last executing test programs: 3.074204568s ago: executing program 2 (id=5545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001130500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000ff840000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fe8000000000000000000000000000311400040020010000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 2.905823107s ago: executing program 2 (id=5549): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0100002c00010000000000fcdbdf250a01f28004001800140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x10, @loopback, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x3, 0x240c089d) sendfile(r3, r2, &(0x7f0000000380)=0xfffffffffffffff9, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003c000000090000000600000003000000000000080400edff03000000000000040800000014000900483d32fe7926a6000000fdffffff002e615f5f000000005b37809b01eda73ce2c30000000000"], 0x0, 0x5a, 0x0, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3a}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmmsg$inet(r4, &(0x7f0000004cc0)=[{{&(0x7f00000003c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x38}}, {{&(0x7f0000000bc0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000c00)="2ca64e203c2e6b3dd13fa18c8b2ff702ddedcb537172d302a7c835d29dbf09d4526bcc873638730b67b5b44b0194155b27d32bb8cdbf9d83436b6007d2a85eef39a2b8accec3f199cee169fc79da813d371e", 0x52}, {&(0x7f0000000c80)="89a045c7c3b0e85e9f55b2fea1ffe8a142f69bbd8df9c54ac701fa0cfcca701849595bf91afda29812673fcddb4f7e372cc1e29b5b4faeb8a0036c291635483e0c922f06fececb2def0fed10", 0x4c}, {0x0}, {&(0x7f0000000d80)="bb8a23a8a9fa0c7382a851da317faaa9a72357b999e1943189a0bff926e5a971586160fed6fa719f4e2d23ed47876eace68d6377f4245042502feaf151d5a660850faf79c4388c95ac66a009cc6e413729080716fb010207cddab3f6d8aa7e887b873f0a3083af98195dd9b950e83dfcf74c35c42ae96b7be849ef2b5331f669c81fa86e52c95dd5cda678a70655c206c7", 0x91}, {&(0x7f0000000e40)="c71e9a7ed93f89ce39aa753f68751b7cd74857e140bf93df55fcdc45d41a4b4612ee240c7ce63351f892d65f1472dabff6bb2c8aa75d21e8cc28ec48d201537e79396fb59627391232aa0b1143d91af5a293abab0c7013", 0x57}, {&(0x7f0000000ec0)="988640edf876a655155f81b98de4d2c57862d5b6ba4d94cd26c2259afdc2c48fef0e81458fe6c22ef62339334fbd5078c0c05e717c3498f321d94fcbfa16a1c68072bd63828ee7992f5c18486107f9ca337cad0d6b22663dfbf862ce4d9a595d747d7368840a1d1ea79ff7641ede3eddc16ddd77284445673ed3466e663f25cfad5b7646dab17d038656614f2f76795abd8f68c4d46bfd9df4d3309c94f1c0698d1e3cf3d7752ef04da1412eae4a4f6444fba97f61031bb8b8685f423b03a9bbe8ad5dba2c6805788e1ea5f0a8f17eaaaedbe6d402ec890889", 0xd9}, {&(0x7f0000002080)="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", 0x1000}, {0x0}], 0x8, &(0x7f0000001080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001100)="fbaf9858abfce48783af23fc53ae8f069fd209d4cd94dd37c3902041a0404f2881250aebae0a2336483f87bdd4412353854e42fed47ea81bbb0dc0e8cd1764300c7998f93a4aef7db1e601c94aa879948c1be6396e28ec", 0x57}], 0x1, &(0x7f0000003080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}, {{&(0x7f00000030c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000004380)=[{&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="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", 0xfa}, {&(0x7f0000004200)="c91776a85f2942a8f3da26ad6237a672988b1ac6608cc71fc3eb1b914704c60fcc10ed734e1c542f25eff22e", 0x2c}, {&(0x7f0000004240)="8641365b70af2a6b56c995359997fbc9597f83af1b82951aa317332cad3870e7eba3bd4fd886a53c779efde18c97268318a4588585ca9e96d6a746e20008707595367108d66df7ffd9955e0f2f", 0x4d}, {&(0x7f00000042c0)="9a481e18421dc7bed50977dc671075a82aff24bb764329fe5750593c7f176f35a9c401eefe788f90ba10cc5d4e45f18ef9ee097407ef2d0610fdbc6ec010f80aedcf5f0e4ffdf1d18f058992ddc59441e4fd580ac42b1909b87e2efe76a6fd5213adcb77be034458653c6d2de3edf344f51d8acdc15e7f52b031a021c55ca0bd934bc321", 0x84}], 0x5, &(0x7f0000004400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x18, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}]}}}], 0x30}}, {{&(0x7f0000004440)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000004600)=[{&(0x7f0000004480)="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", 0xfd}, {&(0x7f0000004580)="6284062513eb465322e492abf476bf5603e73bc7e4b3a122ab2afc9e754bceea907db9b3b70e0f4a79f98ad65d085bd2054d9bc400728ba0bb9d21173d5b88b86dbc52b7fd253c6905", 0x49}], 0x2, &(0x7f0000004640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x70}}, {{&(0x7f00000046c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004b80)=[{&(0x7f0000004700)="1501f5bb095074e1752cbb211e29a94e16f56ec7e1013d3d117cef357913a56ef02efadd14ea5a46478f941b9aa17bfbc28eafeade7d6c4b9218fdac464f72341d522ec6546227805429b0ef0c2b32f1d07679d838c7a3575d738ca29337c2ffeaee038c4c94b2ba3ff90f32dc1653a9f4e04970970243c42132b6a59f083a15c32c81b81a93ef39de00a488636c3c84541261ec5075f83f766b34c39b5c4c783511978e15f0201928", 0xa9}, {&(0x7f00000047c0)="6ae22eea54d9d36ceb378dd6997ed2d1e60f37496bb9305ded6befdf580bf6fda973577d58c25c57049a6e20c5", 0x2d}, {&(0x7f0000004800)="3fd6d4863943240f6651a2b10d64491393a6e6130505ded7eec2819f34038e31a5d943994a85b9bcd0512f0b2d78771a5832bbfd381cd04a2b848b2d7fe629dc66a52c2ba9c4e342fd17c50837d2b41caf627af95b2590cb08b151d64cfd9171e10d82597a0696f0b8ad19f1cfbef27c07d931487ca1eb974f931a0463eea29d21bc4446d3ff31f7fd", 0x89}, {&(0x7f00000048c0)="b1d4427bd2293a1a42429a76437fafb14842c9aeb0dc790c3bb69bc35c738ae3d06303e3757d15dbf4e6e3d07dcda06fdcca897add2d7c6c9d47e126a5216cf21d7015199f74b478cbc3dffab03d422c097df649d1ed5e3e82682af2e6bfb5555881af986b699e157f3b964562968416d5", 0x71}, {&(0x7f0000004980)="31e4d6aaeab9237586d6450d975201e4b7b4c3ccef1bca96bad5dc431999c1a5e2099e5972d1407869eeeab88fefadc462beb9fd48f96d94e299fbdffb38256f6d61140582474a715df5e7c4748f311f0fc1c6ca0a5b3b41c612f93a0e9317b1fdc81b17c8d23df49da662aca2b1c80d083652503e3e60d924f9bfafe5085b7d5cf897b5fecb020b40619ede1b1786237aeffc96f5b4ecf6ed14bc8a3b2ef15a4202148d8865cb3008b931f99c669e309fcf33c3be0e", 0xb6}, {&(0x7f0000004a40)="0fcd06a41be3f4e7cb12b70b0cfe6e1758165863d1e7633db8c4be33ed7dcb8b66f534d6", 0x24}, {&(0x7f0000004a80)="47b132d0f3d3cbd1697bc05a7d175b0a08babbbe37af77f6813b905e4f325d7a62bca3b68a08fd3d3314e14ad2c1785db3da572e28427b80cc8b70b42e5d12d381f68b9852295eeea520267ef526fe0ab876af846c77d61f4f57b16c58c4f33bf50797fd97937e2750b2ea2beb28b09d89c694d003bb631abb887973f2f3755afc7666f3f6b4201f83c429be434666cccead2b961123f7cec0a557b483efaf597ee943d5aab845f6c9dda6d9a0b5c74ef963d1c9fd7a6deda290f4b8e37f0628c09bab40dcc8b31deeeae5", 0xcb}], 0x7, &(0x7f0000004c00)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x18}}, @ip_ttl={{0x14, 0x0, 0x2, 0x24}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff5}}], 0x98}}], 0x6, 0x8000) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 2.410422118s ago: executing program 1 (id=5553): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0100002e00010000cea14eb300000004001980080111800101cf80e32cc4fbd478b585fc62a92925eb81095df4821c3344fb4c2fa51f942f"], 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) 2.218632372s ago: executing program 1 (id=5555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0xff) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @local, 0x2404}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250900000085378a3e392a54536814dac743bf0f3a36878c9c390c38746b081a9de535bc6f7f45cf7a06033d5227b4feac61513a83c9067be8bc22d50a13f7fd7eaedd424dd1f3eb8a09eaec7ee087d202aa462f2f3491da68b9a9e30f1ff60b"], 0x14}}, 0x8040) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r5, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x15}, 0x811) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r6, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000000100)={'veth1_to_batadv\x00', @ifru_hwaddr=@broadcast}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 2.201980334s ago: executing program 0 (id=5556): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = epoll_create(0x81) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x858, 0x370, 0x288, 0x160, 0x160, 0x0, 0x788, 0x788, 0x788, 0x788, 0x788, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x1, 0x0, [0x4, 0x8, 0x2, 0x0, 0x1, 0xe000, 0x6, 0x7, 0x8, 0x0, 0x7d, 0x2, 0x8, 0x8, 0xfff8, 0x3ff], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x6, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0xd8030000, [0x0, 0x2], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private1, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x2010}) 1.985958969s ago: executing program 1 (id=5558): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004580)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @broadcast, 0xff, 0xffffff00, 'team0\x00', 'veth0\x00', {}, {0xff}, 0x11, 0x2, 0x8ec61fc4e1c84de5}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x5, 0xa, [0x2, 0xc, 0x3e, 0x2a, 0x24, 0x18, 0x3d, 0x38, 0xc, 0xf, 0x33, 0x2d, 0x0, 0x29, 0x3f, 0x27], 0x2, 0x2, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0xff, 'ip6gretap0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x21, 0x2, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x1, 0x5, 0x3, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x7, 0x4) 1.935927875s ago: executing program 0 (id=5559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000ff9502000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.893653782s ago: executing program 4 (id=5560): openat$ppp(0xffffffffffffff9c, 0x0, 0x181341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x55, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x298a}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}]}]}}]}, 0x6c}, 0x1, 0x4788}, 0x0) 1.809685372s ago: executing program 2 (id=5562): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000911909000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.733583997s ago: executing program 0 (id=5563): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40020) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r9], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r10, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r9}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x8a68, r11, 0x4}, 0x38) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12381}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x4040000) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.553725699s ago: executing program 4 (id=5564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce70000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80004a060a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) 1.54684959s ago: executing program 2 (id=5565): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x0, 0x2004c804, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x24048}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x8000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x428, 0x428, 0x1c0, 0x1c0, 0x0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0xfffffffffffffbf5) 1.397725214s ago: executing program 4 (id=5566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa20000000000000702000078ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000002e80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450024000217a774e63c8f4b001400119a780000000000000000ecff4ee0ac09c778420000000000ab037b6656337de67d0ef85d26000000"], 0x0) 1.360443915s ago: executing program 2 (id=5568): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c2", 0x10c}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c", 0x16}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8", 0x4c}], 0x4}, 0x6000000}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed66", 0xaf}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf152", 0x6b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f8", 0xda}], 0x1}}], 0x3, 0x2090) 1.296392115s ago: executing program 0 (id=5569): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x7, 0x1, {{0x17, 0x4, 0x2, 0x3c, 0x5c, 0x68, 0x0, 0x16, 0x4, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x2c, 0xf, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x20}, 0xdc56}, {@local, 0x4}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7fffffff}, {@broadcast, 0xa5}]}, @generic={0x7, 0x10, "4bebe8d76243a3c54881328c465a"}, @timestamp={0x44, 0xc, 0xbc, 0x0, 0x4, [0x2, 0xe]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xd}, {0x10, 0xb}, {0x10, 0xffed}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x20040014) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32, @ANYBLOB="08000400ffffffff"], 0x28}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x45, 0x7, 0x0, 0xfffff000}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf250b06b6a70000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x8de91000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="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", 0x5db}], 0x1, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xad, 0x3, 0xb}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}], 0x1, 0xc0) 1.221142819s ago: executing program 1 (id=5570): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x7, 0x1, {{0x17, 0x4, 0x2, 0x3c, 0x5c, 0x68, 0x0, 0x16, 0x4, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x2c, 0xf, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x20}, 0xdc56}, {@local, 0x4}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7fffffff}, {@broadcast, 0xa5}]}, @generic={0x7, 0x10, "4bebe8d76243a3c54881328c465a"}, @timestamp={0x44, 0xc, 0xbc, 0x0, 0x4, [0x2, 0xe]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xd}, {0x10, 0xb}, {0x10, 0xffed}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x20040014) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32, @ANYBLOB="08000400ffffffff"], 0x28}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x45, 0x7, 0x0, 0xfffff000}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf250b06b6a70000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x8de91000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="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", 0x5db}], 0x1, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xad, 0x3, 0xb}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}], 0x1, 0xc0) 1.151343917s ago: executing program 4 (id=5572): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000feffffff18110020", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000048500000086000000b7080000000000007baaf8ff00000000b5080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.029225831s ago: executing program 4 (id=5574): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x10c}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c", 0x16}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b29", 0x51}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="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", 0x12e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd9", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de", 0xe7}, {&(0x7f0000000040)="7542473782798be019c27ed3", 0xc}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53", 0x18}], 0x3}}], 0x3, 0x2090) 985.000275ms ago: executing program 3 (id=5575): openat$ppp(0xffffffffffffff9c, 0x0, 0x181341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x55, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x298a}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}]}]}}]}, 0x6c}, 0x1, 0x4888}, 0x0) 918.359454ms ago: executing program 3 (id=5576): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000008f080058020000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000dca100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000001500f4fff0ffffffbf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 568.956688ms ago: executing program 3 (id=5577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) recvfrom$packet(r3, &(0x7f0000000700)=""/209, 0xd1, 0x101, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYRESHEX=r2], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 554.403314ms ago: executing program 3 (id=5578): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/cgroup\x00') ioctl$NS_GET_NSTYPE(r0, 0x8004b708, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x9, 0x1bd}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff8d}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x500}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x200b, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x25}, 0x94) 498.65791ms ago: executing program 3 (id=5579): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x7fffffff, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @private=0xa010102}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa5, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r4, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)=@mpls_newroute={0x1c4, 0x18, 0x8, 0x70bd2c, 0x25dfdbff, {0x1c, 0x20, 0x20, 0x7, 0xfe, 0x4, 0xfe, 0x1, 0x900}, [@RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x9, 0x3, r2}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_NEWDST={0x84, 0x13, [{0xfffff, 0x0, 0x1}, {0x4}, {0x1}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8717, 0x0, 0x1}, {}, {0xffffd, 0x0, 0x1}, {0x71f}, {0x6, 0x0, 0x1}, {0xd}, {0x7, 0x0, 0x1}, {0x2f43}, {0x7}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x7}, {0x0, 0x0, 0x1}, {0xf8a2c, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x9}, {0x4e}, {0x9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xffffd, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0xc2d}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8}, {}, {0x6}, {0x8}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8}, {0x9}, {0x1, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x3}, {0xfff62}, {0x8}, {0xe, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1}, {0x81}, {0xfe778}, {0xcc, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}, {0xfff}, {0x101, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x261, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3ff}, {0x8}, {0xe8a, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xe}, {0x800, 0x0, 0x1}, {0xec}, {0x4, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x40}, {0x8, 0x0, 0x1}, {}, {0x49b}, {0xff000, 0x0, 0x1}, {0x8}, {0x36d}, {0x3, 0x0, 0x1}, {0xa5}, {0x1, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3}, {0x6}, {0x10, 0x0, 0x1}, {0xfbd, 0x0, 0x1}, {0xccf, 0x0, 0x1}, {0x100}, {0x6}, {0x3da, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r8}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000040)) 396.679668ms ago: executing program 2 (id=5580): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x8, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffde, 0x0, 0x0, 0x0, 0xff7fffff}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x1029, &(0x7f0000002240)=""/4137, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 394.796831ms ago: executing program 3 (id=5581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x24, 0x5, 0x2, 0x60000, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x11}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm'], 0xa) sendfile(r2, r2, 