 1045.412508][ T2189] dvmrp6: left allmulticast mode [ 1045.547017][ T2198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7841'. [ 1045.717418][ T2205] tipc: New replicast peer: 172.20.20.187 [ 1045.736002][ T2205] tipc: Enabled bearer , priority 10 [ 1045.881615][ T2211] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7847'. [ 1046.238660][ T2232] netlink: 'syz.2.7853': attribute type 9 has an invalid length. [ 1047.032196][T22837] tipc: Node number set to 1052249735 [ 1047.118523][ T2240] bridge0: port 1(erspan0) entered blocking state [ 1047.126105][ T2240] bridge0: port 1(erspan0) entered disabled state [ 1047.132897][ T2240] erspan0: entered allmulticast mode [ 1047.140523][ T2240] erspan0: entered promiscuous mode [ 1047.297188][ T2245] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1047.310879][ T2245] bond1 (unregistering): Released all slaves [ 1047.403476][ T2267] syzkaller0: entered promiscuous mode [ 1047.403534][ T2267] syzkaller0: entered allmulticast mode [ 1047.411369][ T2252] __nla_validate_parse: 2 callbacks suppressed [ 1047.411394][ T2252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7859'. [ 1047.414623][ T2241] tipc: Enabled bearer , priority 0 [ 1047.430399][ T2241] tipc: Resetting bearer [ 1047.536639][ T2251] pim6reg1: entered promiscuous mode [ 1047.536688][ T2251] pim6reg1: entered allmulticast mode [ 1047.548370][ T2238] tipc: Resetting bearer [ 1047.605165][ T2238] tipc: Disabling bearer [ 1047.863481][ T2279] macvtap2: entered allmulticast mode [ 1047.863537][ T2279] veth0_to_bridge: entered allmulticast mode [ 1047.881081][ T2279] veth0_to_bridge: left allmulticast mode [ 1047.956207][ T2283] bond3: (slave lo): Releasing backup interface [ 1047.963500][ T2283] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1048.006961][ T2283] team0: left allmulticast mode [ 1048.013523][ T2283] team_slave_0: left allmulticast mode [ 1048.022191][ T2283] team_slave_1: left allmulticast mode [ 1048.022604][ T2283] team0: left promiscuous mode [ 1048.022628][ T2283] team_slave_0: left promiscuous mode [ 1048.022863][ T2283] team_slave_1: left promiscuous mode [ 1048.048052][ T2283] bridge0: port 3(team0) entered disabled state [ 1048.070962][ T2283] bridge_slave_0: left allmulticast mode [ 1048.077618][ T2283] bridge_slave_0: left promiscuous mode [ 1048.083602][ T2283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.124964][ T2283] bridge_slave_1: left allmulticast mode [ 1048.134080][ T2283] bridge_slave_1: left promiscuous mode [ 1048.141918][ T2283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.213673][ T2283] team0: Port device team_slave_0 removed [ 1048.259624][ T2283] team0: Port device team_slave_1 removed [ 1048.260653][ T2283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.260697][ T2283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.289151][ T2283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.289196][ T2283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.315757][ T2283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1048.398126][ T2292] team0 (unregistering): Port device team_slave_0 removed [ 1048.407614][ T2292] team0 (unregistering): Port device team_slave_1 removed [ 1048.419673][ T2292] team0 (unregistering): Port device bridge2 removed [ 1048.687872][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.693538][ T2304] tun0: linktype set to 776 [ 1048.699752][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.705821][ T2304] tun0: linktype set to 776 [ 1048.710842][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.710978][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711062][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711142][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711223][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711303][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711382][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711491][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711571][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711648][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711728][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.711805][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.716599][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.716687][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.716776][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.716858][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.716945][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.718758][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.718857][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.719019][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.719098][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.719177][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.719256][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.719335][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.719412][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.719490][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.719570][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.719647][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.723517][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.723611][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.723692][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.723769][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.723852][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727136][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727251][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727328][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727404][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727482][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727583][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727666][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727755][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727842][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.727959][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.728039][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.728116][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.728193][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.728293][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.728370][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.728448][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.728535][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.742373][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.742499][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.742577][ T2303] tun0: tun_chr_ioctl cmd 1074025673 [ 1048.748232][ T2303] siw: device registration error -23 [ 1048.809125][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.809236][ T2304] tun0: linktype set to 776 [ 1048.809556][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.818090][ T2304] tun0: linktype set to 776 [ 1048.818437][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.818494][ T2304] tun0: linktype set to 776 [ 1048.818727][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.818780][ T2304] tun0: linktype set to 776 [ 1048.820270][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.820330][ T2304] tun0: linktype set to 776 [ 1048.820580][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.820638][ T2304] tun0: linktype set to 776 [ 1048.822682][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.822739][ T2304] tun0: linktype set to 776 [ 1048.822975][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.823028][ T2304] tun0: linktype set to 776 [ 1048.823279][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.823332][ T2304] tun0: linktype set to 776 [ 1048.829536][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.829599][ T2304] tun0: linktype set to 776 [ 1048.831712][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.831771][ T2304] tun0: linktype set to 776 [ 1048.832017][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.832071][ T2304] tun0: linktype set to 776 [ 1048.832301][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.832354][ T2304] tun0: linktype set to 776 [ 1048.834162][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.834219][ T2304] tun0: linktype set to 776 [ 1048.834450][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.834503][ T2304] tun0: linktype set to 776 [ 1048.837719][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.837776][ T2304] tun0: linktype set to 776 [ 1048.839771][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.839830][ T2304] tun0: linktype set to 776 [ 1048.840069][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.840122][ T2304] tun0: linktype set to 776 [ 1048.840428][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.840481][ T2304] tun0: linktype set to 776 [ 1048.842514][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.842572][ T2304] tun0: linktype set to 776 [ 1048.842835][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.842964][ T2304] tun0: linktype set to 776 [ 1048.843201][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.843254][ T2304] tun0: linktype set to 776 [ 1048.843509][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.843564][ T2304] tun0: linktype set to 776 [ 1048.843787][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.843847][ T2304] tun0: linktype set to 776 [ 1048.855202][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.857958][ T2304] tun0: linktype set to 776 [ 1048.858240][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.858295][ T2304] tun0: linktype set to 776 [ 1048.858527][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.858580][ T2304] tun0: linktype set to 776 [ 1048.858814][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.858874][ T2304] tun0: linktype set to 776 [ 1048.863481][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.863539][ T2304] tun0: linktype set to 776 [ 1048.866134][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.866197][ T2304] tun0: linktype set to 776 [ 1048.866499][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.866561][ T2304] tun0: linktype set to 776 [ 1048.866799][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.866856][ T2304] tun0: linktype set to 776 [ 1048.869564][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.869623][ T2304] tun0: linktype set to 776 [ 1048.869858][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.869920][ T2304] tun0: linktype set to 776 [ 1048.871979][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.872111][ T2304] tun0: linktype set to 776 [ 1048.872354][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.872414][ T2304] tun0: linktype set to 776 [ 1048.874242][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.874306][ T2304] tun0: linktype set to 776 [ 1048.874573][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.874626][ T2304] tun0: linktype set to 776 [ 1048.874850][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.874912][ T2304] tun0: linktype set to 776 [ 1048.876422][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.876480][ T2304] tun0: linktype set to 776 [ 1048.878038][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.878106][ T2304] tun0: linktype set to 776 [ 1048.882434][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.882496][ T2304] tun0: linktype set to 776 [ 1048.882769][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.882822][ T2304] tun0: linktype set to 776 [ 1048.883056][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.883109][ T2304] tun0: linktype set to 776 [ 1048.884702][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.884764][ T2304] tun0: linktype set to 776 [ 1048.885046][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.885101][ T2304] tun0: linktype set to 776 [ 1048.887389][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.887446][ T2304] tun0: linktype set to 776 [ 1048.887784][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.887840][ T2304] tun0: linktype set to 776 [ 1048.888080][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.888132][ T2304] tun0: linktype set to 776 [ 1048.888354][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.888407][ T2304] tun0: linktype set to 776 [ 1048.891758][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.891819][ T2304] tun0: linktype set to 776 [ 1048.892068][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.892122][ T2304] tun0: linktype set to 776 [ 1048.892348][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.892401][ T2304] tun0: linktype set to 776 [ 1048.892655][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.893908][ T2304] tun0: linktype set to 776 [ 1048.894145][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.894198][ T2304] tun0: linktype set to 776 [ 1048.895178][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.896235][ T2304] tun0: linktype set to 776 [ 1048.896478][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.896532][ T2304] tun0: linktype set to 776 [ 1048.896762][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.896814][ T2304] tun0: linktype set to 776 [ 1048.897045][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.900136][ T2304] tun0: linktype set to 776 [ 1048.901561][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.901619][ T2304] tun0: linktype set to 776 [ 1048.901872][ T2304] tun0: tun_chr_ioctl cmd 1074025677 [ 1048.901927][ T2304] tun0: linktype set to 776 [ 1049.167603][ T2314] xt_hashlimit: max too large, truncated to 1048576 [ 1049.168832][ T2314] xt_hashlimit: overflow, try lower: 137438953472/8 [ 1049.699080][ T2310] syzkaller1: entered promiscuous mode [ 1049.699133][ T2310] syzkaller1: entered allmulticast mode [ 1050.294485][ T2332] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7880'. [ 1050.339021][ T2333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7881'. [ 1050.354177][ T2329] syzkaller1: entered promiscuous mode [ 1050.354230][ T2329] syzkaller1: entered allmulticast mode [ 1050.388481][ T2335] bridge4: entered promiscuous mode [ 1050.388538][ T2335] bridge4: entered allmulticast mode [ 1050.723087][ T2355] netlink: 'syz.1.7886': attribute type 10 has an invalid length. [ 1050.723152][ T2355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7886'. [ 1050.850058][ T2358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1050.850114][ T2358] IPv6: NLM_F_CREATE should be set when creating new route [ 1050.850178][ T2358] IPv6: NLM_F_CREATE should be set when creating new route [ 1050.949894][ T2364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7889'. [ 1050.968756][ T2364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7889'. [ 1051.185034][ T2368] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7891'. [ 1051.275870][ T2371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7892'. [ 1051.357800][ T2379] tipc: Resetting bearer [ 1051.552540][ T2389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7898'. [ 1051.613476][ T2393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7899'. [ 1051.697527][ T2395] netlink: 'syz.2.7896': attribute type 21 has an invalid length. [ 1051.706096][ T2395] netlink: 'syz.2.7896': attribute type 4 has an invalid length. [ 1051.715740][ T2395] netlink: 'syz.2.7896': attribute type 5 has an invalid length. [ 1051.954129][ T2411] netlink: 'syz.3.7904': attribute type 4 has an invalid length. [ 1051.996241][ T2406] syzkaller0: entered promiscuous mode [ 1052.001910][ T2406] syzkaller0: entered allmulticast mode [ 1052.017303][ T2411] netlink: Only one type of NAT may be specified [ 1052.017358][ T2411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1052.398708][ T2425] x_tables: duplicate underflow at hook 1 [ 1052.582041][ T2437] sch_tbf: burst 4095 is lower than device syzkaller0 mtu (65589) ! [ 1052.629853][ T2437] tipc: Enabling of bearer rejected, already enabled [ 1052.634646][ T2437] syzkaller0: mtu less than device minimum [ 1052.922853][ T2443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1053.160638][ T2451] __nla_validate_parse: 6 callbacks suppressed [ 1053.160692][ T2451] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7916'. [ 1053.197301][ T2451] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7916'. [ 1053.210638][ T2451] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1053.225574][ T2451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7916'. [ 1053.455198][ T2463] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7918'. [ 1053.593571][ T2439] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7909'. [ 1053.691550][ T2431] lo speed is unknown, defaulting to 1000 [ 1053.700351][ T2431] wg2 speed is unknown, defaulting to 1000 [ 1053.744367][ T2471] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7919'. [ 1054.090471][ T2480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7922'. [ 1054.135144][ T2482] veth1_to_bond: entered allmulticast mode [ 1054.144794][ T2482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7924'. [ 1054.168132][ T2486] Cannot find del_set index 0 as target [ 1054.169042][ T2482] veth1_to_bond (unregistering): left allmulticast mode [ 1054.182118][ T2482] bond0: (slave bond_slave_1): Releasing backup interface [ 1054.192525][ T2488] Cannot find del_set index 0 as target [ 1054.559103][ T2512] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7931'. [ 1054.694297][ T2514] netlink: 'syz.4.7932': attribute type 13 has an invalid length. [ 1054.779193][ T2517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1055.445028][ T2561] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7944'. [ 1055.494989][T12332] IPVS: starting estimator thread 0... [ 1055.587777][ T2562] IPVS: using max 31 ests per chain, 74400 per kthread [ 1056.978594][ T2623] nbd: must specify an index to disconnect [ 1057.939908][ T2663] x_tables: duplicate underflow at hook 1 [ 1058.193922][ T2678] __nla_validate_parse: 12 callbacks suppressed [ 1058.193982][ T2678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7973'. [ 1058.230596][ T2678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7973'. [ 1058.495000][T32737] udevd[32737]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1058.502894][T32737] udevd[32737]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1058.551961][ T2707] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7982'. [ 1058.566805][ T2707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7982'. [ 1058.650747][ T2711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7983'. [ 1058.775720][ T2721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7986'. [ 1059.019820][ T2729] syz_tun (unregistering): left allmulticast mode [ 1059.502563][ T2758] x_tables: duplicate underflow at hook 3 [ 1059.547627][ T2763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7997'. [ 1059.615765][ T2774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7996'. [ 1059.923825][ T2788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8000'. [ 1059.936991][ T2788] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.8000'. [ 1060.334614][ T2816] netlink: 'syz.3.8004': attribute type 1 has an invalid length. [ 1061.038739][ T2856] Bluetooth: hci0: unsupported parameter 5135 [ 1061.038812][ T2856] Bluetooth: hci0: unsupported parameter 8192 [ 1061.038849][ T2856] Bluetooth: hci0: unsupported parameter 5135 [ 1061.039464][ T2856] Bluetooth: hci0: unsupported parameter 8192 [ 1061.091970][ T2859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.974100][ T2893] netlink: 'syz.2.8016': attribute type 15 has an invalid length. [ 1066.592749][ T2932] __nla_validate_parse: 4 callbacks suppressed [ 1066.592800][ T2932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8029'. [ 1066.596417][ T2934] C: renamed from veth1_to_team [ 1066.647785][ T2934] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8028'. [ 1066.657390][ T2937] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8028'. [ 1066.663869][ T2938] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8030'. [ 1066.928764][ T2950] netlink: 'syz.3.8027': attribute type 2 has an invalid length. [ 1066.987170][ T2950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8027'. [ 1067.583524][ T2968] netlink: 380 bytes leftover after parsing attributes in process `syz.4.8035'. [ 1067.583573][ T2968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8035'. [ 1067.583598][ T2968] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8035'. [ 1067.839580][ T2980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8039'. [ 1068.153972][ T2996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8044'. [ 1068.174082][ T2991] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 1069.463100][ T3051] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 1069.477057][ T3051] bond2 (unregistering): Released all slaves [ 1069.564911][ T3060] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 1069.581627][ T3060] bond2 (unregistering): Released all slaves [ 1072.229468][ T3149] __nla_validate_parse: 9 callbacks suppressed [ 1072.229527][ T3149] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8073'. [ 1072.632787][ T3163] netlink: 'syz.4.8078': attribute type 4 has an invalid length. [ 1072.684640][ T3168] netlink: 'syz.4.8078': attribute type 4 has an invalid length. [ 1072.697180][ T3164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8079'. [ 1072.729068][T15290] IPVS: starting estimator thread 0... [ 1072.783299][ T3172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8080'. [ 1072.815664][ T3173] IPVS: using max 28 ests per chain, 67200 per kthread [ 1072.815985][ T3164] veth13: entered allmulticast mode [ 1073.517308][ T3220] lo: entered promiscuous mode [ 1073.517536][ T3220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1073.626885][ T3233] ip6tnl0: Caught tx_queue_len zero misconfig [ 1073.626953][ T3233] netlink: 'syz.4.8094': attribute type 3 has an invalid length. [ 1073.753096][ T3239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8095'. [ 1073.821064][ T3245] netlink: 'syz.3.8097': attribute type 2 has an invalid length. [ 1073.829704][ T3245] netlink: 'syz.3.8097': attribute type 8 has an invalid length. [ 1073.838626][ T3245] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8097'. [ 1073.972274][ T3239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8095'. [ 1074.074665][T15291] IPVS: starting estimator thread 0... [ 1074.175617][ T3254] IPVS: using max 30 ests per chain, 72000 per kthread [ 1074.622297][ T3270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8107'. [ 1074.622351][ T3270] netlink: 'syz.0.8107': attribute type 1 has an invalid length. [ 1074.772687][ T3273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8107'. [ 1074.785895][ T3274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1074.785958][ T3274] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1074.795081][ T3274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1074.795185][ T3274] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1074.834105][ T3263] lo speed is unknown, defaulting to 1000 [ 1074.840777][ T3263] wg2 speed is unknown, defaulting to 1000 [ 1075.613220][ T3287] siw: device registration error -23 [ 1075.663497][ T3303] FAULT_INJECTION: forcing a failure. [ 1075.663497][ T3303] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.663556][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz.3.8115 Not tainted syzkaller #0 PREEMPT(full) [ 1075.663580][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.663593][ T3303] Call Trace: [ 1075.663601][ T3303] [ 1075.663609][ T3303] dump_stack_lvl+0xe8/0x150 [ 1075.663640][ T3303] should_fail_ex+0x410/0x560 [ 1075.663675][ T3303] should_failslab+0xa8/0x100 [ 1075.663700][ T3303] __kmalloc_noprof+0xfe/0x720 [ 1075.663728][ T3303] ? bpf_test_init+0x9f/0x150 [ 1075.663757][ T3303] ? bpf_test_init+0x9f/0x150 [ 1075.663785][ T3303] bpf_test_init+0x9f/0x150 [ 1075.663811][ T3303] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1075.663850][ T3303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1075.663878][ T3303] ? __fget_files+0x2a/0x420 [ 1075.663907][ T3303] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1075.663930][ T3303] bpf_prog_test_run+0x2c5/0x340 [ 1075.663957][ T3303] __sys_bpf+0xa22/0xd90 [ 1075.663985][ T3303] ? __pfx___sys_bpf+0x10/0x10 [ 1075.664017][ T3303] ? __fget_files+0x2a/0x420 [ 1075.664058][ T3303] ? ksys_write+0x242/0x270 [ 1075.664086][ T3303] ? __pfx_ksys_write+0x10/0x10 [ 1075.664117][ T3303] __x64_sys_bpf+0xba/0xd0 [ 1075.664138][ T3303] do_syscall_64+0x166/0x520 [ 1075.664165][ T3303] ? trace_irq_disable+0x3b/0x140 [ 1075.664182][ T3303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.664202][ T3303] ? clear_bhb_loop+0x70/0xc0 [ 1075.664225][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.664244][ T3303] RIP: 0033:0x7fc0f5f9e159 [ 1075.664262][ T3303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.664279][ T3303] RSP: 002b:00007fc0f6e28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1075.664301][ T3303] RAX: ffffffffffffffda RBX: 00007fc0f6225fa0 RCX: 00007fc0f5f9e159 [ 1075.664315][ T3303] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1075.664328][ T3303] RBP: 00007fc0f6e28090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.664341][ T3303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.664356][ T3303] R13: 00007fc0f6226038 R14: 