last executing test programs: 3.327235083s ago: executing program 4 (id=8473): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r1, 0x0, 0x0, 0x10002, &(0x7f0000000140)={0xa, 0x4e25, 0x4, @local, 0x3}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000066060ddb806954eec1070d8f000000000000f3ca000000000f0000000000000000000000000096000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/192]}, 0x138) r5 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14, 0x80400) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)="e6f8d862fe565e530cce9659fdef0410ade3f83bc05826110dbf171651b62fd7fe97f6ad3113fa9cefe7c737dbe25d9393e36ea51de989e9e3bc45b6", 0x3c}, {&(0x7f0000000200)="624a6b142406bbf61bad5256a6f96fb5429bf008e5d236f9607006e8a8cc422a5253e12733e61fd5d10f3240cc608a40ff2956306613e8e32ccd386b5fdc0f42511ad3c2b7561baa907fc5840c101d54e4fdcddff04adc6aeb459e951740d50020a9917a44ac911bc45865117012a124c1e09d49720e77a29bc320c878c20cd5567f5c3fabd4e4cddb728fab2ae25a507776290154a9af870042b1c528f3869b04c367ccffa361e98318098a325c", 0xae}], 0x2) write$tun(r2, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) 3.270435334s ago: executing program 1 (id=8475): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060005"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0, 0xf5}, {&(0x7f0000000680)=""/180, 0xb4}], 0x2, 0x6, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0xd, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.116050557s ago: executing program 1 (id=8478): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0xb00000000065808, 0x0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000100)={{0xffffffffffffffff, 0x4, 0x4, 0x100, 0xb}, [{0x7, 0x1, 0x4, 0x78}, {0x3, 0x3ff, 0x6, 0xf}, {0x9, 0x7, 0x1, 0x92}, {0x40, 0x2, 0x6, 0xa}, {0x5, 0xa, 0x3, 0x7f}]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000040)=0x3, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000240)={0xbe, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) socket$kcm(0x2, 0x3, 0x2) unshare(0x2c060000) unshare(0x24020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe9}}, [@TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x8}}, {0x14, 0x2, [0x1, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x5c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_BURST={0x8}, @TCA_TBF_RATE64={0xc, 0x4, 0x6f575620ad41a027}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5dd8ef3b4ab2247a}, @TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x0, 0x7, 0xfffc, 0x1, 0x1000}, {0x3, 0x2, 0x3, 0xfffc, 0x2, 0x9}, 0x3, 0x1, 0xb02}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r1, 0xe6905000) 2.95291128s ago: executing program 1 (id=8482): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x110e22fff7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.855958735s ago: executing program 2 (id=8483): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000800000000000000330000000000000000000000000000001e0000000000000001000000040000000000000000000000fdffffffffffffff0600000000000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff0000000000000000000000000000000000000000000000000000000001000000003200"], 0x23c}}, 0x8000000) 2.809636546s ago: executing program 2 (id=8485): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0xd6cc, 0x7, 0x7, 0xd4f, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r5, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r4, 0x1, 0xda, 0x6, @remote}, 0x14) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x2, 0x0, 0x7}, 0x10) r9 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x158, 0x1170, 0x1170, 0x158, 0x1170, 0x268, 0x1398, 0x1398, 0x268, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @remote, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x4e20, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x55fb, 0xb61, 0xa2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff, 0x0, 0xff], 'syzkaller1\x00', 'hsr0\x00', {0xff}, {}, 0x3a, 0x4, 0x5, 0x46}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x4, "d8bb90077ca9bbe84be6e6b9a6d8072af162238b145bbba0ddb6c3ead0c2"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c0002"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) 2.598329796s ago: executing program 1 (id=8487): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x128}, 0x4008094) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x53fa9e65deea832f, 0xa, 0xfffd, 0x8000}, 0x20) 2.483996447s ago: executing program 2 (id=8489): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r1}, 0x18) 2.31949267s ago: executing program 0 (id=8492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r0, r0, 0x37, 0x2028, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2.286357558s ago: executing program 0 (id=8493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x5, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x3}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001cc0)=ANY=[@ANYRESOCT=r3, @ANYRES64=r2, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYBLOB="77eb17062981ca3bd76e2241d06073524f2e4bd605dd34cc608f10886f503cc3294a5de57f0d735c18dc6772ed4e9486c2bb8c10f4f381747384bdcba11262fbea452948664f01e3e55b07330ecb4913f377e55114baec646ade04a9288227647672a53b9b4d0d837d476f3f5519923cb102f019d0f511d966b123704b8d56bbda06bc09c31e8a8c9f3d896f83b5a94c5c3a16eb2439656855a7015b1fdfe9d565d5dfb82af09a92013d", @ANYRES8=r2, @ANYRES16=r3, @ANYRES64=r1, @ANYRESDEC=r1], 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000b500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800"], 0x150}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000000040)="d2ff03cb4608008cb89e08d986dd", 0x0, 