0x0, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x28, 0x0, &(0x7f0000000180)="e02742e8680d85009882762f86dd", 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x34) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000000c80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x20, 0x4008000}, 0x28008841) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_freezer_state(r8, &(0x7f0000000080), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ab020000000000000200002118110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000079500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x4, 0x40, 0x51491, r0, 0xa8, '\x00', r6, r8, 0x1, 0x1, 0x0, 0x0, @void, @value, @value=r9}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ff000113baa500008000000000000000f5b2c94adf8744027da1701fa0e49f7158451030f95154a3fa97c3fb4cbee254b5fcf8396e365e2e2f4e2aabc719a8e4a1bd457689d550f7d5a457819eeb9096caf2989a557983518a5a352b5281"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r11) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket(0xa, 0x5, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 332.134983ms ago: executing program 0 (id=5582): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}, {&(0x7f0000000b00)=';', 0x1}], 0x2, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) r2 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x2, 0x1, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @multicast, @empty, @random="56d6ee508d71", @remote}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r7, r6, 0x5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) close(0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x2000800) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5bf070c5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', r8, @fallback=0x5, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r11 = socket$isdn(0x22, 0x3, 0x10) getsockopt$MISDN_TIME_STAMP(r11, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 189.753235ms ago: executing program 1 (id=5583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000016000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002404000000a08000140000000010800034003"], 0xc8}}, 0x0) 124.952893ms ago: executing program 0 (id=5584): socket(0x28, 0x5, 0x0) (async) r0 = socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_AUTORATE={0x4, 0x9, 0xff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_AUTORATE={0x4, 0x9, 0xff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x6c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002800)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002800)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002880)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003280)={&(0x7f00000012c0), 0xc, &(0x7f0000003240)={&(0x7f00000028c0)={0x948, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x505}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x51, 0x2, 0x1}, {0x6, 0x4, 0x9, 0x1}, {0xff, 0x1, 0x9, 0x1ff}, {0x1, 0x0, 0xff, 0x101}, {0x2, 0xff, 0xfb, 0x9}, {0x0, 0x4b, 0x6, 0x4}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5357c5c}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe0}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xab5}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1c8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x8, 0x4, 0x5}, {0xd, 0xd, 0x9, 0xfffffffe}, {0x10, 0x6, 0x6, 0x5}, {0x6, 0x4, 0x8, 0x3}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x948}, 0x1, 0x0, 0x0, 0x4001}, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001200)={'sit0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0x88, 0x1403, 0x100, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0x88, 0x1403, 0x100, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) socket(0x2b, 0x80801, 0x1) (async) socket(0x2b, 0x80801, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2a020400) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f00000001c0)=0x9, 0x4) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) (async) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000400)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000980)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f00000005c0)="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", 0x156}, {&(0x7f0000000f00)="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", 0x1d4}, {&(0x7f0000000740)="4f0461e980a3df614c952ba937542c3956c268ef9da7fc364c6d5c543c3bd84159a349884fb4df8936363169ce8541c090bb5871df329e56747592fa4d29a09dcb4c416503ec1113680af76cba6417576ac2c0d3570f91a9c661f10e9bdab3c038f68844db4a19a8a613d78adb0405e27a1dea217288306169ac437c2401514510725ff144e75b83b8c67735520151c1018c3542bdfa2cae78aeb5d328f7d134706eb4d03bf4018be0f581f55e82cc1e851b8585d48a881144bfd5e96b52b62e62abe7ace71093fe8779d41feea0eb401dc005f2e3fe47320e7f945fb04e06c713f062ca47794f9c0b7fa88ccfacc4a51a4e816e0cb832c42d9f60561d5086ff512190d1129892fd541a0fbc9a41d70cd0d4501fed5545cd04b7800814bcbf492339bbfe784baba895beda447447a447e088a8d7cb795b3543a8cd8d8efb830dabc88b5b6466cd1d903833fca0e1049480810da129e746e2c9726a846ce85003a6bb9949e5dd140ab97a001c91323d5cb6648d4f61d40d4951ae36a1a404ba3452ae9a969c16a0918b4afe0b7b6afe4d59d8abfed8e7b38ce7c6c4daf306d0136c353c109f0a63", 0x1a7}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$inet(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000001240)="a68cde0d56b170df7710b54f17d9a39c4f98f35471901edac6463d6dadbe56a9cdeeb9f481d11c54c8f7653495447ef12f6d5db9886014964f0000000000b01c393a3e88f7", 0x45}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000000200)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "ca16d18cc3c1bda9bdfa93"}]}}}], 0x20}, 0x0) recvmsg$unix(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 78.617768ms ago: executing program 4 (id=5585): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @empty, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x820, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x4, 0x100, @void}}}}}}}}, 0x3a) 0s ago: executing program 1 (id=5586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xf29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000046}, 0xffffffffffffffef) kernel console output (not intermixed with test programs): ribute type 1 has an invalid length. [ 459.858573][T18238] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.891180][T18238] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.993971][T18248] bond7 (unregistering): Released all slaves [ 460.041814][T18238] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.104609][T18238] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.189141][T18238] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.213129][T18238] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.251947][T18244] syzkaller0: entered promiscuous mode [ 460.257735][T18244] syzkaller0: entered allmulticast mode [ 460.331950][ T9306] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.361088][ T9306] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.419803][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.431204][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.479796][ T9297] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.493441][ T9297] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.512318][T18273] xfrm0: entered promiscuous mode [ 460.523012][T18273] xfrm0: entered allmulticast mode [ 460.612729][ T9309] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.621218][ T9309] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.082322][T18308] netlink: 'syz.1.3947': attribute type 10 has an invalid length. [ 461.115543][T18308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.124299][T18308] bond0: entered promiscuous mode [ 461.129389][T18308] bond_slave_0: entered promiscuous mode [ 461.159090][T18308] bond_slave_1: entered promiscuous mode [ 461.173578][T18308] team0: Port device bond0 added [ 461.205533][T18312] syzkaller0: entered promiscuous mode [ 461.211208][T18312] syzkaller0: entered allmulticast mode [ 461.747514][T18335] vlan2: entered promiscuous mode [ 462.001797][T18338] lo speed is unknown, defaulting to 1000 [ 462.290396][T18352] __nla_validate_parse: 8 callbacks suppressed [ 462.290430][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 462.394697][T18341] lo speed is unknown, defaulting to 1000 [ 462.759789][T18357] FAULT_INJECTION: forcing a failure. [ 462.759789][T18357] name failslab, interval 1, probability 0, space 0, times 0 [ 462.787274][T18357] CPU: 0 UID: 0 PID: 18357 Comm: syz.1.3966 Not tainted syzkaller #0 PREEMPT(full) [ 462.787302][T18357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.787315][T18357] Call Trace: [ 462.787323][T18357] [ 462.787331][T18357] dump_stack_lvl+0xe8/0x150 [ 462.787366][T18357] should_fail_ex+0x412/0x560 [ 462.787398][T18357] should_failslab+0xa8/0x100 [ 462.787428][T18357] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 462.787455][T18357] ? __get_vm_area_node+0x13f/0x300 [ 462.787518][T18357] __get_vm_area_node+0x13f/0x300 [ 462.787538][T18357] ? unwind_next_frame+0xa5/0x23c0 [ 462.787582][T18357] __vmalloc_node_range_noprof+0x372/0x1730 [ 462.787606][T18357] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 462.787642][T18357] ? __lock_acquire+0x6b5/0x2cf0 [ 462.787685][T18357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 462.787709][T18357] ? aa_file_perm+0x192/0x15e0 [ 462.787751][T18357] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 462.787771][T18357] __vmalloc_noprof+0xd2/0x120 [ 462.787793][T18357] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 462.787818][T18357] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 462.787844][T18357] bpf_prog_alloc+0x3c/0x1a0 [ 462.787868][T18357] bpf_prog_load+0x7ba/0x1ae0 [ 462.787906][T18357] ? __pfx_bpf_prog_load+0x10/0x10 [ 462.787950][T18357] ? bpf_lsm_bpf+0x9/0x20 [ 462.787976][T18357] ? security_bpf+0x7e/0x2d0 [ 462.788004][T18357] __sys_bpf+0x618/0x950 [ 462.788039][T18357] ? __pfx___sys_bpf+0x10/0x10 [ 462.788088][T18357] ? ksys_write+0x242/0x270 [ 462.788114][T18357] ? __pfx_ksys_write+0x10/0x10 [ 462.788153][T18357] __x64_sys_bpf+0x7c/0x90 [ 462.788196][T18357] do_syscall_64+0x14d/0xf80 [ 462.788232][T18357] ? trace_irq_disable+0x3b/0x150 [ 462.788262][T18357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.788284][T18357] ? clear_bhb_loop+0x40/0x90 [ 462.788310][T18357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.788332][T18357] RIP: 0033:0x7f7a3e99c799 [ 462.788352][T18357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.788371][T18357] RSP: 002b:00007f7a3f854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.788395][T18357] RAX: ffffffffffffffda RBX: 00007f7a3ec15fa0 RCX: 00007f7a3e99c799 [ 462.788411][T18357] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 462.788425][T18357] RBP: 00007f7a3f854090 R08: 0000000000000000 R09: 0000000000000000 [ 462.788437][T18357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.788450][T18357] R13: 00007f7a3ec16038 R14: 00007f7a3ec15fa0 R15: 00007fff1688d338 [ 462.788484][T18357] [ 462.791012][T18357] syz.1.3966: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 463.129014][T18357] CPU: 1 UID: 0 PID: 18357 Comm: syz.1.3966 Not tainted syzkaller #0 PREEMPT(full) [ 463.129043][T18357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.129056][T18357] Call Trace: [ 463.129065][T18357] [ 463.129073][T18357] dump_stack_lvl+0xe8/0x150 [ 463.129110][T18357] warn_alloc+0x249/0x340 [ 463.129142][T18357] ? __pfx_warn_alloc+0x10/0x10 [ 463.129168][T18357] ? __get_vm_area_node+0x13f/0x300 [ 463.129203][T18357] ? __get_vm_area_node+0x2b5/0x300 [ 463.129223][T18357] ? unwind_next_frame+0xa5/0x23c0 [ 463.129262][T18357] __vmalloc_node_range_noprof+0x397/0x1730 [ 463.129299][T18357] ? __lock_acquire+0x6b5/0x2cf0 [ 463.129341][T18357] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 463.129365][T18357] ? aa_file_perm+0x192/0x15e0 [ 463.129408][T18357] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 463.129428][T18357] __vmalloc_noprof+0xd2/0x120 [ 463.129450][T18357] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 463.129474][T18357] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 463.129500][T18357] bpf_prog_alloc+0x3c/0x1a0 [ 463.129524][T18357] bpf_prog_load+0x7ba/0x1ae0 [ 463.129560][T18357] ? __pfx_bpf_prog_load+0x10/0x10 [ 463.129604][T18357] ? bpf_lsm_bpf+0x9/0x20 [ 463.129631][T18357] ? security_bpf+0x7e/0x2d0 [ 463.129669][T18357] __sys_bpf+0x618/0x950 [ 463.129710][T18357] ? __pfx___sys_bpf+0x10/0x10 [ 463.129759][T18357] ? ksys_write+0x242/0x270 [ 463.129785][T18357] ? __pfx_ksys_write+0x10/0x10 [ 463.129816][T18357] __x64_sys_bpf+0x7c/0x90 [ 463.129846][T18357] do_syscall_64+0x14d/0xf80 [ 463.129877][T18357] ? trace_irq_disable+0x3b/0x150 [ 463.129907][T18357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.129928][T18357] ? clear_bhb_loop+0x40/0x90 [ 463.129952][T18357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.129973][T18357] RIP: 0033:0x7f7a3e99c799 [ 463.129993][T18357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.130011][T18357] RSP: 002b:00007f7a3f854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.130032][T18357] RAX: ffffffffffffffda RBX: 00007f7a3ec15fa0 RCX: 00007f7a3e99c799 [ 463.130048][T18357] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 463.130061][T18357] RBP: 00007f7a3f854090 R08: 0000000000000000 R09: 0000000000000000 [ 463.130074][T18357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.130087][T18357] R13: 00007f7a3ec16038 R14: 00007f7a3ec15fa0 R15: 00007fff1688d338 [ 463.130137][T18357] [ 463.130161][T18357] Mem-Info: [ 463.387931][T18357] active_anon:6355 inactive_anon:0 isolated_anon:0 [ 463.387931][T18357] active_file:3752 inactive_file:40099 isolated_file:0 [ 463.387931][T18357] unevictable:3839 dirty:272 writeback:0 [ 463.387931][T18357] slab_reclaimable:12060 slab_unreclaimable:107442 [ 463.387931][T18357] mapped:34797 shmem:4530 pagetables:1461 [ 463.387931][T18357] sec_pagetables:0 bounce:0 [ 463.387931][T18357] kernel_misc_reclaimable:0 [ 463.387931][T18357] free:1317250 free_pcp:8842 free_cma:0 [ 463.437720][T18357] Node 0 active_anon:25620kB inactive_anon:0kB active_file:15008kB inactive_file:160196kB unevictable:13820kB isolated(anon):0kB isolated(file):0kB mapped:140088kB dirty:1088kB writeback:0kB shmem:16684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15284kB pagetables:5724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 463.504665][T18357] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 463.558597][T18357] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.616334][T18357] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 463.627968][T18357] Node 0 DMA32 free:1313804kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31220kB inactive_anon:0kB active_file:15008kB inactive_file:160196kB unevictable:13820kB writepending:1088kB zspages:0kB present:3129332kB managed:2552572kB mlocked:12288kB bounce:0kB free_pcp:30332kB local_pcp:13784kB free_cma:0kB [ 463.663115][T18357] lowmem_reserve[]: 0 0 0 0 0 [ 463.682892][T18357] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 463.742103][T18357] lowmem_reserve[]: 0 0 0 0 0 [ 463.747439][T18357] Node 1 Normal free:3939636kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 463.782543][T18357] lowmem_reserve[]: 0 0 0 0 0 [ 463.790142][T18357] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 463.803954][T18357] Node 0 DMA32: 3130*4kB (U) 3428*8kB (UME) 1373*16kB (UME) 216*32kB (UME) 284*64kB (UM) 426*128kB (UME) 339*256kB (UM) 244*512kB (UM) 160*1024kB (UME) 81*2048kB (UME) 154*4096kB (UM) = 1313752kB [ 463.826775][T18357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 463.864834][T18357] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939636kB [ 463.920099][T18357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 463.940340][T18357] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 463.983410][T18357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.011472][T18357] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.051165][T18357] 51681 total pagecache pages [ 464.056754][T18357] 0 pages in swap cache [ 464.060945][T18357] Free swap = 124996kB [ 464.076366][T18357] Total swap = 124996kB [ 464.090420][T18357] 2097051 pages RAM [ 464.112987][T18357] 0 pages HighMem/MovableOnly [ 464.123179][T18357] 427072 pages reserved [ 464.127469][T18357] 0 pages cma reserved [ 464.285105][T18384] netlink: 'syz.2.3973': attribute type 30 has an invalid length. [ 464.556140][T18391] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3974'. [ 464.576599][T18393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3975'. [ 464.596492][T18393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3975'. [ 464.650754][T18393] ip6gre1: entered promiscuous mode [ 464.671397][T18393] ip6gre1: entered allmulticast mode [ 464.685693][ T237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.693957][ T237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.713525][ T5907] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.737080][T18396] syzkaller0: entered promiscuous mode [ 464.751646][T18396] syzkaller0: entered allmulticast mode [ 464.790827][T18396] simple: basic_1 [ 464.812121][T18398] xt_CT: No such helper "pptp" [ 465.004806][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3982'. [ 465.070803][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3982'. [ 465.133189][T14051] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.353983][T18424] netlink: 'syz.3.3985': attribute type 13 has an invalid length. [ 465.395192][T14051] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 465.639309][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3990'. [ 465.652110][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3990'. [ 465.778886][T18446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3993'. [ 466.302458][T18466] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3998'. [ 466.774459][ T5965] IPVS: starting estimator thread 0... [ 466.862869][T18487] IPVS: using max 27 ests per chain, 64800 per kthread [ 467.434328][T18514] netlink: 'syz.4.4012': attribute type 1 has an invalid length. [ 467.490274][T18514] bond6: entered promiscuous mode [ 467.549648][T18514] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.575271][T18518] __nla_validate_parse: 3 callbacks suppressed [ 467.575296][T18518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4012'. [ 467.608014][T18518] bond6: entered allmulticast mode [ 467.728340][T18514] bond6: (slave bridge4): making interface the new active one [ 467.767113][T18514] bridge4: entered promiscuous mode [ 467.772697][T18514] bridge4: entered allmulticast mode [ 467.780483][T18514] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 467.800520][T18523] vlan2: entered promiscuous mode [ 467.960716][T18532] tipc: Started in network mode [ 467.965886][T18532] tipc: Node identity d2f843e4d8dc, cluster identity 4711 [ 467.974169][T18532] tipc: Enabled bearer , priority 0 [ 467.982441][T18532] syzkaller0: entered promiscuous mode [ 467.988203][T18532] syzkaller0: entered allmulticast mode [ 468.173718][T18537] tipc: Resetting bearer [ 468.221403][T18532] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4019'. [ 468.261616][T18532] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4019'. [ 468.405572][T18530] tipc: Resetting bearer [ 468.446133][T18530] tipc: Disabling bearer [ 468.470684][T18556] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4023'. [ 468.491750][T18556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4023'. [ 468.543866][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4023'. [ 468.661184][T18559] vlan2: entered promiscuous mode [ 468.880410][T18565] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4028'. [ 468.913200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.413989][T18579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4033'. [ 469.445595][T18584] netlink: 'syz.1.4035': attribute type 2 has an invalid length. [ 469.463459][T18584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4035'. [ 469.488573][T18585] netlink: 'syz.1.4035': attribute type 2 has an invalid length. [ 469.513147][T18585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4035'. [ 469.732318][T18598] openvswitch: netlink: Invalid VLAN frame [ 469.767255][T18602] netlink: 'syz.1.4040': attribute type 1 has an invalid length. [ 469.809291][T18602] bond7: entered promiscuous mode [ 469.816299][T18602] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.854104][T18602] bond7: entered allmulticast mode [ 469.870782][T18606] vlan2: entered promiscuous mode [ 469.921305][T18602] bond7: (slave bridge5): making interface the new active one [ 469.929284][T18602] bridge5: entered promiscuous mode [ 469.937326][T18602] bridge5: entered allmulticast mode [ 469.946729][T18602] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 469.962183][T18608] geneve0: entered promiscuous mode [ 470.004981][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.042850][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.060027][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.068575][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.237179][T18621] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 470.267863][T18622] ±ÿ•ÓÍÆ: renamed from lo [ 470.490879][T18635] batadv0: entered promiscuous mode [ 470.498348][T18635] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.641662][T18639] tipc: Started in network mode [ 470.646707][T18639] tipc: Node identity , cluster identity 4711 [ 470.653320][T18639] tipc: Failed to obtain node identity [ 470.658886][T18639] tipc: Enabling of bearer rejected, failed to enable media [ 470.673056][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 470.705236][T18641] syzkaller0: entered promiscuous mode [ 470.719616][T18641] syzkaller0: entered allmulticast mode [ 471.080960][T18651] team_slave_0: left promiscuous mode [ 471.101297][T18651] team0 (unregistering): Port device team_slave_0 removed [ 471.129047][T18651] team_slave_1: left promiscuous mode [ 471.194453][T18651] team0 (unregistering): Port device team_slave_1 removed [ 471.202179][T18651] bond0: left promiscuous mode [ 471.231741][T18651] bond_slave_0: left promiscuous mode [ 471.248710][T18651] bond_slave_1: left promiscuous mode [ 471.301708][T18651] team0 (unregistering): Port device bond0 removed [ 471.404186][T18663] bond7: entered promiscuous mode [ 471.416208][T18663] 8021q: adding VLAN 0 to HW filter on device bond7 [ 471.424538][T18657] syzkaller1: entered promiscuous mode [ 471.430102][T18657] syzkaller1: entered allmulticast mode [ 471.642067][T18671] xt_CT: No such helper "pptp" [ 471.757207][T18683] vlan2: entered promiscuous mode [ 472.257519][T18707] Bluetooth: MGMT ver 1.23 [ 472.337529][T18711] lo speed is unknown, defaulting to 1000 [ 472.364648][T18713] netlink: 'syz.4.4076': attribute type 1 has an invalid length. [ 472.518009][T18713] bond8: entered promiscuous mode [ 472.584290][T18713] 8021q: adding VLAN 0 to HW filter on device bond8 [ 472.636615][T18717] bond8: entered allmulticast mode [ 472.731454][T18713] bond8: (slave bridge5): making interface the new active one [ 472.821366][T18713] bridge5: entered promiscuous mode [ 472.827383][T18713] bridge5: entered allmulticast mode [ 472.856763][T18713] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 472.907353][T18723] tipc: Started in network mode [ 472.926242][T18723] tipc: Node identity c65323c2b466, cluster identity 4711 [ 472.939128][T18723] tipc: Enabled bearer , priority 0 [ 473.031431][T18723] tipc: Disabling bearer [ 473.275529][T18741] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 473.573119][T18752] __nla_validate_parse: 7 callbacks suppressed [ 473.573140][T18752] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4084'. [ 474.640855][T18792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4101'. [ 474.659222][T18792] gretap1: entered allmulticast mode [ 474.744824][T18797] SET target dimension over the limit! [ 474.839575][T18801] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.163733][ T25] block nbd0: Possible stuck request ffff8880266e0000: control (read@0,1024B). Runtime 240 seconds [ 475.175320][ T25] block nbd0: Possible stuck request ffff8880266e0200: control (read@1024,1024B). Runtime 240 seconds [ 475.188197][ T25] block nbd0: Possible stuck request ffff8880266e0400: control (read@2048,1024B). Runtime 240 seconds [ 475.200967][ T25] block nbd0: Possible stuck request ffff8880266e0600: control (read@3072,1024B). Runtime 240 seconds [ 475.221059][T18808] : entered promiscuous mode [ 475.461598][T18831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4114'. [ 475.618978][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4115'. [ 475.643231][T18835] bridge_slave_0: left allmulticast mode [ 475.659188][T18835] bridge_slave_0: left promiscuous mode [ 475.669705][T18835] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.932892][T18837] lo speed is unknown, defaulting to 1000 [ 476.333079][T18856] netlink: 'syz.0.4121': attribute type 30 has an invalid length. [ 477.713012][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.893619][T18906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.002556][T18901] syzkaller0: entered promiscuous mode [ 478.011989][T18901] syzkaller0: entered allmulticast mode [ 479.756794][T18935] vlan2: entered promiscuous mode [ 479.914867][T18943] lo speed is unknown, defaulting to 1000 [ 480.035916][T18951] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4148'. [ 480.069050][T18951] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4148'. [ 480.110257][T18953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4149'. [ 480.126128][T18951] ip6gre1: entered promiscuous mode [ 480.211435][T18956] SET target dimension over the limit! [ 480.233090][T18951] ip6gre1: entered allmulticast mode [ 481.087258][T18964] pimreg: tun_chr_ioctl cmd 1074025677 [ 481.099980][T18964] pimreg: linktype set to 780 [ 481.116161][T18971] netlink: 'syz.4.4155': attribute type 1 has an invalid length. [ 481.143012][T18971] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4155'. [ 481.516106][T18977] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 481.607448][T18979] syzkaller0: entered promiscuous mode [ 481.624462][T18979] syzkaller0: entered allmulticast mode [ 481.646079][T18979] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4159'. [ 481.700323][T18981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4160'. [ 482.248830][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4167'. [ 482.264878][T18999] netlink: 'syz.3.4167': attribute type 1 has an invalid length. [ 482.525850][T19002] netlink: 'syz.0.4168': attribute type 1 has an invalid length. [ 482.535964][T19002] nbd: couldn't find device at index -427251215 [ 482.684195][T19010] netlink: 'syz.4.4169': attribute type 1 has an invalid length. [ 482.700173][T19010] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4169'. [ 483.018932][T19025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4173'. [ 483.171514][T19031] vlan2: entered promiscuous mode [ 483.274538][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4175'. [ 483.330986][T19033] vlan2: entered promiscuous mode [ 483.342295][T19033] bridge0: entered promiscuous mode [ 483.601456][T19033] netlink: 'syz.1.4175': attribute type 11 has an invalid length. [ 483.951798][T19045] lo speed is unknown, defaulting to 1000 [ 484.120122][T19050] netlink: 'syz.2.4182': attribute type 1 has an invalid length. [ 484.249177][T19052] vlan2: entered promiscuous mode [ 484.342668][T19054] netlink: 'syz.3.4184': attribute type 1 has an invalid length. [ 484.368563][T19058] netlink: 'syz.4.4186': attribute type 15 has an invalid length. [ 484.499113][T19062] veth0: Caught tx_queue_len zero misconfig [ 485.429704][T19099] __nla_validate_parse: 4 callbacks suppressed [ 485.429728][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4197'. [ 485.749675][T19112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4202'. [ 485.779744][T19107] xt_CT: No such helper "pptp" [ 485.858370][T19117] netlink: 'syz.2.4204': attribute type 1 has an invalid length. [ 485.872908][T19117] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4204'. [ 486.240232][T19132] syzkaller1: entered promiscuous mode [ 486.246272][T19132] syzkaller1: entered allmulticast mode [ 486.605734][T19143] syzkaller0: entered promiscuous mode [ 486.611277][T19143] syzkaller0: entered allmulticast mode [ 486.621865][T19143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.857543][T19150] netlink: 'syz.0.4219': attribute type 1 has an invalid length. [ 486.866366][T19150] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4219'. [ 487.111248][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4220'. [ 487.853810][T19185] vlan2: entered promiscuous mode [ 487.860608][T19187] xt_connbytes: Forcing CT accounting to be enabled [ 488.031474][T19193] netlink: 'syz.3.4234': attribute type 3 has an invalid length. [ 488.396561][T19217] netlink: 'syz.4.4242': attribute type 1 has an invalid length. [ 488.453632][T19211] syzkaller0: entered promiscuous mode [ 488.460104][T19211] syzkaller0: entered allmulticast mode [ 488.466620][T19224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4242'. [ 488.511576][T19217] bond9: entered promiscuous mode [ 488.517615][T19217] 8021q: adding VLAN 0 to HW filter on device bond9 [ 488.536879][T19223] xt_CT: No such helper "netbios-ns" [ 488.564011][T19224] bond9: entered allmulticast mode [ 490.047795][T19231] vlan2: entered promiscuous mode [ 490.092256][T19238] bond9: (slave bridge6): making interface the new active one [ 490.107317][T19238] bridge6: entered promiscuous mode [ 490.112879][T19238] bridge6: entered allmulticast mode [ 490.120521][T19238] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 490.319575][T19249] SET target dimension over the limit! [ 490.399686][T19252] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.446585][T19254] syzkaller0: entered promiscuous mode [ 490.452132][T19254] syzkaller0: entered allmulticast mode [ 490.460711][T19254] TC_ACT_REPEAT abuse ? [ 490.660581][T19267] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 490.680422][T19261] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 490.688332][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4257'. [ 490.698412][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4257'. [ 490.707868][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4257'. [ 490.717232][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4257'. [ 490.746788][T19267] bond8: entered promiscuous mode [ 490.752615][T19267] 8021q: adding VLAN 0 to HW filter on device bond8 [ 490.798379][T19267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4260'. [ 490.811104][T19267] bond8: entered allmulticast mode [ 490.848810][T19277] netlink: 'syz.0.4263': attribute type 1 has an invalid length. [ 490.862640][T19267] bond8: (slave bridge8): making interface the new active one [ 490.870582][T19267] bridge8: entered promiscuous mode [ 490.876497][T19267] bridge8: entered allmulticast mode [ 490.884683][T19267] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 491.194166][T19277] 8021q: adding VLAN 0 to HW filter on device bond7 [ 491.247989][T19275] vlan2: entered promiscuous mode [ 491.281897][T19278] bond7: entered allmulticast mode [ 491.353409][T19287] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 491.527803][T19296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4270'. [ 491.548813][T19298] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4269'. [ 491.719784][T19304] netlink: 'syz.4.4274': attribute type 1 has an invalid length. [ 491.729555][T19301] netlink: 'syz.1.4271': attribute type 30 has an invalid length. [ 491.795812][T19304] bond10: entered promiscuous mode [ 491.801440][T19304] 8021q: adding VLAN 0 to HW filter on device bond10 [ 491.810639][T19308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4274'. [ 491.915645][T19308] bond10: entered allmulticast mode [ 491.981127][T19304] bond10: (slave bridge7): making interface the new active one [ 491.989262][T19304] bridge7: entered promiscuous mode [ 491.997778][T19304] bridge7: entered allmulticast mode [ 492.019367][T19304] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 492.089653][T19315] netlink: 'syz.1.4277': attribute type 11 has an invalid length. [ 492.200315][T19321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4279'. [ 492.315020][T19325] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4281'. [ 492.427950][T19327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.732398][T19342] lo speed is unknown, defaulting to 1000 [ 492.743849][T19342] lo speed is unknown, defaulting to 1000 [ 492.764783][T19342] lo speed is unknown, defaulting to 1000 [ 492.826050][T19351] netlink: 'syz.2.4289': attribute type 1 has an invalid length. [ 492.854037][T19342] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 492.946498][T19351] bond9: entered promiscuous mode [ 492.989616][T19351] 8021q: adding VLAN 0 to HW filter on device bond9 [ 493.043997][T19355] bond9: entered allmulticast mode [ 493.052680][T19342] lo speed is unknown, defaulting to 1000 [ 493.094903][T19342] lo speed is unknown, defaulting to 1000 [ 493.130406][T19351] bond9: (slave bridge9): making interface the new active one [ 493.146663][T19351] bridge9: entered promiscuous mode [ 493.152122][T19351] bridge9: entered allmulticast mode [ 493.159774][T19351] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 493.214749][T19342] lo speed is unknown, defaulting to 1000 [ 493.225649][T19342] lo speed is unknown, defaulting to 1000 [ 493.251499][T19342] lo speed is unknown, defaulting to 1000 [ 493.283588][T19342] lo speed is unknown, defaulting to 1000 [ 493.642254][T19363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.079330][T19384] vlan2: entered promiscuous mode [ 494.300114][ T30] audit: type=1800 audit(1773702834.874:7): pid=19391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4303" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1120 res=0 errno=0 [ 494.354142][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.371840][ T30] audit: type=1804 audit(1773702834.944:8): pid=19397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4303" name=2F6E6577726F6F742F3231372F6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1120 res=1 errno=0 [ 495.740987][T19426] vlan2: entered promiscuous mode [ 495.768758][T19428] __nla_validate_parse: 9 callbacks suppressed [ 495.768778][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4312'. [ 495.824545][T19430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4313'. [ 495.878395][T19430] bond11: entered promiscuous mode [ 495.886032][T19430] 8021q: adding VLAN 0 to HW filter on device bond11 [ 496.221614][T19449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.448985][T19465] netlink: 'syz.0.4321': attribute type 30 has an invalid length. [ 496.616255][T19462] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 496.714446][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4319'. [ 496.758084][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4319'. [ 496.806048][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4319'. [ 496.889625][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4319'. [ 497.090700][T19496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4326'. [ 497.120272][T19492] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4317'. [ 497.315950][T19501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4328'. [ 497.353191][T19505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.502717][T19507] lo speed is unknown, defaulting to 1000 [ 497.721638][T19507] lo speed is unknown, defaulting to 1000 [ 497.774014][T19512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4331'. [ 497.832596][T19517] netlink: 'syz.0.4333': attribute type 30 has an invalid length. [ 498.176344][T19533] vlan2: entered promiscuous mode [ 499.236177][T19568] bond10: Removing last arp target with arp_interval on [ 499.796302][T19598] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.985498][T19598] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.265189][T19598] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.313399][T19619] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 500.361560][T19614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.717189][T19598] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.133687][ T9280] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.167725][ T237] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.247309][ T237] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.296658][ T237] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.404019][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 501.608176][T19647] netlink: 'syz.0.4379': attribute type 1 has an invalid length. [ 501.674836][T19647] bond11: entered promiscuous mode [ 501.680493][T19647] 8021q: adding VLAN 0 to HW filter on device bond11 [ 501.738970][T19647] __nla_validate_parse: 7 callbacks suppressed [ 501.738994][T19647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4379'. [ 501.754841][T19647] bond11: entered allmulticast mode [ 501.786807][T19647] bond11: (slave bridge0): making interface the new active one [ 501.798314][T19647] bridge0: entered promiscuous mode [ 501.806612][T19647] bridge0: entered allmulticast mode [ 501.822742][T19647] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 501.933173][T19660] netlink: set zone limit has 4 unknown bytes [ 502.277702][T19675] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.323277][T19681] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 502.354734][T19681] netlink: 'syz.0.4391': attribute type 4 has an invalid length. [ 502.419984][ T30] audit: type=1800 audit(1773702842.994:9): pid=19666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4386" name="memory.events" dev="tmpfs" ino=1161 