last executing test programs: 10.929868158s ago: executing program 0 (id=2711): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000006180)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @mcast1, 0xf9af}, 0x1c, 0x0}}], 0x1, 0x20000000) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000042000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f20000095efffffffffffffb6020000feffffff7b9af8ff00000000b6090000000000107baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700100800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500"/64], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079a0fffd000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x41) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) close(0x3) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r10, &(0x7f0000000000), 0x0}, 0x20) r11 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x0, 0x40800) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x14, r12, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80949e00", @ANYRES16=r12, @ANYBLOB="000327bd7000fcdbdf25060000000c000180060001000200000040000280080009000100000008000900ffff00000800080008000000080007000000008014000100e000000200000000000000000000000005000d0001000000080006000900000028000280080004000d00000014000100ac1414aa0000000000000000000000000800040009000000"], 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x24040044) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61124d000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x12}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp(0x2, 0x3, 0x2) 10.503402564s ago: executing program 0 (id=2717): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000400000001000000000000070000000003000000000000110200000058f694f7802a5e407300793747c6876c00000000060000c1000000005f00773e83b67782ed417372ca9dc9ae02589d9c969b185d120acf709530b8ed35d49fee0f676e5dd5d30c0d0703e40a1d0b40af8a19c63f4f4b0755dcc4f7bfd8e0f59d29c0a354f9ead614eca3bd061169f4c326049074c2e4b06a9ba0c740ae93c8bea890367b510cea989af4e82b15bce30b6be3b3228d1cf80760eff4d7dd765eff0ad8ac7000"/222], &(0x7f0000000300)=""/130, 0x48, 0x82, 0x1, 0x3806, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xffffff01, '\x00', r2, r3, 0x1, 0x4, 0x5}, 0x50) (async) r4 = socket(0x2, 0x3, 0xff) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000004e80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @loopback}}}], 0x20}}], 0x2, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) (async) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x4, &(0x7f0000000040)=[{0x4, 0x90, 0x5, 0x7ff}, {0x800, 0x3, 0x26, 0x5}, {0x9, 0x46, 0x0, 0x7}, {0x7, 0x6, 0x0, 0x80}]}) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) 9.598788497s ago: executing program 0 (id=2722): unshare(0x28000600) r0 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 8.582804237s ago: executing program 0 (id=2733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = getpid() socket$inet_icmp(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="015c022c80258612af0025bdf664"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x80) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="4e15e139bcfc392a41cbc6ffe038404e54754a8911181e0a3ae811b8ef2f858920760d5e573c8b68e52cac04810570cfdc1cc6b4efd0b5e01d"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket(0x2, 0x3, 0xff) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8}]}, 0x48}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="020afa09070000002abda000fddbdf2505001a00fe8000000000000000000000000000aaac1e010100000000000000000000e965de66d5a8"], 0x38}}, 0x20000010) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r10, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmmsg$inet(r7, &(0x7f0000004a80)=[{{&(0x7f0000000080)={0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x0, 0x34, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0x38}}], 0x1, 0x40048c0) 4.531027398s ago: executing program 2 (id=2746): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000002840)=[{&(0x7f0000000600)="b9", 0x1}], 0x1}, 0xfffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @local, 0x0}, &(0x7f0000000100)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$phonet(0x23, 0x2, 0x1) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r5, @ANYBLOB="000000000000000014011a80100102803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f"], 0x134}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@delqdisc={0x70, 0x25, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0x2}, {0x4, 0xc}, {0xfff5, 0x6}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xe1, 0x5, 0x77, 0x2, 0x1, 0xeff5, 0x2}}, {0x8, 0x2, [0x6d62, 0x530]}}, {{0x1c, 0x1, {0x6, 0xa, 0xdb9, 0x4, 0x0, 0x5, 0x1, 0x2}}, {0x8, 0x2, [0x7, 0xf470]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20040800) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002800)={'wg1\x00'}) socket(0x10, 0x3, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x33, 0x660f537e, 0x74}, 0x2c) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000080)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10000, 0x1, 0x1}}, 0x44) (rerun: 32) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async, rerun: 32) r8 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000780)={&(0x7f00000007c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x1000, 0x7fffbffe}, &(0x7f0000000680)=0x3, 0x0, 0x8b1a, 0x3, 0x8, 0x9, 0x7c, 0x4939}}], 0x58}, 0x0) 4.492769317s ago: executing program 1 (id=2747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xdc, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xb0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async, rerun: 64) close(r1) 4.491741153s ago: executing program 4 (id=2748): syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="8a75004c6e6770225334e4d4311b87644409b8f935a227ef0aee72deab11a759d1ddbfe5cb2d9fa04112d5ac6e5664c824a1189ed1f531cf452c8c7405ed562a432ecf7bd11519da5a1ff79b36ace0d86399dd9ae749621436111bb868d348be32f00affc844c62793a41b4318aeda82c95bea5b5fdeb27fef1619a0bd5b75db7098c973a0be9e08d86209061cb44c8895229aa3a7438e829df1eb08d30ebede25ef0f92f0447d41dc6a45f2d7d2a7cbb4321611bdd9f0fbc4", @ANYRES16=r0, @ANYBLOB="6c616e00000000000000a0ddfd000000000000000000900658d701e7b4dec4a95eb2bfc7d98d0e8f66982142c572a9afd811a3397bd4d66cd6624b0b85e7a86780a5ab830c1e9ed2e2"], 0x34}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000000) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x2, 0x3, 0xd, 0x82, 0x200, 0x3, 0xffff, 0x4}}) 4.194132962s ago: executing program 4 (id=2749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x3, 0x205, 0x7, 0x5, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x28, 0x19, 0x901, 0xfffffffe, 0x0, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x6, &(0x7f0000000300)=@raw=[@alu={0x7, 0x1, 0x2, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0xa, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x3}, @exit, @exit], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8575}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000340)={0x2c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001000}, 0x24004084) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000840)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e24, 0x3, 0x4e20, 0x0, 0xa, 0x80, 0xc0, 0x6, r2, r6}, {0x100000000, 0xaf, 0x1, 0x5, 0x6, 0x4, 0x5, 0x200}, {0x100, 0xff, 0x0, 0x8}, 0x2, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d5}, 0xa, @in6=@empty, 0x3504, 0x0, 0x0, 0x8, 0xfffffffa, 0x9, 0x6}}, 0xe8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r7, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9, 0x20804}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x1}]}}]}]}, 0x48}}, 0x40100d0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x7f, 0xd8a, {{0x2f, 0x4, 0x0, 0x4, 0xbc, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}, {[@noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xf8, [@dev={0xac, 0x14, 0x14, 0x43}, @loopback, @multicast1, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @multicast2]}, @end, @timestamp_addr={0x44, 0x14, 0xca, 0x1, 0x1, [{@rand_addr=0x9}, {@broadcast}]}, @cipso={0x86, 0x5a, 0x2, [{0x5, 0x8, "f75a42fafc46"}, {0x5, 0x2}, {0x5, 0x12, "66590a9a6060724fa7a51edbe61a8511"}, {0x1, 0x10, "0b153b1a57427ee9b0c4c6f6e2de"}, {0x1, 0x2}, {0x6, 0x9, "2e40757b9b2175"}, {0x7, 0x4, "0520"}, {0x0, 0x4, "ecc0"}, {0x2, 0x3, "16"}, {0x1, 0x12, "9b63c43293371bf2917eda0940328920"}]}, @generic={0x86, 0xf, "c322e43227c6cb888aeb1840eb"}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x801020}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004054}, 0x10000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r8, 0x8, 0xffffff67, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xa}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.945175184s ago: executing program 3 (id=2750): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x15, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x58, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_IFALIASn={0x4}, @IFLA_PHYS_SWITCH_ID={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8040) 3.795684703s ago: executing program 3 (id=2751): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x0, @remote, 0x4}, @in6={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80}], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x400000000010, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300100000fe8000000000000000000000000000aafe8000000000000010000000000000aa89010000000000003100c204b0"], 0x0) (async) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) (async) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) (async) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) connect$pptp(r4, &(0x7f0000000240)={0x18, 0x2, {0x2, @empty}}, 0x1e) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 3.728200554s ago: executing program 1 (id=2752): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8801) 3.663953223s ago: executing program 4 (id=2753): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x405c011, r0, 0x8ce3000) 3.603616467s ago: executing program 2 (id=2754): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x0, 0xfffffffd, 0x30, @mcast1, @local, 0x0, 0x0, 0x9}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000280)={'veth1_to_bond\x00', @ifru_map={0x1, 0x401, 0xf95, 0x0, 0x89, 0x5}}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020400000c00000000000000fddbdf25030005000000000002004e23ac1414aadc0000000000000002000100000000000000fb0300000000030006006c20000002004e22ffffffff000000000000000002000b00440000000600000000000000"], 0x60}, 0x1, 0x7}, 0x0) r3 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x22020600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket(0x10, 0x803, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) sendfile(r9, r8, &(0x7f00000000c0)=0x401, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) 3.603031554s ago: executing program 1 (id=2755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf810000000000000708"], 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r5, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e23aa65a588102fe6941283", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c000000ac141427000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000000200000000000000feffffffffffffff02000000fcffffff400000002abd700003350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080)=0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r8, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000380)="6819", 0x2}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0x2000c044) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.488403567s ago: executing program 4 (id=2756): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xd0ff, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.408378439s ago: executing program 4 (id=2757): ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000004c0)) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) r4 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@caif, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7ff, 0x1, [0x6]}, &(0x7f0000000180)=0xa) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={r5, 0x8, 0x30}, &(0x7f0000000240)=0xc) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0800080005"], 0xfdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x18000000000002a0, 0xe, 0xfffffffffffffea0, &(0x7f0000000140)="0400000000000000c12400000000", 0x0, 0x4, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x7b) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x10, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in=@rand_addr=0x64010102, 0x0, 0xfffd, 0x4e1e, 0x0, 0x2, 0x0, 0x80}, {0x2, 0xfffffffffffffff7, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x7ffffdff, 0x4000000006, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) socket$netlink(0x10, 0x3, 0xc) 2.878791381s ago: executing program 0 (id=2758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x4000}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000140), 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) 2.526225091s ago: executing program 3 (id=2759): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0) 2.446879323s ago: executing program 1 (id=2760): syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000000000000001050000001000000000000000000000030000000001"], 0x0, 0x53, 0x0, 0x1}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r1}, 0x14) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x44, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, {0x4}}]}]}, 0x7c}}, 0x4000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfee7, &(0x7f0000000140)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400c0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000300)=""/148, 0x94, 0x1) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.371811661s ago: executing program 2 (id=2761): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x7, 0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000020", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x8800) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="41000200010007", 0x7) 2.370060702s ago: executing program 4 (id=2762): socket(0x1d, 0x2, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd7000000000000500000014000a"], 0x28}, 0x1, 0x0, 0x0, 0x240484d0}, 0x84) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e62cc9d6d55bb059db7429b90ead76c7bc6f991535cb33d98700799414c63bfed5d7ecaa1c408f574b9ec1dd7309d2fa0f1089578c4b0efe00"/69, 0x45}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000001701000004000000fff9ffff00000000c8000000000000001701000002000000af00000059c885933c568ac2b5489390c2ce107ccdf6426c8255458f061cd832c1051322fa48211e255783fdbfe67c234391fe4ae89eef9b44e54911da9fc0972c157eff731acff8c695888e153c52ddd481b6e1453a31fa3c77fd457a12771e8ca3f98cd302302b6b446c4a2f93f689f61011ba76f7c3880205441fc56d06c14d4bf89e4d1058e246df02a175bf4c0e712bbe0045a79a0cb8f32ca54f303a8bcf8af998c3429a4362cc595e297c3ac950b752872d99cccd85529c807dd3d12ebf460000000000180000000000000017010000040000000500000000000000a80000000000000017010000020000009000000009bf75d86234e4ddd7f0c185ef690b1627647d42446f518af13fb0883a7944359a8b9ec6a6193a53ed364b71db3286af54ec67ab91c79dfd1f8b358d0ae0e610082f5545eb73a27c9377f5c1dc751fbf954e7ee3d7e75d46080d5006641a1105185d0bb0ea3f6ab8f273217678fa03db80de7dc26ca5824f2bac9c7ad6a1952bb7233d55b170ce3fd37cffff42a6cd760000000018000000000000001701000004000000070000000000000018000000000000001701000004000000090000000000000008010000000000001701000002000000ef000000a47265708d43fa51ddd53abd32ed2eb22e39a140341703a5376f90002cc001c1327ae116b9c557aaf60f9c1715a56d9899dc80b0f828143d20e198b6c90106b604d0fb084f0c2af8cb64f544f5e9868da6ef80719fc9cb3a837b627c427c249c8ed89fae4d28d8b7ce85fc015e1049fc4ad73bd05fece3d8a999c7fc9287217def5e53780c6305a579725e0a3ce3608e2298f18da49168a56386844b8de0ef1a498e76266b847336a9bde664e0ae21609c5c8a40eebc7d4b0e35056181586be161f25acf484edc3c07bb2158ed62fb8901482cfc451bfffbf1bce8d457841ab6d315b653368d89bfb4ecb803313b4600000000001800000000000000170100000400000086be000000000000180000000000000017010000030000000000000000000000180000000000000017010000030000000100000000000000800000000000000017010000020000006900000057a381a66f8bd2f46f46f29361d22bf3c82c174b5919030a3183f1fed16337f4d187e0586bcd2ec1d2d293f9627f48fad7b3f8377064d3799a8ef0360ba4c8d0745957031b16c8967afbd256a478339b26762fcf10f6eac6a4632873f799a46f6c7f37ced7b6738da5000000"], 0x3a0, 0x8800}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000680)="03d21a1af597002c3fb99d3bbfe8df8ca8c8dbdc16e5ec4abc4e90b556483e430f8ef9b4b31c3774de2d00b5c756134c0d56573f2dd447076d41f24c92f88b146c9d967448a656ca29753fc917f14d7399c697e55f175b75fb9c72550c881390ef6a1d395ed4097f2a388f6aae8831060fc0a41a79512c5b1c6b42ae51ae5940238e10f38bd5e7e7bfbd51758ac43b21d2ef45ffd1a57e53718940ebd54031ce1e0c866ffaedabbc2d6883131108289bfb10eff811a51e1ceb90395a2b06335931f313887de1b512108963ba90f8464cb5dd4b290e108939fa587cf0b8ac964708fed90444446f12d4", 0xe9}, {0x0}, {&(0x7f0000000f00)="0e04ef5db5966fb39cc2dbe88ea921fa6ed43336fdbe78997e8f5f543a159c55deceaf4f3156afc62058a80c52eb786e721681c57ea6e9bedcefb511b4b7c3eb46be1f9e4237111d131eab1683d632996cdde6c9fb8286103e32132079298be4f5e1efa17c0d97dc987b8833a3963a52eb94ebd462", 0x75}, {&(0x7f0000000f80)="720585dfd29f91769e4b72b413c62559a46be32fbac741ab5459b8ab22bc850a03dbc94f5c48d772a359a72cca9eff7768e80c262d1b7e0e30ce378e3c17c579c5716ce172e1f40eb3b3e9402653024f675c8c233e5af5baee1a7d073aeba83c12cd0be0ba8bb61590fa0bb0a2c9a476d6ee73f9e120fec7d229b360dbabefecf3ab25d09aac10d88ff9fe4a0ba90cbfd03429c85f83010f95605dcb50bd70179d9f95f50383412127ad8ed171bda7572626573a3151fb899f9a1d4005879eee092fe7a2c10508b0e25143817b45fdfd0ae9450c50e28b0bf2b4ff11ebd5309c3180bb428acc7c8864965325931274d484d8f8ab06", 0xf5}], 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x1f8, 