00007fc0f6225fa0 R15: 00007ffe2e37e818 [ 1075.664388][ T3303] [ 1077.323438][ T3355] __nla_validate_parse: 4 callbacks suppressed [ 1077.335859][ T3355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8134'. [ 1077.640780][ T3364] syzkaller0: entered promiscuous mode [ 1077.640829][ T3364] syzkaller0: entered allmulticast mode [ 1077.648678][ T3364] tipc: Enabled bearer , priority 0 [ 1077.667069][ T3363] tipc: Resetting bearer [ 1077.667445][ T3366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8138'. [ 1077.752417][ T3363] tipc: Disabling bearer [ 1077.941764][ T3372] veth13: entered promiscuous mode [ 1077.948706][ T3372] veth13: entered allmulticast mode [ 1077.980609][ T3372] team0: Device veth13 is up. Set it down before adding it as a team port [ 1078.094943][ T3384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8142'. [ 1078.169384][ T3388] bridge0: port 1(vlan3) entered blocking state [ 1078.176362][ T3388] bridge0: port 1(vlan3) entered disabled state [ 1078.183081][ T3388] vlan3: entered allmulticast mode [ 1078.194090][ T3388] geneve0: entered allmulticast mode [ 1078.471915][ T3400] netlink: 'syz.4.8148': attribute type 1 has an invalid length. [ 1078.471978][ T3400] netlink: 200 bytes leftover after parsing attributes in process `syz.4.8148'. [ 1078.847398][ T3416] FAULT_INJECTION: forcing a failure. [ 1078.847398][ T3416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.851073][ T3417] syzkaller1: entered allmulticast mode [ 1078.866566][ T3416] CPU: 0 UID: 0 PID: 3416 Comm: syz.4.8154 Not tainted syzkaller #0 PREEMPT(full) [ 1078.866596][ T3416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1078.866610][ T3416] Call Trace: [ 1078.866619][ T3416] [ 1078.866630][ T3416] dump_stack_lvl+0xe8/0x150 [ 1078.866668][ T3416] should_fail_ex+0x410/0x560 [ 1078.866706][ T3416] _copy_from_user+0x2d/0xb0 [ 1078.866730][ T3416] kstrtouint_from_user+0xd6/0x180 [ 1078.866763][ T3416] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1078.866824][ T3416] ? lock_acquire+0x115/0x350 [ 1078.866853][ T3416] proc_fail_nth_write+0x8e/0x210 [ 1078.866883][ T3416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1078.866927][ T3416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1078.866957][ T3416] vfs_write+0x296/0xba0 [ 1078.866994][ T3416] ? __pfx_vfs_write+0x10/0x10 [ 1078.867023][ T3416] ? __fget_files+0x2a/0x420 [ 1078.867054][ T3416] ? __fget_files+0x3a2/0x420 [ 1078.867088][ T3416] ? __fget_files+0x2a/0x420 [ 1078.867124][ T3416] ksys_write+0x150/0x270 [ 1078.867155][ T3416] ? __pfx_ksys_write+0x10/0x10 [ 1078.867199][ T3416] do_syscall_64+0x166/0x520 [ 1078.867231][ T3416] ? trace_irq_disable+0x3b/0x140 [ 1078.867249][ T3416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.867270][ T3416] ? clear_bhb_loop+0x70/0xc0 [ 1078.867295][ T3416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.867315][ T3416] RIP: 0033:0x7f60c155e98e [ 1078.867337][ T3416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1078.867355][ T3416] RSP: 002b:00007f60c2385fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1078.867379][ T3416] RAX: ffffffffffffffda RBX: 00007f60c23866c0 RCX: 00007f60c155e98e [ 1078.867395][ T3416] RDX: 0000000000000001 RSI: 00007f60c23860a0 RDI: 0000000000000006 [ 1078.867409][ T3416] RBP: 00007f60c2386090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.867422][ T3416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.867436][ T3416] R13: 00007f60c1826038 R14: 00007f60c1825fa0 R15: 00007ffdcf227468 [ 1078.867471][ T3416] [ 1078.959384][ T3419] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8152'. [ 1079.058068][ T3418] tipc: Enabling of bearer rejected, already enabled [ 1079.173533][ T3432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8156'. [ 1079.251858][ T3427] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.251904][ T3427] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.435819][ T3438] FAULT_INJECTION: forcing a failure. [ 1079.435819][ T3438] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.435886][ T3438] CPU: 0 UID: 0 PID: 3438 Comm: syz.1.8159 Not tainted syzkaller #0 PREEMPT(full) [ 1079.435910][ T3438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1079.435922][ T3438] Call Trace: [ 1079.435929][ T3438] [ 1079.435937][ T3438] dump_stack_lvl+0xe8/0x150 [ 1079.435969][ T3438] should_fail_ex+0x410/0x560 [ 1079.436003][ T3438] should_failslab+0xa8/0x100 [ 1079.436028][ T3438] __kvmalloc_node_noprof+0x176/0x820 [ 1079.436051][ T3438] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1079.436075][ T3438] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1079.436105][ T3438] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1079.436131][ T3438] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 1079.436166][ T3438] ? __mutex_unlock_slowpath+0x731/0x900 [ 1079.436199][ T3438] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1079.436229][ T3438] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1079.436252][ T3438] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1079.436319][ T3438] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1079.436350][ T3438] ? _copy_from_user+0x94/0xb0 [ 1079.436371][ T3438] ? bpf_test_init+0x113/0x150 [ 1079.436391][ T3438] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1079.436416][ T3438] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1079.436455][ T3438] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1079.436483][ T3438] ? __fget_files+0x2a/0x420 [ 1079.436512][ T3438] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1079.436535][ T3438] bpf_prog_test_run+0x2c5/0x340 [ 1079.436561][ T3438] __sys_bpf+0xa22/0xd90 [ 1079.436590][ T3438] ? __pfx___sys_bpf+0x10/0x10 [ 1079.436622][ T3438] ? __fget_files+0x2a/0x420 [ 1079.436670][ T3438] ? ksys_write+0x242/0x270 [ 1079.436698][ T3438] ? __pfx_ksys_write+0x10/0x10 [ 1079.436729][ T3438] __x64_sys_bpf+0xba/0xd0 [ 1079.436751][ T3438] do_syscall_64+0x166/0x520 [ 1079.436776][ T3438] ? trace_irq_disable+0x3b/0x140 [ 1079.436793][ T3438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.436813][ T3438] ? clear_bhb_loop+0x70/0xc0 [ 1079.436836][ T3438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.436855][ T3438] RIP: 0033:0x7f5f1559e159 [ 1079.436874][ T3438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.436891][ T3438] RSP: 002b:00007f5f164f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1079.436913][ T3438] RAX: ffffffffffffffda RBX: 00007f5f15825fa0 RCX: 00007f5f1559e159 [ 1079.436928][ T3438] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1079.436940][ T3438] RBP: 00007f5f164f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.436953][ T3438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.436965][ T3438] R13: 00007f5f15826038 R14: 00007f5f15825fa0 R15: 00007fff8385f028 [ 1079.436996][ T3438] [ 1079.684664][ T3427] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.684701][ T3427] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.807420][ T3447] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8161'. [ 1079.958502][ T3427] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.958544][ T3427] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.083065][ T3427] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1080.093482][ T3427] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.224442][ T3455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8163'. [ 1080.303105][ T3458] FAULT_INJECTION: forcing a failure. [ 1080.303105][ T3458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.303166][ T3458] CPU: 0 UID: 0 PID: 3458 Comm: syz.1.8165 Not tainted syzkaller #0 PREEMPT(full) [ 1080.303190][ T3458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1080.303201][ T3458] Call Trace: [ 1080.303208][ T3458] [ 1080.303216][ T3458] dump_stack_lvl+0xe8/0x150 [ 1080.303248][ T3458] should_fail_ex+0x410/0x560 [ 1080.303281][ T3458] _copy_from_user+0x2d/0xb0 [ 1080.303303][ T3458] ___sys_recvmsg+0x173/0x5a0 [ 1080.303332][ T3458] ? __pfx____sys_recvmsg+0x10/0x10 [ 1080.303359][ T3458] ? lock_acquire+0x115/0x350 [ 1080.303395][ T3458] ? __fget_files+0x3a2/0x420 [ 1080.303430][ T3458] do_recvmmsg+0x31a/0x7f0 [ 1080.303459][ T3458] ? __pfx_do_recvmmsg+0x10/0x10 [ 1080.303492][ T3458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1080.303520][ T3458] ? __fget_files+0x3a2/0x420 [ 1080.303554][ T3458] __x64_sys_recvmmsg+0x198/0x250 [ 1080.303577][ T3458] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1080.303610][ T3458] do_syscall_64+0x166/0x520 [ 1080.303635][ T3458] ? trace_irq_disable+0x3b/0x140 [ 1080.303654][ T3458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.303673][ T3458] ? clear_bhb_loop+0x70/0xc0 [ 1080.303696][ T3458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.303714][ T3458] RIP: 0033:0x7f5f1559e159 [ 1080.303733][ T3458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.303754][ T3458] RSP: 002b:00007f5f164f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1080.303776][ T3458] RAX: ffffffffffffffda RBX: 00007f5f15825fa0 RCX: 00007f5f1559e159 [ 1080.303790][ T3458] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000004 [ 1080.303802][ T3458] RBP: 00007f5f164f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.303814][ T3458] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 1080.303826][ T3458] R13: 00007f5f15826038 R14: 00007f5f15825fa0 R15: 00007fff8385f028 [ 1080.303857][ T3458] [ 1080.307191][T15291] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.307222][T15291] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.316779][T15294] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.316813][T15294] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.406890][T15291] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.406924][T15291] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.448062][ T35] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.448108][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.717191][ T3468] netlink: 'syz.1.8167': attribute type 3 has an invalid length. [ 1080.853812][ T3477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8172'. [ 1081.402387][ T3491] FAULT_INJECTION: forcing a failure. [ 1081.402387][ T3491] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.402449][ T3491] CPU: 0 UID: 0 PID: 3491 Comm: syz.2.8175 Not tainted syzkaller #0 PREEMPT(full) [ 1081.402474][ T3491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1081.402485][ T3491] Call Trace: [ 1081.402492][ T3491] [ 1081.402500][ T3491] dump_stack_lvl+0xe8/0x150 [ 1081.402533][ T3491] should_fail_ex+0x410/0x560 [ 1081.402566][ T3491] should_failslab+0xa8/0x100 [ 1081.402604][ T3491] __kvmalloc_node_noprof+0x176/0x820 [ 1081.402626][ T3491] ? __kvmalloc_node_noprof+0x345/0x820 [ 1081.402651][ T3491] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 1081.402674][ T3491] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 1081.402704][ T3491] bpf_test_run_xdp_live+0x220/0x1c20 [ 1081.402765][ T3491] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1081.402846][ T3491] ? __mutex_unlock_slowpath+0x731/0x900 [ 1081.402879][ T3491] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1081.402909][ T3491] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1081.402933][ T3491] ? 