0xb22a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000380)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f0800000000", @ANYBLOB="0000000000000000b702000014000000bf030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d4800000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x15, 0x3, 'fo\x00', 0x20, 0x4, 0x8}, 0x2c) socket$kcm(0xa, 0x7, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000020000100000000000000000002000010000088bd3c960d250854efab7c585ccd590000000000000500190033000000"], 0x24}}, 0x48850) 2.280482022s ago: executing program 4 (id=8494): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x7, 0x2, 0x80, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[], 0x0) 2.119761469s ago: executing program 4 (id=8496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e640000000014000280050001000100000005000d000200000008000a00", @ANYRES32=r10], 0x4c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x2, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.720469032s ago: executing program 3 (id=8500): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1110000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000066080200c87c0000180000000000000000000000030000009500000000000000b66a020008000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07"], 0x340a) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2}, 0x10) 1.638164487s ago: executing program 1 (id=8501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@deltaction={0x3c, 0x18, 0x1, 0x70bc29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)={0x90, r2, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x84, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004401}, 0x44094) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x453, 0x800, 0x70bd2b, 0x25dfdbfe, "d198673ba6fba8bbbb82adfa83bda89ce4fd679d17135bcb477bccdf78a22635b22041d6eb94c44d79b5984a023b6dda1bca6420e5210208f97e66196d4191042e72f2da3e2994a9213d1564dbd7a73304c7aa926c1b9af8ba616115c85a4558d087166aea44a680e8de3b0e57a509f3dbc0ec80f08261924af0758a0d8c2c3d7e1948fca342701fc1b6ce344cd4abc3be65a1273d9c0be5e3fe9686864dd0c2ff3818a86a33a3c9ecbe", [""]}, 0xbc}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.524093905s ago: executing program 2 (id=8502): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket(0x1, 0x5, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @immediate={{0xffffffffffffffec}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6490ffffff00370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc0100000000000000000000000000000000000000000000000300000000000000000000000000010000000008000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000000000000000000000fcffffff00000000020000004c001400726d64313630"], 0x1a0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="200400000000000008001b93d1000000b0b4bee07e29495c49cc42de420e9751ebfc54a1af23fe47005d0f773030b6519cff38d89eae9e42d44cddb15480205be2ef00000000000066c83dfc35f7d8"], 0x28}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x64, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x0, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)=@getchain={0x2c, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x0, 0x8}, {0x13}}, [{0x8, 0xb, 0x1ccb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001400)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) 1.410494434s ago: executing program 4 (id=8503): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000008c0)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x34, r3, 0x6a98047402e98331, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) 1.327306409s ago: executing program 1 (id=8504): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r1, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001680)=""/155, 0x9b}], 0x7, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3], 0x270}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0x1, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4c014) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0x7, 0x0, &(0x7f00000003c0)="df33c9f7b9a600", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 1.17748392s ago: executing program 4 (id=8505): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x10000, 0x24, 0xde8e, 0x14100, r0, 0x3, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0xd}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) unshare(0x22020600) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x7, {0x41, 0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 1.128145792s ago: executing program 0 (id=8506): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0xc}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x4010) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0xa, {0xa, 0xffff, 0x0, @mcast1, 0xf}}, 0x24) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x121042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) r8 = socket$isdn_base(0x22, 0x3, 0x0) (async, rerun: 64) r9 = epoll_create(0x5dec346f) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0x2}) ioctl$PPPIOCGFLAGS1(r7, 0x8933, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000feffffffffffffff110000000000000000000000000000007f000000000000000000000000000000000000000000000000000000000000020000000000000000ff0000000000000000000000000000000c0015005a07350081000000"], 0xc4}}, 0x2c000010) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 716.887834ms ago: executing program 0 (id=8507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff00000000000000000000000000000000000000000000000008000000000000006c0000000000000000000000000000001e0000000000000001000000040000000000000000000000fdffffffffffffff0600000000000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff0000000000000000000000000000000000000000000000000000000001000000003200"], 