0x20000810}, {0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="26237a9428cdc89546edd7dc1c1b7f9abdfa2e3f1a512e8eea46579a0fe211b5a75a89cc5f0d694aebabc7eb5c97cc50e40bacf264e32d33c0a32e1eb40a40aeb8a64fb60316943892e670dd5a52db4a2027cfcea6b1937be1bd36377cf15af9eb7482", 0x63}, {&(0x7f0000001240)="dd7dcb54df090679de128ca8bdc0f240f64338da12e337b5b660f5af7c77adcfba9829d07af5bdb5319a25284392f39aa053fc6bfa265d9c5357e9c1abfea18dc70a67ed", 0x44}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x110, 0x40014}], 0x3, 0x20048040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x891b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r6, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r2, @ANYRES64=r1], 0x63}, 0x1, 0x0, 0x0, 0x20000005}, 0x40046) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x40000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x4) 2.227107245s ago: executing program 3 (id=2763): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x7f}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0x8, 0xcf, "3268d1b0de7d035f637eb3c8f30323aae87987befffd3502e5cc5d6ddb28bae95eb46a9e8f676adbd08b32b2d29201101ef807588a2eb0b07b5f00be9368dcdd09850f6d7a216e6d203ffef6e1e0b71a9a1e0a4f0b5936b0d43b6b0f6d84963f0e5db0f2032bae5b58e06622ac11eec61260e538ed7a2bfd323567be3caa9035a401c39c1b32cb2036e24b3febaf4618175fc5155011f35197cc7145661ec5a4bc9fb225688278c54db8b7cd51924b0b4862582d9d95c5033f12947592e3631303ecaa582740f0213f7d955703ae83"}, 0xd7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6720000000000036000b000fff52004507000015300000d60600000ee6ff80bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.146188698s ago: executing program 2 (id=2764): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x70, 0x8001, 0x20000000, 0xb9d9, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840001020800000000000000000000000000000000000001180000000000000084000000070000000a"], 0x38}], 0x1, 0x0) 2.063584715s ago: executing program 3 (id=2765): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x10000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000380)={0x7bd, {{0x2, 0x4e21, @remote}}, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r6, 0x3}, &(0x7f00000000c0)=0x8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.680318936s ago: executing program 0 (id=2766): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x4000009, 0x4, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xf7, 0x2f, 0x0, @multicast2, @multicast2}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYBLOB="010000000000000024001280090001"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=""/8, 0x8}, 0x8000}], 0x1, 0x100, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0x98}) mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x300000e, 0x11, r8, 0x9cc21000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) recvmmsg(r5, &(0x7f0000003a40)=[{{&(0x7f0000000f80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001000), 0x0, &(0x7f0000001040)=""/100, 0x64}, 0x7}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001140)=""/146, 0x92}, {&(0x7f0000001200)=""/220, 0xdc}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/237, 0xed}, {&(0x7f0000001380)=""/84, 0x54}, {&(0x7f0000002c40)=""/66, 0x42}, {&(0x7f0000002cc0)=""/212, 0xd4}, {&(0x7f0000002dc0)=""/145, 0x91}, {&(0x7f0000002e80)=""/222, 0xde}], 0x9, &(0x7f0000003040)=""/129, 0x81}, 0x7}, {{&(0x7f0000003100)=@can, 0x80, &(0x7f0000003300)=[{&(0x7f0000003180)=""/101, 0x65}, {&(0x7f0000003200)=""/129, 0x81}, {&(0x7f00000032c0)=""/8, 0x8}], 0x3, &(0x7f0000003340)=""/95, 0x5f}, 0x1}, {{&(0x7f00000033c0)=@qipcrtr, 0x80, &(0x7f0000003480)=[{&(0x7f0000003440)=""/56, 0x38}], 0x1, &(0x7f00000034c0)=""/186, 0xba}, 0xfffffeff}, {{&(0x7f00000035c0)=@nfc, 0x80, &(0x7f0000003840)=[{&(0x7f0000003640)=""/193, 0xc1}, {&(0x7f0000003740)=""/197, 0xc5}], 0x2}, 0x5}, {{&(0x7f0000003880)=@nfc_llcp, 0x80, &(0x7f0000003980)=[{&(0x7f0000001300)=""/112, 0x70}], 0x1, &(0x7f00000039c0)=""/84, 0x54}}], 0x6, 0x40000100, &(0x7f0000003bc0)={0x77359400}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a4f0ff000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 803.618547ms ago: executing program 1 (id=2767): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xe4ff, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 674.525547ms ago: executing program 2 (id=2768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711032000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x34, 0x3, 0x4, 0x80000001, 0x1}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0x5}, &(0x7f0000000200)=0x8) 591.613624ms ago: executing program 3 (id=2769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xdc0, 0xea1, &(0x7f0000000100)="1b7b3fff0465a458", &(0x7f0000000300)=""/8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x10, 0x15, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0x8}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="13ed6726253ce421", 0x8}, {&(0x7f0000000680)="b62c1c7540fb291d2e7b8cc937c399ebd3d951b54379b4c4c98faa901389e5ae3d0ddcbd5dc6bcba356168726f4cf1df513a234049d3a2fd15785c9b950aee3c4d78da9a0ce6eb4424c5a53c19a855b9e6c9d15f8462cf9ec066f472250dc2b7a07251be53ae59015de1ecffa963873353edd408b787bc84b0933918851167a6dde52a743b9349ecb929f15eafe8d7460f8faf21cd2f2d998bb863897e86b3462979e9e38923ad813167785d18c830b85413161b8d863c18c41e1993158d68918ec1798ef596f20c577b755637bafbaaac8b51550fd49fa9fe6388fd", 0xdc}, {&(0x7f0000000780)="4b618c107e646c3331e3edb0", 0xc}, {&(0x7f00000007c0)="40710807971714a9e9fecbafcaa0fabe2d8cff0938d86153f21a25724a57e86db44ff8925fd963e76d3494fde70d6e9763a43dc52193b0a0885034429bee67e927e4b7762e59b26121b62749fe3371b72b39a8d25436c073715c6f8fb826baa0767eb31dd8f80b28204f5b29d7e755a0210934ae23c9ca27e859b2d5bf5ede9a692abcc7a61c16db95059a0ec7fb78c603780b228438486b8d74c8a37d8c44f8d1c5caefb397162ed28fe7e799e9f3ababa1c81f34a1fad6d89d556593fd4952cd7d2535717a4a3fd7825ae379fc10089f", 0xd1}, {&(0x7f00000008c0)="598dac89d6450700596743af7e252e9b2ab1f137166ac524b1acff09d0b0ff9e26247c4a2ed2f74e11f85c922a05613d2c80b757bf713bfb35c8f6ab30980771db604e63c84240346f02a6f7c9a2a4799b52cc5376239d398f0cd38bea72c29a89aece7f525ca7a262488646d01fbeb5259057ab8d136db4029deaa2132cdafc338c21f03ac66d938c625099dfa25844ca5c49adda9882ac74d9bef67c2caad09319f434454fcae7f30faaef8bf5e3856366427eebb2e95c66d3e7c349a737998503e3d296ca66028037476aa554b32e63ce0bea69a3ec253e12973235", 0xdd}, {&(0x7f00000009c0)="89c07e0273f6548c23b3914864926a997eb903c974980449d7b80a0c096eef77f3c529a340356446e2225f983bf2c3e4e51014690e87d94119df78ab565b0b581066453b24cf94b7836095d74fe040afc0f353aae3b98b5ad7907f10d9537f4a21b6a465d9f0d8b4584e90266384ac1d8d69e78a7c8c6059c8848f0e8957631e0790e8bf60ce9e1290c7c6ce3697fe14f098836d2950bf2f9fcb3d929131abce338afd8bdc", 0xa5}, {&(0x7f0000000a80)="f1796f2b131c34711448350bef0676383387207d26deac901d2caf3bc700", 0x1e}], 0x7}, 0x40) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_opts(r12, 0x0, 0xd, 0x0, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r13, 0x0, 0x2e, &(0x7f0000000340)={0x0, {{0x2, 0xfffe, @multicast1}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) sendfile(r6, r6, 0x0, 0x9) 586.937363ms ago: executing program 1 (id=2770): r0 = socket$inet6(0xa, 0x2, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="fdffffff0000000602ef3a59e8b42fa769158c8374e80000000000aa14bc4a4625ce321d62c69477e2cd6da5c22cb20e8edff75cd5f2d871ab1c6166701e5458cd809ba59eaff06a864b043c3316e047702efcc8db798ff84a523eee77d6fbe8c59babd34c9b11348d7ac8e4009f9214dcac0e95718817f97edda72977d392c71e0c4e4b070f43589e8cd072ac7c7c3cbeb7544a273d6af3595d1d93edbab54c3fcd5c0000859326264ca4d56900"/189, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in=@local, 0x0, 0x80, 0x7, 0x0, 0x0, 0xa0}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc, 0x15, {0x0, 0x100}}]}, 0x68}}, 0x4004040) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x7, 0x0, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r11 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NFNL_MSG_CTHELPER_NEW(r11, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r10}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6c) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x26}, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x800000}, {@rand_addr, 0x800}, {@multicast2}, {@loopback}, {@local, 0x10}, {@multicast1}]}]}}}}}}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20005) 0s ago: executing program 2 (id=2771): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x800, 0x1fd) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f0000", 0x2b}, {&(0x7f0000003280)="0000d9269d79000000000000455f1a88c3bd09", 0x13}], 0x2) kernel console output (not intermixed with test programs): : 24 bytes leftover after parsing attributes in process `syz.4.2083'. [ 404.143668][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 404.184477][T14854] ip6gre1: entered promiscuous mode [ 404.184504][T14854] ip6gre1: entered allmulticast mode [ 404.352066][T14866] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 404.569741][T14846] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.584716][T14875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.622835][T14867] ip6gre1: entered promiscuous mode [ 404.622861][T14867] ip6gre1: entered allmulticast mode [ 404.732287][ T147] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.732550][ T147] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.761436][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.833233][T14846] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.858123][T14891] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 404.954221][T14846] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.042860][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.483283][T14846] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.512138][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.555806][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2101'. [ 405.563633][ T7010] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.563891][ T7010] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.583810][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.589417][T14914] vlan2: entered allmulticast mode [ 405.589822][T14914] bridge_slave_0: entered allmulticast mode [ 405.590168][T14914] bridge0: port 1(vlan2) entered blocking state [ 405.597659][T14914] bridge0: port 1(vlan2) entered disabled state [ 405.617601][T14914] vlan2: entered promiscuous mode [ 405.617624][T14914] bridge_slave_0: entered promiscuous mode [ 405.912874][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.967687][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.171585][ T7010] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.171637][ T7010] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.171673][ T7010] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.171708][ T7010] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.179134][T14938] FAULT_INJECTION: forcing a failure. [ 406.179134][T14938] name failslab, interval 1, probability 0, space 0, times 1 [ 406.179170][T14938] CPU: 1 UID: 0 PID: 14938 Comm: syz.0.2109 Not tainted syzkaller #0 PREEMPT(full) [ 406.179193][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.179205][T14938] Call Trace: [ 406.179214][T14938] [ 406.179223][T14938] dump_stack_lvl+0xe8/0x150 [ 406.179259][T14938] should_fail_ex+0x410/0x560 [ 406.179396][T14938] should_failslab+0xa8/0x100 [ 406.179423][T14938] __kmalloc_cache_noprof+0xa3/0x600 [ 406.179443][T14938] ? __pfx___mutex_lock+0x10/0x10 [ 406.179491][T14938] ? genl_start+0x1c9/0x6d0 [ 406.179578][T14938] ? genl_start+0x1c9/0x6d0 [ 406.179609][T14938] genl_start+0x1c9/0x6d0 [ 406.179643][T14938] __netlink_dump_start+0x442/0x7b0 [ 406.179704][T14938] genl_family_rcv_msg_dumpit+0x213/0x310 [ 406.179733][T14938] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 406.179755][T14938] ? genl_get_cmd+0x82f/0x960 [ 406.179785][T14938] ? __pfx_genl_start+0x10/0x10 [ 406.179805][T14938] ? __pfx_genl_dumpit+0x10/0x10 [ 406.179826][T14938] ? __pfx_genl_done+0x10/0x10 [ 406.179852][T14938] ? __lock_acquire+0x747/0x2de0 [ 406.179895][T14938] genl_rcv_msg+0x5e1/0x7a0 [ 406.179928][T14938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.179950][T14938] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 406.180069][T14938] netlink_rcv_skb+0x226/0x4a0 [ 406.180100][T14938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.180124][T14938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.180173][T14938] ? down_read+0x2be/0x330 [ 406.180203][T14938] genl_rcv+0x28/0x40 [ 406.180224][T14938] netlink_unicast+0x7bd/0x940 [ 406.180265][T14938] netlink_sendmsg+0x813/0xb40 [ 406.180308][T14938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.180357][T14938] ? apparmor_socket_sendmsg+0x98/0x360 [ 406.180383][T14938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.180410][T14938] sock_sendmsg_nosec+0x13a/0x180 [ 406.180444][T14938] ____sys_sendmsg+0x54e/0x850 [ 406.180477][T14938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.180516][T14938] ? import_iovec+0x73/0xa0 [ 406.180594][T14938] ___sys_sendmsg+0x2a5/0x360 [ 406.180619][T14938] ? __lock_acquire+0x747/0x2de0 [ 406.180646][T14938] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.180715][T14938] ? __fget_files+0x2a/0x420 [ 406.180742][T14938] ? __fget_files+0x3a2/0x420 [ 406.180782][T14938] __x64_sys_sendmsg+0x1b1/0x290 [ 406.180812][T14938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.180865][T14938] do_syscall_64+0x166/0x520 [ 406.180887][T14938] ? trace_irq_disable+0x3b/0x140 [ 406.180907][T14938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.180929][T14938] ? clear_bhb_loop+0x70/0xc0 [ 406.180957][T14938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.180977][T14938] RIP: 0033:0x7fae9d39e159 [ 406.180997][T14938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.181014][T14938] RSP: 002b:00007fae9e1b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.181038][T14938] RAX: ffffffffffffffda RBX: 00007fae9d625fa0 RCX: 00007fae9d39e159 [ 406.181054][T14938] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 406.181067][T14938] RBP: 00007fae9e1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 406.181080][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.181093][T14938] R13: 00007fae9d626038 R14: 00007fae9d625fa0 R15: 00007ffe011fcb48 [ 406.181130][T14938] [ 406.221352][T14935] syzkaller0: entered promiscuous mode [ 406.221377][T14935] syzkaller0: entered allmulticast mode [ 406.518109][T14943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2111'. [ 406.760600][T14956] ip_tables: iptables: counters copy to user failed while replacing table [ 406.887474][T14963] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2115'. [ 407.213085][T14980] __nla_validate_parse: 1 callbacks suppressed [ 407.213110][T14980] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2122'. [ 407.838248][T14996] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2126'. [ 407.838523][T14996] netlink: 'syz.0.2126': attribute type 10 has an invalid length. [ 407.839982][T14996] syz_tun: entered promiscuous mode [ 407.859645][T14996] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 407.996358][T14999] ip_tables: iptables: counters copy to user failed while replacing table [ 408.065931][T15002] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 408.143052][T15004] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2132'. [ 408.265902][T15013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2134'. [ 408.626366][T15022] team0: Device batadv1 failed to change mtu [ 408.660091][ T147] IPVS: starting estimator thread 0... [ 408.741420][T15029] IPVS: using max 24 ests per chain, 57600 per kthread [ 409.918659][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 409.918684][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.662622][T15054] ip_tables: iptables: counters copy to user failed while replacing table [ 411.826352][T15028] IPVS: Error connecting to the multicast addr [ 411.989248][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989272][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989284][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989295][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989306][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989317][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989329][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989339][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989350][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989361][T15061] tc action pedit 'at' offset 5 out of bounds [ 411.989384][T15061] 0: reclassify loop, rule prio 0, protocol 800 [ 412.156885][T15057] lo speed is unknown, defaulting to 1000 [ 412.225495][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2146'. [ 412.724762][T15091] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 412.940105][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2151'. [ 412.962508][T15096] tipc: Enabling of bearer rejected, failed to enable media [ 413.044302][T15057] lo speed is unknown, defaulting to 1000 [ 413.060334][T15057] lo speed is unknown, defaulting to 1000 [ 413.229535][T15112] ip_tables: iptables: counters copy to user failed while replacing table [ 413.415541][T15100] lo speed is unknown, defaulting to 1000 [ 414.005828][T15101] lo speed is unknown, defaulting to 1000 [ 414.358962][T15140] FAULT_INJECTION: forcing a failure. [ 414.358962][T15140] name failslab, interval 1, probability 0, space 0, times 0 [ 414.358999][T15140] CPU: 1 UID: 0 PID: 15140 Comm: syz.4.2161 Not tainted syzkaller #0 PREEMPT(full) [ 414.359024][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.359037][T15140] Call Trace: [ 414.359045][T15140] [ 414.359055][T15140] dump_stack_lvl+0xe8/0x150 [ 414.359129][T15140] should_fail_ex+0x410/0x560 [ 414.359160][T15140] ? __alloc_skb+0x1db/0x7a0 [ 414.359250][T15140] should_failslab+0xa8/0x100 [ 414.359287][T15140] ? __alloc_skb+0x1db/0x7a0 [ 414.359308][T15140] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 