0xffffffffa0404200 [ 1081.402999][ T3491] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1081.403030][ T3491] ? _copy_from_user+0x94/0xb0 [ 1081.403051][ T3491] ? bpf_test_init+0x113/0x150 [ 1081.403071][ T3491] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1081.403097][ T3491] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1081.403135][ T3491] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1081.403163][ T3491] ? __fget_files+0x2a/0x420 [ 1081.403192][ T3491] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1081.403216][ T3491] bpf_prog_test_run+0x2c5/0x340 [ 1081.403243][ T3491] __sys_bpf+0xa22/0xd90 [ 1081.403272][ T3491] ? __pfx___sys_bpf+0x10/0x10 [ 1081.403303][ T3491] ? __fget_files+0x2a/0x420 [ 1081.403344][ T3491] ? ksys_write+0x242/0x270 [ 1081.403372][ T3491] ? __pfx_ksys_write+0x10/0x10 [ 1081.403403][ T3491] __x64_sys_bpf+0xba/0xd0 [ 1081.403424][ T3491] do_syscall_64+0x166/0x520 [ 1081.403449][ T3491] ? trace_irq_disable+0x3b/0x140 [ 1081.403467][ T3491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.403486][ T3491] ? clear_bhb_loop+0x70/0xc0 [ 1081.403510][ T3491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.403529][ T3491] RIP: 0033:0x7f380619e159 [ 1081.403546][ T3491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.403563][ T3491] RSP: 002b:00007f3806fd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1081.403593][ T3491] RAX: ffffffffffffffda RBX: 00007f3806425fa0 RCX: 00007f380619e159 [ 1081.403608][ T3491] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1081.403620][ T3491] RBP: 00007f3806fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.403633][ T3491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.403644][ T3491] R13: 00007f3806426038 R14: 00007f3806425fa0 R15: 00007fffa1442528 [ 1081.403675][ T3491] [ 1081.495901][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1082.150995][ T3528] sch_tbf: burst 4095 is lower than device syzkaller0 mtu (65589) ! [ 1082.200334][ T3528] tipc: Enabling of bearer rejected, already enabled [ 1082.212290][ T3528] syzkaller0: mtu less than device minimum [ 1082.339222][ T31] audit: type=1804 audit(1788986922.131:15): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8186" name="/newroot/452/memory.events" dev="tmpfs" ino=2328 res=1 errno=0 [ 1082.355758][ T3535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1082.501936][ T3546] siw: device registration error -23 [ 1082.623097][ T3544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.743500][ T2931] udevd[2931]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1083.108043][ T3570] tipc: Enabling of bearer rejected, already enabled [ 1083.120026][ T3570] syzkaller0: mtu less than device minimum [ 1083.228384][ T3574] netlink: 'syz.1.8198': attribute type 30 has an invalid length. [ 1083.439680][ T3580] netlink: 'syz.3.8199': attribute type 13 has an invalid length. [ 1083.499401][ T3586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8202'. [ 1083.741879][ T3595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8203'. [ 1083.795169][ T3607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8206'. [ 1084.174777][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.174823][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.175100][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.175122][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.280034][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.280086][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.280647][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.280662][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.280881][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.280894][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.288717][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.288739][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.288944][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.288957][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.289201][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.289213][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.289419][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.289431][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.289655][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.289668][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.289870][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.289882][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.290087][ T3619] Bluetooth: hci0: unsupported parameter 1280 [ 1084.290099][ T3619] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1084.312212][ T3614] syzkaller0: entered promiscuous mode [ 1084.312237][ T3614] syzkaller0: entered allmulticast mode [ 1084.343401][ T3614] tipc: Enabled bearer , priority 0 [ 1084.364453][ T3614] tipc: Resetting bearer [ 1084.507663][ T3613] tipc: Resetting bearer [ 1084.661405][ T3613] tipc: Disabling bearer [ 1084.685760][ T3637] netlink: 'syz.1.8214': attribute type 1 has an invalid length. [ 1084.693911][ T3637] netlink: 1368 bytes leftover after parsing attributes in process `syz.1.8214'. [ 1084.710773][ T3631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.252760][ T3655] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1085.252903][ T3655] syzkaller1: linktype set to 769 [ 1085.341201][ T3655] bond5 (unregistering): Released all slaves [ 1085.419928][ T3661] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8220'. [ 1085.576759][ T3665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8221'. [ 1085.576890][ T3665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8221'. [ 1085.576927][ T3665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8221'. [ 1085.663183][ T3670] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8222'. [ 1086.192058][ T3693] FAULT_INJECTION: forcing a failure. [ 1086.192058][ T3693] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.192112][ T3693] CPU: 0 UID: 0 PID: 3693 Comm: syz.0.8229 Not tainted syzkaller #0 PREEMPT(full) [ 1086.192137][ T3693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1086.192150][ T3693] Call Trace: [ 1086.192160][ T3693] [ 1086.192169][ T3693] dump_stack_lvl+0xe8/0x150 [ 1086.192205][ T3693] should_fail_ex+0x410/0x560 [ 1086.192240][ T3693] should_failslab+0xa8/0x100 [ 1086.192266][ T3693] __kvmalloc_node_noprof+0x176/0x820 [ 1086.192292][ T3693] ? page_pool_create_percpu+0x2ef/0xc70 [ 1086.192416][ T3693] ? page_pool_create_percpu+0x2ef/0xc70 [ 1086.192451][ T3693] page_pool_create_percpu+0x2ef/0xc70 [ 1086.192483][ T3693] bpf_test_run_xdp_live+0x23a/0x1c20 [ 1086.192512][ T3693] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 1086.192547][ T3693] ? __mutex_unlock_slowpath+0x731/0x900 [ 1086.192584][ T3693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1086.192617][ T3693] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1086.192642][ T3693] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1086.192730][ T3693] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1086.192765][ T3693] ? _copy_from_user+0x94/0xb0 [ 1086.192788][ T3693] ? bpf_test_init+0x113/0x150 [ 1086.192811][ T3693] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1086.192840][ T3693] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1086.192884][ T3693] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1086.192916][ T3693] ? __fget_files+0x2a/0x420 [ 1086.192949][ T3693] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1086.192976][ T3693] bpf_prog_test_run+0x2c5/0x340 [ 1086.193004][ T3693] __sys_bpf+0xa22/0xd90 [ 1086.193036][ T3693] ? __pfx___sys_bpf+0x10/0x10 [ 1086.193071][ T3693] ? __fget_files+0x2a/0x420 [ 1086.193116][ T3693] ? ksys_write+0x242/0x270 [ 1086.193149][ T3693] ? __pfx_ksys_write+0x10/0x10 [ 1086.193182][ T3693] __x64_sys_bpf+0xba/0xd0 [ 1086.193207][ T3693] do_syscall_64+0x166/0x520 [ 1086.193234][ T3693] ? trace_irq_disable+0x3b/0x140 [ 1086.193253][ T3693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.193274][ T3693] ? clear_bhb_loop+0x70/0xc0 [ 1086.193301][ T3693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.193322][ T3693] RIP: 0033:0x7ff250d9e159 [ 1086.193343][ T3693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.193362][ T3693] RSP: 002b:00007ff251d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1086.193387][ T3693] RAX: ffffffffffffffda RBX: 00007ff251025fa0 RCX: 00007ff250d9e159 [ 1086.193403][ T3693] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1086.193418][ T3693] RBP: 00007ff251d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.193432][ T3693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.193444][ T3693] R13: 00007ff251026038 R14: 00007ff251025fa0 R15: 00007fff364ded18 [ 1086.193479][ T3693] [ 1086.202301][ T3693] page_pool_create_percpu() gave up with errno -12 [ 1087.507385][ T3733] __nla_validate_parse: 3 callbacks suppressed [ 1087.507446][ T3733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8239'. [ 1087.507500][ T3733] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1087.891561][ T3734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8239'. [ 1087.891613][ T3734] nbd: must specify at least one socket [ 1087.930199][ T3733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8239'. [ 1088.233195][ T3765] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1088.250518][ T3765] bond5 (unregistering): Released all slaves [ 1088.305189][ T3776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8243'. [ 1088.860720][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1089.106646][ T3808] FAULT_INJECTION: forcing a failure. [ 1089.106646][ T3808] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.106703][ T3808] CPU: 0 UID: 0 PID: 3808 Comm: syz.2.8250 Not tainted syzkaller #0 PREEMPT(full) [ 1089.106729][ T3808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1089.106742][ T3808] Call Trace: [ 1089.106751][ T3808] [ 1089.106761][ T3808] dump_stack_lvl+0xe8/0x150 [ 1089.106799][ T3808] should_fail_ex+0x410/0x560 [ 1089.106838][ T3808] should_failslab+0xa8/0x100 [ 1089.106866][ T3808] __kvmalloc_node_noprof+0x176/0x820 [ 1089.106893][ T3808] ? alloc_netdev_mqs+0xae2/0x12a0 [ 1089.106993][ T3808] ? alloc_netdev_mqs+0xae2/0x12a0 [ 1089.107032][ T3808] alloc_netdev_mqs+0xae2/0x12a0 [ 1089.107067][ T3808] rtnl_create_link+0x321/0xd70 [ 1089.107102][ T3808] rtnl_newlink_create+0x258/0x7b0 [ 1089.107133][ T3808] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1089.107161][ T3808] ? __pfx___mutex_lock+0x10/0x10 [ 1089.107205][ T3808] ? ns_capable+0x89/0xe0 [ 1089.107239][ T3808] rtnl_newlink+0x166d/0x1c30 [ 1089.107290][ T3808] ? __pfx_rtnl_newlink+0x10/0x10 [ 1089.107319][ T3808] ? do_syscall_64+0x166/0x520 [ 1089.107347][ T3808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.107414][ T3808] ? kasan_quarantine_put+0xbb/0x1f0 [ 1089.107447][ T3808] ? lockdep_hardirqs_on+0x7b/0x110 [ 1089.107491][ T3808] ? nlmon_xmit+0xb0/0x100 [ 1089.107521][ T3808] ? kmem_cache_free+0x182/0x650 [ 1089.107558][ T3808] ? __lock_acquire+0x6df/0x2e50 [ 1089.107586][ T3808] ? __dev_queue_xmit+0x29b/0x3820 [ 1089.107616][ T3808] ? __local_bh_enable_ip+0xd6/0x140 [ 1089.107643][ T3808] ? lockdep_hardirqs_on+0x7b/0x110 [ 1089.107671][ T3808] ? __dev_queue_xmit+0x29b/0x3820 [ 1089.107693][ T3808] ? __local_bh_enable_ip+0xd6/0x140 [ 1089.107715][ T3808] ? __dev_queue_xmit+0x29b/0x3820 [ 1089.107749][ T3808] ? lock_acquire+0x115/0x350 [ 1089.107789][ T3808] ? __pfx_rtnl_newlink+0x10/0x10 [ 1089.107820][ T3808] rtnetlink_rcv_msg+0x802/0xc00 [ 1089.107857][ T3808] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1089.107888][ T3808] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1089.107918][ T3808] ? ref_tracker_free+0x689/0x830 [ 1089.107945][ T3808] ? __pfx_ref_tracker_free+0x10/0x10 [ 1089.107979][ T3808] netlink_rcv_skb+0x226/0x4a0 [ 1089.108008][ T3808] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1089.108040][ T3808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1089.108083][ T3808] ? netlink_deliver_tap+0x2e/0x1b0 [ 1089.108108][ T3808] ? netlink_deliver_tap+0x2e/0x1b0 [ 1089.108140][ T3808] netlink_unicast+0x7bd/0x940 [ 1089.108178][ T3808] netlink_sendmsg+0x813/0xb40 [ 1089.108216][ T3808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.108253][ T3808] ? apparmor_socket_sendmsg+0x98/0x360 [ 1089.108289][ T3808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.108314][ T3808] sock_sendmsg_nosec+0x13a/0x180 [ 1089.108347][ T3808] ____sys_sendmsg+0x54e/0x850 [ 1089.108377][ T3808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1089.108412][ T3808] ? import_iovec+0x73/0xa0 [ 1089.108441][ T3808] ___sys_sendmsg+0x2a5/0x360 [ 1089.108463][ T3808] ? __lock_acquire+0x6df/0x2e50 [ 1089.108499][ T3808] ? __pfx____sys_sendmsg+0x10/0x10 [ 1089.108565][ T3808] ? __fget_files+0x2a/0x420 [ 1089.108592][ T3808] ? __fget_files+0x3a2/0x420 [ 1089.108632][ T3808] __x64_sys_sendmsg+0x1b1/0x290 [ 1089.108660][ T3808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1089.108709][ T3808] do_syscall_64+0x166/0x520 [ 1089.108738][ T3808] ? trace_irq_disable+0x3b/0x140 [ 1089.108758][ T3808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.108780][ T3808] ? clear_bhb_loop+0x70/0xc0 [ 1089.108807][ T3808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.108828][ T3808] RIP: 0033:0x7f380619e159 [ 1089.108850][ T3808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.108869][ T3808] RSP: 002b:00007f3806fd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1089.108893][ T3808] RAX: ffffffffffffffda RBX: 00007f3806425fa0 RCX: 00007f380619e159 [ 1089.108909][ T3808] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1089.108924][ T3808] RBP: 00007f3806fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.108938][ T3808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1089.108951][ T3808] R13: 00007f3806426038 R14: 00007f3806425fa0 R15: 00007fffa1442528 [ 1089.108986][ T3808] [ 1089.441405][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8252'. [ 1089.769993][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8258'. [ 1090.058686][ T3837] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1090.157670][ T3840] syzkaller0: entered promiscuous mode [ 1090.163447][ T3840] syzkaller0: entered allmulticast mode [ 1090.223832][ T3840] tipc: Enabled bearer , priority 0 [ 1090.233471][ T3846] FAULT_INJECTION: forcing a failure. [ 1090.233471][ T3846] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.233533][ T3846] CPU: 0 UID: 0 PID: 3846 Comm: syz.3.8264 Not tainted syzkaller #0 PREEMPT(full) [ 1090.233557][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1090.233568][ T3846] Call Trace: [ 1090.233575][ T3846] [ 1090.233584][ T3846] dump_stack_lvl+0xe8/0x150 [ 1090.233617][ T3846] should_fail_ex+0x410/0x560 [ 1090.233652][ T3846] should_failslab+0xa8/0x100 [ 1090.233677][ T3846] __kmalloc_cache_noprof+0xa3/0x600 [ 1090.233705][ T3846] ? alloc_netdev_mqs+0xc2d/0x12a0 [ 1090.233728][ T3846] ? alloc_netdev_mqs+0xc2d/0x12a0 [ 1090.233750][ T3846] ? __xdp_rxq_info_reg+0x171/0x280 [ 1090.233780][ T3846] alloc_netdev_mqs+0xc2d/0x12a0 [ 1090.233810][ T3846] rtnl_create_link+0x321/0xd70 [ 1090.233839][ T3846] rtnl_newlink_create+0x258/0x7b0 [ 1090.233866][ T3846] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1090.233890][ T3846] ? __pfx___mutex_lock+0x10/0x10 [ 1090.233928][ T3846] ? ns_capable+0x89/0xe0 [ 1090.233957][ T3846] rtnl_newlink+0x166d/0x1c30 [ 1090.234012][ T3846] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.234037][ T3846] ? do_syscall_64+0x166/0x520 [ 1090.234061][ T3846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.234118][ T3846] ? kasan_quarantine_put+0xbb/0x1f0 [ 1090.234145][ T3846] ? lockdep_hardirqs_on+0x7b/0x110 [ 1090.234174][ T3846] ? nlmon_xmit+0xb0/0x100 [ 1090.234199][ T3846] ? kmem_cache_free+0x182/0x650 [ 1090.234230][ T3846] ? __lock_acquire+0x6df/0x2e50 [ 1090.234255][ T3846] ? __dev_queue_xmit+0x29b/0x3820 [ 1090.234280][ T3846] ? __local_bh_enable_ip+0xd6/0x140 [ 1090.234303][ T3846] ? lockdep_hardirqs_on+0x7b/0x110 [ 1090.234328][ T3846] ? __dev_queue_xmit+0x29b/0x3820 [ 1090.234347][ T3846] ? __local_bh_enable_ip+0xd6/0x140 [ 1090.234368][ T3846] ? __dev_queue_xmit+0x29b/0x3820 [ 1090.234397][ T3846] ? lock_acquire+0x115/0x350 [ 1090.234432][ T3846] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.234457][ T3846] rtnetlink_rcv_msg+0x802/0xc00 [ 1090.234488][ T3846] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1090.234514][ T3846] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1090.234539][ T3846] ? ref_tracker_free+0x689/0x830 [ 1090.234561][ T3846] ? __pfx_ref_tracker_free+0x10/0x10 [ 1090.234592][ T3846] netlink_rcv_skb+0x226/0x4a0 [ 1090.234616][ T3846] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1090.234644][ T3846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1090.234680][ T3846] ? netlink_deliver_tap+0x2e/0x1b0 [ 1090.234701][ T3846] ? netlink_deliver_tap+0x2e/0x1b0 [ 1090.234729][ T3846] netlink_unicast+0x7bd/0x940 [ 1090.234762][ T3846] netlink_sendmsg+0x813/0xb40 [ 1090.234794][ T3846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1090.234825][ T3846] ? apparmor_socket_sendmsg+0x98/0x360 [ 1090.234855][ T3846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1090.234876][ T3846] sock_sendmsg_nosec+0x13a/0x180 [ 1090.234903][ T3846] ____sys_sendmsg+0x54e/0x850 [ 1090.234941][ T3846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1090.234972][ T3846] ? import_iovec+0x73/0xa0 [ 1090.235004][ T3846] ___sys_sendmsg+0x2a5/0x360 [ 1090.235023][ T3846] ? __lock_acquire+0x6df/0x2e50 [ 1090.235046][ T3846] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.235104][ T3846] ? __fget_files+0x2a/0x420 [ 1090.235126][ T3846] ? __fget_files+0x3a2/0x420 [ 1090.235160][ T3846] __x64_sys_sendmsg+0x1b1/0x290 [ 1090.235184][ T3846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1090.235227][ T3846] do_syscall_64+0x166/0x520 [ 1090.235251][ T3846] ? trace_irq_disable+0x3b/0x140 [ 1090.235269][ T3846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.235288][ T3846] ? clear_bhb_loop+0x70/0xc0 [ 1090.235312][ T3846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.235330][ T3846] RIP: 0033:0x7fc0f5f9e159 [ 1090.235349][ T3846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.235366][ T3846] RSP: 002b:00007fc0f6e28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.235388][ T3846] RAX: ffffffffffffffda RBX: 00007fc0f6225fa0 RCX: 00007fc0f5f9e159 [ 1090.235402][ T3846] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1090.235414][ T3846] RBP: 00007fc0f6e28090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.235426][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.235438][ T3846] R13: 00007fc0f6226038 R14: 00007fc0f6225fa0 R15: 00007ffe2e37e818 [ 1090.235470][ T3846] [ 1090.275768][ T3840] tipc: Resetting bearer [ 1090.293305][ T3839] tipc: Resetting bearer [ 1090.518806][ T3839] tipc: Disabling bearer [ 1090.827131][ T3859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.176821][ T3884] FAULT_INJECTION: forcing a failure. [ 1091.176821][ T3884] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.176883][ T3884] CPU: 0 UID: 0 PID: 3884 Comm: syz.3.8278 Not tainted syzkaller #0 PREEMPT(full) [ 1091.176909][ T3884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1091.176921][ T3884] Call Trace: [ 1091.176928][ T3884] [ 1091.176936][ T3884] dump_stack_lvl+0xe8/0x150 [ 1091.176970][ T3884] should_fail_ex+0x410/0x560 [ 1091.177005][ T3884] should_failslab+0xa8/0x100 [ 1091.177031][ T3884] __kmalloc_cache_noprof+0xa3/0x600 [ 1091.177061][ T3884] ? alloc_netdev_mqs+0xc2d/0x12a0 [ 1091.177084][ T3884] ? alloc_netdev_mqs+0xc2d/0x12a0 [ 1091.177109][ T3884] ? __xdp_rxq_info_reg+0x171/0x280 [ 1091.177136][ T3884] alloc_netdev_mqs+0xc2d/0x12a0 [ 1091.177168][ T3884] rtnl_create_link+0x321/0xd70 [ 1091.177199][ T3884] rtnl_newlink_create+0x258/0x7b0 [ 1091.177228][ T3884] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1091.177253][ T3884] ? __pfx___mutex_lock+0x10/0x10 [ 1091.177292][ T3884] ? ns_capable+0x89/0xe0 [ 1091.177321][ T3884] rtnl_newlink+0x166d/0x1c30 [ 1091.177366][ T3884] ? __pfx_rtnl_newlink+0x10/0x10 [ 1091.177391][ T3884] ? do_syscall_64+0x166/0x520 [ 1091.177417][ T3884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.177475][ T3884] ? kasan_quarantine_put+0xbb/0x1f0 [ 1091.177504][ T3884] ? lockdep_hardirqs_on+0x7b/0x110 [ 1091.177534][ T3884] ? nlmon_xmit+0xb0/0x100 [ 1091.177560][ T3884] ? kmem_cache_free+0x182/0x650 [ 1091.177592][ T3884] ? __lock_acquire+0x6df/0x2e50 [ 1091.177626][ T3884] ? __dev_queue_xmit+0x29b/0x3820 [ 1091.177652][ T3884] ? __local_bh_enable_ip+0xd6/0x140 [ 1091.177682][ T3884] ? lockdep_hardirqs_on+0x7b/0x110 [ 1091.177707][ T3884] ? __dev_queue_xmit+0x29b/0x3820 [ 1091.177728][ T3884] ? __local_bh_enable_ip+0xd6/0x140 [ 1091.177751][ T3884] ? __dev_queue_xmit+0x29b/0x3820 [ 1091.177782][ T3884] ? lock_acquire+0x115/0x350 [ 1091.177819][ T3884] ? __pfx_rtnl_newlink+0x10/0x10 [ 1091.177846][ T3884] rtnetlink_rcv_msg+0x802/0xc00 [ 1091.177878][ T3884] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1091.177906][ T3884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1091.177932][ T3884] ? ref_tracker_free+0x689/0x830 [ 1091.177956][ T3884] ? __pfx_ref_tracker_free+0x10/0x10 [ 1091.177988][ T3884] netlink_rcv_skb+0x226/0x4a0 [ 1091.178014][ T3884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1091.178045][ T3884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1091.178082][ T3884] ? netlink_deliver_tap+0x2e/0x1b0 [ 1091.178105][ T3884] ? netlink_deliver_tap+0x2e/0x1b0 [ 1091.178134][ T3884] netlink_unicast+0x7bd/0x940 [ 1091.178169][ T3884] netlink_sendmsg+0x813/0xb40 [ 1091.178203][ T3884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1091.178235][ T3884] ? apparmor_socket_sendmsg+0x98/0x360 [ 1091.178268][ T3884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1091.178291][ T3884] sock_sendmsg_nosec+0x13a/0x180 [ 1091.178319][ T3884] ____sys_sendmsg+0x54e/0x850 [ 1091.178347][ T3884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1091.178379][ T3884] ? import_iovec+0x73/0xa0 [ 1091.178403][ T3884] ___sys_sendmsg+0x2a5/0x360 [ 1091.178423][ T3884] ? __lock_acquire+0x6df/0x2e50 [ 1091.178447][ T3884] ? __pfx____sys_sendmsg+0x10/0x10 [ 1091.178507][ T3884] ? __fget_files+0x2a/0x420 [ 1091.178531][ T3884] ? __fget_files+0x3a2/0x420 [ 1091.178567][ T3884] __x64_sys_sendmsg+0x1b1/0x290 [ 1091.178592][ T3884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1091.178648][ T3884] do_syscall_64+0x166/0x520 [ 1091.178673][ T3884] ? trace_irq_disable+0x3b/0x140 [ 1091.178692][ T3884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.178713][ T3884] ? clear_bhb_loop+0x70/0xc0 [ 1091.178738][ T3884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.178757][ T3884] RIP: 0033:0x7fc0f5f9e159 [ 1091.178778][ T3884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.178794][ T3884] RSP: 002b:00007fc0f6e28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.178817][ T3884] RAX: ffffffffffffffda RBX: 00007fc0f6225fa0 RCX: 00007fc0f5f9e159 [ 1091.178832][ T3884] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1091.178845][ T3884] RBP: 00007fc0f6e28090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.178858][ T3884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.178871][ T3884] R13: 00007fc0f6226038 R14: 00007fc0f6225fa0 R15: 00007ffe2e37e818 [ 1091.178905][ T3884] [ 1091.630195][ T3895] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8283'. [ 1091.981484][ T3915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8288'. [ 1092.416972][ T3935] syzkaller0: entered promiscuous mode [ 1092.417027][ T3935] syzkaller0: entered allmulticast mode [ 1092.468285][ T3935] tipc: Enabled bearer , priority 0 [ 1092.476585][ T3933] tipc: Resetting bearer [ 1092.514422][ T3933] tipc: Disabling bearer [ 1092.520380][ T3937] __nla_validate_parse: 1 callbacks suppressed [ 1092.520402][ T3937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8291'. [ 1093.091232][ T3961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8303'. [ 1093.095104][ T3973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8306'. [ 1093.276453][ T3960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8302'. [ 1093.276501][ T3960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8302'. [ 1093.303677][ T3969] netlink: 'syz.4.8306': attribute type 11 has an invalid length. [ 1093.784288][ T3992] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8309'. [ 1094.765079][ T3968] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1094.827791][T12337] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.827857][T12337] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.827883][T12337] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 43919 - 0 [ 1094.827916][T12337] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.827940][T12337] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.827963][T12337] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 43919 - 0 [ 1094.827995][T12337] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.828018][T12337] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.828040][T12337] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 43919 - 0 [ 1094.828079][T12337] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.828102][T12337] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.828125][T12337] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 43919 - 0 [ 1095.073031][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8312'. [ 1095.431566][ T4023] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8320'. [ 1095.468107][ T4026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8321'. [ 1095.623928][ T4034] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8317'. [ 1095.946576][ T4048] FAULT_INJECTION: forcing a failure. [ 1095.946576][ T4048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.963349][ T4048] CPU: 0 UID: 0 PID: 4048 Comm: syz.2.8326 Not tainted syzkaller #0 PREEMPT(full) [ 1095.963380][ T4048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1095.963393][ T4048] Call Trace: [ 1095.963403][ T4048] [ 1095.963412][ T4048] dump_stack_lvl+0xe8/0x150 [ 1095.963448][ T4048] should_fail_ex+0x410/0x560 [ 1095.963484][ T4048] _copy_from_user+0x2d/0xb0 [ 1095.963507][ T4048] ___sys_sendmsg+0x1c6/0x360 [ 1095.963531][ T4048] ? __lock_acquire+0x6df/0x2e50 [ 1095.963558][ T4048] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.963620][ T4048] ? __fget_files+0x2a/0x420 [ 1095.963646][ T4048] ? __fget_files+0x3a2/0x420 [ 1095.963692][ T4048] __x64_sys_sendmsg+0x1b1/0x290 [ 1095.963718][ T4048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1095.963762][ T4048] do_syscall_64+0x166/0x520 [ 1095.963792][ T4048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.963813][ T4048] ? clear_bhb_loop+0x70/0xc0 [ 1095.963843][ T4048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.963862][ T4048] RIP: 0033:0x7f380619e159 [ 1095.963882][ T4048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.963900][ T4048] RSP: 002b:00007f3806fd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.963925][ T4048] RAX: ffffffffffffffda RBX: 00007f3806425fa0 RCX: 00007f380619e159 [ 1095.963941][ T4048] RDX: 000000000004c050 RSI: 0000200000000280 RDI: 0000000000000006 [ 1095.963954][ T4048] RBP: 00007f3806fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.963967][ T4048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.963980][ T4048] R13: 00007f3806426038 R14: 00007f3806425fa0 R15: 00007fffa1442528 [ 1095.964015][ T4048] [ 1097.222060][ T4097] netlink: 'syz.0.8341': attribute type 1 has an invalid length. [ 1097.404838][ T4102] bond5: option arp_validate: invalid value (8192) [ 1097.422589][ T4102] bond5 (unregistering): Released all slaves [ 1097.454365][ T4105] xt_TCPMSS: Only works on TCP SYN packets [ 1097.620135][ T4118] __nla_validate_parse: 3 callbacks suppressed [ 1097.627127][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8349'. [ 1097.638753][ T4119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8349'. [ 1097.806838][ T4126] openvswitch: netlink: Unknown key attributes 2 [ 1097.950100][ T4126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.962202][ T4126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.042807][ T4126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1098.042841][ T4126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1098.046316][ T4126] veth1_vlan: left promiscuous mode [ 1098.049122][ T4126] veth0_vlan: left promiscuous mode [ 1098.062684][ T4126] veth0_vlan: entered promiscuous mode [ 1098.068655][ T4126] veth1_vlan: entered promiscuous mode [ 1098.094943][ T4126] veth1_macvtap: left promiscuous mode [ 1098.103193][ T4126] veth0_macvtap: left promiscuous mode [ 1098.107056][ T4126] veth0_macvtap: entered promiscuous mode [ 1098.112800][ T4126] veth1_macvtap: entered promiscuous mode [ 1098.133140][ T4126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1098.134382][ T4126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1098.136035][ T4126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1098.137843][ T4126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1098.138478][ T4126] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1098.146114][T12327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.148967][ T6393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.149014][ T6393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.149050][ T6393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.353413][ T4149] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1098.397514][ T4139] syzkaller0: entered promiscuous mode [ 1098.397573][ T4139] syzkaller0: entered allmulticast mode [ 1098.529215][ T4157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8361'. [ 1099.508173][ T4165] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1099.520141][ T4177] tipc: Enabling of bearer rejected, failed to enable media [ 1099.529821][ T4165] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1099.529851][ T4165] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1100.353641][ T4197] tipc: Enabling of bearer rejected, already enabled [ 1100.601676][ T4198] netlink: 'syz.2.8364': attribute type 10 has an invalid length. [ 1100.847862][ T4198] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1100.864570][ T4198] bond0 (unregistering): Released all slaves [ 1101.241270][ T4219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8370'. [ 1101.569530][ T4230] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1101.591493][ T4230] syzkaller0: entered promiscuous mode [ 1101.591536][ T4230] syzkaller0: entered allmulticast mode [ 1101.619003][ T4230] tipc: Enabled bearer , priority 0 [ 1101.633217][ T4229] tipc: Resetting bearer [ 1101.713544][ T4229] tipc: Disabling bearer [ 1102.234821][ T4239] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.8379'. [ 1102.437835][ T4246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8379'. [ 1103.307815][ T4246] team0: Port device dummy0 removed [ 1103.567025][T22837] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1103.606034][ T4246] bond1: (slave geneve3): Releasing active interface [ 1103.745833][T22837] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1103.746587][ T4246] vlan3: left allmulticast mode [ 1103.746609][ T4246] geneve0: left allmulticast mode [ 1103.748258][ T4246] bridge0: port 1(vlan3) entered disabled state [ 1104.223384][ T4281] netlink: 3528 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1104.789222][ T4299] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1104.817107][ T4299] syzkaller0: entered promiscuous mode [ 1104.822894][ T4299] syzkaller0: entered allmulticast mode [ 1104.853108][ T4299] tipc: Enabled bearer , priority 0 [ 1104.882339][ T4298] tipc: Resetting bearer [ 1104.957833][ T4298] tipc: Disabling bearer [ 1105.284617][ T4314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1105.299555][ T4314] tipc: Cannot configure node identity twice [ 1105.412328][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8395'. [ 1105.428354][ T4316] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1105.438347][ T4316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.096492][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1107.250237][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8402'. [ 1108.719091][ T4348] xt_socket: unknown flags 0x4c [ 1108.729318][ T4348] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8407'. [ 1108.866473][ T4339] tc_dump_action: action bad kind [ 1108.873645][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8408'. [ 1109.163690][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8409'. [ 1109.509657][ T4372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8414'. [ 1109.546348][ T4374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8413'. [ 1109.546836][ T4374] netlink: 'syz.3.8413': attribute type 7 has an invalid length. [ 1109.546854][ T4374] netlink: 'syz.3.8413': attribute type 8 has an invalid length. [ 1109.546866][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8413'. [ 1109.842080][ T4383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8418'. [ 1110.176135][ T4390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8421'. [ 1110.408082][ T4402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8424'. [ 1110.443869][ T4402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8424'. [ 1110.488319][ T4402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8424'. [ 1111.434414][ T4409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8424'. [ 1111.524366][ T4412] ipvlan2: entered promiscuous mode [ 1111.531211][ T4412] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1111.544837][ T4412] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1111.557354][ T4412] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1112.900514][ T4460] gre3: entered allmulticast mode [ 1112.906981][ T4461] veth0: Caught tx_queue_len zero misconfig [ 1112.996524][ T4461] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8441'. [ 1114.347478][ T4492] x_tables: duplicate underflow at hook 1 [ 1114.360542][ T4492] x_tables: duplicate underflow at hook 1 [ 1115.622960][ T4524] __nla_validate_parse: 2 callbacks suppressed [ 1115.630386][ T4524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8459'. [ 1148.073854][T12337] batman_adv: batadv0: Interface deactivated: gretap2 [ 1148.228277][T12337] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1148.445837][T12337] bond4 (unregistering): (slave gretap1): Removing an active aggregator [ 1148.463012][T12337] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 1148.497420][T12337] batman_adv: batadv0: Removing interface: gretap2 [ 1148.569806][T12337] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1148.620316][T12337] batman_adv: batadv0: Removing interface: macvlan2 [ 1148.699668][T12337] bond1 (unregistering): Released all slaves [ 1148.720732][T12337] bond0 (unregistering): Released all slaves [ 1148.756459][T12337] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1148.772220][T12337] bond2 (unregistering): Released all slaves [ 1148.794922][T12337] bond3 (unregistering): Released all slaves [ 1148.818011][T12337] bond4 (unregistering): Released all slaves [ 1148.860376][T12337] bond5 (unregistering): Released all slaves [ 1148.889643][T12337] bond6 (unregistering): Released all slaves [ 1149.043459][T12337] ovs-s!: left promiscuous mode [ 1149.127175][T12337] tipc: Left network mode [ 1149.453249][T12337] IPVS: stopping backup sync thread 21349 ... [ 1150.410760][T12337] hsr_slave_0: left promiscuous mode [ 1150.420911][T12337] hsr_slave_1: left promiscuous mode [ 1151.493821][T12337] IPVS: stop unused estimator thread 0... [ 1158.081402][ T4547] netlink: 'syz.0.8461': attribute type 1 has an invalid length. [ 1158.287177][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1158.318841][ T4562] netlink: 'syz.2.8463': attribute type 8 has an invalid length. [ 1158.589289][ T4556] bond5: (slave veth17): Enslaving as an active interface with a down link [ 1158.942153][ T4560] bond5: (slave veth19): Enslaving as an active interface with a down link [ 1159.982514][ T4586] netlink: 'syz.2.8467': attribute type 1 has an invalid length. [ 1159.982584][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8467'. [ 1160.772362][ T4598] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1160.788574][ T4595] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1161.324609][ T4606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8471'. [ 1161.807554][ T4614] ip6tnl0: Caught tx_queue_len zero misconfig [ 1162.279282][ T4624] veth0_virt_wifi: entered promiscuous mode [ 1162.279325][ T4624] veth0_virt_wifi: entered allmulticast mode [ 1162.691473][ T4638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8481'. [ 1162.691533][ T4638] netlink: 'syz.1.8481': attribute type 7 has an invalid length. [ 1162.691565][ T4638] netlink: 'syz.1.8481': attribute type 8 has an invalid length. [ 1162.691583][ T4638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8481'. [ 1162.994461][ T4649] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8484'. [ 1163.696130][ T4653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8485'. [ 1164.060530][ T4662] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.8487'. [ 1165.549446][ T4686] FAULT_INJECTION: forcing a failure. [ 1165.549446][ T4686] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.629675][ T4686] CPU: 0 UID: 0 PID: 4686 Comm: syz.4.8491 Not tainted syzkaller #0 PREEMPT(full) [ 1165.629709][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1165.629722][ T4686] Call Trace: [ 1165.629732][ T4686] [ 1165.629742][ T4686] dump_stack_lvl+0xe8/0x150 [ 1165.629784][ T4686] should_fail_ex+0x410/0x560 [ 1165.629829][ T4686] should_failslab+0xa8/0x100 [ 1165.629857][ T4686] __kvmalloc_node_noprof+0x176/0x820 [ 1165.629883][ T4686] ? __nf_register_net_hook+0x232/0x930 [ 1165.629979][ T4686] ? nf_hook_entries_grow+0x287/0x740 [ 1165.630004][ T4686] ? nf_hook_entries_grow+0x287/0x740 [ 1165.630039][ T4686] nf_hook_entries_grow+0x287/0x740 [ 1165.630082][ T4686] __nf_register_net_hook+0x2c9/0x930 [ 1165.630122][ T4686] nf_register_net_hook+0xb2/0x190 [ 1165.630152][ T4686] nf_register_net_hooks+0x44/0x1b0 [ 1165.630207][ T4686] nf_defrag_ipv6_enable+0x87/0x120 [ 1165.630283][ T4686] nf_ct_netns_do_get+0x1e7/0x5c0 [ 1165.630345][ T4686] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1165.630384][ T4686] ? nf_ct_netns_get+0xe9/0x320 [ 1165.630416][ T4686] nft_connlimit_do_init+0x1de/0x2e0 [ 1165.630478][ T4686] nft_set_elem_expr_alloc+0x213/0x5f0 [ 1165.630574][ T4686] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 1165.630618][ T4686] ? nla_strcmp+0xf8/0x130 [ 1165.630655][ T4686] nf_tables_newsetelem+0x1198/0x4200 [ 1165.630725][ T4686] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1165.630749][ T4686] ? lock_acquire+0x115/0x350 [ 1165.630783][ T4686] ? nla_validate_array+0xfc/0x260 [ 1165.630842][ T4686] ? __pfx___nla_validate_parse+0x10/0x10 [ 1165.630874][ T4686] ? __pfx_nf_tables_newset+0x10/0x10 [ 1165.630909][ T4686] ? lock_acquire+0x115/0x350 [ 1165.630931][ T4686] ? nfnl_pernet+0x23/0x240 [ 1165.630965][ T4686] ? __nla_parse+0x40/0x60 [ 1165.630993][ T4686] nfnetlink_rcv+0x1288/0x28c0 [ 1165.631057][ T4686] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1165.631098][ T4686] ? ref_tracker_free+0x689/0x830 [ 1165.631148][ T4686] ? skb_clone+0x246/0x3a0 [ 1165.631179][ T4686] ? __netlink_deliver_tap+0x811/0x860 [ 1165.631215][ T4686] ? netlink_deliver_tap+0x2e/0x1b0 [ 1165.631240][ T4686] ? netlink_deliver_tap+0x2e/0x1b0 [ 1165.631271][ T4686] netlink_unicast+0x7bd/0x940 [ 1165.631308][ T4686] netlink_sendmsg+0x813/0xb40 [ 1165.631345][ T4686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1165.631381][ T4686] ? apparmor_socket_sendmsg+0x98/0x360 [ 1165.631416][ T4686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1165.631439][ T4686] sock_sendmsg_nosec+0x13a/0x180 [ 1165.631472][ T4686] ____sys_sendmsg+0x54e/0x850 [ 1165.631502][ T4686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1165.631536][ T4686] ? import_iovec+0x73/0xa0 [ 1165.631564][ T4686] ___sys_sendmsg+0x2a5/0x360 [ 1165.631586][ T4686] ? __lock_acquire+0x6df/0x2e50 [ 1165.631613][ T4686] ? __pfx____sys_sendmsg+0x10/0x10 [ 1165.631678][ T4686] ? __fget_files+0x2a/0x420 [ 1165.631704][ T4686] ? __fget_files+0x3a2/0x420 [ 1165.631743][ T4686] __x64_sys_sendmsg+0x1b1/0x290 [ 1165.631770][ T4686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1165.631818][ T4686] do_syscall_64+0x166/0x520 [ 1165.631852][ T4686] ? trace_irq_disable+0x3b/0x140 [ 1165.631874][ T4686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.631906][ T4686] ? clear_bhb_loop+0x70/0xc0 [ 1165.631933][ T4686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.631955][ T4686] RIP: 0033:0x7f60c159e159 [ 1165.631977][ T4686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.631995][ T4686] RSP: 002b:00007f60c2386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.632020][ T4686] RAX: ffffffffffffffda RBX: 00007f60c1825fa0 RCX: 00007f60c159e159 [ 1165.632036][ T4686] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1165.632051][ T4686] RBP: 00007f60c2386090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.632065][ T4686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1165.632079][ T4686] R13: 00007f60c1826038 R14: 00007f60c1825fa0 R15: 00007ffdcf227468 [ 1165.632116][ T4686] [ 1166.976090][ T4708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8497'. [ 1167.100533][ T4712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8499'. [ 1167.242638][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8500'. [ 1168.145785][ T4733] wg2: Caught tx_queue_len zero misconfig [ 1168.371849][ T4726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8502'. [ 1168.494618][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8506'. [ 1168.503955][ T4740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8506'. [ 1168.581890][ T4739] syzkaller0: entered promiscuous mode [ 1168.582315][ T4739] syzkaller0: entered allmulticast mode [ 1169.180110][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1169.347360][ T4744] netlink: 'syz.1.8508': attribute type 1 has an invalid length. [ 1169.425159][ T4752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8510'. [ 1169.490965][ T4744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1169.609940][ T4744] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1169.621141][ T4753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8511'. [ 1169.658441][ T4751] bond2: (slave geneve4): making interface the new active one [ 1169.674833][ T4751] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 1169.985596][T12334] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.034976][ T4758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8512'. [ 1170.177136][T12337] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.177207][T12337] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.177262][T12337] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.434036][ T4764] FAULT_INJECTION: forcing a failure. [ 1170.434036][ T4764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.434292][ T4764] CPU: 1 UID: 0 PID: 4764 Comm: syz.1.8514 Not tainted syzkaller #0 PREEMPT(full) [ 1170.434325][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1170.434336][ T4764] Call Trace: [ 1170.434345][ T4764] [ 1170.434354][ T4764] dump_stack_lvl+0xe8/0x150 [ 1170.434387][ T4764] should_fail_ex+0x410/0x560 [ 1170.434421][ T4764] _copy_from_user+0x2d/0xb0 [ 1170.434443][ T4764] kstrtouint_from_user+0xd6/0x180 [ 1170.434473][ T4764] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1170.434509][ T4764] ? lock_acquire+0x115/0x350 [ 1170.434534][ T4764] proc_fail_nth_write+0x8e/0x210 [ 1170.434563][ T4764] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1170.434599][ T4764] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1170.434625][ T4764] vfs_write+0x296/0xba0 [ 1170.434661][ T4764] ? __pfx_vfs_write+0x10/0x10 [ 1170.434688][ T4764] ? __fget_files+0x2a/0x420 [ 1170.434717][ T4764] ? __fget_files+0x3a2/0x420 [ 1170.434739][ T4764] ? __fget_files+0x2a/0x420 [ 1170.434772][ T4764] ksys_write+0x150/0x270 [ 1170.434800][ T4764] ? __pfx_ksys_write+0x10/0x10 [ 1170.434839][ T4764] do_syscall_64+0x166/0x520 [ 1170.434865][ T4764] ? trace_irq_disable+0x3b/0x140 [ 1170.434883][ T4764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.434902][ T4764] ? clear_bhb_loop+0x70/0xc0 [ 1170.434926][ T4764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.434944][ T4764] RIP: 0033:0x7f5f1555e98e [ 1170.434963][ T4764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1170.434979][ T4764] RSP: 002b:00007f5f164f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1170.435000][ T4764] RAX: ffffffffffffffda RBX: 00007f5f164f66c0 RCX: 00007f5f1555e98e [ 1170.435018][ T4764] RDX: 0000000000000001 RSI: 00007f5f164f60a0 RDI: 0000000000000004 [ 1170.435031][ T4764] RBP: 00007f5f164f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.435043][ T4764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.435055][ T4764] R13: 00007f5f15826038 R14: 00007f5f15825fa0 R15: 00007fff8385f028 [ 1170.435088][ T4764] [ 1172.436917][ T4790] bridge0: port 1(veth0) entered blocking state [ 1172.437066][ T4790] bridge0: port 1(veth0) entered disabled state [ 1172.437258][ T4790] veth0: entered allmulticast mode [ 1172.472703][ T4790] veth0: entered promiscuous mode [ 1172.504158][ T4790] bridge0: port 1(veth0) entered blocking state [ 1172.504310][ T4790] bridge0: port 1(veth0) entered forwarding state [ 1172.577180][ T4790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8523'. [ 1172.577509][ T4790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8523'. [ 1173.320365][ T4798] lo: Caught tx_queue_len zero misconfig [ 1173.661864][ T4805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8528'. [ 1173.835116][ T4813] SET target dimension over the limit! [ 1173.874992][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8529'. [ 1173.911523][ T4813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8529'. [ 1173.911567][ T4813] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1175.194202][ T4836] ip_tables: iptables: counters copy to user failed while replacing table [ 1176.594947][ T4850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8543'. [ 1177.055623][ T31] audit: type=1800 audit(1788987016.851:16): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8547" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2686 res=0 errno=0 [ 1177.105629][ T4860] netlink: 'syz.1.8547': attribute type 9 has an invalid length. [ 1177.191404][ T31] audit: type=1800 audit(1788987016.981:17): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8547" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2686 res=0 errno=0 [ 1177.207499][ T4864] netlink: 'syz.1.8547': attribute type 9 has an invalid length. [ 1177.224053][ T4866] netlink: 'syz.1.8547': attribute type 9 has an invalid length. [ 1178.751584][ T4884] ipip0: entered promiscuous mode [ 1178.802438][ T4891] team0: Mode changed to "activebackup" [ 1179.031356][ T4899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8555'. [ 1179.632725][ T4911] syzkaller0: entered promiscuous mode [ 1179.632774][ T4911] syzkaller0: entered allmulticast mode [ 1179.711521][ T4897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8557'. [ 1180.068497][ T4918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8559'. [ 1180.164668][ T31] audit: type=1804 audit(1788987019.951:18): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8561" name="/newroot/524/memory.events" dev="tmpfs" ino=2707 res=1 errno=0 [ 1180.989049][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8562'. [ 1181.941811][ T4958] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8566'. [ 1181.944830][T20125] block nbd0: Receive control failed (result -107) [ 1181.964498][ T4958] block nbd0: reconnected socket [ 1182.055925][T12332] bond17: left allmulticast mode [ 1182.071242][T12332] bond17: left promiscuous mode [ 1182.079135][T12332] bridge0: port 3(bond17) entered disabled state [ 1182.104650][T12332] bridge_slave_1: left allmulticast mode [ 1182.113267][T12332] bridge_slave_1: left promiscuous mode [ 1182.119787][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.174360][T12332] bridge_slave_0: left allmulticast mode [ 1182.181022][T12332] bridge_slave_0: left promiscuous mode [ 1182.188823][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.483299][T12332] batman_adv: batadv0: Interface deactivated: gretap2 [ 1182.644343][ T4980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8570'. [ 1183.328687][ T4995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8572'. [ 1184.661405][T12332] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1184.708060][T12332] batman_adv: batadv0: Removing interface: gretap2 [ 1184.780103][T12332] bond16 (unregistering): (slave ipip0): Releasing backup interface [ 1184.791922][T12332] ipip0 (unregistering): left promiscuous mode [ 1184.881498][T12332] bond8 (unregistering): (slave bridge0): Releasing active interface [ 1185.079061][T12332] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1185.098780][T12332] bond1 (unregistering): Released all slaves [ 1185.152044][T12332] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1185.173324][T12332] bond2 (unregistering): Released all slaves [ 1185.198256][T12332] bond3 (unregistering): Released all slaves [ 1185.245004][T12332] bond4 (unregistering): Released all slaves [ 1185.301977][T12332] bond5 (unregistering): Released all slaves [ 1185.359472][ T35] smc: removing ib device syz0 [ 1185.377627][T12332] bond0 (unregistering): (slave veth9): Releasing backup interface [ 1185.390732][T12332] bond0 (unregistering): Released all slaves [ 1185.428300][T12332] bond6 (unregistering): (slave veth11): Releasing backup interface [ 1185.441856][T12332] bond6 (unregistering): Released all slaves [ 1185.463206][T12332] bond7 (unregistering): Released all slaves [ 1185.497810][T12332] bond8 (unregistering): Released all slaves [ 1185.534915][T12332] bond9 (unregistering): Released all slaves [ 1185.638899][T12332] bond10 (unregistering): (slave veth17): Releasing backup interface [ 1185.652577][T12332] bond10 (unregistering): Released all slaves [ 1185.682691][T12332] bond11 (unregistering): (slave veth23): Releasing backup interface [ 1185.699930][T12332] bond11 (unregistering): Released all slaves [ 1185.731809][T12332] bond12 (unregistering): (slave veth29): Releasing backup interface [ 1185.743537][T12332] bond12 (unregistering): Released all slaves [ 1185.795129][T12332] bond13 (unregistering): (slave veth35): Releasing backup interface [ 1185.821424][T12332] bond13 (unregistering): Released all slaves [ 1185.846480][T12332] bond14 (unregistering): (slave veth39): Releasing backup interface [ 1185.870428][T12332] bond14 (unregistering): Released all slaves [ 1185.895822][T12332] bond15 (unregistering): Released all slaves [ 1185.927121][T12332] bond16 (unregistering): Released all slaves [ 1185.950117][T12332] bond17 (unregistering): Released all slaves [ 1185.992783][T12332] bond18 (unregistering): Released all slaves [ 1186.069884][ T4968] batadv_slave_1: entered promiscuous mode [ 1186.079366][ T4974] batadv_slave_1: left promiscuous mode [ 1186.487615][ T5012] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8575'. [ 1186.739039][ T35] [ 1186.741442][ T35] ====================================================== [ 1186.748472][ T35] WARNING: possible circular locking dependency detected [ 1186.755504][ T35] syzkaller #0 Not tainted [ 1186.759924][ T35] ------------------------------------------------------ [ 1186.766948][ T35] kworker/u8:2/35 is trying to acquire lock: [ 1186.772931][ T35] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1186.783266][ T35] [ 1186.783266][ T35] but task is already holding lock: [ 1186.790732][ T35] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1186.801713][ T35] [ 1186.801713][ T35] which lock already depends on the new lock. [ 1186.801713][ T35] [ 1186.812222][ T35] [ 1186.812222][ T35] the existing dependency chain (in reverse order) is: [ 1186.821252][ T35] [ 1186.821252][ T35] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1186.830088][ T35] down_read+0x4a/0x330 [ 1186.834785][ T35] kernfs_remove_by_name_ns+0x3f/0x140 [ 1186.840778][ T35] internal_create_group+0x58e/0x1180 [ 1186.846690][ T35] sysfs_update_groups+0x60/0x130 [ 1186.852257][ T35] pmu_dev_alloc+0x29b/0x300 [ 1186.857406][ T35] perf_event_sysfs_init+0x76/0x100 [ 1186.863255][ T35] do_one_initcall+0x250/0x870 [ 1186.868565][ T35] do_initcall_level+0x10a/0x1a0 [ 1186.874063][ T35] do_initcalls+0x59/0xa0 [ 1186.878927][ T35] kernel_init_freeable+0x29d/0x3e0 [ 1186.884661][ T35] kernel_init+0x22/0x1d0 [ 1186.889525][ T35] ret_from_fork+0x514/0xb70 [ 1186.894669][ T35] ret_from_fork_asm+0x1a/0x30 [ 1186.899972][ T35] [ 1186.899972][ T35] -> #9 (pmus_lock){+.