0x23c}}, 0x8000000) 686.140379ms ago: executing program 4 (id=8508): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 630.693706ms ago: executing program 2 (id=8509): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070020002000004000000c00018006000600"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r2 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) preadv(r2, 0x0, 0x0, 0x6, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 628.896377ms ago: executing program 3 (id=8510): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000000500000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x3e000000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 520.104256ms ago: executing program 2 (id=8511): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x128}, 0x4008094) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x53fa9e65deea832f, 0xa, 0xfffd, 0x8000}, 0x20) 492.778459ms ago: executing program 0 (id=8512): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 458.339007ms ago: executing program 3 (id=8513): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x40800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r2, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300)=0x11a6) socket$phonet(0x23, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x40800) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r2, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) (async) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300)=0x11a6) (async) 335.833563ms ago: executing program 0 (id=8514): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x51, 0x3}}], 0x18}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0xa4ff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffef}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0x0, 0x0, {}, {}, {}, 0x2, @canfd={{0x1, 0x1, 0x1, 0x1}, 0xb, 0x2, 0x0, 0x0, "f6c237848b3fcfa3372535506d91b51a2f7b82d5bcc8e1faa186c2e303dd7c91c36213b0cb73ef8db283bdf30760a80b5a7d1139738f9da46176e9fbc071b858"}}, 0x80}, 0x300, 0x0, 0x0, 0x20000000}, 0x0) socket$inet(0x2, 0x80000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) recvmmsg(r4, &(0x7f000000ad00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x42, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r12}, &(0x7f0000000200), &(0x7f0000000240)=r11}, 0x20) openat$cgroup_ro(r11, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x20008800) socket$nl_route(0x10, 0x3, 0x0) 293.353424ms ago: executing program 3 (id=8515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettaction={0x120, 0x32, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x200}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0xfba4b62a4bee863c, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40881}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 182.536632ms ago: executing program 3 (id=8516): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff0000000008000000ac11cd1d000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff0000000008000000ac11cd1d000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) 0s ago: executing program 3 (id=8517): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="20010000120001000000000000000000100000000c0000000000000000000000fe"], 0x120}], 0x1}, 0x4000800) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) (async, rerun: 64) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x884) kernel console output (not intermixed with test programs): 3855][T29495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1003.685874][T29498] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1003.909800][T29508] batman_adv: batadv0: Adding interface: dummy0 [ 1003.965462][T29508] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.053759][T29508] batman_adv: batadv0: Interface activated: dummy0 [ 1004.682421][T29526] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6869'. [ 1006.789543][T29530] FAULT_INJECTION: forcing a failure. [ 1006.789543][T29530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.824935][ T5192] udevd[5192]: worker [22972] /devices/virtual/block/nbd4 timeout; kill it [ 1006.835090][T29530] CPU: 1 UID: 0 PID: 29530 Comm: syz.1.6870 Not tainted syzkaller #0 PREEMPT(full) [ 1006.835118][T29530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1006.835132][T29530] Call Trace: [ 1006.835141][T29530] [ 1006.835151][T29530] dump_stack_lvl+0xe8/0x150 [ 1006.835187][T29530] should_fail_ex+0x412/0x560 [ 1006.835214][T29530] _copy_to_user+0x31/0xb0 [ 1006.835242][T29530] bpf_test_finish+0x446/0x6b0 [ 1006.835271][T29530] ? __pfx_bpf_test_finish+0x10/0x10 [ 1006.835310][T29530] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1006.835354][T29530] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1006.835384][T29530] ? __fget_files+0x2a/0x420 [ 1006.835419][T29530] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1006.835445][T29530] bpf_prog_test_run+0x2c7/0x340 [ 1006.835470][T29530] __sys_bpf+0x643/0x950 [ 1006.835504][T29530] ? __pfx___sys_bpf+0x10/0x10 [ 1006.835549][T29530] ? ksys_write+0x242/0x270 [ 1006.835573][T29530] ? __pfx_ksys_write+0x10/0x10 [ 1006.835601][T29530] __x64_sys_bpf+0x7c/0x90 [ 1006.835630][T29530] do_syscall_64+0x14d/0xf80 [ 1006.835660][T29530] ? trace_irq_disable+0x3b/0x150 [ 1006.835687][T29530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.835709][T29530] ? clear_bhb_loop+0x40/0x90 [ 1006.835734][T29530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.835755][T29530] RIP: 0033:0x7f181c19c629 [ 1006.835777][T29530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.835795][T29530] RSP: 002b:00007f181d08e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1006.835817][T29530] RAX: ffffffffffffffda RBX: 00007f181c415fa0 RCX: 00007f181c19c629 [ 1006.835883][T29530] RDX: 0000000000000021 RSI: 00002000000001c0 RDI: 000000000000000a [ 1006.835896][T29530] RBP: 00007f181d08e090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.835910][T29530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1006.835923][T29530] R13: 00007f181c416038 R14: 00007f181c415fa0 R15: 00007ffe14dfa7a8 [ 1006.835957][T29530] [ 1006.876988][ T5192] udevd[5192]: seq 32941 '/devices/virtual/block/nbd4' killed [ 1007.136603][T29541] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1007.319798][T29547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6878'. [ 1007.347363][T29547] hsr_slave_0: left promiscuous mode [ 1007.591103][T29560] netlink: 'syz.1.6883': attribute type 1 has an invalid length. [ 1007.686255][T29560] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1007.700248][T29560] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1007.728513][T29568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1007.741588][T29568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1007.861537][T29576] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6887'. [ 1007.881925][T29576] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6887'. [ 1007.910933][T29577] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6887'. [ 1007.930777][T29585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6890'. [ 1007.944911][T29577] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6887'. [ 1007.996407][T29585] bond4: entered promiscuous mode [ 1008.005177][T29585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1008.053100][T29587] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1008.090411][T29587] bond4: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 1008.128389][T29587] bond4: (slave ip6tnl1): Error -95 calling set_mac_address [ 1008.414859][T29603] netlink: 'syz.0.6895': attribute type 1 has an invalid length. [ 1008.455441][T29603] netlink: 'syz.0.6895': attribute type 1 has an invalid length. [ 1008.603899][T29611] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6897'. [ 1008.674972][T29611] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.688317][T29613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6899'. [ 1008.713431][T29613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6899'. [ 1008.731877][T29616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6900'. [ 1008.743907][T29616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6900'. [ 1008.786339][T29611] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.906406][T29611] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.013798][T29611] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.138469][T29636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1009.223532][T29636] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1009.259558][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.290233][T29641] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6909'. [ 1009.303843][T29641] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1009.340246][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.360378][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.415172][T29645] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6910'. [ 1009.424999][T29645] netlink: 'syz.2.6910': attribute type 1 has an invalid length. [ 1009.432769][T29645] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6910'. [ 1009.476690][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.581364][T29645] syzkaller0: entered promiscuous mode [ 1009.587631][T29645] syzkaller0: entered allmulticast mode [ 1009.684439][T29661] netlink: 'syz.1.6915': attribute type 3 has an invalid length. [ 1009.702597][T29661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6915'. [ 1009.842323][T29667] netlink: 'syz.0.6916': attribute type 1 has an invalid length. [ 1012.629608][T29703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1012.875425][T29722] veth0_virt_wifi: entered promiscuous mode [ 1012.908136][T29722] veth0_virt_wifi: left promiscuous mode [ 1012.973089][T29726] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1013.741237][T29767] __nla_validate_parse: 10 callbacks suppressed [ 1013.741258][T29767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6949'. [ 1013.788932][T29767] openvswitch: netlink: Flow actions attr not present in new flow. [ 1013.851540][T29775] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6951'. [ 1013.862858][ T1580] block nbd4: Possible stuck request ffff8880272f8c00: control (read@0,1024B). Runtime 210 seconds [ 1013.876149][ T1580] block nbd4: Possible stuck request ffff8880272f8e00: control (read@1024,1024B). Runtime 210 seconds [ 1013.902925][ T1580] block nbd4: Possible stuck request ffff8880272f9000: control (read@2048,1024B). Runtime 210 seconds [ 1013.915368][ T1580] block nbd4: Possible stuck request ffff8880272f9200: control (read@3072,1024B). Runtime 210 seconds [ 1013.972453][T29775] nbd: nbd4 already in use [ 1014.001519][T29775] block nbd4: NBD_DISCONNECT [ 1014.027964][T29775] block nbd4: Send disconnect failed -32 [ 1014.034041][T29775] block nbd4: shutting down sockets [ 1014.051066][ C0] blk_print_req_error: 137 callbacks suppressed [ 1014.051092][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.067026][ C0] buffer_io_error: 138 callbacks suppressed [ 