res=0 errno=0 [ 502.507057][T19689] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4392'. [ 502.553276][T19691] vlan2: entered promiscuous mode [ 502.669083][T19696] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4395'. [ 502.902198][T19705] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 502.910003][T19711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4399'. [ 502.930774][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4396'. [ 502.947521][T19711] vlan2: entered promiscuous mode [ 502.953106][T19710] netlink: 276 bytes leftover after parsing attributes in process `syz.1.4398'. [ 502.975186][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4396'. [ 503.016709][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4396'. [ 503.074376][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4396'. [ 503.093426][T19710] lo speed is unknown, defaulting to 1000 [ 503.376382][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4401'. [ 503.745388][T19710] lo speed is unknown, defaulting to 1000 [ 503.855598][T19723] ipvlan2: entered promiscuous mode [ 504.006898][T19727] netlink: 'syz.3.4403': attribute type 13 has an invalid length. [ 504.033520][T19727] netlink: 'syz.3.4403': attribute type 17 has an invalid length. [ 504.110942][T19727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.022839][T19767] vlan2: entered promiscuous mode [ 505.222479][T19773] vlan2: entered promiscuous mode [ 505.238585][ T25] block nbd0: Possible stuck request ffff8880266e0000: control (read@0,1024B). Runtime 270 seconds [ 505.249561][ T25] block nbd0: Possible stuck request ffff8880266e0200: control (read@1024,1024B). Runtime 270 seconds [ 505.260638][ T25] block nbd0: Possible stuck request ffff8880266e0400: control (read@2048,1024B). Runtime 270 seconds [ 505.272508][ T25] block nbd0: Possible stuck request ffff8880266e0600: control (read@3072,1024B). Runtime 270 seconds [ 505.368895][T19775] lo speed is unknown, defaulting to 1000 [ 505.603523][T19780] SET target dimension over the limit! [ 505.819653][T19784] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 505.897294][T19787] vlan2: entered promiscuous mode [ 506.423774][T19775] lo speed is unknown, defaulting to 1000 [ 506.481035][T19777] lo speed is unknown, defaulting to 1000 [ 506.752832][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.761027][ C1] lec:lec_tx_timeout: lec0 [ 506.765736][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 506.848014][T19811] __nla_validate_parse: 5 callbacks suppressed [ 506.848035][T19811] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4428'. [ 507.206955][T19777] lo speed is unknown, defaulting to 1000 [ 508.442451][T19828] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4432'. [ 508.465729][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4430'. [ 508.483010][T19828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4432'. [ 508.523402][T19828] netlink: 'syz.3.4432': attribute type 10 has an invalid length. [ 508.531295][T19828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4432'. [ 508.601471][T19828] team0: entered allmulticast mode [ 508.629644][T19828] team_slave_1: entered allmulticast mode [ 508.640773][T19828] bridge0: port 3(team0) entered blocking state [ 508.668236][T19828] bridge0: port 3(team0) entered disabled state [ 508.720243][T19828] bridge0: port 3(team0) entered blocking state [ 508.726740][T19828] bridge0: port 3(team0) entered forwarding state [ 508.953132][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4435'. [ 509.021834][T19846] vlan2: entered promiscuous mode [ 509.369396][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4443'. [ 509.405752][T19865] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4442'. [ 509.426619][T19863] vlan2: entered promiscuous mode [ 509.545472][T19866] lo speed is unknown, defaulting to 1000 [ 509.964967][T19873] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4446'. [ 510.185848][T19866] lo speed is unknown, defaulting to 1000 [ 510.354751][T19884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.370226][T19883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.528102][T19895] vlan2: entered promiscuous mode [ 510.678578][T19903] netlink: 'syz.1.4456': attribute type 1 has an invalid length. [ 510.754942][T19906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4456'. [ 510.874573][T19903] bond9: entered promiscuous mode [ 510.883401][T19903] 8021q: adding VLAN 0 to HW filter on device bond9 [ 510.891060][T19906] bond9: entered allmulticast mode [ 510.922124][T19917] netlink: 'syz.2.4458': attribute type 1 has an invalid length. [ 511.114690][T19903] bond9: (slave bridge6): making interface the new active one [ 511.122485][T19903] bridge6: entered promiscuous mode [ 511.132913][T19903] bridge6: entered allmulticast mode [ 511.140456][T19903] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 511.341760][T19927] syzkaller0: entered promiscuous mode [ 511.354253][T19927] syzkaller0: entered allmulticast mode [ 511.479196][T19936] SET target dimension over the limit! [ 511.603023][T19901] lo speed is unknown, defaulting to 1000 [ 511.736262][T19948] netlink: 'syz.1.4468': attribute type 30 has an invalid length. [ 511.792835][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 511.800925][ C1] lec:lec_tx_timeout: lec0 [ 511.826510][T19947] xt_CT: No such helper "pptp" [ 512.241635][T19901] lo speed is unknown, defaulting to 1000 [ 512.379133][T19977] __nla_validate_parse: 2 callbacks suppressed [ 512.379155][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4478'. [ 512.635122][T19983] bpq0: left promiscuous mode [ 512.647039][T19983] netlink: 'syz.4.4480': attribute type 11 has an invalid length. [ 512.672994][T19983] netlink: 'syz.4.4480': attribute type 23 has an invalid length. [ 512.716587][T19983] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4480'. [ 512.736744][T19987] xt_CT: No such helper "pptp" [ 516.215794][T20019] netlink: 'syz.0.4493': attribute type 30 has an invalid length. [ 516.243454][ T5192] udevd[5192]: worker [6906] /devices/virtual/block/nbd0 timeout; kill it [ 516.252130][ T5192] udevd[5192]: seq 16520 '/devices/virtual/block/nbd0' killed [ 517.459669][T20069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4506'. [ 517.470163][T20069] netlink: 'syz.4.4506': attribute type 32 has an invalid length. [ 517.478715][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4506'. [ 517.511770][T20069] bond12: Setting coupled_control to off (0) [ 517.536771][T20072] netlink: 'syz.3.4507': attribute type 30 has an invalid length. [ 517.607531][T20075] hsr_slave_0: left promiscuous mode [ 517.614925][T20075] hsr_slave_1: left promiscuous mode [ 517.768719][T20085] netlink: 'syz.4.4512': attribute type 1 has an invalid length. [ 517.816796][T20085] bond13: entered promiscuous mode [ 517.822445][T20085] 8021q: adding VLAN 0 to HW filter on device bond13 [ 517.841595][T20085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4512'. [ 517.850961][T20085] bond13: entered allmulticast mode [ 517.874375][T20085] bond13: (slave bridge8): making interface the new active one [ 517.882089][T20085] bridge8: entered promiscuous mode [ 517.888659][T20085] bridge8: entered allmulticast mode [ 517.896332][T20085] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 519.447982][T20036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.460608][T20088] netlink: 'syz.3.4511': attribute type 1 has an invalid length. [ 519.498599][T20088] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4511'. [ 519.552213][T20102] bridge_slave_0: left allmulticast mode [ 519.570356][T20102] bridge_slave_0: left promiscuous mode [ 519.586848][T20102] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.623664][T20102] bridge_slave_1: left allmulticast mode [ 519.639727][T20102] bridge_slave_1: left promiscuous mode [ 519.656368][T20102] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.682466][T20102] bond0: (slave bond_slave_0): Releasing backup interface [ 519.701265][T20102] bond0: (slave bond_slave_1): Releasing backup interface [ 519.712304][T20111] netlink: 'syz.4.4519': attribute type 30 has an invalid length. [ 519.738931][T20102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.759206][T20102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.768680][T20102] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 519.933161][T20120] xt_CT: No such helper "pptp" [ 520.125607][T20133] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 520.145087][T20135] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4529'. [ 521.124347][T20169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.158245][T20170] macvtap1: entered promiscuous mode [ 521.163884][T20170] macvtap1: entered allmulticast mode [ 521.208851][T20179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4538'. [ 521.229508][T20175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4538'. [ 521.409841][T20189] SET target dimension over the limit! [ 521.815081][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 521.881629][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4552'. [ 522.008502][T20218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4554'. [ 522.038945][T20220] vlan2: entered promiscuous mode [ 522.130769][T20221] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 522.852625][T20261] syzkaller0: entered promiscuous mode [ 522.860834][T20261] syzkaller0: entered allmulticast mode [ 523.021749][T20278] __nla_validate_parse: 1 callbacks suppressed [ 523.021788][T20278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4571'. [ 523.146487][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4573'. [ 523.191055][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4573'. [ 524.623044][T20292] syzkaller1: entered promiscuous mode [ 524.628598][T20292] syzkaller1: entered allmulticast mode [ 524.964037][T20322] bond8: Removing last ns target with arp_interval on [ 525.156192][T20331] veth1: entered promiscuous mode [ 525.161295][T20331] veth1: entered allmulticast mode [ 525.565886][T20343] xt_CT: No such helper "pptp" [ 525.683491][T20355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4587'. [ 526.407056][T20390] xt_CT: No such helper "pptp" [ 526.602852][T20408] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 526.624212][T20408] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 526.706610][T20402] syzkaller0: entered promiscuous mode [ 526.712161][T20402] syzkaller0: entered allmulticast mode [ 526.994127][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.509833][T20434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4612'. [ 527.763222][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4614'. [ 528.978517][T20441] kthread_run failed with err -4 [ 529.084499][T20450] netlink: 'syz.3.4617': attribute type 3 has an invalid length. [ 529.117941][T20451] veth1_to_bond: Caught tx_queue_len zero misconfig [ 529.123470][T20450] netlink: 772 bytes leftover after parsing attributes in process `syz.3.4617'. [ 529.165681][T20450] netlink: 'syz.3.4617': attribute type 3 has an invalid length. [ 529.178809][T20450] netlink: 772 bytes leftover after parsing attributes in process `syz.3.4617'. [ 529.392601][T20474] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!' [ 529.394870][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'. [ 529.421828][T20474] CPU: 1 UID: 0 PID: 20474 Comm: syz.3.4627 Not tainted syzkaller #0 PREEMPT(full) [ 529.421860][T20474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.421875][T20474] Call Trace: [ 529.421885][T20474] [ 529.421896][T20474] dump_stack_lvl+0xe8/0x150 [ 529.421938][T20474] sysfs_warn_dup+0x8e/0xa0 [ 529.421975][T20474] sysfs_do_create_link_sd+0xc0/0x110 [ 529.422010][T20474] device_add_class_symlinks+0x1cf/0x240 [ 529.422139][T20474] device_add+0x475/0xb70 [ 529.422168][T20474] wiphy_register+0x1d73/0x2d50 [ 529.422282][T20474] ? __pfx_wiphy_register+0x10/0x10 [ 529.422309][T20474] ? __pfx_netdev_run_todo+0x10/0x10 [ 529.422335][T20474] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 529.422407][T20474] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 529.422502][T20474] ieee80211_register_hw+0x35f0/0x42c0 [ 529.422561][T20474] ? ieee80211_register_hw+0x14b1/0x42c0 [ 529.422603][T20474] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 529.422645][T20474] ? __hrtimer_setup+0x181/0x200 [ 529.422689][T20474] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 529.422769][T20474] mac80211_hwsim_new_radio+0x3334/0x5b60 [ 529.422827][T20474] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 529.422850][T20474] ? kstrndup+0xbf/0x160 [ 529.422899][T20474] hwsim_new_radio_nl+0xf6a/0x1c00 [ 529.422949][T20474] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 529.422982][T20474] ? rcu_is_watching+0x15/0xb0 [ 529.423014][T20474] ? trace_kmalloc+0x2a/0x110 [ 529.423046][T20474] ? __nla_parse+0x40/0x60 [ 529.423085][T20474] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 529.423113][T20474] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 529.423147][T20474] genl_family_rcv_msg_doit+0x22a/0x330 [ 529.423180][T20474] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 529.423218][T20474] ? bpf_lsm_capable+0x9/0x20 [ 529.423249][T20474] ? security_capable+0x7e/0x2c0 [ 529.423328][T20474] genl_rcv_msg+0x61c/0x7a0 [ 529.423360][T20474] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.423382][T20474] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 529.423406][T20474] ? __lock_acquire+0x6b5/0x2cf0 [ 529.423447][T20474] netlink_rcv_skb+0x232/0x4b0 [ 529.423479][T20474] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.423505][T20474] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.423575][T20474] ? down_read+0x272/0x2e0 [ 529.423605][T20474] ? genl_rcv+0xd/0x40 [ 529.423630][T20474] genl_rcv+0x28/0x40 [ 529.423651][T20474] netlink_unicast+0x80f/0x9b0 [ 529.423689][T20474] ? __pfx_netlink_unicast+0x10/0x10 [ 529.423720][T20474] ? netlink_sendmsg+0x650/0xb40 [ 529.423750][T20474] ? skb_put+0x11b/0x210 [ 529.423787][T20474] netlink_sendmsg+0x813/0xb40 [ 529.423829][T20474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.423865][T20474] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.423897][T20474] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.423927][T20474] ____sys_sendmsg+0x972/0x9f0 [ 529.423947][T20474] ? futex_unqueue+0x211/0x240 [ 529.423982][T20474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.424015][T20474] ? import_iovec+0x73/0xa0 [ 529.424055][T20474] ___sys_sendmsg+0x2a5/0x360 [ 529.424085][T20474] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.424114][T20474] ? futex_wait+0x29a/0x380 [ 529.424176][T20474] ? __fget_files+0x2a/0x420 [ 529.424209][T20474] ? __fget_files+0x3a0/0x420 [ 529.424253][T20474] __x64_sys_sendmsg+0x1bd/0x2a0 [ 529.424279][T20474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.424312][T20474] ? rcu_is_watching+0x15/0xb0 [ 529.424356][T20474] do_syscall_64+0x14d/0xf80 [ 529.424390][T20474] ? trace_irq_disable+0x3b/0x150 [ 529.424422][T20474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.424446][T20474] ? clear_bhb_loop+0x40/0x90 [ 529.424474][T20474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.424497][T20474] RIP: 0033:0x7f9d46d9c799 [ 529.424519][T20474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.424538][T20474] RSP: 002b:00007f9d44ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.424562][T20474] RAX: ffffffffffffffda RBX: 00007f9d47015fa0 RCX: 00007f9d46d9c799 [ 529.424579][T20474] RDX: 0000000000000300 RSI: 00002000000000c0 RDI: 0000000000000004 [ 529.424603][T20474] RBP: 00007f9d46e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 529.424617][T20474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.424630][T20474] R13: 00007f9d47016038 R14: 00007f9d47015fa0 R15: 00007ffe5fba04d8 [ 529.424668][T20474] [ 529.894862][T20478] netlink: 'syz.0.4628': attribute type 13 has an invalid length. [ 529.907376][T20478] netlink: 'syz.0.4628': attribute type 17 has an invalid length. [ 529.976285][T20482] netlink: 'syz.3.4629': attribute type 1 has an invalid length. [ 530.045321][T20487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4629'. [ 530.068575][T20487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4629'. [ 530.659429][T20476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.674501][T20476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.928973][T20478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.951733][T20478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.976615][T20482] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 531.062823][ T9311] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.140309][ T9311] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.164231][ T9311] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.173451][ T9311] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.240443][ T9311] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.249470][ T9311] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.258686][ T9311] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.272301][ T9311] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.373101][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4638'. [ 531.391619][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4638'. [ 531.392556][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 531.401195][ T9311] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.424193][ T9311] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.432599][ T9311] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.456941][T20519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4639'. [ 531.463666][ T9311] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.479341][T20519] netlink: 'syz.0.4639': attribute type 18 has an invalid length. [ 531.882570][T20541] vlan2: entered promiscuous mode [ 531.980188][T20551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4651'. [ 532.018438][T20552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.877314][T20601] syzkaller1: entered promiscuous mode [ 532.890885][T20601] syzkaller1: entered allmulticast mode [ 533.100323][T20612] vlan2: entered promiscuous mode [ 533.105615][T20612] geneve1: entered promiscuous mode [ 533.111168][T20612] vlan2: entered allmulticast mode [ 533.116537][T20612] geneve1: entered allmulticast mode [ 533.163597][T20616] vlan2: entered promiscuous mode [ 533.960993][T20653] SET target dimension over the limit! [ 534.124668][T20649] lo speed is unknown, defaulting to 1000 [ 534.175519][T20660] xt_CT: No such helper "pptp" [ 534.624009][T20649] lo speed is unknown, defaulting to 1000 [ 534.944989][T20693] __nla_validate_parse: 6 callbacks suppressed [ 534.945009][T20693] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4700'. [ 535.316554][ T25] block nbd0: Possible stuck request ffff8880266e0000: control (read@0,1024B). Runtime 300 seconds [ 535.327509][ T25] block nbd0: Possible stuck request ffff8880266e0200: control (read@1024,1024B). Runtime 300 seconds [ 535.338617][ T25] block nbd0: Possible stuck request ffff8880266e0400: control (read@2048,1024B). Runtime 300 seconds [ 535.352380][ T25] block nbd0: Possible stuck request ffff8880266e0600: control (read@3072,1024B). Runtime 300 seconds [ 535.847993][T20707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4706'. [ 535.930301][T20707] vlan2: entered promiscuous mode [ 536.271793][T20732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4715'. [ 536.551412][T20751] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4716'. [ 536.630812][T20742] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 536.646902][T20742] syzkaller0: entered promiscuous mode [ 536.663934][T20742] syzkaller0: entered allmulticast mode [ 536.813029][T20754] delete_channel: no stack [ 536.819456][T20754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4718'. [ 536.883432][T20755] ipvlan1: Caught tx_queue_len zero misconfig [ 536.968720][T20756] delete_channel: no stack [ 537.283005][T20771] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4722'. [ 537.315687][T20771] netlink: 'syz.2.4722': attribute type 10 has an invalid length. [ 537.330084][T20771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4722'. [ 537.358342][T20771] team0: entered allmulticast mode [ 537.368324][T20771] team_slave_0: entered allmulticast mode [ 537.387346][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4723'. [ 537.398013][T20771] team_slave_1: entered allmulticast mode [ 537.414020][T20771] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.431946][T20771] bridge0: port 3(team0) entered blocking state [ 537.442998][T20771] bridge0: port 3(team0) entered disabled state [ 537.479269][T20777] vlan2: entered promiscuous mode [ 537.623548][T20788] xt_hashlimit: size too large, truncated to 1048576 [ 537.654152][T20795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4728'. [ 538.087636][T20816] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4734'. [ 538.523443][T20836] netlink: 'syz.1.4744': attribute type 8 has an invalid length. [ 538.570285][T20836] bond0: entered promiscuous mode [ 538.580038][T20836] debugfs: 'hsr1' already exists in 'hsr' [ 538.586753][T20836] Cannot create hsr debugfs directory [ 538.592361][T20836] hsr1: entered promiscuous mode [ 538.621281][T20840] lo speed is unknown, defaulting to 1000 [ 538.881848][T20856] netlink: 'syz.1.4749': attribute type 15 has an invalid length. [ 539.085158][T20840] lo speed is unknown, defaulting to 1000 [ 539.229948][T20873] lo speed is unknown, defaulting to 1000 [ 539.270365][T20877] netlink: 'syz.2.4755': attribute type 13 has an invalid length. [ 539.293884][T20877] netlink: 'syz.2.4755': attribute type 17 has an invalid length. [ 539.412979][T20878] netlink: 'syz.2.4755': attribute type 11 has an invalid length. [ 539.574875][T20877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.612376][T20877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.643878][T20881] vlan0: entered promiscuous mode [ 539.962436][T20873] lo speed is unknown, defaulting to 1000 [ 540.094880][T20900] SET target dimension over the limit! [ 540.298812][T20908] __nla_validate_parse: 3 callbacks suppressed [ 540.298834][T20908] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4761'. [ 541.058986][T20930] sctp: [Deprecated]: syz.4.4771 (pid 20930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.058986][T20930] Use struct sctp_sack_info instead [ 541.141017][T20932] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.217285][T20940] SET target dimension over the limit! [ 541.386900][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4776'. [ 541.396239][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4776'. [ 541.431262][T20949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4776'. [ 541.442075][T20949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4776'. [ 541.489731][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4778'. [ 541.500599][T20949] lo speed is unknown, defaulting to 1000 [ 541.528617][T20954] pim6reg: entered allmulticast mode [ 541.605037][T20953] 8021q: adding VLAN 0 to HW filter on device bond10 [ 541.631042][T20954] pim6reg: left allmulticast mode [ 541.831144][T20966] netlink: 'syz.3.4782': attribute type 1 has an invalid length. [ 541.909392][T20963] xt_CT: No such helper "pptp" [ 541.918035][T20970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4782'. [ 542.009382][T20966] bond9: entered promiscuous mode [ 542.015106][T20966] 8021q: adding VLAN 0 to HW filter on device bond9 [ 542.035468][T20970] bond9: entered allmulticast mode [ 542.059486][T20949] lo speed is unknown, defaulting to 1000 [ 542.137179][T20966] bond9: (slave bridge2): making interface the new active one [ 542.164857][T20966] bridge2: entered promiscuous mode [ 542.179517][T20966] bridge2: entered allmulticast mode [ 542.191526][T20982] netlink: 'syz.0.4787': attribute type 30 has an invalid length. [ 542.214020][T20966] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 542.531690][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4792'. [ 542.992422][T21013] xt_CT: No such helper "pptp" [ 543.208531][T21026] netlink: 'syz.4.4801': attribute type 3 has an invalid length. [ 543.228649][T21026] xt_connbytes: Forcing CT accounting to be enabled [ 543.417449][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 543.528832][T21045] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!' [ 543.540063][T21045] CPU: 0 UID: 0 PID: 21045 Comm: syz.4.4809 Not tainted syzkaller #0 PREEMPT(full) [ 543.540094][T21045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.540110][T21045] Call Trace: [ 543.540120][T21045] [ 543.540130][T21045] dump_stack_lvl+0xe8/0x150 [ 543.540172][T21045] sysfs_warn_dup+0x8e/0xa0 [ 543.540216][T21045] sysfs_do_create_link_sd+0xc0/0x110 [ 543.540252][T21045] device_add_class_symlinks+0x1cf/0x240 [ 543.540283][T21045] device_add+0x475/0xb70 [ 543.540312][T21045] wiphy_register+0x1d73/0x2d50 [ 543.540357][T21045] ? __pfx_wiphy_register+0x10/0x10 [ 543.540383][T21045] ? __pfx_netdev_run_todo+0x10/0x10 [ 543.540410][T21045] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 543.540444][T21045] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 543.540484][T21045] ieee80211_register_hw+0x35f0/0x42c0 [ 543.540522][T21045] ? ieee80211_register_hw+0x14b1/0x42c0 [ 543.540556][T21045] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 543.540599][T21045] ? __hrtimer_setup+0x181/0x200 [ 543.540630][T21045] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 543.540663][T21045] mac80211_hwsim_new_radio+0x3334/0x5b60 [ 543.540724][T21045] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 543.540747][T21045] ? kstrndup+0xbf/0x160 [ 543.540788][T21045] hwsim_new_radio_nl+0xf6a/0x1c00 [ 543.540839][T21045] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 543.540875][T21045] ? rcu_is_watching+0x15/0xb0 [ 543.540907][T21045] ? trace_kmalloc+0x2a/0x110 [ 543.540939][T21045] ? __nla_parse+0x40/0x60 [ 543.540977][T21045] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 543.541003][T21045] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 543.541039][T21045] genl_family_rcv_msg_doit+0x22a/0x330 [ 543.541072][T21045] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 543.541113][T21045] ? bpf_lsm_capable+0x9/0x20 [ 543.541143][T21045] ? security_capable+0x7e/0x2c0 [ 543.541180][T21045] genl_rcv_msg+0x61c/0x7a0 [ 543.541217][T21045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.541241][T21045] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 543.541267][T21045] ? __lock_acquire+0x6b5/0x2cf0 [ 543.541310][T21045] netlink_rcv_skb+0x232/0x4b0 [ 543.541343][T21045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.541370][T21045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 543.541421][T21045] ? down_read+0x272/0x2e0 [ 543.541443][T21045] ? genl_rcv+0xd/0x40 [ 543.541468][T21045] genl_rcv+0x28/0x40 [ 543.541489][T21045] netlink_unicast+0x80f/0x9b0 [ 543.541528][T21045] ? __pfx_netlink_unicast+0x10/0x10 [ 543.541559][T21045] ? netlink_sendmsg+0x650/0xb40 [ 543.541589][T21045] ? skb_put+0x11b/0x210 [ 543.541627][T21045] netlink_sendmsg+0x813/0xb40 [ 543.541669][T21045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.541706][T21045] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.541740][T21045] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.541770][T21045] ____sys_sendmsg+0x972/0x9f0 [ 543.541803][T21045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.541838][T21045] ? import_iovec+0x73/0xa0 [ 543.541877][T21045] ___sys_sendmsg+0x2a5/0x360 [ 543.541907][T21045] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.541939][T21045] ? futex_wake+0x4ac/0x580 [ 543.542002][T21045] ? __fget_files+0x2a/0x420 [ 543.542035][T21045] ? __fget_files+0x3a0/0x420 [ 543.542080][T21045] __x64_sys_sendmsg+0x1bd/0x2a0 [ 543.542107][T21045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.542142][T21045] ? rcu_is_watching+0x15/0xb0 [ 543.542211][T21045] do_syscall_64+0x14d/0xf80 [ 543.542245][T21045] ? trace_irq_disable+0x3b/0x150 [ 543.542278][T21045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.542302][T21045] ? clear_bhb_loop+0x40/0x90 [ 543.542330][T21045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.542353][T21045] RIP: 0033:0x7fa82239c799 [ 543.542374][T21045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.542395][T21045] RSP: 002b:00007fa8231bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.542421][T21045] RAX: ffffffffffffffda RBX: 00007fa822615fa0 RCX: 00007fa82239c799 [ 543.542438][T21045] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 543.542454][T21045] RBP: 00007fa822432c99 R08: 0000000000000000 R09: 0000000000000000 [ 543.542469][T21045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.542483][T21045] R13: 00007fa822616038 R14: 00007fa822615fa0 R15: 00007ffe4e5083f8 [ 543.542520][T21045] [ 544.087550][T21053] SET target dimension over the limit! [ 544.978951][T21072] netlink: 'syz.3.4818': attribute type 13 has an invalid length. [ 545.082928][T21072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.358179][T21088] SET target dimension over the limit! [ 545.521802][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4825'. [ 545.837108][T21110] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4829'. [ 545.885911][T21114] sctp: [Deprecated]: syz.0.4828 (pid 21114) Use of int in max_burst socket option deprecated. [ 545.885911][T21114] Use struct sctp_assoc_value instead [ 545.937568][T21114] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.4828'. [ 546.450241][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4840'. [ 546.501978][T21149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4843'. [ 546.625348][T21151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4844'. [ 546.648705][T21153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4845'. [ 546.694650][T21153] vlan2: entered promiscuous mode [ 546.840219][T21161] SET target dimension over the limit! [ 547.186035][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'. [ 547.376458][T21192] xt_CT: No such helper "pptp" [ 547.467123][T21197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.726846][T21216] lo speed is unknown, defaulting to 1000 [ 547.858658][T21223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4871'. [ 547.889040][T21223] netlink: 211604 bytes leftover after parsing attributes in process `syz.4.4871'. [ 547.996029][T21216] lo speed is unknown, defaulting to 1000 [ 548.232973][T21242] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 548.748961][T21264] ip6gre2: entered promiscuous mode [ 548.755340][T21264] ip6gre2: entered allmulticast mode [ 549.827482][T21291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.934144][ T30] audit: type=1804 audit(1773702890.514:10): pid=21294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4889" name="/newroot/390/cgroup.controllers" dev="tmpfs" ino=2002 res=1 errno=0 [ 549.988248][T21289] 8021q: adding VLAN 0 to HW filter on device bond11 [ 549.993140][ T30] audit: type=1800 audit(1773702890.514:11): pid=21294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4889" name="cgroup.controllers" dev="tmpfs" ino=2002 res=0 errno=0 [ 550.018455][ T30] audit: type=1800 audit(1773702890.534:12): pid=21294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4889" name="cgroup.controllers" dev="tmpfs" ino=2002 res=0 errno=0 [ 550.301448][T21317] tipc: Failed to remove unknown binding: 66,0,0/0:4055114441/4055114442 [ 550.349525][T21317] tipc: Failed to remove unknown binding: 66,0,0/0:4055114441/4055114442 [ 550.394584][T21319] lo speed is unknown, defaulting to 1000 [ 550.580943][T21330] __nla_validate_parse: 4 callbacks suppressed [ 550.580967][T21330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4902'. [ 550.717339][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4905'. [ 550.720726][T21319] lo speed is unknown, defaulting to 1000 [ 550.772997][T21337] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 550.839102][T21340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4907'. [ 550.882935][T21340] vlan2: entered promiscuous mode [ 550.971403][T21344] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 551.220862][T21354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4910'. [ 551.239993][T21351] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4910'. [ 551.454897][T21356] netlink: 'syz.3.4912': attribute type 1 has an invalid length. [ 551.491017][T21356] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4912'. [ 551.639728][T21373] netlink: 'syz.2.4918': attribute type 21 has an invalid length. [ 551.648732][T21373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4918'. [ 551.664744][T21377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4919'. [ 551.678258][T21368] xt_CT: No such helper "pptp" [ 551.710818][T21377] vlan2: entered promiscuous mode [ 551.779410][T21382] netlink: 'syz.2.4920': attribute type 30 has an invalid length. [ 552.014079][T21397] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4923'. [ 552.036491][T21391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4924'. [ 552.567787][T21420] netlink: 'syz.1.4932': attribute type 1 has an invalid length. [ 552.612859][T21420] bond11: entered promiscuous mode [ 552.618748][T21420] 8021q: adding VLAN 0 to HW filter on device bond11 [ 552.633128][T21422] bond11: entered allmulticast mode [ 552.700138][T21420] bond11: (slave bridge7): making interface the new active one [ 552.745896][T21420] bridge7: entered promiscuous mode [ 552.756479][T21420] bridge7: entered allmulticast mode [ 552.771431][T21420] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 552.799817][T21424] vlan0: entered promiscuous mode [ 552.989820][T21427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.016110][T21430] netlink: 'syz.0.4936': attribute type 1 has an invalid length. [ 553.436121][T21444] netlink: 'syz.3.4941': attribute type 2 has an invalid length. [ 553.936631][T21455] netlink: 'syz.0.4946': attribute type 1 has an invalid length. [ 553.977624][T21455] bond14: (slave bridge5): making interface the new active one [ 553.986222][T21455] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 554.558921][T21469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.970726][T21473] netlink: 'syz.3.4950': attribute type 58 has an invalid length. [ 555.343828][T21487] netlink: 'syz.1.4955': attribute type 1 has an invalid length. [ 555.489574][T21492] netlink: 'syz.0.4957': attribute type 30 has an invalid length. [ 555.795590][ T9283] wlan1: Trigger new scan to find an IBSS to join [ 556.700591][T21487] bond12: entered promiscuous mode [ 556.707378][T21487] 8021q: adding VLAN 0 to HW filter on device bond12 [ 556.716228][T21490] bond12: entered allmulticast mode [ 556.733375][T21492] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 556.770421][T21505] __nla_validate_parse: 8 callbacks suppressed [ 556.770446][T21505] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4958'. [ 556.800326][T21500] bond12: (slave bridge8): making interface the new active one [ 556.825550][T21500] bridge8: entered promiscuous mode [ 556.831012][T21500] bridge8: entered allmulticast mode [ 556.850946][T21500] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 557.038482][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4959'. [ 557.120518][T21524] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4961'. [ 557.415493][T21540] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 557.535191][T21555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4972'. [ 557.582630][T21555] vlan2: entered promiscuous mode [ 557.617505][T21558] validate_nla: 1 callbacks suppressed [ 557.617521][T21558] netlink: 'syz.0.4973': attribute type 1 has an invalid length. [ 557.631181][T21558] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4973'. [ 557.876562][T21570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4977'. [ 557.898988][T21570] netlink: 'syz.3.4977': attribute type 13 has an invalid length. [ 558.026995][T21579] netlink: 'syz.2.4980': attribute type 1 has an invalid length. [ 558.083322][T21579] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 558.094696][T21579] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 558.180625][T21579] bond13: (slave gretap1): making interface the new active one [ 558.212411][T21579] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 558.230151][T21581] macvlan3: entered promiscuous mode [ 558.254642][T21581] macvlan3: entered allmulticast mode [ 558.264950][T21581] bond13: entered promiscuous mode [ 558.270133][T21581] gretap1: entered promiscuous mode [ 558.293531][T21581] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 558.311948][T21581] bond13: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 558.324661][T21581] bond13: left promiscuous mode [ 558.329647][T21581] gretap1: left promiscuous mode [ 558.579405][T21589] tunl0: Caught tx_queue_len zero misconfig [ 558.604585][T21589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4983'. [ 558.687536][T21598] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4984'. [ 558.733471][T21599] netlink: 'syz.2.4985': attribute type 10 has an invalid length. [ 558.742475][T21599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4985'. [ 558.753166][ T9280] wlan1: Trigger new scan to find an IBSS to join [ 559.337555][T21592] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.401139][T21599] dummy0: entered promiscuous mode [ 559.423627][T21599] dummy0: entered allmulticast mode [ 559.438217][T21599] bridge0: port 4(dummy0) entered blocking state [ 559.464059][T21599] bridge0: port 4(dummy0) entered disabled state [ 559.472690][T21607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.504435][T21599] bridge0: port 4(dummy0) entered blocking