414.359341][T15140] ? __alloc_skb+0x18d/0x7a0 [ 414.359365][T15140] ? __alloc_skb+0x1db/0x7a0 [ 414.359405][T15140] __alloc_skb+0x1db/0x7a0 [ 414.359435][T15140] netlink_dump+0x1e7/0xee0 [ 414.359480][T15140] ? __pfx_netlink_dump+0x10/0x10 [ 414.359526][T15140] ? genl_start+0x497/0x6d0 [ 414.359559][T15140] __netlink_dump_start+0x589/0x7b0 [ 414.359597][T15140] genl_family_rcv_msg_dumpit+0x213/0x310 [ 414.359627][T15140] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 414.359651][T15140] ? genl_get_cmd+0x82f/0x960 [ 414.359681][T15140] ? __pfx_genl_start+0x10/0x10 [ 414.359702][T15140] ? __pfx_genl_dumpit+0x10/0x10 [ 414.359722][T15140] ? __pfx_genl_done+0x10/0x10 [ 414.359748][T15140] ? __dev_queue_xmit+0x29b/0x3820 [ 414.359835][T15140] genl_rcv_msg+0x5e1/0x7a0 [ 414.359868][T15140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.359892][T15140] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 414.359941][T15140] netlink_rcv_skb+0x226/0x4a0 [ 414.359973][T15140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.359999][T15140] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.360049][T15140] ? down_read+0x2be/0x330 [ 414.360081][T15140] genl_rcv+0x28/0x40 [ 414.360102][T15140] netlink_unicast+0x7bd/0x940 [ 414.360144][T15140] netlink_sendmsg+0x813/0xb40 [ 414.360186][T15140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.360227][T15140] ? apparmor_socket_sendmsg+0x98/0x360 [ 414.360255][T15140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.360284][T15140] sock_sendmsg_nosec+0x13a/0x180 [ 414.360320][T15140] ____sys_sendmsg+0x54e/0x850 [ 414.360354][T15140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.360414][T15140] ? import_iovec+0x73/0xa0 [ 414.360447][T15140] ___sys_sendmsg+0x2a5/0x360 [ 414.360473][T15140] ? __lock_acquire+0x747/0x2de0 [ 414.360502][T15140] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.360574][T15140] ? __fget_files+0x2a/0x420 [ 414.360603][T15140] ? __fget_files+0x3a2/0x420 [ 414.360645][T15140] __x64_sys_sendmsg+0x1b1/0x290 [ 414.360677][T15140] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.360731][T15140] do_syscall_64+0x166/0x520 [ 414.360754][T15140] ? trace_irq_disable+0x3b/0x140 [ 414.360775][T15140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.360797][T15140] ? clear_bhb_loop+0x70/0xc0 [ 414.360825][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.360846][T15140] RIP: 0033:0x7f74cd19e159 [ 414.360867][T15140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.360883][T15140] RSP: 002b:00007f74ce042028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.360907][T15140] RAX: ffffffffffffffda RBX: 00007f74cd425fa0 RCX: 00007f74cd19e159 [ 414.360922][T15140] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 414.360936][T15140] RBP: 00007f74ce042090 R08: 0000000000000000 R09: 0000000000000000 [ 414.360949][T15140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.360962][T15140] R13: 00007f74cd426038 R14: 00007f74cd425fa0 R15: 00007ffce15ba848 [ 414.360999][T15140] [ 414.464684][T15101] lo speed is unknown, defaulting to 1000 [ 414.497032][T15100] lo speed is unknown, defaulting to 1000 [ 414.522476][T15101] lo speed is unknown, defaulting to 1000 [ 414.764009][T15142] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2162'. [ 414.765868][T15142] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2162'. [ 414.890703][T15100] lo speed is unknown, defaulting to 1000 [ 415.360801][T15156] ip_tables: iptables: counters copy to user failed while replacing table [ 415.528556][T15158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2166'. [ 415.669899][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 415.735116][T15165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2166'. [ 416.179873][T15180] xt_recent: Unsupported userspace flags (000000c5) [ 416.311919][T15182] netlink: 'syz.1.2171': attribute type 2 has an invalid length. [ 416.530145][T15188] FAULT_INJECTION: forcing a failure. [ 416.530145][T15188] name failslab, interval 1, probability 0, space 0, times 0 [ 416.530183][T15188] CPU: 0 UID: 0 PID: 15188 Comm: syz.2.2172 Not tainted syzkaller #0 PREEMPT(full) [ 416.530207][T15188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.530220][T15188] Call Trace: [ 416.530229][T15188] [ 416.530237][T15188] dump_stack_lvl+0xe8/0x150 [ 416.530283][T15188] should_fail_ex+0x410/0x560 [ 416.530314][T15188] should_failslab+0xa8/0x100 [ 416.530340][T15188] ? skb_clone+0x212/0x3a0 [ 416.530371][T15188] kmem_cache_alloc_noprof+0xa1/0x600 [ 416.530406][T15188] ? skb_clone+0x212/0x3a0 [ 416.530439][T15188] skb_clone+0x212/0x3a0 [ 416.530471][T15188] __netlink_deliver_tap+0x413/0x860 [ 416.530514][T15188] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.530545][T15188] netlink_deliver_tap+0x19c/0x1b0 [ 416.530577][T15188] netlink_dump+0x95b/0xee0 [ 416.530619][T15188] ? __pfx_netlink_dump+0x10/0x10 [ 416.530664][T15188] ? genl_start+0x497/0x6d0 [ 416.530696][T15188] __netlink_dump_start+0x589/0x7b0 [ 416.530732][T15188] genl_family_rcv_msg_dumpit+0x213/0x310 [ 416.530762][T15188] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 416.530785][T15188] ? genl_get_cmd+0x82f/0x960 [ 416.530814][T15188] ? __pfx_genl_start+0x10/0x10 [ 416.530834][T15188] ? __pfx_genl_dumpit+0x10/0x10 [ 416.530855][T15188] ? __pfx_genl_done+0x10/0x10 [ 416.530879][T15188] ? __dev_queue_xmit+0x29b/0x3820 [ 416.530919][T15188] genl_rcv_msg+0x5e1/0x7a0 [ 416.530950][T15188] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.530973][T15188] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 416.531022][T15188] netlink_rcv_skb+0x226/0x4a0 [ 416.531052][T15188] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.531076][T15188] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.531124][T15188] ? down_read+0x2be/0x330 [ 416.531154][T15188] genl_rcv+0x28/0x40 [ 416.531176][T15188] netlink_unicast+0x7bd/0x940 [ 416.531217][T15188] netlink_sendmsg+0x813/0xb40 [ 416.531267][T15188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.531307][T15188] ? apparmor_socket_sendmsg+0x98/0x360 [ 416.531334][T15188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.531362][T15188] sock_sendmsg_nosec+0x13a/0x180 [ 416.531398][T15188] ____sys_sendmsg+0x54e/0x850 [ 416.531432][T15188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.531470][T15188] ? import_iovec+0x73/0xa0 [ 416.531501][T15188] ___sys_sendmsg+0x2a5/0x360 [ 416.531526][T15188] ? __lock_acquire+0x747/0x2de0 [ 416.531555][T15188] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.531626][T15188] ? __fget_files+0x2a/0x420 [ 416.531653][T15188] ? __fget_files+0x3a2/0x420 [ 416.531692][T15188] __x64_sys_sendmsg+0x1b1/0x290 [ 416.531723][T15188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.531775][T15188] do_syscall_64+0x166/0x520 [ 416.531797][T15188] ? trace_irq_disable+0x3b/0x140 [ 416.531818][T15188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.531840][T15188] ? clear_bhb_loop+0x70/0xc0 [ 416.531867][T15188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.531887][T15188] RIP: 0033:0x7f7f2079e159 [ 416.531909][T15188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.531926][T15188] RSP: 002b:00007f7f21690028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.531951][T15188] RAX: ffffffffffffffda RBX: 00007f7f20a25fa0 RCX: 00007f7f2079e159 [ 416.531966][T15188] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 416.531980][T15188] RBP: 00007f7f21690090 R08: 0000000000000000 R09: 0000000000000000 [ 416.531992][T15188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.532005][T15188] R13: 00007f7f20a26038 R14: 00007f7f20a25fa0 R15: 00007ffdcb142be8 [ 416.532042][T15188] [ 417.101333][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2174'. [ 417.137741][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 417.191116][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.279435][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'. [ 417.472773][T15208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.500847][T15205] syzkaller0: entered promiscuous mode [ 417.502810][T15205] syzkaller0: entered allmulticast mode [ 417.714131][T15216] ip_tables: iptables: counters copy to user failed while replacing table [ 417.840176][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2178'. [ 417.917495][T15218] vlan3: entered allmulticast mode [ 417.917520][T15218] bridge4: entered allmulticast mode [ 417.933790][T15218] bridge4: port 1(erspan0) entered blocking state [ 417.934209][T15218] bridge4: port 1(erspan0) entered disabled state [ 417.934384][T15218] erspan0: entered allmulticast mode [ 417.939813][T15218] erspan0: entered promiscuous mode [ 417.969344][T15218] bridge4: port 1(erspan0) entered blocking state [ 417.969485][T15218] bridge4: port 1(erspan0) entered forwarding state [ 418.005852][T15223] bridge4: port 1(erspan0) entered disabled state [ 418.056642][T15228] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2179'. [ 418.104173][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'. [ 418.384007][T15237] FAULT_INJECTION: forcing a failure. [ 418.384007][T15237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.384044][T15237] CPU: 0 UID: 0 PID: 15237 Comm: syz.3.2183 Not tainted syzkaller #0 PREEMPT(full) [ 418.384074][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.384112][T15237] Call Trace: [ 418.384120][T15237] [ 418.384130][T15237] dump_stack_lvl+0xe8/0x150 [ 418.384167][T15237] should_fail_ex+0x410/0x560 [ 418.384198][T15237] _copy_to_user+0x31/0xb0 [ 418.384294][T15237] simple_read_from_buffer+0xe1/0x170 [ 418.384330][T15237] proc_fail_nth_read+0x1bb/0x230 [ 418.384370][T15237] ? common_file_perm+0x20e/0x2b0 [ 418.384398][T15237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.384438][T15237] ? rw_verify_area+0x24a/0x4c0 [ 418.384470][T15237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.384501][T15237] vfs_read+0x213/0xa80 [ 418.384546][T15237] ? __pfx___mutex_lock+0x10/0x10 [ 418.384572][T15237] ? __pfx_vfs_read+0x10/0x10 [ 418.384603][T15237] ? __fget_files+0x2a/0x420 [ 418.384637][T15237] ? __fget_files+0x3a2/0x420 [ 418.384663][T15237] ? __fget_files+0x2a/0x420 [ 418.384702][T15237] ksys_read+0x150/0x270 [ 418.384743][T15237] ? __pfx_ksys_read+0x10/0x10 [ 418.384786][T15237] do_syscall_64+0x166/0x520 [ 418.384808][T15237] ? trace_irq_disable+0x3b/0x140 [ 418.384828][T15237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.384850][T15237] ? clear_bhb_loop+0x70/0xc0 [ 418.384876][T15237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.384898][T15237] RIP: 0033:0x7f398135e98e [ 418.384918][T15237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.384935][T15237] RSP: 002b:00007f39822aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.384960][T15237] RAX: ffffffffffffffda RBX: 00007f39822af6c0 RCX: 00007f398135e98e [ 418.384975][T15237] RDX: 000000000000000f RSI: 00007f39822af0a0 RDI: 0000000000000004 [ 418.384988][T15237] RBP: 00007f39822af090 R08: 0000000000000000 R09: 0000000000000000 [ 418.385001][T15237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.385013][T15237] R13: 00007f3981626038 R14: 00007f3981625fa0 R15: 00007ffdefcf90c8 [ 418.385049][T15237] [ 418.472973][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.916312][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 418.921030][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 419.253509][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2188'. [ 419.290103][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2186'. [ 419.385398][T15239] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.386222][T15239] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.450432][T15275] ip_tables: iptables: counters copy to user failed while replacing table [ 419.965400][T15239] dummy0: left allmulticast mode [ 420.303401][ T10] lo speed is unknown, defaulting to 1000 [ 420.303430][ T10] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 420.310828][T15256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.332419][ T1267] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.332454][ T1267] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 47344 - 0 [ 420.332495][ T1267] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.332518][ T1267] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 47344 - 0 [ 420.332550][ T1267] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.332573][ T1267] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 47344 - 0 [ 420.332605][ T1267] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.332628][ T1267] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 47344 - 0 [ 420.723005][T15297] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2194'. [ 420.723178][T15297] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2194'. [ 420.843214][T15308] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 421.533407][T15333] bond0 (unregistering): Released all slaves [ 422.041433][T15351] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 422.154880][T15351] bond12: entered promiscuous mode [ 422.162241][T15351] 8021q: adding VLAN 0 to HW filter on device bond12 [ 422.289405][T15351] vlan0: entered allmulticast mode [ 422.289432][T15351] bond12: entered allmulticast mode [ 422.308421][T15361] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 422.337628][T15361] bond9: entered promiscuous mode [ 422.338101][T15361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 422.427823][T15351] bond12: (slave bridge4): making interface the new active one [ 422.427852][T15351] bridge4: entered promiscuous mode [ 422.428086][T15351] bridge4: entered allmulticast mode [ 422.439856][T15351] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 423.395998][T15395] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 423.396019][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.3.2219 Not tainted syzkaller #0 PREEMPT(full) [ 423.396045][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.396058][T15395] Call Trace: [ 423.396068][T15395] [ 423.396078][T15395] dump_stack_lvl+0xe8/0x150 [ 423.396119][T15395] sysfs_warn_dup+0x8e/0xa0 [ 423.396199][T15395] sysfs_do_create_link_sd+0xc0/0x110 [ 423.396240][T15395] device_add_class_symlinks+0x1cf/0x240 [ 423.396344][T15395] device_add+0x467/0xb80 [ 423.396372][T15395] wiphy_register+0x1fc8/0x2ff0 [ 423.396469][T15395] ? __pfx_wiphy_register+0x10/0x10 [ 423.396502][T15395] ? __pfx_netdev_run_todo+0x10/0x10 [ 423.396556][T15395] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 423.396632][T15395] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 423.396737][T15395] ieee80211_register_hw+0x3d3d/0x4a50 [ 423.396804][T15395] ? ieee80211_register_hw+0x1a21/0x4a50 [ 423.396862][T15395] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 423.396893][T15395] ? __asan_memset+0x22/0x50 [ 423.396928][T15395] ? __hrtimer_setup+0x1b7/0x260 [ 423.396957][T15395] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 423.397047][T15395] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 423.397108][T15395] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 423.397130][T15395] ? kstrndup+0xbd/0x160 [ 423.397172][T15395] ? kstrndup+0xbd/0x160 [ 423.397196][T15395] hwsim_new_radio_nl+0xd8b/0xf90 [ 423.397239][T15395] genl_family_rcv_msg_doit+0x233/0x340 [ 423.397273][T15395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 423.397314][T15395] ? bpf_lsm_capable+0x9/0x20 [ 423.397333][T15395] ? security_capable+0x7e/0x2c0 [ 423.397403][T15395] genl_rcv_msg+0x614/0x7a0 [ 423.397439][T15395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.397463][T15395] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 423.397508][T15395] netlink_rcv_skb+0x226/0x4a0 [ 423.397541][T15395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.397568][T15395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.397619][T15395] ? down_read+0x2be/0x330 [ 423.397653][T15395] genl_rcv+0x28/0x40 [ 423.397676][T15395] netlink_unicast+0x7bd/0x940 [ 423.397720][T15395] netlink_sendmsg+0x813/0xb40 [ 423.397790][T15395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.397834][T15395] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.397863][T15395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.397892][T15395] sock_sendmsg_nosec+0x13a/0x180 [ 423.397931][T15395] ____sys_sendmsg+0x54e/0x850 [ 423.397967][T15395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.398008][T15395] ? import_iovec+0x73/0xa0 [ 423.398042][T15395] ___sys_sendmsg+0x2a5/0x360 [ 423.398068][T15395] ? __lock_acquire+0x747/0x2de0 [ 423.398098][T15395] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.398132][T15395] ? futex_wait+0x2a2/0x390 [ 423.398219][T15395] ? __fget_files+0x2a/0x420 [ 423.398249][T15395] ? __fget_files+0x3a2/0x420 [ 423.398292][T15395] __x64_sys_sendmsg+0x1b1/0x290 [ 423.398324][T15395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.398380][T15395] do_syscall_64+0x166/0x520 [ 423.398404][T15395] ? trace_irq_disable+0x3b/0x140 [ 423.398425][T15395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.398448][T15395] ? clear_bhb_loop+0x70/0xc0 [ 423.398476][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.398498][T15395] RIP: 0033:0x7f398139e159 [ 423.398521][T15395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.398541][T15395] RSP: 002b:00007f398226d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.398567][T15395] RAX: ffffffffffffffda RBX: 00007f3981626180 RCX: 00007f398139e159 [ 423.398584][T15395] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000a [ 423.398599][T15395] RBP: 00007f398143503b R08: 0000000000000000 R09: 0000000000000000 [ 423.398612][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.398625][T15395] R13: 00007f3981626218 R14: 00007f3981626180 R15: 00007ffdefcf90c8 [ 423.398664][T15395] [ 424.123783][T15408] netlink: 'syz.4.2225': attribute type 1 has an invalid length. [ 424.123817][T15408] __nla_validate_parse: 64 callbacks suppressed [ 424.123831][T15408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2225'. [ 424.231424][ T11] block nbd3: Possible stuck request ffff88802740e000: control (read@0,1024B). Runtime 90 seconds [ 424.231465][ T11] block nbd3: Possible stuck request ffff88802740e1c0: control (read@1024,1024B). Runtime 90 seconds [ 424.231488][ T11] block nbd3: Possible stuck request ffff88802740e380: control (read@2048,1024B). Runtime 90 seconds [ 424.231512][ T11] block nbd3: Possible stuck request ffff88802740e540: control (read@3072,1024B). Runtime 90 seconds [ 424.231553][T14594] block nbd5: Possible stuck request ffff888027490000: control (read@0,4096B). Runtime 90 seconds [ 424.233402][ T1971] block nbd2: Possible stuck request ffff888027397000: control (read@0,1024B). Runtime 90 seconds [ 424.234166][T14591] block nbd9: Possible stuck request ffff888027655080: control (read@0,1024B). Runtime 90 seconds [ 424.234205][T14591] block nbd9: Possible stuck request ffff888027655240: control (read@1024,1024B). Runtime 90 seconds [ 424.234233][T14591] block nbd9: Possible stuck request ffff888027655400: control (read@2048,1024B). Runtime 90 seconds [ 424.234260][T14591] block nbd9: Possible stuck request ffff8880276555c0: control (read@3072,1024B). Runtime 90 seconds [ 424.234326][T13549] block nbd1: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 90 seconds [ 424.234358][T13549] block nbd1: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 90 seconds [ 424.234385][T13549] block nbd1: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 90 seconds [ 424.234412][T13549] block nbd1: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 90 seconds [ 424.235288][ T1971] block nbd2: Possible stuck request ffff8880273971c0: control (read@1024,1024B). Runtime 90 seconds [ 424.235329][ T1971] block nbd2: Possible stuck request ffff888027397380: control (read@2048,1024B). Runtime 90 seconds [ 424.235356][ T1971] block nbd2: Possible stuck request ffff888027397540: control (read@3072,1024B). Runtime 90 seconds [ 424.235576][ T1971] block nbd4: Possible stuck request ffff888027445080: control (read@0,1024B). Runtime 90 seconds [ 424.235609][ T1971] block nbd4: Possible stuck request ffff888027445240: control (read@1024,1024B). Runtime 90 seconds [ 424.235653][ T1971] block nbd4: Possible stuck request ffff888027445400: control (read@2048,1024B). Runtime 90 seconds [ 424.235680][ T1971] block nbd4: Possible stuck request ffff8880274455c0: control (read@3072,1024B). Runtime 90 seconds [ 424.871396][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 424.872228][T14593] block nbd12: Possible stuck request ffff888027755080: control (read@0,1024B). Runtime 90 seconds [ 424.872272][T14593] block nbd12: Possible stuck request ffff888027755240: control (read@1024,1024B). Runtime 90 seconds [ 424.872318][T14593] block nbd12: Possible stuck request ffff888027755400: control (read@2048,1024B). Runtime 90 seconds [ 424.872346][T14593] block nbd12: Possible stuck request ffff8880277555c0: control (read@3072,1024B). Runtime 90 seconds [ 424.872395][T14592] block nbd6: Possible stuck request ffff8880274ce000: control (read@0,1024B). Runtime 90 seconds [ 424.872427][T14592] block nbd6: Possible stuck request ffff8880274ce1c0: control (read@1024,1024B). Runtime 90 seconds [ 424.872455][T14592] block nbd6: Possible stuck request ffff8880274ce380: control (read@2048,1024B). Runtime 90 seconds [ 424.872482][T14592] block nbd6: Possible stuck request ffff8880274ce540: control (read@3072,1024B). Runtime 90 seconds [ 424.872529][ T1997] block nbd8: Possible stuck request ffff8880275f5080: control (read@0,1024B). Runtime 90 seconds [ 424.872560][ T1997] block nbd8: Possible stuck request ffff8880275f5240: control (read@1024,1024B). Runtime 90 seconds [ 424.872589][ T1997] block nbd8: Possible stuck request ffff8880275f5400: control (read@2048,1024B). Runtime 90 seconds [ 424.872617][ T1997] block nbd8: Possible stuck request ffff8880275f55c0: control (read@3072,1024B). Runtime 90 seconds [ 424.872663][T13550] block nbd7: Possible stuck request ffff888027577000: control (read@0,1024B). Runtime 90 seconds [ 424.872696][T13550] block nbd7: Possible stuck request ffff8880275771c0: control (read@1024,1024B). Runtime 90 seconds [ 424.872723][T13550] block nbd7: Possible stuck request ffff888027577380: control (read@2048,1024B). Runtime 90 seconds [ 424.872751][T13550] block nbd7: Possible stuck request ffff888027577540: control (read@3072,1024B). Runtime 90 seconds [ 424.872800][ T11] block nbd10: Possible stuck request ffff888027685080: control (read@0,1024B). Runtime 90 seconds [ 424.872840][ T11] block nbd10: Possible stuck request ffff888027685240: control (read@1024,1024B). Runtime 90 seconds [ 424.872868][ T11] block nbd10: Possible stuck request ffff888027685400: control (read@2048,1024B). Runtime 90 seconds [ 424.872895][ T11] block nbd10: Possible stuck request ffff8880276855c0: control (read@3072,1024B). Runtime 90 seconds [ 424.872948][T14594] block nbd11: Possible stuck request ffff8880276a7000: control (read@0,1024B). Runtime 90 seconds [ 424.872980][T14594] block nbd11: Possible stuck request ffff8880276a71c0: control (read@1024,1024B). Runtime 90 seconds [ 424.873009][T14594] block nbd11: Possible stuck request ffff8880276a7380: control (read@2048,1024B). Runtime 90 seconds [ 424.873036][T14594] block nbd11: Possible stuck request ffff8880276a7540: control (read@3072,1024B). Runtime 90 seconds [ 425.085659][T15435] syzkaller0: entered promiscuous mode [ 425.085682][T15435] syzkaller0: entered allmulticast mode [ 425.509866][T15440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.568091][T15455] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 425.646449][T15451] tipc: Enabled bearer , priority 0 [ 425.869335][T15451] syzkaller0: entered promiscuous mode [ 425.869364][T15451] syzkaller0: entered allmulticast mode [ 425.875001][T15451] tipc: Resetting bearer [ 425.969782][T15475] ip_tables: iptables: counters copy to user failed while replacing table [ 426.148600][ T7009] tipc: Subscription rejected, illegal request [ 426.245062][T15449] tipc: Resetting bearer [ 427.086202][T15531] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2247'. [ 427.086798][T15531] nbd: illegal input index 65508 [ 429.339000][T15449] tipc: Disabling bearer [ 429.347537][T15499] veth0: entered promiscuous mode [ 429.370853][T15522] macsec0: entered promiscuous mode [ 429.371085][T15522] hsr0: entered promiscuous mode [ 429.373447][T15522] hsr0: left promiscuous mode [ 429.475226][T15523] syzkaller0: entered promiscuous mode [ 429.475257][T15523] syzkaller0: entered allmulticast mode [ 429.477250][T15499] veth0: left promiscuous mode [ 429.699475][T15543] ip_tables: iptables: counters copy to user failed while replacing table [ 433.081908][ T4981] udevd[4981]: worker [6880] /devices/virtual/block/nbd1 is taking a long time [ 433.082009][ T4981] udevd[4981]: worker [12554] /devices/virtual/block/nbd8 is taking a long time [ 433.082069][ T4981] udevd[4981]: worker [12564] /devices/virtual/block/nbd10 is taking a long time [ 433.082129][ T4981] udevd[4981]: worker [6847] /devices/virtual/block/nbd2 is taking a long time [ 433.082172][ T4981] udevd[4981]: worker [12576] /devices/virtual/block/nbd12 is taking a long time [ 433.082214][ T4981] udevd[4981]: worker [6825] /devices/virtual/block/nbd3 is taking a long time [ 433.082271][ T4981] udevd[4981]: worker [12559] /devices/virtual/block/nbd9 is taking a long time [ 433.082313][ T4981] udevd[4981]: worker [8856] /devices/virtual/block/nbd4 is taking a long time [ 433.082355][ T4981] udevd[4981]: worker [12552] /devices/virtual/block/nbd7 is taking a long time [ 433.082397][ T4981] udevd[4981]: worker [8461] /devices/virtual/block/nbd5 is taking a long time [ 433.197497][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.201290][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 433.302895][T15536] bond11: (slave veth0_to_bond): Releasing active interface [ 433.302922][T15536] bond11: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 433.603730][T15572] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2257'. [ 433.604088][T15572] 0: renamed from hsr0 (while UP) [ 433.612893][T15572] 0: entered allmulticast mode [ 433.612919][T15572] hsr_slave_0: entered allmulticast mode [ 433.612937][T15572] hsr_slave_1: entered allmulticast mode [ 433.613691][T15572] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 433.775055][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2261'. [ 433.875544][T15582] ip_tables: iptables: counters copy to user failed while replacing table [ 435.143907][T15604] netlink: 'syz.4.2266': attribute type 10 has an invalid length. [ 435.168241][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2268'. [ 435.227449][T15607] syzkaller0: entered promiscuous mode [ 435.227477][T15607] syzkaller0: entered allmulticast mode [ 435.236393][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 435.236416][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 435.622206][T15625] ip_tables: iptables: counters copy to user failed while replacing table [ 435.768887][T15629] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 435.801464][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2272'. [ 435.801493][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 436.038387][T15635] syzkaller1: entered promiscuous mode [ 436.038413][T15635] syzkaller1: entered allmulticast mode [ 436.059577][T15645] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2276'. [ 436.320496][T15652] lo speed is unknown, defaulting to 1000 [ 436.391337][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.432952][T15656] ipvlan2: entered promiscuous mode [ 436.896108][T15663] tipc: Enabled bearer , priority 0 [ 436.944812][T15662] tipc: Disabling bearer [ 437.210559][T15652] lo speed is unknown, defaulting to 1000 [ 437.252728][T15652] lo speed is unknown, defaulting to 1000 [ 437.466031][T15684] netlink: 'syz.1.2285': attribute type 39 has an invalid length. [ 437.557789][T15691] sctp: [Deprecated]: syz.2.2288 (pid 15691) Use of int in max_burst socket option. [ 437.557789][T15691] Use struct sctp_assoc_value instead [ 438.007527][T15701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 438.661194][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 438.998993][T15722] lo speed is unknown, defaulting to 1000 [ 439.018684][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2301'. [ 439.039930][T15733] netlink: 'syz.2.2301': attribute type 4 has an invalid length. [ 439.039955][T15733] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2301'. [ 439.071817][T15735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2298'. [ 439.071849][T15735] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2298'. [ 439.071866][T15735] netlink: 'syz.3.2298': attribute type 5 has an invalid length. [ 439.071880][T15735] netlink: 'syz.3.2298': attribute type 6 has an invalid length. [ 439.071894][T15735] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2298'. [ 439.557186][T15730] lo speed is unknown, defaulting to 1000 [ 439.557226][T15722] lo speed is unknown, defaulting to 1000 [ 439.579951][T15722] lo speed is unknown, defaulting to 1000 [ 440.001595][T15747] netlink: Setting conntrack mark requires 'commit' flag. [ 440.001633][T15747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.007760][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 440.404116][T15730] lo speed is unknown, defaulting to 1000 [ 440.547726][T15730] lo speed is unknown, defaulting to 1000 [ 441.890682][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'. [ 442.160374][T15776] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2310'. [ 442.160405][T15776] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2310'. [ 442.321588][T15785] netlink: 'syz.3.2310': attribute type 10 has an invalid length. [ 442.608568][T15786] syzkaller0: entered promiscuous mode [ 442.608597][T15786] syzkaller0: entered allmulticast mode [ 442.614280][T15772] syz_tun: entered allmulticast mode [ 445.704580][T15813] netlink: 'syz.4.2319': attribute type 1 has an invalid length. [ 445.780983][T15813] 8021q: adding VLAN 0 to HW filter on device bond10 [ 445.838705][T15813] __nla_validate_parse: 1 callbacks suppressed [ 445.838728][T15813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2319'. [ 445.863697][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 445.965597][T15826] netpci0: tun_chr_ioctl cmd 1074025678 [ 445.965626][T15826] netpci0: group set to 0 [ 446.238740][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 446.238885][T15840] ip_tables: iptables: counters copy to user failed while replacing table [ 446.619706][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2327'. [ 447.086489][T15874] openvswitch: netlink: IP tunnel dst address not specified [ 447.148800][T15876] netlink: 'syz.4.2335': attribute type 4 has an invalid length. [ 447.191408][T15879] netlink: 'syz.4.2335': attribute type 4 has an invalid length. [ 447.598290][T15887] ip_tables: iptables: counters copy to user failed while replacing table [ 448.407503][T15905] tc_dump_action: action bad kind [ 448.634543][T15927] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 448.664133][T15927] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 449.950566][T15956] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2354'. [ 450.188400][T15973] x_tables: duplicate underflow at hook 2 [ 450.215109][T15973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.215480][T15976] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2357'. [ 450.227656][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2361'. [ 450.234089][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2361'. [ 450.304959][T15984] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 450.304984][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2362'. [ 450.417652][T15986] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 450.437099][T15986] syzkaller1: entered promiscuous mode [ 450.437127][T15986] syzkaller1: entered allmulticast mode [ 450.445664][T15984] bridge0: port 4(wlan1) entered blocking state [ 450.445823][T15984] bridge0: port 4(wlan1) entered disabled state [ 450.445974][T15984] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 450.451473][T15984] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 451.123019][T16002] bridge7: entered promiscuous mode [ 451.219849][T16002] bridge8: entered promiscuous mode [ 451.233329][T16005] : renamed from bond_slave_0 (while UP) [ 451.535024][T16013] netlink: 170676 bytes leftover after parsing attributes in process `syz.3.2369'. [ 451.535052][T16013] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 451.535069][T16013] openvswitch: netlink: Message has 512 unknown bytes. [ 451.601305][T16015] tc_dump_action: action bad kind [ 451.624522][T16017] syzkaller0: entered promiscuous mode [ 451.624548][T16017] syzkaller0: entered allmulticast mode [ 451.725381][T16025] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 454.311614][ T11] block nbd5: Possible stuck request ffff888027490000: control (read@0,4096B). Runtime 120 seconds [ 454.311683][T14594] block nbd3: Possible stuck request ffff88802740e000: control (read@0,1024B). Runtime 120 seconds [ 454.311752][T14594] block nbd3: Possible stuck request ffff88802740e1c0: control (read@1024,1024B). Runtime 120 seconds [ 454.311783][T14594] block nbd3: Possible stuck request ffff88802740e380: control (read@2048,1024B). Runtime 120 seconds [ 454.311810][T14594] block nbd3: Possible stuck request ffff88802740e540: control (read@3072,1024B). Runtime 120 seconds [ 454.322900][ T1971] block nbd2: Possible stuck request ffff888027397000: control (read@0,1024B). Runtime 120 seconds [ 454.322947][ T1971] block nbd2: Possible stuck request ffff8880273971c0: control (read@1024,1024B). Runtime 120 seconds [ 454.322975][ T1971] block nbd2: Possible stuck request ffff888027397380: control (read@2048,1024B). Runtime 120 seconds [ 454.323002][ T1971] block nbd2: Possible stuck request ffff888027397540: control (read@3072,1024B). Runtime 120 seconds [ 454.323067][ T26] block nbd1: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 120 seconds [ 454.323098][ T26] block nbd1: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 120 seconds [ 454.323125][ T26] block nbd1: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 120 seconds [ 454.323152][ T26] block nbd1: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 120 seconds [ 454.323203][T15417] block nbd9: Possible stuck request ffff888027655080: control (read@0,1024B). Runtime 120 seconds [ 454.323234][T15417] block nbd9: Possible stuck request ffff888027655240: control (read@1024,1024B). Runtime 120 seconds [ 454.323261][T15417] block nbd9: Possible stuck request ffff888027655400: control (read@2048,1024B). Runtime 120 seconds [ 454.323288][T15417] block nbd9: Possible stuck request ffff8880276555c0: control (read@3072,1024B). Runtime 120 seconds [ 454.412997][T13549] block nbd4: Possible stuck request ffff888027445080: control (read@0,1024B). Runtime 120 seconds [ 454.413052][T13549] block nbd4: Possible stuck request ffff888027445240: control (read@1024,1024B). Runtime 120 seconds [ 454.413081][T13549] block nbd4: Possible stuck request ffff888027445400: control (read@2048,1024B). Runtime 120 seconds [ 454.413109][T13549] block nbd4: Possible stuck request ffff8880274455c0: control (read@3072,1024B). Runtime 120 seconds [ 454.520211][T16017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.919643][T16057] lo speed is unknown, defaulting to 1000 [ 454.953915][T14593] block nbd11: Possible stuck request ffff8880276a7000: control (read@0,1024B). Runtime 120 seconds [ 454.954165][T14593] block nbd11: Possible stuck request ffff8880276a71c0: control (read@1024,1024B). Runtime 120 seconds [ 454.954197][T14593] block nbd11: Possible stuck request ffff8880276a7380: control (read@2048,1024B). Runtime 120 seconds [ 454.954224][T14593] block nbd11: Possible stuck request ffff8880276a7540: control (read@3072,1024B). Runtime 120 seconds [ 454.954276][T14592] block nbd10: Possible stuck request ffff888027685080: control (read@0,1024B). Runtime 120 seconds [ 454.954305][T14592] block nbd10: Possible stuck request ffff888027685240: control (read@1024,1024B). Runtime 120 seconds [ 454.954330][T14592] block nbd10: Possible stuck request ffff888027685400: control (read@2048,1024B). Runtime 120 seconds [ 454.954357][T14592] block nbd10: Possible stuck request ffff8880276855c0: control (read@3072,1024B). Runtime 120 seconds [ 454.954407][T13550] block nbd8: Possible stuck request ffff8880275f5080: control (read@0,1024B). Runtime 120 seconds [ 454.954438][T13550] block nbd8: Possible stuck request ffff8880275f5240: control (read@1024,1024B). Runtime 120 seconds [ 454.954465][T13550] block nbd8: Possible stuck request ffff8880275f5400: control (read@2048,1024B). Runtime 120 seconds [ 454.954492][T13550] block nbd8: Possible stuck request ffff8880275f55c0: control (read@3072,1024B). Runtime 120 seconds [ 454.954539][ T1997] block nbd7: Possible stuck request ffff888027577000: control (read@0,1024B). Runtime 120 seconds [ 454.954570][ T1997] block nbd7: Possible stuck request ffff8880275771c0: control (read@1024,1024B). Runtime 120 seconds [ 454.954596][ T1997] block nbd7: Possible stuck request ffff888027577380: control (read@2048,1024B). Runtime 120 seconds [ 454.954622][ T1997] block nbd7: Possible stuck request ffff888027577540: control (read@3072,1024B). Runtime 120 seconds [ 454.954675][ T11] block nbd6: Possible stuck request ffff8880274ce000: control (read@0,1024B). Runtime 120 seconds [ 454.954706][ T11] block nbd6: Possible stuck request ffff8880274ce1c0: control (read@1024,1024B). Runtime 120 seconds [ 454.954733][ T11] block nbd6: Possible stuck request ffff8880274ce380: control (read@2048,1024B). Runtime 120 seconds [ 454.954760][ T11] block nbd6: Possible stuck request ffff8880274ce540: control (read@3072,1024B). Runtime 120 seconds [ 454.954809][T14594] block nbd12: Possible stuck request ffff888027755080: control (read@0,1024B). Runtime 120 seconds [ 454.954840][T14594] block nbd12: Possible stuck request ffff888027755240: control (read@1024,1024B). Runtime 120 seconds [ 454.954866][T14594] block nbd12: Possible stuck request ffff888027755400: control (read@2048,1024B). Runtime 120 seconds [ 454.954893][T14594] block nbd12: Possible stuck request ffff8880277555c0: control (read@3072,1024B). Runtime 120 seconds [ 455.339690][T16069] openvswitch: netlink: Message has 8 unknown bytes. [ 455.339731][T16069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.402512][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 455.528558][T16078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2387'. [ 455.626505][T16078] bond11: entered promiscuous mode [ 455.626881][T16078] 8021q: adding VLAN 0 to HW filter on device bond11 [ 455.657382][T16081] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 455.679844][T16081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2389'. [ 455.781453][T16078] 8021q: adding VLAN 0 to HW filter on device bond11 [ 455.781907][T16078] bond11: (slave sit0): The slave device specified does not support setting the MAC address [ 455.784972][T16078] bond11: (slave sit0): Error -95 calling set_mac_address [ 455.909989][T16084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.010702][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2393'. [ 456.027328][T16099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.084840][T16057] lo speed is unknown, defaulting to 1000 [ 456.107732][T16057] lo speed is unknown, defaulting to 1000 [ 456.283012][T16105] netlink: 'syz.0.2397': attribute type 1 has an invalid length. [ 456.359065][T16105] netlink: 'syz.0.2397': attribute type 1 has an invalid length. [ 456.365490][T16117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2398'. [ 456.672988][T16128] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 456.990406][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 457.033647][T16128] bond0: entered promiscuous mode [ 457.034248][T16128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.104161][T16140] netlink: 'syz.1.2404': attribute type 2 has an invalid length. [ 457.136198][T16130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.136799][T16130] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 457.136823][T16130] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 457.204126][T16130] bond0: (slave ip6gre2): making interface the new active one [ 457.204155][T16130] ip6gre2: entered promiscuous mode [ 457.206712][T16130] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 457.291391][T16140] : entered promiscuous mode [ 457.419873][T16145] netlink: 'syz.4.2406': attribute type 3 has an invalid length. [ 457.419897][T16145] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2406'. [ 457.541188][T16149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2405'. [ 457.792837][T16158] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 457.815178][T16158] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2409'. [ 458.041447][T16174] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2412'. [ 458.068078][T16174] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2412'. [ 458.076447][T16168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2411'. [ 458.189215][T16180] netlink: 'syz.1.2414': attribute type 1 has an invalid length. [ 458.361305][ T5722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.434527][T16181] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 458.437942][T16181] bond5 (unregistering): Released all slaves [ 458.578548][T16200] openvswitch: netlink: Missing valid actions attribute. [ 458.603762][T16200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 458.741231][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.846610][T16208] netlink: 'syz.1.2420': attribute type 2 has an invalid length. [ 458.876439][T16210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2422'. [ 458.929122][T16216] ip_tables: iptables: counters copy to user failed while replacing table [ 458.935051][T16217] ip_tables: iptables: counters copy to user failed while replacing table [ 458.985808][T16204] netlink: Conntrack attr has 1 unknown bytes [ 458.985847][T16204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.062427][T16208] netlink: 'syz.1.2420': attribute type 2 has an invalid length. [ 459.488368][T16238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2427'. [ 459.488404][T16238] openvswitch: netlink: IPv4 frag type 204 is out of range max 2 [ 459.489290][T16240] openvswitch: netlink: IPv4 frag type 204 is out of range max 2 [ 459.856772][T16257] netlink: 'syz.4.2431': attribute type 3 has an invalid length. [ 460.706759][T16286] team_slave_0: left promiscuous mode [ 460.706788][T16286] team_slave_1: left promiscuous mode [ 460.977608][T16286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.017456][T16286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.105992][T16286] 0: left allmulticast mode [ 461.106019][T16286] hsr_slave_0: left allmulticast mode [ 461.106034][T16286] hsr_slave_1: left allmulticast mode [ 461.178505][T16286] veth5: left allmulticast mode [ 461.189203][T16286] veth7: left allmulticast mode [ 461.197486][T16286] ip6gre1: left promiscuous mode [ 461.197510][T16286] ip6gre1: left allmulticast mode [ 461.207340][T16286] bond12: left promiscuous mode [ 461.207362][T16286] bridge4: left promiscuous mode [ 461.211892][T16286] vlan0: left allmulticast mode [ 461.213373][T16286] bond12: left allmulticast mode [ 461.213391][T16286] bridge4: left allmulticast mode [ 461.221227][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.221275][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.221309][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.221343][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.300604][T16297] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 461.430548][T16303] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 461.566265][T16317] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 461.568728][T16317] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 462.031666][T16335] lo speed is unknown, defaulting to 1000 [ 462.250510][T16354] __nla_validate_parse: 7 callbacks suppressed [ 462.250535][T16354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2449'. [ 462.418048][T16335] lo speed is unknown, defaulting to 1000 [ 462.434475][T16335] lo speed is unknown, defaulting to 1000 [ 462.646464][T16358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2450'. [ 462.671937][ T8904] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 462.685128][ T8904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.818993][T16344] netlink: 'syz.2.2448': attribute type 8 has an invalid length. [ 462.819016][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'. [ 462.834070][ T10] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 463.276355][ T8904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.279629][T16409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2465'. [ 464.368857][T16418] tipc: Started in network mode [ 464.368884][T16418] tipc: Node identity 1, cluster identity 4711 [ 464.368898][T16418] tipc: Node number set to 1 [ 464.374217][T16418] tipc: Enabling of bearer rejected, failed to enable media [ 464.551105][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.564593][T16426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2468'. [ 464.581189][T16423] netlink: 'syz.2.2469': attribute type 8 has an invalid length. [ 464.581213][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 464.679977][T16428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2470'. [ 464.774682][T16431] pim6reg: entered allmulticast mode [ 465.027156][T16439] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2473'. [ 465.043021][T16439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.268832][T16452] netlink: 'syz.3.2478': attribute type 2 has an invalid length. [ 465.375004][ T42] tipc: Subscription rejected, illegal request [ 466.244380][T16481] netlink: 'syz.4.2486': attribute type 30 has an invalid length. [ 466.446313][T16481] netlink: 'syz.4.2486': attribute type 30 has an invalid length. [ 466.605385][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2488'. [ 466.835514][T16499] netlink: 'syz.2.2489': attribute type 1 has an invalid length. [ 466.835542][T16499] netlink: 'syz.2.2489': attribute type 1 has an invalid length. [ 467.378644][T16515] syzkaller1: entered promiscuous mode [ 467.378670][T16515] syzkaller1: entered allmulticast mode [ 467.471379][T16515] netlink: 'syz.0.2497': attribute type 4 has an invalid length. [ 467.471407][T16515] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2497'. [ 467.477411][T16522] netlink: 'syz.0.2497': attribute type 4 has an invalid length. [ 467.477434][T16522] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2497'. [ 467.514330][T16515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2497'. [ 467.674672][T16527] lo speed is unknown, defaulting to 1000 [ 468.200531][T16552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2505'. [ 468.373058][T16557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2507'. [ 468.780028][T16552] bond5: Unable to set down delay as MII monitoring is disabled [ 468.891822][T16552] bond5 (unregistering): Released all slaves [ 468.971370][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2509'. [ 469.523159][T16527] lo speed is unknown, defaulting to 1000 [ 469.568597][T16533] lo speed is unknown, defaulting to 1000 [ 469.593447][T16580] tipc: Enabled bearer , priority 0 [ 469.594308][T16527] lo speed is unknown, defaulting to 1000 [ 469.784197][T16567] tipc: Disabling bearer [ 469.817472][T16604] netlink: 'syz.2.2513': attribute type 22 has an invalid length. [ 469.817499][T16604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2513'. [ 469.817742][T16604] netlink: 'syz.2.2513': attribute type 22 has an invalid length. [ 469.817759][T16604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2513'. [ 469.817984][T16604] netlink: 'syz.2.2513': attribute type 22 has an invalid length. [ 469.817999][T16604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2513'. [ 469.828018][T16604] netlink: 'syz.2.2513': attribute type 22 has an invalid length. [ 469.828041][T16604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2513'. [ 469.828258][T16604] netlink: 'syz.2.2513': attribute type 22 has an invalid length. [ 469.828481][T16604] netlink: 'syz.2.2513': attribute type 22 has an invalid length. [ 469.828688][T16604] netlink: 'syz.2.2513': attribute type 22 has an invalid length. [ 469.828911][T16604] netlink: 'syz.2.2513': attribute type 22 has an invalid length. [ 469.829117][T16604] netlink: 'syz.2.2513': attribute type 22 has an invalid length. [ 470.138545][T16608] xt_policy: output policy not valid in PREROUTING and INPUT [ 471.378487][T16533] lo speed is unknown, defaulting to 1000 [ 471.408504][T16533] lo speed is unknown, defaulting to 1000 [ 472.558923][T16666] __nla_validate_parse: 5 callbacks suppressed [ 472.558946][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 472.602329][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'. [ 473.174335][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 473.190622][T16698] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2532'. [ 473.191289][T16698] netlink: NAT attribute has 4 unknown bytes [ 473.191319][T16698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.209640][T16742] x_tables: duplicate underflow at hook 1 [ 474.501802][T16747] bridge0: port 5(veth1_to_bridge) entered blocking state [ 474.501945][T16747] bridge0: port 5(veth1_to_bridge) entered disabled state [ 474.502122][T16747] veth1_to_bridge: entered allmulticast mode [ 474.508610][T16747] veth1_to_bridge: entered promiscuous mode [ 474.897227][T16757] bridge9: entered promiscuous mode [ 474.897256][T16757] bridge9: entered allmulticast mode [ 474.921631][T16757] team0: Port device bridge9 added [ 474.946779][T16760] netlink: 'syz.1.2543': attribute type 1 has an invalid length. [ 475.250795][T16774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.254522][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2545'. [ 475.622920][T16782] Bluetooth: hci0: unsupported parameter 5135 [ 475.622945][T16782] Bluetooth: hci0: unsupported parameter 65 [ 475.622957][T16782] Bluetooth: hci0: unsupported parameter 5135 [ 475.622970][T16782] Bluetooth: hci0: unsupported parameter 65 [ 475.742373][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 475.766614][T16787] Cannot find add_set index 65532 as target [ 475.814096][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 478.304567][T16784] veth1_to_bond: entered allmulticast mode [ 478.304843][T16789] veth1_to_bond: entered promiscuous mode [ 478.305087][T16787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2550'. [ 478.305114][T16787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2550'. [ 478.305526][T16789] veth1_to_bond: left promiscuous mode [ 478.305730][T16789] veth1_to_bond: left allmulticast mode [ 478.372445][T16790] bond0: (slave bond_slave_1): Releasing backup interface [ 478.569218][T16806] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2554'. [ 478.619487][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 478.668775][T16809] tipc: Cannot configure node identity twice [ 478.673138][T16809] tipc: Enabled bearer , priority 0 [ 478.673431][T16812] netlink: 'syz.1.2555': attribute type 2 has an invalid length. [ 478.676402][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2555'. [ 478.859293][T16816] netlink: 'syz.2.2556': attribute type 2 has an invalid length. [ 478.887684][T16816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2556'. [ 479.170195][T16826] syzkaller1: entered promiscuous mode [ 479.170223][T16826] syzkaller1: entered allmulticast mode [ 479.376559][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2561'. [ 479.432823][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 479.525358][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'. [ 479.563106][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'. [ 479.791053][T10930] tipc: Node number set to 3256130692 [ 480.210049][T16881] netlink: 'syz.1.2576': attribute type 163 has an invalid length. [ 480.643672][T16900] netlink: 'syz.3.2580': attribute type 21 has an invalid length. [ 480.643819][T16900] netlink: 'syz.3.2580': attribute type 1 has an invalid length. [ 480.674725][T16906] ksmbd: Unknown IPC event: 1, ignore. [ 480.799621][T16903] netlink: 'syz.0.2579': attribute type 4 has an invalid length. [ 481.079742][T16915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.094403][T16915] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.144994][T16915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.230613][T16915] team_slave_0: entered promiscuous mode [ 481.238089][T16915] team_slave_1: entered promiscuous mode [ 481.243483][T16915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.246860][T16915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.253153][T16915] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.253179][T16915] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.256023][T16915] veth0_macvtap: left promiscuous mode [ 481.259820][T16915] veth0_macvtap: entered promiscuous mode [ 481.290212][T16915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.298652][T16915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.299744][T16915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.314351][T16915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.342160][T16915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.344789][T16915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.345943][T16915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.372729][T16915] bridge2: entered promiscuous mode [ 481.381447][T16915] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.386944][T16915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 481.388980][T16915] 8021q: adding VLAN 0 to HW filter on device bond6 [ 481.411792][T16915] 8021q: adding VLAN 0 to HW filter on device bond7 [ 481.417335][T16915] batadv1: entered promiscuous mode [ 481.417829][T16915] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 481.418416][T16915] batadv2: entered promiscuous mode [ 481.418872][T16915] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 481.436186][T16931] netlink: Unknown NAT attribute (type=1137, max=9) [ 481.436224][T16931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.445631][T16915] 8021q: adding VLAN 0 to HW filter on device bond8 [ 481.491163][T16931] netlink: 'syz.4.2589': attribute type 9 has an invalid length. [ 481.500573][T16915] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 481.580650][T16585] bridge0: port 1(team0) entered blocking state [ 481.580773][T16585] bridge0: port 1(team0) entered forwarding state [ 481.836491][T16938] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 481.836523][T16938] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 482.061543][T16562] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.061579][T16562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.079843][T16566] bond8: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 482.080112][T16566] bond8: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 482.133248][T16566] bond8: (slave veth5): making interface the new active one [ 482.200071][T16566] bond8: active interface up! [ 482.241483][T16562] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.241523][T16562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.241562][T16562] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.241588][T16562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.241660][T16562] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.241685][T16562] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.504563][T16961] ip_tables: iptables: counters copy to user failed while replacing table [ 482.542758][T16977] netlink: 'syz.0.2597': attribute type 1 has an invalid length. [ 482.700383][T16977] 8021q: adding VLAN 0 to HW filter on device bond13 [ 483.105955][T16978] bond13: (slave veth11): Enslaving as an active interface with a down link [ 483.138709][T16980] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 483.155870][T16980] bond13: (slave batadv1): making interface the new active one [ 483.158054][T16980] batadv1: entered promiscuous mode [ 483.158581][T16980] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 483.539041][T17018] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 483.577271][T17021] netlink: 'syz.0.2608': attribute type 10 has an invalid length. [ 483.586690][T17021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.595525][T17021] team0: Port device netdevsim1 added [ 483.605379][T17021] netlink: 'syz.0.2608': attribute type 10 has an invalid length. [ 483.628585][T17021] team0: Port device netdevsim1 removed [ 483.643603][T17021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.645724][T17021] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 483.758290][T17029] sctp: [Deprecated]: syz.2.2611 (pid 17029) Use of int in max_burst socket option. [ 483.758290][T17029] Use struct sctp_assoc_value instead [ 483.858065][T17031] __nla_validate_parse: 14 callbacks suppressed [ 483.858088][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2612'. [ 484.391605][T15417] block nbd1: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 150 seconds [ 484.391653][T15417] block nbd1: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 150 seconds [ 484.391682][T15417] block nbd1: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 150 seconds [ 484.391709][T15417] block nbd1: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 150 seconds [ 484.391759][ T26] block nbd9: Possible stuck request ffff888027655080: control (read@0,1024B). Runtime 150 seconds [ 484.391791][ T26] block nbd9: Possible stuck request ffff888027655240: control (read@1024,1024B). Runtime 150 seconds [ 484.391818][ T26] block nbd9: Possible stuck request ffff888027655400: control (read@2048,1024B). Runtime 150 seconds [ 484.391846][ T26] block nbd9: Possible stuck request ffff8880276555c0: control (read@3072,1024B). Runtime 150 seconds [ 484.391919][T13549] block nbd2: Possible stuck request ffff888027397000: control (read@0,1024B). Runtime 150 seconds [ 484.391950][T13549] block nbd2: Possible stuck request ffff8880273971c0: control (read@1024,1024B). Runtime 150 seconds [ 484.391978][T13549] block nbd2: Possible stuck request ffff888027397380: control (read@2048,1024B). Runtime 150 seconds [ 484.392005][T13549] block nbd2: Possible stuck request ffff888027397540: control (read@3072,1024B). Runtime 150 seconds [ 484.530660][ T11] block nbd3: Possible stuck request ffff88802740e000: control (read@0,1024B). Runtime 150 seconds [ 484.530708][ T11] block nbd3: Possible stuck request ffff88802740e1c0: control (read@1024,1024B). Runtime 150 seconds [ 484.530735][ T11] block nbd3: Possible stuck request ffff88802740e380: control (read@2048,1024B). Runtime 150 seconds [ 484.530762][ T11] block nbd3: Possible stuck request ffff88802740e540: control (read@3072,1024B). Runtime 150 seconds [ 484.530812][T14594] block nbd5: Possible stuck request ffff888027490000: control (read@0,4096B). Runtime 150 seconds [ 484.757755][T17044] syzkaller0: entered promiscuous mode [ 484.757773][T17044] syzkaller0: entered allmulticast mode [ 485.033259][T13549] block nbd4: Possible stuck request ffff888027445080: control (read@0,1024B). Runtime 150 seconds [ 485.033293][T13549] block nbd4: Possible stuck request ffff888027445240: control (read@1024,1024B). Runtime 150 seconds [ 485.033310][T13549] block nbd4: Possible stuck request ffff888027445400: control (read@2048,1024B). Runtime 150 seconds [ 485.033326][T13549] block nbd4: Possible stuck request ffff8880274455c0: control (read@3072,1024B). Runtime 150 seconds [ 485.042305][T14593] block nbd12: Possible stuck request ffff888027755080: control (read@0,1024B). Runtime 150 seconds [ 485.042346][T14593] block nbd12: Possible stuck request ffff888027755240: control (read@1024,1024B). Runtime 150 seconds [ 485.042372][T14593] block nbd12: Possible stuck request ffff888027755400: control (read@2048,1024B). Runtime 150 seconds [ 485.042396][T14593] block nbd12: Possible stuck request ffff8880277555c0: control (read@3072,1024B). Runtime 150 seconds [ 485.042441][T14592] block nbd6: Possible stuck request ffff8880274ce000: control (read@0,1024B). Runtime 150 seconds [ 485.042469][T14592] block nbd6: Possible stuck request ffff8880274ce1c0: control (read@1024,1024B). Runtime 150 seconds [ 485.042493][T14592] block nbd6: Possible stuck request ffff8880274ce380: control (read@2048,1024B). Runtime 150 seconds [ 485.042517][T14592] block nbd6: Possible stuck request ffff8880274ce540: control (read@3072,1024B). Runtime 150 seconds [ 485.042561][ T1997] block nbd8: Possible stuck request ffff8880275f5080: control (read@0,1024B). Runtime 150 seconds [ 485.042589][ T1997] block nbd8: Possible stuck request ffff8880275f5240: control (read@1024,1024B). Runtime 150 seconds [ 485.042614][ T1997] block nbd8: Possible stuck request ffff8880275f5400: control (read@2048,1024B). Runtime 150 seconds [ 485.042638][ T1997] block nbd8: Possible stuck request ffff8880275f55c0: control (read@3072,1024B). Runtime 150 seconds [ 485.042680][T13550] block nbd7: Possible stuck request ffff888027577000: control (read@0,1024B). Runtime 150 seconds [ 485.042707][T13550] block nbd7: Possible stuck request ffff8880275771c0: control (read@1024,1024B). Runtime 150 seconds [ 485.042732][T13550] block nbd7: Possible stuck request ffff888027577380: control (read@2048,1024B). Runtime 150 seconds [ 485.042756][T13550] block nbd7: Possible stuck request ffff888027577540: control (read@3072,1024B). Runtime 150 seconds [ 485.042798][ T11] block nbd10: Possible stuck request ffff888027685080: control (read@0,1024B). Runtime 150 seconds [ 485.042826][ T11] block nbd10: Possible stuck request ffff888027685240: control (read@1024,1024B). Runtime 150 seconds [ 485.042868][ T11] block nbd10: Possible stuck request ffff888027685400: control (read@2048,1024B). Runtime 150 seconds [ 485.042893][ T11] block nbd10: Possible stuck request ffff8880276855c0: control (read@3072,1024B). Runtime 150 seconds [ 485.042937][T14594] block nbd11: Possible stuck request ffff8880276a7000: control (read@0,1024B). Runtime 150 seconds [ 485.042965][T14594] block nbd11: Possible stuck request ffff8880276a71c0: control (read@1024,1024B). Runtime 150 seconds [ 485.042989][T14594] block nbd11: Possible stuck request ffff8880276a7380: control (read@2048,1024B). Runtime 150 seconds [ 485.043013][T14594] block nbd11: Possible stuck request ffff8880276a7540: control (read@3072,1024B). Runtime 150 seconds [ 486.344113][T17006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.617543][T17060] openvswitch: netlink: Unknown key attributes 2 [ 486.782708][T17053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2616'. [ 486.833196][ T30] audit: type=1800 audit(1789431663.913:82): pid=17064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2617" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2695 res=0 errno=0 [ 486.871970][T17053] syzkaller0: entered promiscuous mode [ 486.871995][T17053] syzkaller0: entered allmulticast mode [ 486.877159][T17077] xt_policy: output policy not valid in PREROUTING and INPUT [ 486.973401][T17070] netlink: 'syz.1.2622': attribute type 1 has an invalid length. [ 486.973428][T17070] netlink: 1368 bytes leftover after parsing attributes in process `syz.1.2622'. [ 487.513930][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 487.513959][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 490.132296][T17114] xfrm2: entered allmulticast mode [ 490.378755][T17146] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2637'. [ 490.583348][T17152] IPVS: set_ctl: invalid protocol: 4 10.1.1.1:20002 [ 490.587927][T17152] sctp: [Deprecated]: syz.1.2640 (pid 17152) Use of int in maxseg socket option. [ 490.587927][T17152] Use struct sctp_assoc_value instead [ 490.700308][T17156] sctp: [Deprecated]: syz.2.2642 (pid 17156) Use of int in maxseg socket option. [ 490.700308][T17156] Use struct sctp_assoc_value instead [ 490.794564][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2644'. [ 490.992104][T17165] syzkaller0: entered promiscuous mode [ 490.992130][T17165] syzkaller0: entered allmulticast mode [ 491.034388][T17176] netlink: 'syz.2.2647': attribute type 1 has an invalid length. [ 491.165018][T17183] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.2648'. [ 491.165061][T17183] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.2648'. [ 491.591698][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 491.691598][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 491.845303][T17196] netlink: 'syz.1.2651': attribute type 5 has an invalid length. [ 491.952137][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2653'. [ 492.225561][T17225] netlink: 'syz.2.2659': attribute type 1 has an invalid length. [ 492.332054][T17227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2659'. [ 492.481892][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2661'. [ 492.598853][T17226] bond6: (slave veth7): Enslaving as an active interface with a down link [ 492.606459][T17227] 8021q: adding VLAN 0 to HW filter on device bond6 [ 492.768642][T17233] bond13: entered promiscuous mode [ 492.769200][T17233] 8021q: adding VLAN 0 to HW filter on device bond13 [ 492.984085][T17244] 8021q: adding VLAN 0 to HW filter on device bond13 [ 493.024249][T17244] bond13: (slave sit0): The slave device specified does not support setting the MAC address [ 493.025272][T17244] bond13: (slave sit0): Error -95 calling set_mac_address [ 493.049653][T17256] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2667'. [ 493.559945][T17272] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 493.559980][T17272] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 493.560278][T17272] bridge0: port 4(wlan1) entered disabled state [ 493.874020][T17278] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 493.997694][T17296] syzkaller0: entered promiscuous mode [ 493.997721][T17296] syzkaller0: entered allmulticast mode [ 494.464248][T16564] batadv1: left promiscuous mode [ 494.931250][T17327] netlink: 'syz.4.2681': attribute type 9 has an invalid length. [ 495.044582][T17341] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 495.203810][T17345] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 495.221358][T17345] bond7 (unregistering): Released all slaves [ 495.436276][T17350] lo speed is unknown, defaulting to 1000 [ 496.207630][T17350] lo speed is unknown, defaulting to 1000 [ 496.229284][T17386] __nla_validate_parse: 39 callbacks suppressed [ 496.229307][T17386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2693'. [ 496.289071][T17350] lo speed is unknown, defaulting to 1000 [ 496.694403][T17395] syzkaller0: entered promiscuous mode [ 496.694428][T17395] syzkaller0: entered allmulticast mode [ 499.867611][T17411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.571212][T17430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2702'. [ 500.607957][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2702'. [ 501.256767][T17454] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2706'. [ 501.256797][T17454] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2706'. [ 501.256813][T17454] netlink: 'syz.4.2706': attribute type 6 has an invalid length. [ 501.256827][T17454] netlink: 'syz.4.2706': attribute type 5 has an invalid length. [ 501.256838][T17454] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2706'. [ 501.675509][T17472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2710'. [ 501.675676][T17472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2710'. [ 501.675822][T17472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2710'. [ 501.675953][T17472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2710'. [ 501.676077][T17472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2710'. [ 501.676200][T17472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2710'. [ 501.676339][T17472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2710'. [ 502.168749][T17493] xt_hashlimit: max too large, truncated to 1048576 [ 502.169058][T17493] SET target dimension over the limit! [ 502.323477][T17496] raw_sendmsg: syz.0.2717 forgot to set AF_INET. Fix it! [ 502.933216][T17513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 503.298921][T17533] netlink: 'syz.4.2725': attribute type 1 has an invalid length. [ 503.446765][T17541] netlink: 'syz.3.2728': attribute type 1 has an invalid length. [ 503.501596][T17541] 8021q: adding VLAN 0 to HW filter on device bond13 [ 503.526238][T17548] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 503.575128][T17549] netlink: 'syz.1.2730': attribute type 8 has an invalid length. [ 503.635000][T17541] netlink: Failed to add T helper -22 [ 503.635083][T17541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.639312][T17546] syzkaller0: entered promiscuous mode [ 503.639338][T17546] syzkaller0: entered allmulticast mode [ 504.270059][T17570] netlink: 'syz.0.2733': attribute type 11 has an invalid length. [ 506.792355][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 507.011671][T17561] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 507.055752][T17586] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 507.437717][T17568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.604876][T17617] __nla_validate_parse: 68 callbacks suppressed [ 507.604901][T17617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2743'. [ 507.667706][T17568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.710793][T17623] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2744'. [ 508.179515][T17568] .