1014.067046][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1014.085576][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.095189][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1014.103726][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.113319][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1014.121166][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.130727][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1014.138774][T22972] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.153901][T22972] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1014.164542][T28900] block nbd7: Receive control failed (result -32) [ 1014.189483][T22972] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.272979][T22972] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1014.305986][T22972] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.373071][T22972] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1014.380936][T22972] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.448388][T22972] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1014.456489][T22972] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.473049][T22972] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1014.523187][T22972] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1014.552927][T22972] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1014.561587][T22972] ldm_validate_partition_table(): Disk read failed. [ 1014.603594][T22972] Dev nbd4: unable to read RDB block 0 [ 1014.613709][T22972] nbd4: unable to read partition table [ 1014.722346][ T5192] udevd[5192]: worker [22972] terminated by signal 9 (Killed) [ 1014.773955][ T5192] udevd[5192]: worker [22972] failed while handling '/devices/virtual/block/nbd4' [ 1014.867720][T29798] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1014.944997][T29796] syzkaller0: entered promiscuous mode [ 1014.950549][T29796] syzkaller0: entered allmulticast mode [ 1014.959749][T29796] 0: reclassify loop, rule prio 0, protocol 800 [ 1015.488020][T29831] 8021q: VLANs not supported on ip_vti0 [ 1015.620686][T29836] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6964'. [ 1015.679482][T29844] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1016.667904][T29884] xt_CT: No such helper "snmp_trap" [ 1016.679699][T29894] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1017.157402][T29918] SET target dimension over the limit! [ 1017.589837][T29936] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1018.239484][T29946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6999'. [ 1020.389803][T29949] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1020.410553][T29949] bond4 (unregistering): Released all slaves [ 1020.995549][T29971] ip6gre1: left promiscuous mode [ 1021.007554][T29971] ip6gre1: left allmulticast mode [ 1021.271459][T24816] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.310395][T24816] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.328664][T24816] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.338580][T24816] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.504785][T29982] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1021.878912][T30001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7014'. [ 1021.911777][T30001] vlan3: entered promiscuous mode [ 1021.928516][T29997] syzkaller0: entered promiscuous mode [ 1021.937404][T29997] syzkaller0: entered allmulticast mode [ 1022.065052][T30006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7015'. [ 1022.091903][T30006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7015'. [ 1022.131480][T30006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7015'. [ 1022.147989][T30006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7015'. [ 1022.172070][T30006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7015'. [ 1022.211372][T30006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7015'. [ 1022.227307][T30006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7015'. [ 1022.242369][T30006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7015'. [ 1022.261758][T30006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7015'. [ 1024.564252][ T5941] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1024.624729][ T5941] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1024.670150][T30051] openvswitch: netlink: Message has 147 unknown bytes. [ 1024.683766][T24815] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1025.469124][T30077] netlink: 'syz.2.7039': attribute type 1 has an invalid length. [ 1025.552639][T30077] bond4: entered promiscuous mode [ 1025.558872][T30077] bond4: entered allmulticast mode [ 1025.565100][T30077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1025.593582][T30077] macvlan3: entered promiscuous mode [ 1025.609304][T30077] macvlan3: entered allmulticast mode [ 1025.635900][T30077] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1025.749466][T30078] macvlan3: entered promiscuous mode [ 1025.756890][T30078] macvlan3: entered allmulticast mode [ 1025.778268][T30078] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1025.807822][T30094] SET target dimension over the limit! [ 1025.814999][ T998] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1025.825180][ T998] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1025.933780][T30098] bond1: entered allmulticast mode [ 1025.941976][T30097] bond1: left allmulticast mode [ 1026.057847][T30104] netlink: 'syz.4.7049': attribute type 32 has an invalid length. [ 1026.090384][T30104] bond6: option coupled_control: invalid value (12) [ 1026.343850][T13223] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1026.545719][T30104] bond6 (unregistering): Released all slaves [ 1026.936077][T30134] __nla_validate_parse: 64 callbacks suppressed [ 1026.936099][T30134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7055'. [ 1026.991597][T30141] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7059'. [ 