state [ 559.510912][T21599] bridge0: port 4(dummy0) entered forwarding state [ 559.544697][T21592] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.622649][T21592] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.746589][T21592] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.888267][T21625] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4989'. [ 560.174957][ T9311] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.214762][ T9309] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.255785][ T9309] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.298439][ T9311] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.440147][T21643] lo speed is unknown, defaulting to 1000 [ 560.511326][T21647] netlink: 'syz.2.4998': attribute type 39 has an invalid length. [ 560.562553][T21651] netlink: 'syz.4.4997': attribute type 1 has an invalid length. [ 560.705222][T21649] tunl0: Caught tx_queue_len zero misconfig [ 560.831251][T21661] vlan2: entered promiscuous mode [ 560.910146][T21643] lo speed is unknown, defaulting to 1000 [ 561.094050][T21676] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 561.115775][T21675] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.793185][ T9283] wlan1: Trigger new scan to find an IBSS to join [ 561.945628][T21708] __nla_validate_parse: 4 callbacks suppressed [ 561.945651][T21708] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5010'. [ 561.989636][T21711] netlink: 'syz.4.5013': attribute type 1 has an invalid length. [ 562.007360][T21711] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5013'. [ 562.442963][T21733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5019'. [ 562.463366][T21728] xt_CT: No such helper "pptp" [ 562.672615][T21742] SET target dimension over the limit! [ 562.702170][T21733] bridge9: port 1(veth11) entered blocking state [ 562.728385][T21745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5022'. [ 562.730756][T21733] bridge9: port 1(veth11) entered disabled state [ 562.744752][ T237] wlan1: Creating new IBSS network, BSSID ca:65:43:46:31:7b [ 562.756084][T21733] veth11: entered allmulticast mode [ 562.787625][T21733] veth11: entered promiscuous mode [ 562.800624][T21733] bridge9: port 1(veth11) entered blocking state [ 562.807620][T21733] bridge9: port 1(veth11) entered forwarding state [ 562.845590][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 562.897053][ T9283] bridge9: port 1(veth11) entered disabled state [ 562.957576][T21739] bridge9: port 2(geneve2) entered blocking state [ 562.993035][T21739] bridge9: port 2(geneve2) entered disabled state [ 562.999891][T21739] geneve2: entered allmulticast mode [ 563.008911][T21739] geneve2: entered promiscuous mode [ 563.049424][T21753] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5024'. [ 563.115294][T21750] netlink: 'syz.0.5024': attribute type 1 has an invalid length. [ 563.142943][T21750] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5024'. [ 563.156071][T21754] syzkaller1: entered promiscuous mode [ 563.161761][T21754] syzkaller1: entered allmulticast mode [ 563.352525][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5027'. [ 563.838001][T21792] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5032'. [ 564.522320][T21805] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5036'. [ 564.629103][T21816] : entered promiscuous mode [ 564.719514][T21824] netlink: 'syz.1.5036': attribute type 2 has an invalid length. [ 564.741016][T21822] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 565.187783][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5046'. [ 565.197685][T21839] openvswitch: netlink: Missing key (keys=40, expected=80) [ 565.254667][T21839] macsec2: entered promiscuous mode [ 565.260223][T21839] geneve1: entered promiscuous mode [ 565.266096][T21839] macsec2: entered allmulticast mode [ 565.272068][T21839] geneve1: entered allmulticast mode [ 565.394774][ T25] block nbd0: Possible stuck request ffff8880266e0000: control (read@0,1024B). Runtime 330 seconds [ 565.406349][ T25] block nbd0: Possible stuck request ffff8880266e0200: control (read@1024,1024B). Runtime 330 seconds [ 565.417628][ T25] block nbd0: Possible stuck request ffff8880266e0400: control (read@2048,1024B). Runtime 330 seconds [ 565.429264][ T25] block nbd0: Possible stuck request ffff8880266e0600: control (read@3072,1024B). Runtime 330 seconds [ 566.509197][T21902] tipc: Enabled bearer , priority 0 [ 566.528804][T21896] syzkaller0: entered promiscuous mode [ 566.549122][T21896] syzkaller0: entered allmulticast mode [ 566.630889][T21896] tipc: Resetting bearer [ 566.658519][T21911] netlink: 'syz.1.5062': attribute type 39 has an invalid length. [ 566.671624][T21895] tipc: Resetting bearer [ 566.730712][T21895] tipc: Disabling bearer [ 567.473916][T21953] __nla_validate_parse: 5 callbacks suppressed [ 567.473937][T21953] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5072'. [ 567.573125][T21958] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 567.583060][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5077'. [ 567.614626][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5073'. [ 567.778916][T21966] netlink: 'syz.2.5079': attribute type 11 has an invalid length. [ 567.852833][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.860905][ C1] lec:lec_tx_timeout: lec0 [ 567.865581][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 568.135998][T21971] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5081'. [ 568.395034][T21970] delete_channel: no stack [ 568.412571][T21980] sctp: [Deprecated]: syz.2.5084 (pid 21980) Use of int in max_burst socket option. [ 568.412571][T21980] Use struct sctp_assoc_value instead [ 568.653716][T21987] syzkaller0: entered promiscuous mode [ 568.669572][T21987] syzkaller0: entered allmulticast mode [ 568.680016][T21986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.697815][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5087'. [ 568.749834][T21992] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5087'. [ 568.796612][T21992] bridge11: entered promiscuous mode [ 568.806075][T21993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5088'. [ 569.727764][T22024] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5093'. [ 569.853515][T22028] SET target dimension over the limit! [ 570.682177][T22052] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.834962][T22062] netlink: 'syz.2.5106': attribute type 1 has an invalid length. [ 570.858491][T22062] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5106'. [ 571.486691][T22082] xt_CT: No such helper "pptp" [ 571.581702][T22100] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5111'. [ 572.426548][T22116] tipc: Enabling of bearer rejected, failed to enable media [ 572.508342][T22120] netlink: 'syz.3.5119': attribute type 1 has an invalid length. [ 572.646790][T22132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5119'. [ 572.675896][T22120] bond10: entered promiscuous mode [ 572.683876][T22120] 8021q: adding VLAN 0 to HW filter on device bond10 [ 572.722921][T22132] bond10: entered allmulticast mode [ 572.755924][T22120] bond10: (slave bridge3): making interface the new active one [ 572.784406][T22120] bridge3: entered promiscuous mode [ 572.790525][T22120] bridge3: entered allmulticast mode [ 572.815126][T22120] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 572.872876][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 572.880991][ C1] lec:lec_tx_timeout: lec0 [ 573.012598][T22148] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5124'. [ 573.140852][T22153] syzkaller0: entered promiscuous mode [ 573.146508][T22153] syzkaller0: entered allmulticast mode [ 573.505454][T22178] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5129'. [ 573.540846][T22170] lo speed is unknown, defaulting to 1000 [ 573.611297][T22180] netlink: 'syz.2.5134': attribute type 1 has an invalid length. [ 573.619229][T22180] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5134'. [ 573.847285][T22186] dvmrp1: left allmulticast mode [ 573.959690][T22189] dvmrp1: entered allmulticast mode [ 573.971754][T22191] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 573.979352][T22170] lo speed is unknown, defaulting to 1000 [ 573.979385][T22169] lo speed is unknown, defaulting to 1000 [ 574.051338][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5135'. [ 574.274319][T22195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5138'. [ 574.284930][T22195] hsr_slave_0: left promiscuous mode [ 574.292957][T22195] hsr_slave_1: left promiscuous mode [ 574.574007][T22169] lo speed is unknown, defaulting to 1000 [ 594.844145][ T9283] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 595.476009][ T25] block nbd0: Possible stuck request ffff8880266e0000: control (read@0,1024B). Runtime 360 seconds [ 595.486876][ T25] block nbd0: Possible stuck request ffff8880266e0200: control (read@1024,1024B). Runtime 360 seconds [ 595.498001][ T25] block nbd0: Possible stuck request ffff8880266e0400: control (read@2048,1024B). Runtime 360 seconds [ 595.509261][ T25] block nbd0: Possible stuck request ffff8880266e0600: control (read@3072,1024B). Runtime 360 seconds [ 624.278998][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 625.553908][ T25] block nbd0: Possible stuck request ffff8880266e0000: control (read@0,1024B). Runtime 390 seconds [ 625.564815][ T25] block nbd0: Possible stuck request ffff8880266e0200: control (read@1024,1024B). Runtime 390 seconds [ 625.576134][ T25] block nbd0: Possible stuck request ffff8880266e0400: control (read@2048,1024B). Runtime 390 seconds [ 625.587305][ T25] block nbd0: Possible stuck request ffff8880266e0600: control (read@3072,1024B). Runtime 390 seconds [ 626.193951][ T9283] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.203554][T22231] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5149'. [ 628.233571][T22231] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5149'. [ 628.242672][T22231] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5149'. [ 628.291423][T22235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5151'. [ 628.453477][T22238] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5150'. [ 628.584865][T22243] 8021q: VLANs not supported on ip6gre0 [ 628.715188][T22247] netlink: 'syz.0.5154': attribute type 1 has an invalid length. [ 628.723322][T22247] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5154'. [ 628.873313][T22248] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 628.894237][T22248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5153'. [ 629.431298][T22265] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5159'. [ 629.454935][T22265] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5159'. [ 629.687956][T22271] vlan2: entered promiscuous mode [ 629.741138][T22274] ±ÿ•ÓÍÆ: left promiscuous mode [ 629.755739][T22274] A link change request failed with some changes committed already. Interface 26±ÿ•ÓÍÆ may have been left with an inconsistent configuration, please check. [ 629.792820][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 629.800953][ C1] lec:lec_tx_timeout: lec0 [ 629.979841][T22282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5165'. [ 630.305163][T22300] vlan2: entered promiscuous mode [ 630.647554][T22313] netlink: 'syz.2.5172': attribute type 1 has an invalid length. [ 631.043096][ T9182] lec:lec_start_xmit: lec0:No lecd attached [ 631.187554][T22318] lo speed is unknown, defaulting to 1000 [ 631.734554][T22318] lo speed is unknown, defaulting to 1000 [ 631.839828][T22343] vlan2: entered promiscuous mode [ 632.300806][T22351] IPVS: set_ctl: invalid protocol: 102 172.30.1.2:20002 [ 632.369285][T22350] lo speed is unknown, defaulting to 1000 [ 633.217544][T22350] lo speed is unknown, defaulting to 1000 [ 633.276304][T22374] __nla_validate_parse: 8 callbacks suppressed [ 633.276319][T22374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5188'. [ 633.321241][T22376] netlink: 'syz.4.5189': attribute type 2 has an invalid length. [ 633.370418][T22376] : entered promiscuous mode [ 633.387656][T22378] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5190'. [ 633.472301][T22379] lo speed is unknown, defaulting to 1000 [ 634.051230][T22396] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.099097][T22379] lo speed is unknown, defaulting to 1000 [ 634.257666][T22407] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5199'. [ 634.269122][T22407] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5199'. [ 634.380949][T22413] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 634.396591][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5197'. [ 634.416535][T22413] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5197'. [ 634.494836][T22419] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5200'. [ 635.386669][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5206'. [ 635.659638][T22438] lo speed is unknown, defaulting to 1000 [ 636.086554][T22458] xt_CT: No such helper "pptp" [ 636.175983][T22438] lo speed is unknown, defaulting to 1000 [ 636.389368][T22467] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5216'. [ 636.447754][T22471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5217'. [ 636.752760][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 636.760848][ C1] lec:lec_tx_timeout: lec0 [ 636.914141][T22480] netlink: 'syz.4.5221': attribute type 4 has an invalid length. [ 637.480596][T22492] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.695363][T22498] xt_nfacct: accounting object `syz0' does not exist [ 638.128768][T22519] netlink: 'syz.0.5236': attribute type 1 has an invalid length. [ 638.215442][T22519] 8021q: adding VLAN 0 to HW filter on device bond16 [ 638.228425][T22519] bond15: (slave bond16): making interface the new active one [ 638.236927][T22519] bond15: (slave bond16): Enslaving as an active interface with an up link [ 638.261138][T22522] bond15: (slave gretap1): Enslaving as a backup interface with an up link [ 638.288263][T22519] __nla_validate_parse: 5 callbacks suppressed [ 638.288285][T22519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5236'. [ 638.306061][T22519] 8021q: adding VLAN 0 to HW filter on device bond15 [ 638.424102][T22526] netlink: 'syz.1.5238': attribute type 21 has an invalid length. [ 638.452454][T22526] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5238'. [ 638.471696][T22526] netlink: 'syz.1.5238': attribute type 5 has an invalid length. [ 638.481476][T22526] netlink: 'syz.1.5238': attribute type 6 has an invalid length. [ 638.500353][T22526] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5238'. [ 638.514647][T22528] SET target dimension over the limit! [ 638.530790][T22532] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 638.614827][T22534] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5241'. [ 638.953668][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5247'. [ 639.081840][T22547] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 639.100727][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5246'. [ 639.120610][T22547] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5246'. [ 639.421778][T22574] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5255'. [ 639.765671][T22585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5260'. [ 639.794814][T22585] netlink: 'syz.2.5260': attribute type 1 has an invalid length. [ 639.802786][T22585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5260'. [ 640.019415][T22592] lo speed is unknown, defaulting to 1000 [ 640.340386][T22602] netlink: 'syz.4.5265': attribute type 1 has an invalid length. [ 640.429111][T22602] bond16: entered promiscuous mode [ 640.435761][T22602] 8021q: adding VLAN 0 to HW filter on device bond16 [ 640.457572][T22605] pim6reg99999999: entered allmulticast mode [ 640.535339][T22602] bond16: entered allmulticast mode [ 640.604435][T22602] bond16: (slave bridge12): making interface the new active one [ 640.612159][T22602] bridge12: entered promiscuous mode [ 640.618345][T22602] bridge12: entered allmulticast mode [ 640.636886][T22602] bond16: (slave bridge12): Enslaving as an active interface with an up link [ 640.733304][T22592] lo speed is unknown, defaulting to 1000 [ 640.863441][T22624] FAULT_INJECTION: forcing a failure. [ 640.863441][T22624] name failslab, interval 1, probability 0, space 0, times 0 [ 640.902844][T22624] CPU: 1 UID: 0 PID: 22624 Comm: syz.2.5273 Not tainted syzkaller #0 PREEMPT(full) [ 640.902874][T22624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.902889][T22624] Call Trace: [ 640.902898][T22624] [ 640.902908][T22624] dump_stack_lvl+0xe8/0x150 [ 640.902964][T22624] should_fail_ex+0x412/0x560 [ 640.903000][T22624] should_failslab+0xa8/0x100 [ 640.903031][T22624] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 640.903067][T22624] ? __alloc_skb+0x1d0/0x7d0 [ 640.903100][T22624] ? __local_bh_enable_ip+0xd0/0x130 [ 640.903134][T22624] __alloc_skb+0x1d0/0x7d0 [ 640.903172][T22624] __ip_append_data+0x2ca0/0x3f30 [ 640.903364][T22624] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 640.903419][T22624] ? __pfx___ip_append_data+0x10/0x10 [ 640.903453][T22624] ? do_raw_spin_lock+0x12b/0x2f0 [ 640.903479][T22624] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 640.903504][T22624] ip_append_data+0x10d/0x190 [ 640.903540][T22624] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 640.903575][T22624] udp_sendmsg+0x4d9/0x21a0 [ 640.903629][T22624] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 640.903689][T22624] ? __lock_acquire+0x6b5/0x2cf0 [ 640.903724][T22624] ? __lock_acquire+0x6b5/0x2cf0 [ 640.903752][T22624] ? __pfx_udp_sendmsg+0x10/0x10 [ 640.903792][T22624] ? aa_sk_perm+0x6d5/0x900 [ 640.903846][T22624] ? __pfx_aa_sk_perm+0x10/0x10 [ 640.903871][T22624] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 640.903954][T22624] ? __fget_files+0x3a0/0x420 [ 640.903986][T22624] ? sock_rps_record_flow+0x19/0x350 [ 640.904069][T22624] ? __pfx_inet_sendmsg+0x10/0x10 [ 640.904104][T22624] ? inet_sendmsg+0x29c/0x370 [ 640.904135][T22624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.904162][T22624] ? __pfx_inet_sendmsg+0x10/0x10 [ 640.904196][T22624] __sys_sendto+0x5de/0x710 [ 640.904233][T22624] ? __pfx___sys_sendto+0x10/0x10 [ 640.904264][T22624] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 640.904313][T22624] ? __fget_files+0x3a0/0x420 [ 640.904357][T22624] ? ksys_write+0x242/0x270 [ 640.904385][T22624] ? __pfx_ksys_write+0x10/0x10 [ 640.904415][T22624] __x64_sys_sendto+0xde/0x100 [ 640.904452][T22624] do_syscall_64+0x14d/0xf80 [ 640.904484][T22624] ? trace_irq_disable+0x3b/0x150 [ 640.904516][T22624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.904539][T22624] ? clear_bhb_loop+0x40/0x90 [ 640.904568][T22624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.904591][T22624] RIP: 0033:0x7f71f439c799 [ 640.904613][T22624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.904633][T22624] RSP: 