`: (slave netdevsim1): Releasing backup interface [ 508.229514][T17568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.376173][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376213][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376241][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376285][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376311][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376338][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376365][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376392][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376437][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376464][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376489][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376515][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376542][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376568][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376594][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376621][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376646][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376673][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376699][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376725][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376749][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376774][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376799][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376826][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376852][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376879][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376906][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.376975][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.377005][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.377081][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.377110][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.377137][T17631] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 508.447860][T17631] atomic_op ffff88801bbb71e0 conn xmit_atomic 0000000000000000 [ 508.694457][T17568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.843863][T17657] netlink: 'syz.3.2751': attribute type 39 has an invalid length. [ 509.541675][T16585] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.641259][T16564] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.664376][T16564] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.676037][T16586] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.065671][ T5630] block nbd19: Receive control failed (result -32) [ 510.071114][T12555] block nbd19: Receive control failed (result -32) [ 510.407614][T17684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'. [ 510.407800][T17684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2760'. [ 510.676233][T17684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.678140][T17684] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.679724][T17691] netlink: 'syz.4.2762': attribute type 10 has an invalid length. [ 510.709693][T17684] dummy0: left promiscuous mode [ 511.156918][T17712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2766'. [ 511.585709][T17684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.585730][T17684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.590729][T17684] veth1_vlan: left promiscuous mode [ 511.619234][T17684] veth0_vlan: left promiscuous mode [ 511.620444][T17684] veth0_vlan: entered promiscuous mode [ 511.632988][T17684] veth1_vlan: entered promiscuous mode [ 511.657939][T17684] dummy0: entered allmulticast mode [ 511.657972][T17684] dummy0: entered promiscuous mode [ 511.658080][T17684] macvtap0: left promiscuous mode [ 511.663737][T17684] 8021q: adding VLAN 0 to HW filter on device eth0 [ 511.674598][T17684] 8021q: adding VLAN 0 to HW filter on device eth1 [ 511.684506][T17684] 8021q: adding VLAN 0 to HW filter on device eth2 [ 511.696639][T17684] 8021q: adding VLAN 0 to HW filter on device eth3 [ 511.699839][T17684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.736187][T17684] bond2: left promiscuous mode [ 511.736212][T17684] erspan1: left promiscuous mode [ 511.737324][T17684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.747347][T17684] bridge2: left promiscuous mode [ 511.758806][T17684] geneve2: left promiscuous mode [ 511.758831][T17684] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 511.758947][T10930] lo speed is unknown, defaulting to 1000 [ 511.758967][T10930] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 511.801393][T16586] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.801510][T16586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.804035][T16586] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.804155][T16586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.805543][T16586] bridge0: port 5(veth1_to_bridge) entered blocking state [ 511.805664][T16586] bridge0: port 5(veth1_to_bridge) entered forwarding state [ 511.907812][T15260] bridge0: port 3(vlan3) entered blocking state [ 511.910009][T15260] bridge0: port 3(vlan3) entered forwarding state [ 512.044498][T16562] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.044555][T16562] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.044594][T16562] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.044631][T16562] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.158867][ T8945] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.223438][T16560] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 512.238956][T17722] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 512.238978][T17722] netlink: 'syz.2.2768': attribute type 2 has an invalid length. [ 512.239250][T17722] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 512.239265][T17722] netlink: 'syz.2.2768': attribute type 2 has an invalid length. [ 512.239539][T17722] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 512.239554][T17722] netlink: 'syz.2.2768': attribute type 2 has an invalid length. [ 512.243691][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 512.244127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 512.244518][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 512.244893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 512.245335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 512.245722][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 512.246109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 512.246484][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 512.248510][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.478451][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.761177][ C1] net_ratelimit: 19574 callbacks suppressed [ 516.761204][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.761269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.761652][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.761717][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.762066][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.762180][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.762521][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.762628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.762956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 516.763108][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 517.679315][ T4981] udevd[4981]: worker [6880] /devices/virtual/block/nbd1 timeout; kill it [ 521.771263][ C0] net_ratelimit: 22471 callbacks suppressed [ 521.771290][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 521.771303][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 521.771721][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 521.771767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 521.772159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 521.772241][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 521.772586][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 521.772696][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 521.773024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 521.773144][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 523.574988][ T4981] udevd[4981]: seq 17255 '/devices/virtual/block/nbd1' killed [ 523.576774][ T4981] udevd[4981]: worker [12554] /devices/virtual/block/nbd8 timeout; kill it [ 525.353104][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.781001][ C1] net_ratelimit: 22429 callbacks suppressed [ 526.781027][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 526.781037][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 526.781476][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 526.781502][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 526.781953][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 526.781959][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 526.782419][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 526.782445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 526.782866][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 526.782873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 527.171523][ C0] sched: DL replenish lagged too much [ 527.272574][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.695759][ T4981] udevd[4981]: seq 17265 '/devices/virtual/block/nbd8' killed [ 529.700019][ T4981] udevd[4981]: worker [12564] /devices/virtual/block/nbd10 timeout; kill it [ 531.790878][ C1] net_ratelimit: 22329 callbacks suppressed [ 531.790904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 531.790928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 531.791341][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 531.791350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 531.791762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 531.791823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 531.792179][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 531.792290][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 531.792595][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 531.792731][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 532.376187][ T4981] udevd[4981]: seq 17267 '/devices/virtual/block/nbd10' killed [ 532.379099][ T4981] udevd[4981]: worker [6847] /devices/virtual/block/nbd2 timeout; kill it [ 536.800873][ C1] net_ratelimit: 22499 callbacks suppressed [ 536.800900][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 536.801072][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 536.801331][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 536.801544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 536.801864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 536.801969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 536.802294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 536.802440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 536.802732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 536.803032][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 540.946578][ T4981] udevd[4981]: seq 17256 '/devices/virtual/block/nbd2' killed [ 540.950280][ T4981] udevd[4981]: worker [12576] /devices/virtual/block/nbd12 timeout; kill it [ 540.969604][ T4981] udevd[4981]: seq 17269 '/devices/virtual/block/nbd12' killed [ 541.810868][ C0] net_ratelimit: 22430 callbacks suppressed [ 541.810893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.810896][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.811296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.811372][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.811685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.811814][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.812075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.812247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.812472][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.812716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 541.887972][ T4981] udevd[4981]: worker [6825] /devices/virtual/block/nbd3 timeout; kill it [ 541.890325][ T4981] udevd[4981]: seq 17257 '/devices/virtual/block/nbd3' killed [ 542.631620][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.820920][ C1] net_ratelimit: 22732 callbacks suppressed [ 546.820946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 546.821241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 546.821381][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 546.821683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 546.821839][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 546.822106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 546.822278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 546.822544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 546.822706][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 546.823012][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 548.070472][ T4981] udevd[4981]: worker [12559] /devices/virtual/block/nbd9 timeout; kill it [ 548.090196][ T4981] udevd[4981]: seq 17266 '/devices/virtual/block/nbd9' killed [ 550.563651][ T4981] udevd[4981]: worker [8856] /devices/virtual/block/nbd4 timeout; kill it [ 550.568071][ T4981] udevd[4981]: seq 17259 '/devices/virtual/block/nbd4' killed [ 551.831110][ C0] net_ratelimit: 21827 callbacks suppressed [ 551.831136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 551.831260][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 551.831574][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 551.831724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 551.831999][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 551.832226][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 551.832489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 551.832736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 551.833207][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 551.833295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.841012][ C0] net_ratelimit: 22956 callbacks suppressed [ 556.841040][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.841108][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.841520][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.841558][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.842047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.842039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.842475][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.842522][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.842913][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 556.842954][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 559.608153][ T4981] udevd[4981]: worker [12552] /devices/virtual/block/nbd7 timeout; kill it [ 559.610787][ T4981] udevd[4981]: seq 17264 '/devices/virtual/block/nbd7' killed [ 561.850945][ C0] net_ratelimit: 22297 callbacks suppressed [ 561.850973][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 561.851248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 561.851482][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 561.851695][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 561.851960][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 561.852161][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 561.852396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 561.852597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 561.852832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 561.853100][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.861131][ C0] net_ratelimit: 22816 callbacks suppressed [ 566.861157][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.861389][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.861560][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.861825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.862085][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.862256][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.862517][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.862783][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.862969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 566.863213][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 570.823828][ T4981] udevd[4981]: worker [8461] /devices/virtual/block/nbd5 timeout; kill it [ 571.870985][ C0] net_ratelimit: 22573 callbacks suppressed [ 571.871011][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 571.871400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 571.871575][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 571.871799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 571.872083][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 571.872301][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 571.872514][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 571.872731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 571.872981][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 571.873161][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 574.807414][ T4981] udevd[4981]: seq 17262 '/devices/virtual/block/nbd5' killed [ 574.810392][ T4981] udevd[4981]: worker [12574] /devices/virtual/block/nbd11 timeout; kill it [ 575.916906][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 576.880959][ C1] net_ratelimit: 22690 callbacks suppressed [ 576.880986][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 576.881229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 576.881460][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 576.881660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 576.881902][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 576.882152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 576.882358][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 576.882676][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 576.882788][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 576.883106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 579.923699][ T4981] udevd[4981]: seq 17268 '/devices/virtual/block/nbd11' killed [ 579.926049][ T4981] udevd[4981]: worker [10998] /devices/virtual/block/nbd6 timeout; kill it [ 579.947850][ T4981] udevd[4981]: seq 17263 '/devices/virtual/block/nbd6' killed [ 581.891063][ C1] net_ratelimit: 22587 callbacks suppressed [ 581.891091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 581.891232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 581.891596][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 581.891755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 581.892025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 581.892200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 581.892491][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 581.892656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 581.893075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 581.893284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.901132][ C1] net_ratelimit: 22948 callbacks suppressed [ 586.901160][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.901179][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.901604][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.901610][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.902067][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.902108][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.902508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.902535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.902978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 586.903017][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.911142][ C0] net_ratelimit: 22956 callbacks