1027.129988][T30149] syzkaller1: entered promiscuous mode [ 1027.144045][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7062'. [ 1027.153825][T30149] syzkaller1: entered allmulticast mode [ 1027.160446][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7062'. [ 1027.912448][T30164] netlink: 'syz.0.7067': attribute type 4 has an invalid length. [ 1028.027781][T30169] FAULT_INJECTION: forcing a failure. [ 1028.027781][T30169] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1028.054205][T30171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7070'. [ 1028.073658][T30169] CPU: 0 UID: 0 PID: 30169 Comm: syz.3.7071 Not tainted syzkaller #0 PREEMPT(full) [ 1028.073686][T30169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1028.073700][T30169] Call Trace: [ 1028.073709][T30169] [ 1028.073718][T30169] dump_stack_lvl+0xe8/0x150 [ 1028.073753][T30169] should_fail_ex+0x412/0x560 [ 1028.073785][T30169] prepare_alloc_pages+0x22a/0x650 [ 1028.073819][T30169] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1028.073850][T30169] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1028.073879][T30169] ? __pfx_policy_nodemask+0x10/0x10 [ 1028.073916][T30169] alloc_pages_mpol+0x232/0x4a0 [ 1028.073948][T30169] vma_alloc_folio_noprof+0xea/0x210 [ 1028.073978][T30169] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1028.074016][T30169] do_wp_page+0x1204/0x5a00 [ 1028.074051][T30169] ? __pfx_css_rstat_updated+0x10/0x10 [ 1028.074089][T30169] ? __pfx_do_wp_page+0x10/0x10 [ 1028.074115][T30169] ? do_raw_spin_lock+0x12b/0x2f0 [ 1028.074148][T30169] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1028.074181][T30169] handle_mm_fault+0x1520/0x3310 [ 1028.074227][T30169] ? handle_mm_fault+0xee/0x3310 [ 1028.074266][T30169] ? __pfx_handle_mm_fault+0x10/0x10 [ 1028.074317][T30169] ? lock_mm_and_find_vma+0xa7/0x340 [ 1028.074342][T30169] do_user_addr_fault+0x75b/0x1340 [ 1028.074388][T30169] exc_page_fault+0x6a/0xc0 [ 1028.074424][T30169] asm_exc_page_fault+0x26/0x30 [ 1028.074446][T30169] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1028.074472][T30169] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1028.074490][T30169] RSP: 0018:ffffc900055e79e8 EFLAGS: 00050206 [ 1028.074509][T30169] RAX: ffffffff84ae1c01 RBX: 0000000000001000 RCX: 0000000000000e00 [ 1028.074525][T30169] RDX: 0000000000000000 RSI: ffff888061fde200 RDI: 000020000000d000 [ 1028.074539][T30169] RBP: ffffc900055e7b40 R08: ffff888061fdefff R09: 1ffff1100c3fbdff [ 1028.074555][T30169] R10: dffffc0000000000 R11: ffffed100c3fbe00 R12: 000020000000de00 [ 1028.074570][T30169] R13: 00007ffffffff000 R14: ffff888061fde000 R15: 000020000000ce00 [ 1028.074595][T30169] ? _copy_from_user+0x91/0xb0 [ 1028.074633][T30169] _copy_to_user+0x8a/0xb0 [ 1028.074665][T30169] bpf_test_finish+0x446/0x6b0 [ 1028.074701][T30169] ? __pfx_bpf_test_finish+0x10/0x10 [ 1028.074742][T30169] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1028.074787][T30169] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1028.074818][T30169] ? __fget_files+0x2a/0x420 [ 1028.074853][T30169] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1028.074880][T30169] bpf_prog_test_run+0x2c7/0x340 [ 1028.074906][T30169] __sys_bpf+0x643/0x950 [ 1028.074941][T30169] ? __pfx___sys_bpf+0x10/0x10 [ 1028.074991][T30169] ? ksys_write+0x242/0x270 [ 1028.075015][T30169] ? __pfx_ksys_write+0x10/0x10 [ 1028.075045][T30169] __x64_sys_bpf+0x7c/0x90 [ 1028.075075][T30169] do_syscall_64+0x14d/0xf80 [ 1028.075106][T30169] ? trace_irq_disable+0x3b/0x150 [ 1028.075136][T30169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.075164][T30169] ? clear_bhb_loop+0x40/0x90 [ 1028.075191][T30169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.075212][T30169] RIP: 0033:0x7f53dff9c629 [ 1028.075232][T30169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.075250][T30169] RSP: 002b:00007f53e0dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1028.075271][T30169] RAX: ffffffffffffffda RBX: 00007f53e0215fa0 RCX: 00007f53dff9c629 [ 1028.075286][T30169] RDX: 0000000000000021 RSI: 00002000000001c0 RDI: 000000000000000a [ 1028.075300][T30169] RBP: 00007f53e0dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.075313][T30169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1028.075326][T30169] R13: 00007f53e0216038 R14: 00007f53e0215fa0 R15: 00007ffe7a419798 [ 1028.075362][T30169] [ 1028.611545][T30180] FAULT_INJECTION: forcing a failure. [ 1028.611545][T30180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.662308][T30180] CPU: 1 UID: 0 PID: 30180 Comm: syz.3.7074 Not tainted syzkaller #0 PREEMPT(full) [ 1028.662339][T30180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1028.662353][T30180] Call Trace: [ 1028.662362][T30180] [ 1028.662371][T30180] dump_stack_lvl+0xe8/0x150 [ 1028.662406][T30180] should_fail_ex+0x412/0x560 [ 1028.662437][T30180] _copy_from_user+0x2d/0xb0 [ 1028.662467][T30180] get_user_ifreq+0x6b/0x180 [ 1028.662504][T30180] inet_ioctl+0x3ec/0x560 [ 1028.662539][T30180] ? __pfx_inet_ioctl+0x10/0x10 [ 1028.662592][T30180] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1028.662624][T30180] sock_do_ioctl+0x101/0x320 [ 1028.662649][T30180] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1028.662668][T30180] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1028.662719][T30180] sock_ioctl+0x5c6/0x7f0 [ 1028.662742][T30180] ? __pfx_sock_ioctl+0x10/0x10 [ 1028.662763][T30180] ? __fget_files+0x2a/0x420 [ 1028.662791][T30180] ? __fget_files+0x3a0/0x420 [ 1028.662823][T30180] ? __fget_files+0x2a/0x420 [ 1028.662855][T30180] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1028.662888][T30180] ? __pfx_sock_ioctl+0x10/0x10 [ 1028.662909][T30180] __se_sys_ioctl+0xfc/0x170 [ 1028.662936][T30180] do_syscall_64+0x14d/0xf80 [ 1028.662966][T30180] ? trace_irq_disable+0x3b/0x150 [ 1028.662996][T30180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.663018][T30180] ? clear_bhb_loop+0x40/0x90 [ 1028.663044][T30180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.663066][T30180] RIP: 0033:0x7f53dff9c629 [ 1028.663087][T30180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.663106][T30180] RSP: 002b:00007f53e0dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.663129][T30180] RAX: ffffffffffffffda RBX: 00007f53e0215fa0 RCX: 00007f53dff9c629 [ 1028.663144][T30180] RDX: 0000200000000180 RSI: 0000000000008916 RDI: 0000000000000003 [ 1028.663158][T30180] RBP: 00007f53e0dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.663171][T30180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.663184][T30180] R13: 00007f53e0216038 R14: 00007f53e0215fa0 R15: 00007ffe7a419798 [ 1028.663219][T30180] [ 1028.895632][T30183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7076'. [ 1029.004512][T30189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.035885][T30195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7079'. [ 1029.289682][T30215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7083'. [ 1029.301927][T30215] netlink: 'syz.2.7083': attribute type 2 has an invalid length. [ 1029.338190][T30215] !©9: entered promiscuous mode [ 1029.366652][T30205] netlink: 'syz.2.7083': attribute type 2 has an invalid length. [ 1029.375895][T30205] !©9: left promiscuous mode [ 1029.475786][T30221] bond6: option arp_all_targets: invalid value (129) [ 1029.490213][T30221] bond6 (unregistering): Released all slaves [ 1029.533924][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1029.570073][T30225] batadv0: mtu less than device minimum [ 1029.584679][T30225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1029.597021][T30225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1029.608935][T30225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1029.620799][T30225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1029.632676][T30225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1029.644522][T30225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1029.656671][T30225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1029.668579][T30225] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1030.074600][T30249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7097'. [ 1030.158916][T30256] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7098'. [ 1031.129330][ T7400] lec:lec_start_xmit: lec0:No lecd attached [ 1031.667034][T30319] syzkaller0: entered promiscuous mode [ 1031.674877][T30319] syzkaller0: entered allmulticast mode [ 1031.699630][T30317] syzkaller0: entered promiscuous mode [ 1031.705345][T30317] syzkaller0: entered allmulticast mode [ 1032.033887][T30329] __nla_validate_parse: 5 callbacks suppressed [ 1032.033909][T30329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7120'. [ 1032.063877][T30329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7120'. [ 1032.275094][T30329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7120'. [ 1032.291192][T30329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7120'. [ 1032.395705][T30344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7126'. [ 1032.508463][T30359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7131'. [ 1032.737317][T30376] netlink: 292 bytes leftover after parsing attributes in process `syz.2.7138'. [ 1033.246977][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7147'. [ 1033.257395][T30402] netlink: 516 bytes leftover after parsing attributes in process `syz.0.7147'. [ 1033.319298][T30410] netlink: 'syz.1.7150': attribute type 1 has an invalid length. [ 1033.460301][T30416] syzkaller1: entered promiscuous mode [ 1033.470270][T30416] syzkaller1: entered allmulticast mode [ 1034.019622][T30448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7167'. [ 1034.188248][T30458] netlink: 'syz.2.7169': attribute type 4 has an invalid length. [ 1034.200306][T30458] netlink: 'syz.2.7169': attribute type 4 has an invalid length. [ 1034.586026][T30473] vlan3: entered promiscuous mode [ 1034.591139][T30473] bond0: entered promiscuous mode [ 1034.597041][T30473] bond_slave_0: entered promiscuous mode [ 1034.604779][T30473] bond_slave_1: entered promiscuous mode [ 1034.623732][T30473] net_ratelimit: 12 callbacks suppressed [ 1034.623755][T30473] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1035.177037][T30499] FAULT_INJECTION: forcing a failure. [ 1035.177037][T30499] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.197133][T30499] CPU: 0 UID: 0 PID: 30499 Comm: syz.2.7186 Not tainted syzkaller #0 PREEMPT(full) [ 1035.197163][T30499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1035.197176][T30499] Call Trace: [ 1035.197186][T30499] [ 1035.197196][T30499] dump_stack_lvl+0xe8/0x150 [ 1035.197233][T30499] should_fail_ex+0x412/0x560 [ 1035.197263][T30499] should_failslab+0xa8/0x100 [ 1035.197291][T30499] __kmalloc_noprof+0xe8/0x760 [ 1035.197315][T30499] ? sk_prot_alloc+0xe7/0x210 [ 1035.197349][T30499] sk_prot_alloc+0xe7/0x210 [ 1035.197376][T30499] ? sk_alloc+0x27/0x390 [ 1035.197406][T30499] sk_alloc+0x3a/0x390 [ 1035.197438][T30499] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 1035.197477][T30499] ? __fget_files+0x2a/0x420 [ 1035.197506][T30499] ? __fget_files+0x3a0/0x420 [ 1035.197540][T30499] ? __fget_files+0x2a/0x420 [ 1035.197573][T30499] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1035.197598][T30499] bpf_prog_test_run+0x2c7/0x340 [ 