002b:00007f71f52fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 640.904658][T22624] RAX: ffffffffffffffda RBX: 00007f71f4615fa0 RCX: 00007f71f439c799 [ 640.904674][T22624] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000006 [ 640.904689][T22624] RBP: 00007f71f52fe090 R08: 0000000000000000 R09: 0000000000000000 [ 640.904703][T22624] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000002 [ 640.904717][T22624] R13: 00007f71f4616038 R14: 00007f71f4615fa0 R15: 00007ffdd3d8b218 [ 640.904752][T22624] [ 641.386764][T22628] xt_CT: No such helper "pptp" [ 642.197164][T22661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.724890][T22670] vlan2: entered promiscuous mode [ 643.344438][T22689] SET target dimension over the limit! [ 643.447569][T22698] __nla_validate_parse: 13 callbacks suppressed [ 643.447592][T22698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5301'. [ 643.490529][T22695] lo speed is unknown, defaulting to 1000 [ 643.513538][T22700] tipc: Started in network mode [ 643.525276][T22701] ipt_ECN: cannot use operation on non-tcp rule [ 643.553759][T22700] tipc: Node identity aaaaaaaaaa22, cluster identity 4711 [ 643.596996][T22700] tipc: Enabled bearer , priority 1 [ 643.905745][T22723] netlink: 'syz.3.5307': attribute type 8 has an invalid length. [ 643.942997][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5307'. [ 643.991885][T22723] bond0: entered promiscuous mode [ 644.014296][T22723] bond_slave_0: entered promiscuous mode [ 644.037077][T22723] bond_slave_1: entered promiscuous mode [ 644.053951][T22723] debugfs: 'hsr1' already exists in 'hsr' [ 644.060003][T22723] Cannot create hsr debugfs directory [ 644.066059][T22723] hsr1: entered promiscuous mode [ 644.080525][T22730] tipc: Enabling of bearer rejected, failed to enable media [ 644.108966][T22731] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5305'. [ 644.120903][T22695] lo speed is unknown, defaulting to 1000 [ 644.138672][T22701] lo speed is unknown, defaulting to 1000 [ 644.276088][T22737] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 644.332216][T22739] SET target dimension over the limit! [ 644.429148][T22741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5313'. [ 644.664935][T22745] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 644.670818][T22745] syzkaller1: Linktype set failed because interface is up [ 644.683001][ T5936] syzkaller1: tun_net_xmit 90 [ 644.699964][T22745] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 644.712845][ T5919] tipc: Node number set to 8956586 [ 644.762992][T22736] lo speed is unknown, defaulting to 1000 [ 644.871547][T22757] macsec0: entered promiscuous mode [ 644.996069][T22757] macsec0: left promiscuous mode [ 645.059247][T22761] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 645.192398][T22736] lo speed is unknown, defaulting to 1000 [ 645.282007][T22701] lo speed is unknown, defaulting to 1000 [ 645.380692][T22776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5325'. [ 645.887673][T22792] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5327'. [ 646.051996][T22798] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5332'. [ 646.117459][T22796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5332'. [ 646.567562][T22815] syzkaller1: entered promiscuous mode [ 646.584401][T22815] syzkaller1: entered allmulticast mode [ 646.592544][T22819] netlink: 'syz.0.5339': attribute type 30 has an invalid length. [ 646.629611][T22822] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 646.702454][T22826] netlink: 'syz.3.5340': attribute type 1 has an invalid length. [ 646.761202][T22828] netlink: 'syz.1.5341': attribute type 13 has an invalid length. [ 646.769240][T22828] netlink: 'syz.1.5341': attribute type 17 has an invalid length. [ 646.778370][T22829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5340'. [ 646.794894][T22830] netlink: 'syz.0.5342': attribute type 1 has an invalid length. [ 646.817214][T22826] bond11: entered promiscuous mode [ 646.823777][T22826] 8021q: adding VLAN 0 to HW filter on device bond11 [ 646.983898][T22828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.998729][T22828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.023228][T22829] bond11: entered allmulticast mode [ 647.086699][T22826] bond11: (slave bridge5): making interface the new active one [ 647.101680][T22826] bridge5: entered promiscuous mode [ 647.107646][T22844] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5344'. [ 647.118877][T22826] bridge5: entered allmulticast mode [ 647.125754][T22826] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 647.218749][T22848] pimreg: tun_chr_ioctl cmd 21731 [ 647.226040][T22845] pimreg: tun_chr_ioctl cmd 21731 [ 647.745005][T22869] netlink: 'syz.0.5352': attribute type 1 has an invalid length. [ 648.493131][T22897] 8021q: adding VLAN 0 to HW filter on device bond12 [ 648.518049][T22882] lo speed is unknown, defaulting to 1000 [ 648.878896][T22882] lo speed is unknown, defaulting to 1000 [ 648.925249][T22920] __nla_validate_parse: 4 callbacks suppressed [ 648.925281][T22920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5361'. [ 649.343444][T22933] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 649.499979][T22945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5366'. [ 649.634357][T22931] lo speed is unknown, defaulting to 1000 [ 649.702457][T22955] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5365'. [ 650.293233][T22931] lo speed is unknown, defaulting to 1000 [ 650.298383][T22971] netlink: 'syz.0.5372': attribute type 1 has an invalid length. [ 650.326614][T22971] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5372'. [ 650.426501][T22976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.672463][T22981] lo speed is unknown, defaulting to 1000 [ 650.720405][T22984] lo: Caught tx_queue_len zero misconfig [ 650.861201][T22981] lo speed is unknown, defaulting to 1000 [ 651.492374][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5382'. [ 651.680814][T23010] ip6gre2: entered promiscuous mode [ 651.917003][T23025] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5388'. [ 651.941129][T23026] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5384'. [ 652.287015][T23033] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5392'. [ 652.536463][T23043] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5391'. [ 652.634466][T23047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5395'. [ 652.848549][T23058] pimreg: entered allmulticast mode [ 652.891429][T23053] lo speed is unknown, defaulting to 1000 [ 652.985778][T23065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 653.223773][T23072] FAULT_INJECTION: forcing a failure. [ 653.223773][T23072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.245774][T23072] CPU: 1 UID: 0 PID: 23072 Comm: syz.3.5404 Not tainted syzkaller #0 PREEMPT(full) [ 653.245806][T23072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.245821][T23072] Call Trace: [ 653.245831][T23072] [ 653.245841][T23072] dump_stack_lvl+0xe8/0x150 [ 653.245878][T23072] should_fail_ex+0x412/0x560 [ 653.245914][T23072] _copy_from_user+0x2d/0xb0 [ 653.245949][T23072] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 653.246080][T23072] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 653.246113][T23072] ? rcu_is_watching+0x15/0xb0 [ 653.246145][T23072] ? trace_kmalloc+0x2a/0x110 [ 653.246173][T23072] ip_generic_getfrag+0x149/0x2d0 [ 653.246211][T23072] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 653.246247][T23072] ? __alloc_skb+0x4e5/0x7d0 [ 653.246276][T23072] ? skb_put+0x11b/0x210 [ 653.246312][T23072] __ip_append_data+0x31af/0x3f30 [ 653.246375][T23072] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 653.246432][T23072] ? __pfx___ip_append_data+0x10/0x10 [ 653.246467][T23072] ? do_raw_spin_lock+0x12b/0x2f0 [ 653.246494][T23072] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 653.246520][T23072] ip_append_data+0x10d/0x190 [ 653.246557][T23072] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 653.246594][T23072] udp_sendmsg+0x4d9/0x21a0 [ 653.246619][T23072] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 653.246652][T23072] ? __lock_acquire+0x6b5/0x2cf0 [ 653.246688][T23072] ? __lock_acquire+0x6b5/0x2cf0 [ 653.246716][T23072] ? __pfx_udp_sendmsg+0x10/0x10 [ 653.246759][T23072] ? aa_sk_perm+0x6d5/0x900 [ 653.246798][T23072] ? __pfx_aa_sk_perm+0x10/0x10 [ 653.246823][T23072] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 653.246859][T23072] ? __fget_files+0x3a0/0x420 [ 653.246889][T23072] ? sock_rps_record_flow+0x19/0x350 [ 653.246920][T23072] ? __pfx_inet_sendmsg+0x10/0x10 [ 653.246954][T23072] ? inet_sendmsg+0x29c/0x370 [ 653.246985][T23072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.247009][T23072] ? __pfx_inet_sendmsg+0x10/0x10 [ 653.247043][T23072] __sys_sendto+0x5de/0x710 [ 653.247078][T23072] ? __pfx___sys_sendto+0x10/0x10 [ 653.247108][T23072] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 653.247157][T23072] ? __fget_files+0x3a0/0x420 [ 653.247201][T23072] ? ksys_write+0x242/0x270 [ 653.247227][T23072] ? __pfx_ksys_write+0x10/0x10 [ 653.247257][T23072] __x64_sys_sendto+0xde/0x100 [ 653.247294][T23072] do_syscall_64+0x14d/0xf80 [ 653.247325][T23072] ? trace_irq_disable+0x3b/0x150 [ 653.247363][T23072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.247386][T23072] ? clear_bhb_loop+0x40/0x90 [ 653.247414][T23072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.247436][T23072] RIP: 0033:0x7f9d46d9c799 [ 653.247458][T23072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.247478][T23072] RSP: 002b:00007f9d44ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 653.247502][T23072] RAX: ffffffffffffffda RBX: 00007f9d47015fa0 RCX: 00007f9d46d9c799 [ 653.247518][T23072] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000006 [ 653.247533][T23072] RBP: 00007f9d44ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 653.247546][T23072] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000002 [ 653.247561][T23072] R13: 00007f9d47016038 R14: 00007f9d47015fa0 R15: 00007ffe5fba04d8 [ 653.247596][T23072] [ 653.681120][T23053] lo speed is unknown, defaulting to 1000 [ 654.185741][T23091] __nla_validate_parse: 2 callbacks suppressed [ 654.185763][T23091] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5410'. [ 654.265816][T23093] netlink: 'syz.3.5411': attribute type 1 has an invalid length. [ 654.286881][T23091] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5410'. [ 654.302222][T23096] netlink: 'syz.0.5412': attribute type 1 has an invalid length. [ 654.324659][T23098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5411'. [ 654.337385][T23093] bond13: entered promiscuous mode [ 654.345834][T23093] 8021q: adding VLAN 0 to HW filter on device bond13 [ 654.373536][T23100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5412'. [ 654.409437][T23096] bond18: entered promiscuous mode [ 654.422099][T23096] 8021q: adding VLAN 0 to HW filter on device bond18 [ 654.441515][T23098] bond13: entered allmulticast mode [ 654.451985][T23100] bond18: entered allmulticast mode [ 654.514858][T23093] bond13: (slave bridge6): making interface the new active one [ 654.530448][T23093] bridge6: entered promiscuous mode [ 654.539402][T23093] bridge6: entered allmulticast mode [ 654.551596][T23093] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 654.612553][T23096] bond18: (slave bridge6): making interface the new active one [ 654.640928][T23096] bridge6: entered promiscuous mode [ 654.671445][T23096] bridge6: entered allmulticast mode [ 654.682480][T23096] bond18: (slave bridge6): Enslaving as an active interface with an up link [ 654.795768][T23114] FAULT_INJECTION: forcing a failure. [ 654.795768][T23114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.840394][T23114] CPU: 1 UID: 0 PID: 23114 Comm: syz.3.5416 Not tainted syzkaller #0 PREEMPT(full) [ 654.840426][T23114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.840440][T23114] Call Trace: [ 654.840449][T23114] [ 654.840459][T23114] dump_stack_lvl+0xe8/0x150 [ 654.840497][T23114] should_fail_ex+0x412/0x560 [ 654.840533][T23114] _copy_from_user+0x2d/0xb0 [ 654.840568][T23114] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 654.840614][T23114] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 654.840647][T23114] ? rcu_is_watching+0x15/0xb0 [ 654.840688][T23114] ? trace_kmalloc+0x2a/0x110 [ 654.840715][T23114] ip_generic_getfrag+0x149/0x2d0 [ 654.840754][T23114] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 654.840790][T23114] ? __alloc_skb+0x4e5/0x7d0 [ 654.840819][T23114] ? skb_put+0x11b/0x210 [ 654.840855][T23114] __ip_append_data+0x31af/0x3f30 [ 654.840910][T23114] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 654.840967][T23114] ? __pfx___ip_append_data+0x10/0x10 [ 654.841002][T23114] ? do_raw_spin_lock+0x12b/0x2f0 [ 654.841028][T23114] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 654.841054][T23114] ip_append_data+0x10d/0x190 [ 654.841091][T23114] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 654.841126][T23114] udp_sendmsg+0x4d9/0x21a0 [ 654.841151][T23114] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 654.841182][T23114] ? __lock_acquire+0x6b5/0x2cf0 [ 654.841217][T23114] ? __lock_acquire+0x6b5/0x2cf0 [ 654.841245][T23114] ? __pfx_udp_sendmsg+0x10/0x10 [ 654.841288][T23114] ? aa_sk_perm+0x6d5/0x900 [ 654.841324][T23114] ? __pfx_aa_sk_perm+0x10/0x10 [ 654.841349][T23114] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 654.841384][T23114] ? __fget_files+0x3a0/0x420 [ 654.841415][T23114] ? sock_rps_record_flow+0x19/0x350 [ 654.841447][T23114] ? __pfx_inet_sendmsg+0x10/0x10 [ 654.841481][T23114] ? inet_sendmsg+0x29c/0x370 [ 654.841522][T23114] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.841546][T23114] ? __pfx_inet_sendmsg+0x10/0x10 [ 654.841578][T23114] __sys_sendto+0x5de/0x710 [ 654.841614][T23114] ? __pfx___sys_sendto+0x10/0x10 [ 654.841642][T23114] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 654.841696][T23114] ? __fget_files+0x3a0/0x420 [ 654.841738][T23114] ? ksys_write+0x242/0x270 [ 654.841764][T23114] ? __pfx_ksys_write+0x10/0x10 [ 654.841793][T23114] __x64_sys_sendto+0xde/0x100 [ 654.841829][T23114] do_syscall_64+0x14d/0xf80 [ 654.841859][T23114] ? trace_irq_disable+0x3b/0x150 [ 654.841889][T23114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.841910][T23114] ? clear_bhb_loop+0x40/0x90 [ 654.841937][T23114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.841958][T23114] RIP: 0033:0x7f9d46d9c799 [ 654.841979][T23114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.841997][T23114] RSP: 002b:00007f9d44ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 654.842020][T23114] RAX: ffffffffffffffda RBX: 00007f9d47015fa0 RCX: 00007f9d46d9c799 [ 654.842036][T23114] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000006 [ 654.842050][T23114] RBP: 00007f9d44ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 654.842063][T23114] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.842076][T23114] R13: 00007f9d47016038 R14: 00007f9d47015fa0 R15: 00007ffe5fba04d8 [ 654.842111][T23114] [ 655.650559][ T25] block nbd0: Possible stuck request ffff8880266e0000: control (read@0,1024B). Runtime 420 seconds [ 655.672296][ T25] block nbd0: Possible stuck request ffff8880266e0200: control (read@1024,1024B). Runtime 420 seconds [ 655.683765][ T25] block nbd0: Possible stuck request ffff8880266e0400: control (read@2048,1024B). Runtime 420 seconds [ 655.695690][ T25] block nbd0: Possible stuck request ffff8880266e0600: control (read@3072,1024B). Runtime 420 seconds [ 655.820754][T23140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5423'. [ 655.839669][T23140] vlan2: entered promiscuous mode [ 656.204376][T23163] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 656.420755][T23167] lo speed is unknown, defaulting to 1000 [ 656.475815][T23166] netlink: 'syz.4.5430': attribute type 1 has an invalid length. [ 656.673917][T23182] netlink: 'syz.1.5433': attribute type 20 has an invalid length. [ 656.681809][T23182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5433'. [ 656.784642][T23184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5436'. [ 656.835693][T23182] netlink: 'syz.1.5433': attribute type 20 has an invalid length. [ 656.868898][T23182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5433'. [ 656.928381][T23185] bond13: (slave 26±ÿ•ÓÍÆ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 656.973813][T23185] bond13: (slave 26±ÿ•ÓÍÆ): Enslaving as an active interface with an up link [ 656.985953][T23193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5437'. [ 657.009498][T23185] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 657.033964][ T9280] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.042344][ T9280] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.056435][T23167] lo speed is unknown, defaulting to 1000 [ 657.091156][ T9280] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.110709][ T9280] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.490084][T23211] syzkaller0: entered promiscuous mode [ 657.499476][T23211] syzkaller0: entered allmulticast mode [ 658.194241][ T9306] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 658.671437][T23257] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5452'. [ 658.836844][T23263] ip6t_REJECT: ECHOREPLY is not supported [ 658.871265][T23263] 5nè‹Ò: entered promiscuous mode [ 658.879737][T23263] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 658.998859][T23267] vlan0: entered promiscuous mode [ 659.184963][T23271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.275246][T23274] xt_CT: No such helper "pptp" [ 659.694647][T23293] __nla_validate_parse: 1 callbacks suppressed [ 659.694669][T23293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5464'. [ 659.757823][T23293] vlan2: entered promiscuous mode [ 659.876661][T23298] lo speed is unknown, defaulting to 1000 [ 659.934340][T23301] raw_sendmsg: syz.0.5467 forgot to set AF_INET. Fix it! [ 660.000521][T23303] vlan3: entered promiscuous mode [ 660.114483][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.382949][T23322] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5473'. [ 660.405783][T23322] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5473'. [ 660.530389][T23328] bond14: option lp_interval: invalid value (0) [ 660.537059][T23328] bond14: option lp_interval: allowed values 1 - 2147483647 [ 660.547232][T23328] bond14 (unregistering): Released all slaves [ 660.574243][T23298] lo speed is unknown, defaulting to 1000 [ 660.775572][T23343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5479'. [ 660.870274][T23343] vlan2: entered promiscuous mode [ 661.637746][T23368] vlan2: entered promiscuous mode [ 661.646004][T23370] netlink: 'syz.0.5485': attribute type 1 has an invalid length. [ 661.717170][T23372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5485'. [ 661.740030][T23370] bond19: entered promiscuous