+.}-{4:4}: [ 1186.907114][ T35] __mutex_lock+0x19d/0x1550 [ 1186.912245][ T35] perf_event_init_cpu+0x1d1/0x7a0 [ 1186.917906][ T35] cpuhp_invoke_callback+0x434/0x810 [ 1186.923911][ T35] cpuhp_thread_fun+0x362/0x780 [ 1186.929303][ T35] smpboot_thread_fn+0x565/0xa70 [ 1186.934790][ T35] kthread+0x38b/0x480 [ 1186.939391][ T35] ret_from_fork+0x514/0xb70 [ 1186.944514][ T35] ret_from_fork_asm+0x1a/0x30 [ 1186.949831][ T35] [ 1186.949831][ T35] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1186.957405][ T35] cpuhp_thread_fun+0x127/0x780 [ 1186.962798][ T35] smpboot_thread_fn+0x565/0xa70 [ 1186.968278][ T35] kthread+0x38b/0x480 [ 1186.972883][ T35] ret_from_fork+0x514/0xb70 [ 1186.978003][ T35] ret_from_fork_asm+0x1a/0x30 [ 1186.983313][ T35] [ 1186.983313][ T35] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1186.991149][ T35] cpus_read_lock+0x42/0x160 [ 1186.996275][ T35] static_key_slow_inc+0x12/0x30 [ 1187.001753][ T35] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1187.008065][ T35] nbd_genl_foreach_sock+0x265/0x450 [ 1187.013914][ T35] nbd_genl_reconfigure+0xbbb/0x1040 [ 1187.019728][ T35] genl_family_rcv_msg_doit+0x233/0x340 [ 1187.025821][ T35] genl_rcv_msg+0x614/0x7a0 [ 1187.030853][ T35] netlink_rcv_skb+0x226/0x4a0 [ 1187.036151][ T35] genl_rcv+0x28/0x40 [ 1187.040745][ T35] netlink_unicast+0x7bd/0x940 [ 1187.046030][ T35] netlink_sendmsg+0x813/0xb40 [ 1187.051354][ T35] sock_sendmsg_nosec+0x13a/0x180 [ 1187.056998][ T35] ____sys_sendmsg+0x54e/0x850 [ 1187.062291][ T35] ___sys_sendmsg+0x2a5/0x360 [ 1187.067506][ T35] __x64_sys_sendmsg+0x1b1/0x290 [ 1187.072983][ T35] do_syscall_64+0x166/0x520 [ 1187.078100][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.084516][ T35] [ 1187.084516][ T35] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1187.092161][ T35] __mutex_lock+0x19d/0x1550 [ 1187.097285][ T35] nbd_queue_rq+0x373/0xff0 [ 1187.102330][ T35] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1187.108483][ T35] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1187.115411][ T35] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1187.121971][ T35] blk_mq_run_work_fn+0x16c/0x300 [ 1187.127518][ T35] process_scheduled_works+0xc3d/0x1630 [ 1187.133675][ T35] worker_thread+0xa47/0xfb0 [ 1187.138962][ T35] kthread+0x38b/0x480 [ 1187.143567][ T35] ret_from_fork+0x514/0xb70 [ 1187.148677][ T35] ret_from_fork_asm+0x1a/0x30 [ 1187.153977][ T35] [ 1187.153977][ T35] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1187.161199][ T35] __mutex_lock+0x19d/0x1550 [ 1187.166344][ T35] nbd_queue_rq+0xc1/0xff0 [ 1187.171313][ T35] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1187.177402][ T35] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1187.184260][ T35] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1187.190860][ T35] blk_mq_run_work_fn+0x16c/0x300 [ 1187.196412][ T35] process_scheduled_works+0xc3d/0x1630 [ 1187.202487][ T35] worker_thread+0xa47/0xfb0 [ 1187.207791][ T35] kthread+0x38b/0x480 [ 1187.212388][ T35] ret_from_fork+0x514/0xb70 [ 1187.217499][ T35] ret_from_fork_asm+0x1a/0x30 [ 1187.222793][ T35] [ 1187.222793][ T35] -> #4 (set->srcu){.+.+}-{0:0}: [ 1187.229921][ T35] __synchronize_srcu+0xc9/0x2f0 [ 1187.235391][ T35] elevator_switch+0x1e8/0x7b0 [ 1187.240774][ T35] elevator_change+0x2fa/0x480 [ 1187.246067][ T35] elevator_set_default+0x375/0x440 [ 1187.251795][ T35] blk_register_queue+0x3f3/0x4e0 [ 1187.257371][ T35] __add_disk+0x6cb/0xe30 [ 1187.262250][ T35] add_disk_fwnode+0x100/0x3a0 [ 1187.267564][ T35] nbd_dev_add+0x733/0xb60 [ 1187.272522][ T35] nbd_init+0x168/0x1f0 [ 1187.277284][ T35] do_one_initcall+0x250/0x870 [ 1187.282585][ T35] do_initcall_level+0x10a/0x1a0 [ 1187.288046][ T35] do_initcalls+0x59/0xa0 [ 1187.292898][ T35] kernel_init_freeable+0x29d/0x3e0 [ 1187.298649][ T35] kernel_init+0x22/0x1d0 [ 1187.303507][ T35] ret_from_fork+0x514/0xb70 [ 1187.308633][ T35] ret_from_fork_asm+0x1a/0x30 [ 1187.313930][ T35] [ 1187.313930][ T35] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1187.321754][ T35] __mutex_lock+0x19d/0x1550 [ 1187.326880][ T35] elevator_change+0x1af/0x480 [ 1187.332172][ T35] elevator_set_none+0xb5/0x140 [ 1187.337635][ T35] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1187.343964][ T35] nbd_start_device+0x189/0xb30 [ 1187.349354][ T35] nbd_genl_connect+0x167d/0x1cd0 [ 1187.354923][ T35] genl_family_rcv_msg_doit+0x233/0x340 [ 1187.361001][ T35] genl_rcv_msg+0x614/0x7a0 [ 1187.366035][ T35] netlink_rcv_skb+0x226/0x4a0 [ 1187.371330][ T35] genl_rcv+0x28/0x40 [ 1187.375858][ T35] netlink_unicast+0x7bd/0x940 [ 1187.381145][ T35] netlink_sendmsg+0x813/0xb40 [ 1187.386431][ T35] sock_sendmsg_nosec+0x13a/0x180 [ 1187.391981][ T35] ____sys_sendmsg+0x54e/0x850 [ 1187.397618][ T35] ___sys_sendmsg+0x2a5/0x360 [ 1187.402839][ T35] __x64_sys_sendmsg+0x1b1/0x290 [ 1187.408486][ T35] do_syscall_64+0x166/0x520 [ 1187.413629][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.420074][ T35] [ 1187.420074][ T35] -> #2 (&q->q_usage_counter(io)#75){++++}-{0:0}: [ 1187.428684][ T35] blk_alloc_queue+0x544/0x690 [ 1187.433982][ T35] __blk_mq_alloc_disk+0x194/0x390 [ 1187.439614][ T35] nbd_dev_add+0x494/0xb60 [ 1187.444559][ T35] nbd_genl_connect+0x96c/0x1cd0 [ 1187.450034][ T35] genl_family_rcv_msg_doit+0x233/0x340 [ 1187.456131][ T35] genl_rcv_msg+0x614/0x7a0 [ 1187.461181][ T35] netlink_rcv_skb+0x226/0x4a0 [ 1187.466476][ T35] genl_rcv+0x28/0x40 [ 1187.471074][ T35] netlink_unicast+0x7bd/0x940 [ 1187.476359][ T35] netlink_sendmsg+0x813/0xb40 [ 1187.481651][ T35] sock_sendmsg_nosec+0x13a/0x180 [ 1187.487212][ T35] ____sys_sendmsg+0x54e/0x850 [ 1187.492675][ T35] ___sys_sendmsg+0x2a5/0x360 [ 1187.497873][ T35] __x64_sys_sendmsg+0x1b1/0x290 [ 1187.503333][ T35] do_syscall_64+0x166/0x520 [ 1187.508449][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.514960][ T35] [ 1187.514960][ T35] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1187.522314][ T35] fs_reclaim_acquire+0x71/0x100 [ 1187.527794][ T35] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1187.534043][ T35] alloc_inode+0xb8/0x1b0 [ 1187.538895][ T35] iget_locked+0x131/0x6a0 [ 1187.543844][ T35] kernfs_get_inode+0x4f/0x770 [ 1187.549139][ T35] kernfs_get_tree+0x5cd/0x980 [ 1187.554432][ T35] vfs_get_tree+0x92/0x2a0 [ 1187.559376][ T35] do_new_mount+0x319/0xdc0 [ 1187.564412][ T35] __se_sys_mount+0x31d/0x420 [ 1187.569644][ T35] do_syscall_64+0x166/0x520 [ 1187.574786][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.581219][ T35] [ 1187.581219][ T35] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1187.589219][ T35] __lock_acquire+0x15ff/0x2e50 [ 1187.594597][ T35] lock_acquire+0x115/0x350 [ 1187.599623][ T35] down_write+0x96/0x200 [ 1187.604389][ T35] kernfs_remove_by_name_ns+0x4e/0x140 [ 1187.610369][ T35] sysfs_unmerge_group+0xd3/0x140 [ 1187.615925][ T35] dpm_sysfs_remove+0x5f/0xd0 [ 1187.621240][ T35] device_del+0x250/0x8f0 [ 1187.626145][ T35] srp_remove_one+0x81/0x280 [ 1187.631328][ T35] remove_client_context+0xb9/0x1e0 [ 1187.637106][ T35] disable_device+0x137/0x330 [ 1187.642401][ T35] __ib_unregister_device+0x2c9/0x400 [ 1187.648304][ T35] ib_unregister_work+0x19/0x30 [ 1187.653679][ T35] process_scheduled_works+0xc3d/0x1630 [ 1187.659751][ T35] worker_thread+0xa47/0xfb0 [ 1187.664870][ T35] kthread+0x38b/0x480 [ 1187.669462][ T35] ret_from_fork+0x514/0xb70 [ 1187.674572][ T35] ret_from_fork_asm+0x1a/0x30 [ 1187.679866][ T35] [ 1187.679866][ T35] other info that might help us debug this: [ 1187.679866][ T35] [ 1187.690095][ T35] Chain exists of: [ 1187.690095][ T35] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 1187.690095][ T35] [ 1187.703915][ T35] Possible unsafe locking scenario: [ 1187.703915][ T35] [ 1187.711368][ T35] CPU0 CPU1 [ 1187.716738][ T35] ---- ---- [ 1187.722102][ T35] rlock(&root->kernfs_supers_rwsem); [ 1187.727562][ T35] lock(pmus_lock); [ 1187.733975][ T35] lock(&root->kernfs_supers_rwsem); [ 1187.741863][ T35] lock(&root->kernfs_rwsem); [ 1187.746629][ T35] [ 1187.746629][ T35] *** DEADLOCK *** [ 1187.746629][ T35] [ 1187.754798][ T35] locks held by kworker/u8:2/35: 4, last CPU#0: [ 1187.761035][ T35] #0: ffff88801b1cd140 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1187.772441][ T35] #1: ffffc90000ab7c40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1187.785668][ T35] #2: ffff888035b2c730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400 [ 1187.797068][ T35] #3: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1187.808484][ T35] [ 1187.808484][ T35] stack backtrace: [ 1187.814395][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1187.823779][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1187.833850][ T35] Workqueue: ib-unreg-wq ib_unregister_work [ 1187.839793][ T35] Call Trace: [ 1187.843082][ T35] [ 1187.846015][ T35] dump_stack_lvl+0xe8/0x150 [ 1187.850700][ T35] print_circular_bug+0x2e2/0x300 [ 1187.855731][ T35] check_noncircular+0x12f/0x150 [ 1187.860686][ T35] __lock_acquire+0x15ff/0x2e50 [ 1187.865540][ T35] ? lockdep_unlock+0x5c/0xd0 [ 1187.870233][ T35] lock_acquire+0x115/0x350 [ 1187.874734][ T35] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1187.880371][ T35] down_write+0x96/0x200 [ 1187.884878][ T35] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1187.890509][ T35] ? __pfx_down_write+0x10/0x10 [ 1187.895368][ T35] kernfs_remove_by_name_ns+0x4e/0x140 [ 1187.900830][ T35] sysfs_unmerge_group+0xd3/0x140 [ 1187.905864][ T35] dpm_sysfs_remove+0x5f/0xd0 [ 1187.910545][ T35] device_del+0x250/0x8f0 [ 1187.914884][ T35] ? xa_load+0x60/0x210 [ 1187.919043][ T35] ? __pfx_device_del+0x10/0x10 [ 1187.923902][ T35] ? remove_client_context+0x79/0x1e0 [ 1187.929316][ T35] ? __pfx_srp_remove_one+0x10/0x10 [ 1187.934518][ T35] srp_remove_one+0x81/0x280 [ 1187.939225][ T35] ? __pfx_srp_remove_one+0x10/0x10 [ 1187.944720][ T35] remove_client_context+0xb9/0x1e0 [ 1187.949945][ T35] disable_device+0x137/0x330 [ 1187.954644][ T35] ? __pfx_disable_device+0x10/0x10 [ 1187.959850][ T35] ? lock_acquire+0x115/0x350 [ 1187.964546][ T35] ? process_scheduled_works+0x97a/0x1630 [ 1187.970314][ T35] __ib_unregister_device+0x2c9/0x400 [ 1187.975707][ T35] ? rcu_is_watching+0x16/0xb0 [ 1187.980480][ T35] ? process_scheduled_works+0x97a/0x1630 [ 1187.986209][ T35] ib_unregister_work+0x19/0x30 [ 1187.991073][ T35] process_scheduled_works+0xc3d/0x1630 [ 1187.996640][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 1188.002635][ T35] ? assign_work+0x3cf/0x5d0 [ 1188.007236][ T35] worker_thread+0xa47/0xfb0 [ 1188.011847][ T35] kthread+0x38b/0x480 [ 1188.015960][ T35] ? __pfx_worker_thread+0x10/0x10 [ 1188.021082][ T35] ? __pfx_kthread+0x10/0x10 [ 1188.025677][ T35] ret_from_fork+0x514/0xb70 [ 1188.030365][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 1188.035488][ T35] ? __switch_to+0xc89/0x1420 [ 1188.040173][ T35] ? __pfx_kthread+0x10/0x10 [ 1188.044768][ T35] ret_from_fork_asm+0x1a/0x30 [ 1188.049552][ T35] [ 1188.204680][ T35] smbdirect: ib_dev[syz0] removed [ 1190.076194][T12332] ovs-s: left promiscuous mode [ 1190.147222][T12332] : left promiscuous mode [ 1190.208750][T12332] tipc: Left network mode [ 1190.739163][T12332] hsr_slave_0: left promiscuous mode [ 1190.745059][T12332] hsr_slave_1: left promiscuous mode [ 1190.753436][T12332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.761449][T12332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.781815][T12332] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1190.789165][T12332] batman_adv: batadv0: Removing interface: ipvlan2 [ 1190.802592][T12332] veth1_macvtap: left promiscuous mode [ 1190.813793][T12332] veth0_macvtap: left promiscuous mode [ 1190.820295][T12332] veth1_vlan: left allmulticast mode [ 1190.825951][T12332] veth1_vlan: left promiscuous mode [ 1190.831525][T12332] veth0_vlan: left promiscuous mode [ 1191.222872][T12332] team0 (unregistering): Port device team_slave_1 removed [ 1191.246523][T12332] team0 (unregistering): Port device team_slave_0 removed [ 1191.638789][T12332] IPVS: stop unused estimator thread 0...