suppressed [ 591.911169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.911217][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.911630][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.911650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.912086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.912089][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.912539][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.912629][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.912984][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 591.913076][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.921126][ C0] net_ratelimit: 22155 callbacks suppressed [ 596.921153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.921264][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.921557][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.921696][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.921969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.922129][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.922410][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.922624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.922818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 596.923119][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.930855][ C1] net_ratelimit: 22920 callbacks suppressed [ 601.930881][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.930937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.931327][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.931368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.931760][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.931805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.932229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.932233][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.932663][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 601.932669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.940935][ C1] net_ratelimit: 22637 callbacks suppressed [ 606.940962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.941256][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.941441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.941691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.941938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.942131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.942422][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.942558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.942940][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 606.942988][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.950836][ C1] net_ratelimit: 22723 callbacks suppressed [ 611.950863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.951218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.951363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.951728][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.951868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.952190][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.952321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.952627][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.952797][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 611.953104][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 613.501600][T15417] block nbd2: Possible stuck request ffff888027397000: control (read@0,1024B). Runtime 180 seconds [ 613.501652][T15417] block nbd2: Possible stuck request ffff8880273971c0: control (read@1024,1024B). Runtime 180 seconds [ 613.501681][T15417] block nbd2: Possible stuck request ffff888027397380: control (read@2048,1024B). Runtime 180 seconds [ 613.501712][T15417] block nbd2: Possible stuck request ffff888027397540: control (read@3072,1024B). Runtime 180 seconds [ 613.501769][ T26] block nbd9: Possible stuck request ffff888027655080: control (read@0,1024B). Runtime 180 seconds [ 613.501802][ T26] block nbd9: Possible stuck request ffff888027655240: control (read@1024,1024B). Runtime 180 seconds [ 613.501830][ T26] block nbd9: Possible stuck request ffff888027655400: control (read@2048,1024B). Runtime 180 seconds [ 613.501868][ T26] block nbd9: Possible stuck request ffff8880276555c0: control (read@3072,1024B). Runtime 180 seconds [ 613.501939][T13549] block nbd1: Possible stuck request ffff888027335080: control (read@0,1024B). Runtime 180 seconds [ 613.501972][T13549] block nbd1: Possible stuck request ffff888027335240: control (read@1024,1024B). Runtime 180 seconds [ 613.502001][T13549] block nbd1: Possible stuck request ffff888027335400: control (read@2048,1024B). Runtime 180 seconds [ 613.502027][T13549] block nbd1: Possible stuck request ffff8880273355c0: control (read@3072,1024B). Runtime 180 seconds [ 616.960850][ C0] net_ratelimit: 22144 callbacks suppressed [ 616.960876][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 616.961313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 616.961642][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 616.961733][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 616.962157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 616.962241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 616.962641][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 616.962696][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 616.963091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 616.963143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:66:e7:99:f4:e7:ff, vlan:12) [ 618.359563][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 618.637790][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17724/1:b..l [ 618.646170][ C1] rcu: (detected by 1, t=10528 jiffies, g=92697, q=2011 ncpus=2) [ 618.654002][ C1] task:syz.3.2769 state:R running task stack:24648 pid:17724 tgid:17724 ppid:5614 task_flags:0x400040 flags:0x00080002 [ 618.667627][ C1] Call Trace: [ 618.670947][ C1] [ 618.673933][ C1] __schedule+0x17db/0x58f0 [ 618.678555][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 618.683910][ C1] ? unwind_get_return_address+0x4d/0x90 [ 618.689613][ C1] ? arch_stack_walk+0xfb/0x150 [ 618.694514][ C1] ? mas_ascend+0x2f9/0x8b0 [ 618.699106][ C1] ? __lock_acquire+0x747/0x2de0 [ 618.704078][ C1] ? __pfx___schedule+0x10/0x10 [ 618.709168][ C1] ? __lock_acquire+0x747/0x2de0 [ 618.714245][ C1] preempt_schedule_irq+0x4b/0x90 [ 618.719319][ C1] irqentry_exit+0x14f/0x910 [ 618.723958][ C1] ? trace_irq_disable+0x3b/0x140 [ 618.729019][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.735133][ C1] RIP: 0010:lock_release+0x2e1/0x3c0 [ 618.740445][ C1] Code: d7 f1 11 00 00 00 00 eb b5 e8 5b d7 41 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b3 92 f1 11 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 d0 db 44 0a cc 48 8d 3d a8 10 da [ 618.760168][ C1] RSP: 0018:ffffc900033c7128 EFLAGS: 00000286 [ 618.766269][ C1] RAX: c82460d20d07b200 RBX: 0000000000000206 RCX: 0000000000000046 [ 618.774370][ C1] RDX: ffffc900033c7201 RSI: ffffffff8e6fe025 RDI: ffffffff8c6d9c80 [ 618.782376][ C1] RBP: ffff88802f762b40 R08: ffffc900033c76f0 R09: 0000000000000000 [ 618.790373][ C1] R10: ffffc900033c7258 R11: fffff52000678e4d R12: 0000000000000002 [ 618.798371][ C1] R13: 0000000000000002 R14: ffffffff8ed5c8a0 R15: ffff88802f761f40 [ 618.806402][ C1] ? unwind_next_frame+0x8f/0x2550 [ 618.811587][ C1] unwind_next_frame+0x1baa/0x2550 [ 618.816745][ C1] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 618.822422][ C1] ? unwind_next_frame+0x8f/0x2550 [ 618.827568][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 618.833749][ C1] arch_stack_walk+0x11b/0x150 [ 618.838554][ C1] ? vm_area_dup+0x28/0x760 [ 618.843100][ C1] stack_trace_save+0xa9/0x100 [ 618.847957][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 618.853986][ C1] save_stack+0x122/0x230 [ 618.858354][ C1] ? __pfx_save_stack+0x10/0x10 [ 618.863260][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 618.868773][ C1] ? __slab_free+0x274/0x2c0 [ 618.873519][ C1] ? qlist_free_all+0x99/0x100 [ 618.878421][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 618.884093][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 618.889171][ C1] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 618.894857][ C1] ? page_ext_put+0x97/0xc0 [ 618.899486][ C1] __reset_page_owner+0x71/0x1f0 [ 618.904469][ C1] __free_frozen_pages+0xc93/0xd90 [ 618.909642][ C1] __slab_free+0x274/0x2c0 [ 618.914127][ C1] ? qlist_free_all+0x8e/0x100 [ 618.918942][ C1] qlist_free_all+0x99/0x100 [ 618.923558][ C1] ? vm_area_dup+0x28/0x760 [ 618.928101][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 618.933806][ C1] kasan_quarantine_reduce+0x148/0x160 [ 618.939302][ C1] __kasan_slab_alloc+0x22/0x80 [ 618.944276][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 618.949775][ C1] ? __pfx_mmap_region+0x10/0x10 [ 618.954789][ C1] ? vm_area_dup+0x28/0x760 [ 618.959326][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 618.965013][ C1] ? vm_area_dup+0x28/0x760 [ 618.969563][ C1] vm_area_dup+0x28/0x760 [ 618.973929][ C1] ? __split_vma+0x1b7/0xa60 [ 618.978553][ C1] __split_vma+0x1d7/0xa60 [ 618.983018][ C1] ? __pfx___split_vma+0x10/0x10 [ 618.987988][ C1] ? mas_prev_slot+0xb76/0xbf0 [ 618.992813][ C1] vma_modify+0x887/0x1f40 [ 618.997364][ C1] vma_modify_flags+0x2a4/0x3c0 [ 619.002352][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 619.007795][ C1] ? rcu_is_watching+0x16/0xb0 [ 619.012610][ C1] ? percpu_counter_add_batch+0xec/0x1d0 [ 619.018286][ C1] ? __vm_enough_memory+0x11a/0x380 [ 619.023524][ C1] mprotect_fixup+0x51a/0xad0 [ 619.028248][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 619.033477][ C1] ? mas_next_slot+0xc91/0xd70 [ 619.038309][ C1] do_mprotect_pkey+0x8e7/0xd10 [ 619.043293][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 619.048698][ C1] ? vm_mmap_pgoff+0x31c/0x4e0 [ 619.053682][ C1] ? vm_mmap_pgoff+0x35a/0x4e0 [ 619.058578][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 619.063826][ C1] __x64_sys_mprotect+0x80/0x90 [ 619.068715][ C1] do_syscall_64+0x166/0x520 [ 619.073346][ C1] ? trace_irq_disable+0x3b/0x140 [ 619.078411][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.084503][ C1] ? clear_bhb_loop+0x70/0xc0 [ 619.089212][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.095133][ C1] RIP: 0033:0x7f398139df57 [ 619.099587][ C1] RSP: 002b:00007ffdefcf9068 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 619.108047][ C1] RAX: ffffffffffffffda RBX: 00007f398224c6c0 RCX: 00007f398139df57 [ 619.116053][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f398222d000 [ 619.124056][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 619.132052][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdefcf91c0 [ 619.140047][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 619.148064][ C1] [ 619.151108][ C1] rcu: rcu_preempt kthread starved for 2348 jiffies! g92697 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 619.162068][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 619.172061][ C1] rcu: RCU grace-period kthread stack dump: [ 619.177965][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 619.191499][ C1] Call Trace: [ 619.194803][ C1] [ 619.197763][ C1] __schedule+0x17db/0x58f0 [ 619.202315][ C1] ? __lock_acquire+0x747/0x2de0 [ 619.207349][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 619.212502][ C1] ? __pfx___schedule+0x10/0x10 [ 619.217399][ C1] ? lock_acquire+0x115/0x350 [ 619.222140][ C1] ? schedule+0x90/0x2b0 [ 619.226416][ C1] schedule+0x164/0x2b0 [ 619.230600][ C1] schedule_timeout+0x152/0x2c0 [ 619.235484][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 619.240898][ C1] ? __pfx_process_timeout+0x10/0x10 [ 619.246228][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 619.252074][ C1] ? prepare_to_swait_event+0x322/0x350 [ 619.257686][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 619.262581][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 619.269289][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 619.274600][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 619.279843][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 619.285784][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 619.290411][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 619.295650][ C1] ? __kthread_parkme+0x71/0x1f0 [ 619.300686][ C1] ? __kthread_parkme+0x199/0x1f0 [ 619.305767][ C1] kthread+0x38b/0x480 [ 619.310222][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 619.315546][ C1] ? __pfx_kthread+0x10/0x10 [ 619.320170][ C1] ret_from_fork+0x514/0xb70 [ 619.324880][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 619.330120][ C1] ? __switch_to+0xc89/0x1420 [ 619.334835][ C1] ? __pfx_kthread+0x10/0x10 [ 619.339460][ C1] ret_from_fork_asm+0x1a/0x30 [ 619.344284][ C1] [ 619.347322][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 619.353660][ C1] Sending NMI from CPU 1 to CPUs 0: [ 619.358900][ C0] NMI backtrace for cpu 0 [ 619.358916][ C0] CPU: 0 UID: 0 PID: 7009 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 619.358937][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.358948][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 619.359075][ C0] RIP: 0010:unwind_next_frame+0x1bc/0x2550 [ 619.359100][ C0] Code: c2 a0 c5 09 8c 48 29 dd 0f 84 b5 02 00 00 48 81 fd 00 00 00 81 0f 92 c0 48 81 fd 20 28 e9 8b 0f 93 c1 08 c1 0f 85 0b 01 00 00 <48> c7 c0 00 00 00 81 49 89 ef 49 29 c7 49 c1 ef 08 8b 15 1d 9a fc [ 619.359115][ C0] RSP: 0018:ffffc90000007420 EFLAGS: 00000246 [ 619.359131][ C0] RAX: 1ffff92000000e00 RBX: 0000000000000001 RCX: 8000000000000100 [ 619.359144][ C0] RDX: ffffffff8c09c5a0 RSI: ffffffff8c6d9c60 RDI: ffffffff8c6d9c20 [ 619.359156][ C0] RBP: ffffffff81331039 R08: ffffffff8177f1df R09: 0000000000000000 [ 619.359168][ C0] R10: ffffc90000007518 R11: ffffffff81b285f0 R12: dffffc0000000000 [ 619.359181][ C0] R13: ffffffff8177f1df R14: ffffc900000074c8 R15: ffffc90000007510 [ 619.359194][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 619.359209][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.359222][ C0] CR2: 0000564658d96d08 CR3: 0000000022b0a000 CR4: 00000000003526f0 [ 619.359240][ C0] Call Trace: [ 619.359247][ C0] [ 619.359258][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 619.359283][ C0] ? unwind_next_frame+0x8f/0x2550 [ 619.359303][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 619.359322][ C0] arch_stack_walk+0x11b/0x150 [ 619.359344][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 619.359370][ C0] stack_trace_save+0xa9/0x100 [ 619.359395][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 619.359419][ C0] ? lock_acquire+0x115/0x350 [ 619.359439][ C0] ? lock_acquire+0x115/0x350 [ 619.359457][ C0] kasan_save_track+0x3e/0x80 [ 619.359475][ C0] ? kasan_save_track+0x3e/0x80 [ 619.359490][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 619.359509][ C0] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 619.359533][ C0] ? pskb_expand_head+0x1d8/0x13a0 [ 619.359557][ C0] ? skb_vlan_untag+0x477/0xdd0 [ 619.359599][ C0] ? __netif_receive_skb_core+0x3d4/0x30c0 [ 619.359616][ C0] ? process_backlog+0x727/0x18b0 [ 619.359633][ C0] ? __napi_poll+0xaa/0x330 [ 619.359648][ C0] ? net_rx_action+0x61d/0xf50 [ 619.359664][ C0] ? handle_softirqs+0x226/0x860 [ 619.359685][ C0] ? do_softirq+0x77/0xd0 [ 619.359705][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 619.359726][ C0] ? __alloc_skb+0x1b1/0x7a0 [ 619.359743][ C0] ? nsim_dev_trap_report_work+0x25f/0xb40 [ 619.359766][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 619.359787][ C0] ? worker_thread+0xa47/0xfb0 [ 619.359807][ C0] ? kthread+0x38b/0x480 [ 619.359823][ C0] ? ret_from_fork+0x514/0xb70 [ 619.359837][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 619.359879][ C0] __kasan_slab_alloc+0x6c/0x80 [ 619.359899][ C0] kmem_cache_alloc_node_noprof+0x354/0x610 [ 619.359926][ C0] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 619.359949][ C0] ? pskb_expand_head+0x1d8/0x13a0 [ 619.359978][ C0] ? pskb_expand_head+0x1d8/0x13a0 [ 619.360004][ C0] pskb_expand_head+0x1d8/0x13a0 [ 619.360029][ C0] ? skb_pull_rcsum+0x232/0x3f0 [ 619.360049][ C0] skb_vlan_untag+0x477/0xdd0 [ 619.360070][ C0] __netif_receive_skb_core+0x3d4/0x30c0 [ 619.360097][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 619.360113][ C0] ? ip6_rcv_core+0xdf4/0x1870 [ 619.360177][ C0] ? kmem_cache_free+0x182/0x650 [ 619.360200][ C0] ? lock_acquire+0x115/0x350 [ 619.360221][ C0] ? process_backlog+0x3de/0x18b0 [ 619.360238][ C0] ? process_backlog+0x3de/0x18b0 [ 619.360258][ C0] process_backlog+0x727/0x18b0 [ 619.360278][ C0] ? process_backlog+0x3de/0x18b0 [ 619.360302][ C0] __napi_poll+0xaa/0x330 [ 619.360321][ C0] net_rx_action+0x61d/0xf50 [ 619.360344][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 619.360367][ C0] ? sched_balance_domains+0x770/0x880 [ 619.360398][ C0] handle_softirqs+0x226/0x860 [ 619.360421][ C0] ? do_softirq+0x77/0xd0 [ 619.360444][ C0] ? __alloc_skb+0x18d/0x7a0 [ 619.360461][ C0] ? __alloc_skb+0x18d/0x7a0 [ 619.360478][ C0] do_softirq+0x77/0xd0 [ 619.360499][ C0] [ 619.360505][ C0] [ 619.360512][ C0] __local_bh_enable_ip+0x100/0x140 [ 619.360534][ C0] __alloc_skb+0x1b1/0x7a0 [ 619.360553][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 619.360584][ C0] ? process_scheduled_works+0x97a/0x1630 [ 619.360606][ C0] process_scheduled_works+0xc3d/0x1630 [ 619.360642][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 619.360667][ C0] ? assign_work+0x3cf/0x5d0 [ 619.360690][ C0] worker_thread+0xa47/0xfb0 [ 619.360725][ C0] kthread+0x38b/0x480 [ 619.360742][ C0] ? __pfx_worker_thread+0x10/0x10 [ 619.360763][ C0] ? __pfx_kthread+0x10/0x10 [ 619.360785][ C0] ret_from_fork+0x514/0xb70 [ 619.360802][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 619.360828][ C0] ? __switch_to+0xc89/0x1420 [ 619.360852][ C0] ? __pfx_kthread+0x10/0x10 [ 619.360869][ C0] ret_from_fork_asm+0x1a/0x30 [ 619.360902][ C0]