mode [ 661.747064][T23370] 8021q: adding VLAN 0 to HW filter on device bond19 [ 661.755222][T23372] bond19: entered allmulticast mode [ 661.838948][T23374] lo speed is unknown, defaulting to 1000 [ 661.865951][T23370] bond19: (slave bridge7): making interface the new active one [ 661.876348][T23370] bridge7: entered promiscuous mode [ 661.881772][T23370] bridge7: entered allmulticast mode [ 661.894536][T23370] bond19: (slave bridge7): Enslaving as an active interface with an up link [ 662.269537][T23374] lo speed is unknown, defaulting to 1000 [ 662.507520][T23398] netlink: 'syz.2.5494': attribute type 1 has an invalid length. [ 662.654256][T23398] 8021q: adding VLAN 0 to HW filter on device bond14 [ 662.668590][T23411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5495'. [ 662.718621][T23398] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5494'. [ 662.727941][T23405] bond14: (slave veth3): Enslaving as an active interface with a down link [ 662.826782][T23408] bridge0: port 4(dummy0) entered disabled state [ 662.836119][T23408] dummy0: left allmulticast mode [ 662.842392][T23408] dummy0: left promiscuous mode [ 662.853605][T23408] bridge0: port 4(dummy0) entered disabled state [ 662.900759][T23408] bond14: (slave dummy0): making interface the new active one [ 662.910255][T23408] dummy0: entered promiscuous mode [ 662.916518][T23408] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 663.012447][T23411] vlan2: entered promiscuous mode [ 663.153957][T23398] bond14: (slave dummy0): Releasing active interface [ 663.169633][T23398] dummy0 (unregistering): left promiscuous mode [ 663.204192][T23427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5500'. [ 663.364591][T23420] syzkaller0: entered promiscuous mode [ 663.370213][T23420] syzkaller0: entered allmulticast mode [ 663.378589][T23432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5502'. [ 663.396027][T23432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5502'. [ 665.740993][T23494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5518'. [ 665.815803][T23498] netlink: 'syz.4.5519': attribute type 1 has an invalid length. [ 665.867009][T23498] bond17: entered promiscuous mode [ 665.885552][T23498] 8021q: adding VLAN 0 to HW filter on device bond17 [ 665.908108][T23498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5519'. [ 665.922318][T23498] bond17: entered allmulticast mode [ 665.959355][T23498] bond17: (slave bridge13): making interface the new active one [ 665.987797][T23498] bridge13: entered promiscuous mode [ 665.997678][T23498] bridge13: entered allmulticast mode [ 666.007223][T23498] bond17: (slave bridge13): Enslaving as an active interface with an up link [ 666.037815][T23510] team0: Caught tx_queue_len zero misconfig [ 666.460569][T23537] xt_CT: No such helper "pptp" [ 667.290215][T23564] netlink: 'syz.4.5537': attribute type 1 has an invalid length. [ 667.357400][T23564] bond18: entered promiscuous mode [ 667.371257][T23568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5537'. [ 667.393214][T23564] 8021q: adding VLAN 0 to HW filter on device bond18 [ 667.442200][T23568] bond18: entered allmulticast mode [ 667.508582][T23564] bond18: (slave bridge14): making interface the new active one [ 667.519151][T23564] bridge14: entered promiscuous mode [ 667.528376][T23564] bridge14: entered allmulticast mode [ 667.546465][T23564] bond18: (slave bridge14): Enslaving as an active interface with an up link [ 667.579698][T23570] netlink: 'syz.0.5538': attribute type 13 has an invalid length. [ 667.583237][T23554] nbd1: detected capacity change from 0 to 63 [ 667.603184][T23570] netlink: 'syz.0.5538': attribute type 17 has an invalid length. [ 667.847696][T23581] netlink: 'syz.4.5544': attribute type 9 has an invalid length. [ 667.893107][T14047] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 667.936984][ T5824] block nbd1: Receive control failed (result -104) [ 668.080375][T23585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5546'. [ 668.134038][T23585] vlan0: entered promiscuous mode [ 668.176152][T23593] netlink: 'syz.2.5549': attribute type 1 has an invalid length. [ 668.237273][T23597] xt_CT: No such helper "pptp" [ 668.253002][T23593] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5549'. [ 668.328671][T23601] netlink: 'syz.1.5550': attribute type 1 has an invalid length. [ 668.403084][T14047] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 668.447700][T23601] bond14: entered promiscuous mode [ 668.454645][T23601] 8021q: adding VLAN 0 to HW filter on device bond14 [ 668.471433][T23601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5550'. [ 668.481191][T23601] bond14: entered allmulticast mode [ 668.510526][T23601] bond14: (slave bridge11): making interface the new active one [ 668.518792][T23601] bridge11: entered promiscuous mode [ 668.524489][T23601] bridge11: entered allmulticast mode [ 668.547509][T23601] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 668.685765][ T237] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 668.952274][T23622] SET target dimension over the limit! [ 669.246013][T23638] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5560'. [ 669.324296][T23646] netlink: 'syz.0.5563': attribute type 1 has an invalid length. [ 669.407262][T23646] bond20: entered promiscuous mode [ 669.413678][T23646] 8021q: adding VLAN 0 to HW filter on device bond20 [ 669.422486][T23643] ip6tnl0: Caught tx_queue_len zero misconfig [ 669.450678][T23643] netlink: 'syz.3.5561': attribute type 4 has an invalid length. [ 669.493389][T23646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5563'. [ 669.514943][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5564'. [ 669.531313][T23646] bond20: entered allmulticast mode [ 669.558218][T23656] Cannot find map_set index 135 as target [ 669.617540][T23646] bond20: (slave bridge8): making interface the new active one [ 669.636818][T23646] bridge8: entered promiscuous mode [ 669.655514][T23646] bridge8: entered allmulticast mode [ 669.662921][T23646] bond20: (slave bridge8): Enslaving as an active interface with an up link [ 669.748948][ T9312] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 669.762262][ T9312] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 669.862508][T23671] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5569'. [ 670.140716][T14031] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 670.414940][T23690] batadv_slave_0: Caught tx_queue_len zero misconfig [ 670.852303][T23707] __nla_validate_parse: 7 callbacks suppressed [ 670.852325][T23707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5583'. [ 670.990279][T23710] netlink: 'syz.0.5584': attribute type 9 has an invalid length. [ 671.001615][ T31] INFO: task udevd:6906 blocked for more than 143 seconds. [ 671.012990][ T31] Not tainted syzkaller #0 [ 671.018003][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.040132][ T31] task:udevd state:D stack:22200 pid:6906 tgid:6906 ppid:5192 task_flags:0x400140 flags:0x00080002 [ 671.058835][ T31] Call Trace: [ 671.062176][ T31] [ 671.065912][ T31] __schedule+0x15dd/0x52d0 [ 671.070495][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 671.075997][ T31] ? __pfx___schedule+0x10/0x10 [ 671.080913][ T31] ? schedule+0x90/0x360 [ 671.085890][ T31] schedule+0x164/0x360 [ 671.091542][ T31] io_schedule+0x7f/0xd0 [ 671.097008][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 671.102367][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 671.112312][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 671.118199][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 671.124365][ T31] do_read_cache_folio+0x1ad/0x590 [ 671.129556][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 671.135772][ T31] read_part_sector+0xb6/0x2b0 [ 671.140673][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 671.147577][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 671.153471][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 671.159672][ T31] bdev_disk_changed+0x7ba/0x1550 [ 671.176635][ T31] ? bdev_open+0xe0/0xd30 [ 671.184537][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 671.195807][ T31] blkdev_get_whole+0x380/0x510 [ 671.206336][ T31] bdev_open+0x31e/0xd30 [ 671.221677][ T31] blkdev_open+0x470/0x610 [ 671.226304][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 671.231406][ T31] do_dentry_open+0x785/0x14e0 [ 671.242769][ T31] vfs_open+0x3b/0x340 [ 671.247018][ T31] ? path_openat+0x2df0/0x3860 [ 671.251839][ T31] path_openat+0x2e08/0x3860 [ 671.267272][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 671.277376][ T31] ? stack_depot_save_flags+0x33/0x810 [ 671.283094][ T31] ? __pfx_path_openat+0x10/0x10 [ 671.288288][ T31] ? __x64_sys_openat+0x138/0x170 [ 671.293653][ T31] ? do_syscall_64+0x14d/0xf80 [ 671.298573][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.304839][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 671.310087][ T31] do_file_open+0x23e/0x4a0 [ 671.315745][ T31] ? __pfx_do_file_open+0x10/0x10 [ 671.321015][ T31] ? _raw_spin_unlock+0x28/0x50 [ 671.326422][ T31] ? alloc_fd+0x64b/0x6c0 [ 671.330916][ T31] do_sys_openat2+0x113/0x200 [ 671.336403][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 671.342072][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 671.347724][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.353050][ T31] __x64_sys_openat+0x138/0x170 [ 671.358151][ T31] do_syscall_64+0x14d/0xf80 [ 671.363306][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.369626][ T31] ? clear_bhb_loop+0x40/0x90 [ 671.374972][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.381084][ T31] RIP: 0033:0x7f52e80a7407 [ 671.386089][ T31] RSP: 002b:00007ffcc8fc6880 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 671.395104][ T31] RAX: ffffffffffffffda RBX: 00007f52e876e880 RCX: 00007f52e80a7407 [ 671.403567][ T31] RDX: 00000000000a0800 RSI: 000055dea1e32820 RDI: ffffffffffffff9c [ 671.411758][ T31] RBP: 000055dea1e26910 R08: 0000000000000000 R09: 0000000000000000 [ 671.420556][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055dea1e43f10 [ 671.429198][ T31] R13: 000055dea1e34190 R14: 0000000000000000 R15: 000055dea1e43f10 [ 671.437914][ T31] [ 671.442357][T23714] netlink: 'syz.0.5584': attribute type 9 has an invalid length. [ 671.451082][ T31] [ 671.451082][ T31] Showing all locks held in the system: [ 671.459562][ T31] 1 lock held by khungtaskd/31: [ 671.469347][ T31] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 671.480101][ T31] 2 locks held by getty/5577: [ 671.485233][ T31] #0: ffff88803676d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 671.495769][ T31] #1: ffffc9000321e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 671.506437][ T31] 1 lock held by udevd/6906: [ 671.511132][ T31] #0: ffff8880265f8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 671.520979][ T31] 1 lock held by udevd/11687: [ 671.526738][ T31] #0: ffff88802a3bf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 671.536687][ T31] 3 locks held by syz.3.5581/23697: [ 671.541982][ T31] 2 locks held by syz.0.5584/23714: [ 671.548309][ T31] #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 671.564022][ T31] #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 671.575558][ T31] 1 lock held by syz.4.5585/23715: [ 671.580817][ T31] #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 671.590891][ T31] 1 lock held by syz.4.5585/23717: [ 671.596347][ T31] #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 671.606005][ T31] [ 671.629971][ T31] ============================================= [ 671.629971][ T31] [ 671.649689][ T31] NMI backtrace for cpu 0 [ 671.649712][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 671.649737][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 671.649751][ T31] Call Trace: [ 671.649761][ T31] [ 671.649771][ T31] dump_stack_lvl+0xe8/0x150 [ 671.649806][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 671.649916][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 671.649949][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 671.649978][ T31] sys_info+0x135/0x170 [ 671.650025][ T31] watchdog+0xfd9/0x1030 [ 671.650072][ T31] ? watchdog+0x21a/0x1030 [ 671.650113][ T31] kthread+0x388/0x470 [ 671.650146][ T31] ? __pfx_watchdog+0x10/0x10 [ 671.650183][ T31] ? __pfx_kthread+0x10/0x10 [ 671.650206][ T31] ret_from_fork+0x51e/0xb90 [ 671.650244][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 671.650271][ T31] ? __switch_to+0xc7d/0x1450 [ 671.650310][ T31] ? __pfx_kthread+0x10/0x10 [ 671.650333][ T31] ret_from_fork_asm+0x1a/0x30 [ 671.650383][ T31] [ 671.650392][ T31] Sending NMI from CPU 0 to CPUs 1: [ 671.760811][ C1] NMI backtrace for cpu 1 [ 671.760830][ C1] CPU: 1 UID: 0 PID: 14854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 671.760852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 671.760864][ C1] RIP: 0010:psi_group_change+0x10a/0x1050 [ 671.760903][ C1] Code: ff e8 1a 22 0f 0a 85 c0 48 be 00 00 00 00 00 fc ff df 0f 84 97 0a 00 00 49 8d 9e a0 00 00 00 48 89 d8 48 c1 e8 03 80 3c 30 00 <74> 12 48 89 df e8 9c 45 90 00 48 be 00 00 00 00 00 fc ff df 4c 8b [ 671.760920][ C1] RSP: 0018:ffffc90000a08ae8 EFLAGS: 00000046 [ 671.760937][ C1] RAX: 1ffffffff1cc41a0 RBX: ffffffff8e620d00 RCX: 0000000080010003 [ 671.760951][ C1] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffffffff8c27b500 [ 671.760965][ C1] RBP: 0000000000000000 R08: 0000009c68105a8f R09: 0000000000000001 [ 671.760977][ C1] R10: ffff888078015c10 R11: ffffed100f002b85 R12: 0000009c68105a8f [ 671.760991][ C1] R13: 0000000000000004 R14: ffffffff8e620c60 R15: ffffffff8e1da798 [ 671.761004][ C1] FS: 0000555572209500(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 671.761020][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 671.761032][ C1] CR2: 00007ffcc6becd60 CR3: 000000004bce0000 CR4: 00000000003526f0 [ 671.761049][ C1] Call Trace: [ 671.761058][ C1] [ 671.761073][ C1] ? rcu_read_lock_sched_held+0x33/0x70 [ 671.761104][ C1] psi_task_change+0x113/0x340 [ 671.761135][ C1] enqueue_task+0x33f/0x410 [ 671.761164][ C1] ttwu_do_activate+0x1cc/0x660 [ 671.761187][ C1] try_to_wake_up+0x724/0x1390 [ 671.761211][ C1] hrtimer_wakeup+0x4e/0x60 [ 671.761239][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 671.761265][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 671.761301][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 671.761325][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 671.761352][ C1] hrtimer_interrupt+0x42b/0x1010 [ 671.761386][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 671.761417][ C1] __sysvec_apic_timer_interrupt+0x102/0x460 [ 671.761446][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 671.761474][ C1] [ 671.761481][ C1] [ 671.761488][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 671.761508][ C1] RIP: 0010:xas_start+0x31a/0x770 [ 671.761533][ C1] Code: 08 4c 89 f7 e8 f7 86 83 f6 4d 8b 36 40 84 ed 74 71 4c 8d 63 fe 4c 89 e0 48 c1 e8 03 48 bd 00 00 00 00 00 fc ff df 0f b6 04 28 <84> c0 0f 85 de 03 00 00 45 0f b6 24 24 bf 40 00 00 00 44 89 e6 e8 [ 671.761549][ C1] RSP: 0018:ffffc90003be7848 EFLAGS: 00000a02 [ 671.761564][ C1] RAX: 0000000000000000 RBX: ffff8880562b2102 RCX: dffffc0000000000 [ 671.761578][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 671.761589][ C1] RBP: dffffc0000000000 R08: ffffffff8bacff40 R09: ffffffff8e75e420 [ 671.761610][ C1] R10: ffffc90003be7930 R11: fffff5200077cf29 R12: ffff8880562b2100 [ 671.761625][ C1] R13: ffffc90003be7928 R14: 0000000000000002 R15: 1ffff9200077cf25 [ 671.761642][ C1] ? xa_load+0x60/0x210 [ 671.761673][ C1] ? xas_start+0x2c1/0x770 [ 671.761699][ C1] xas_load+0x2c/0x5b0 [ 671.761726][ C1] ? xa_load+0x60/0x210 [ 671.761752][ C1] ? xa_load+0x60/0x210 [ 671.761779][ C1] xa_load+0x118/0x210 [ 671.761810][ C1] memcg_list_lru_alloc+0x14c/0x800 [ 671.761834][ C1] ? do_syscall_64+0x14d/0xf80 [ 671.761866][ C1] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 671.761894][ C1] ? __memcg_slab_post_alloc_hook+0x13b/0xa80 [ 671.761926][ C1] __memcg_slab_post_alloc_hook+0x312/0xa80 [ 671.761956][ C1] ? __memcg_slab_post_alloc_hook+0x13b/0xa80 [ 671.761991][ C1] ? shmem_alloc_inode+0x28/0x40 [ 671.762012][ C1] kmem_cache_alloc_lru_noprof+0x346/0x640 [ 671.762030][ C1] ? shmem_alloc_inode+0x28/0x40 [ 671.762049][ C1] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 671.762070][ C1] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 671.762090][ C1] shmem_alloc_inode+0x28/0x40 [ 671.762111][ C1] alloc_inode+0x6a/0x1b0 [ 671.762136][ C1] new_inode+0x22/0x170 [ 671.762165][ C1] shmem_get_inode+0x347/0xe60 [ 671.762190][ C1] shmem_mknod+0x191/0x360 [ 671.762215][ C1] shmem_mkdir+0x33/0x70 [ 671.762237][ C1] vfs_mkdir+0x413/0x630 [ 671.762262][ C1] filename_mkdirat+0x285/0x510 [ 671.762287][ C1] ? __pfx_filename_mkdirat+0x10/0x10 [ 671.762310][ C1] ? do_getname+0x151/0x250 [ 671.762335][ C1] __se_sys_mkdirat+0x35/0x150 [ 671.762358][ C1] do_syscall_64+0x14d/0xf80 [ 671.762384][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.762402][ C1] ? clear_bhb_loop+0x40/0x90 [ 671.762423][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.762442][ C1] RIP: 0033:0x7f98f2f9b607 [ 671.762458][ C1] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.762474][ C1] RSP: 002b:00007ffcc6bee4a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 671.762492][ C1] RAX: ffffffffffffffda RBX: 00007ffcc6bee500 RCX: 00007f98f2f9b607 [ 671.762507][ C1] RDX: 00000000000001ff RSI: 00007ffcc6bee500 RDI: 00000000ffffff9c [ 671.762519][ C1] RBP: 00007ffcc6bee4ec R08: 0000000000000003 R09: 00000000fffffffd [ 671.762531][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000214 [ 671.762542][ C1] R13: 00000000000927c0 R14: 00000000000a3cec R15: 00007ffcc6bee540 [ 671.762565][ C1] [ 671.786494][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 671.786565][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 671.786639][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 671.786690][ T31] Call Trace: [ 672.305009][ T31] [ 672.307970][ T31] vpanic+0x56c/0xa60 [ 672.311980][ T31] ? __pfx___schedule+0x10/0x10 [ 672.316862][ T31] ? __pfx_vpanic+0x10/0x10 [ 672.321410][ T31] panic+0xc5/0xd0 [ 672.325159][ T31] ? __pfx_panic+0x10/0x10 [ 672.329603][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 672.335002][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 672.341185][ T31] watchdog+0x1023/0x1030 [ 672.345575][ T31] ? watchdog+0x21a/0x1030 [ 672.350028][ T31] kthread+0x388/0x470 [ 672.354119][ T31] ? __pfx_watchdog+0x10/0x10 [ 672.358826][ T31] ? __pfx_kthread+0x10/0x10 [ 672.363439][ T31] ret_from_fork+0x51e/0xb90 [ 672.368070][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 672.373204][ T31] ? __switch_to+0xc7d/0x1450 [ 672.377906][ T31] ? __pfx_kthread+0x10/0x10 [ 672.382514][ T31] ret_from_fork_asm+0x1a/0x30 [ 672.387323][ T31] [ 672.390968][ T31] Kernel Offset: disabled [ 672.395297][ T31] Rebooting in 86400 seconds..