1035.197623][T30499] __sys_bpf+0x643/0x950 [ 1035.197657][T30499] ? __pfx___sys_bpf+0x10/0x10 [ 1035.197705][T30499] ? ksys_write+0x242/0x270 [ 1035.197728][T30499] ? __pfx_ksys_write+0x10/0x10 [ 1035.197758][T30499] __x64_sys_bpf+0x7c/0x90 [ 1035.197787][T30499] do_syscall_64+0x14d/0xf80 [ 1035.197817][T30499] ? trace_irq_disable+0x3b/0x150 [ 1035.197848][T30499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.197871][T30499] ? clear_bhb_loop+0x40/0x90 [ 1035.197897][T30499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.197919][T30499] RIP: 0033:0x7f78ab99c629 [ 1035.197939][T30499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.197957][T30499] RSP: 002b:00007f78ac912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1035.197980][T30499] RAX: ffffffffffffffda RBX: 00007f78abc15fa0 RCX: 00007f78ab99c629 [ 1035.197995][T30499] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 1035.198010][T30499] RBP: 00007f78ac912090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.198024][T30499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.198037][T30499] R13: 00007f78abc16038 R14: 00007f78abc15fa0 R15: 00007ffd4335f0f8 [ 1035.198078][T30499] [ 1036.252899][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 1036.261049][ C1] lec:lec_tx_timeout: lec0 [ 1036.419523][T24956] Bluetooth: hci4: command 0x0406 tx timeout [ 1036.893424][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1037.050390][T30526] FAULT_INJECTION: forcing a failure. [ 1037.050390][T30526] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.064334][T30526] CPU: 0 UID: 0 PID: 30526 Comm: syz.3.7198 Not tainted syzkaller #0 PREEMPT(full) [ 1037.064370][T30526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1037.064385][T30526] Call Trace: [ 1037.064395][T30526] [ 1037.064404][T30526] dump_stack_lvl+0xe8/0x150 [ 1037.064440][T30526] should_fail_ex+0x412/0x560 [ 1037.064470][T30526] should_failslab+0xa8/0x100 [ 1037.064497][T30526] __kmalloc_noprof+0xe8/0x760 [ 1037.064520][T30526] ? security_sk_alloc+0x52/0x360 [ 1037.064556][T30526] security_sk_alloc+0x52/0x360 [ 1037.064588][T30526] sk_prot_alloc+0x101/0x210 [ 1037.064615][T30526] ? sk_alloc+0x27/0x390 [ 1037.064645][T30526] sk_alloc+0x3a/0x390 [ 1037.064677][T30526] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 1037.064715][T30526] ? __fget_files+0x2a/0x420 [ 1037.064744][T30526] ? __fget_files+0x3a0/0x420 [ 1037.064773][T30526] ? __fget_files+0x2a/0x420 [ 1037.064806][T30526] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1037.064832][T30526] bpf_prog_test_run+0x2c7/0x340 [ 1037.064857][T30526] __sys_bpf+0x643/0x950 [ 1037.064891][T30526] ? __pfx___sys_bpf+0x10/0x10 [ 1037.064938][T30526] ? ksys_write+0x242/0x270 [ 1037.064963][T30526] ? __pfx_ksys_write+0x10/0x10 [ 1037.064993][T30526] __x64_sys_bpf+0x7c/0x90 [ 1037.065022][T30526] do_syscall_64+0x14d/0xf80 [ 1037.065054][T30526] ? trace_irq_disable+0x3b/0x150 [ 1037.065083][T30526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.065105][T30526] ? clear_bhb_loop+0x40/0x90 [ 1037.065131][T30526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.065153][T30526] RIP: 0033:0x7f53dff9c629 [ 1037.065173][T30526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.065193][T30526] RSP: 002b:00007f53e0dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1037.065217][T30526] RAX: ffffffffffffffda RBX: 00007f53e0215fa0 RCX: 00007f53dff9c629 [ 1037.065233][T30526] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 1037.065247][T30526] RBP: 00007f53e0dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.065261][T30526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.065273][T30526] R13: 00007f53e0216038 R14: 00007f53e0215fa0 R15: 00007ffe7a419798 [ 1037.065307][T30526] [ 1037.443991][T30529] tipc: Enabling of bearer rejected, failed to enable media [ 1037.500284][T30534] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1037.712682][T30541] __nla_validate_parse: 5 callbacks suppressed [ 1037.712704][T30541] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.7204'. [ 1037.728898][T30541] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1038.053807][T30556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7209'. [ 1038.161095][T30569] netlink: 'syz.4.7213': attribute type 1 has an invalid length. [ 1038.613340][T30587] netlink: 556 bytes leftover after parsing attributes in process `syz.3.7217'. [ 1039.312216][T30613] syzkaller0: entered promiscuous mode [ 1039.328171][T30613] syzkaller0: entered allmulticast mode [ 1039.349201][T30613] 0: reclassify loop, rule prio 0, protocol 800 [ 1039.367902][T30617] bridge3: entered allmulticast mode [ 1039.570399][T30623] tipc: Enabled bearer , priority 0 [ 1039.579971][T30623] syzkaller0: entered promiscuous mode [ 1039.586447][T30623] syzkaller0: entered allmulticast mode [ 1039.663681][T30622] tipc: Resetting bearer [ 1039.714800][T30622] tipc: Disabling bearer [ 1040.076683][T30652] delete_channel: no stack [ 1040.446375][T30665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7246'. [ 1042.943959][T30757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7273'. [ 1042.986667][ T30] audit: type=1804 audit(1771542699.609:11): pid=30756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7272" name="/newroot/228/cgroup.controllers" dev="tmpfs" ino=1178 res=1 errno=0 [ 1043.013821][ T30] audit: type=1800 audit(1771542699.609:12): pid=30756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7272" name="cgroup.controllers" dev="tmpfs" ino=1178 res=0 errno=0 [ 1043.037145][ T30] audit: type=1800 audit(1771542699.609:13): pid=30756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7272" name="cgroup.controllers" dev="tmpfs" ino=1178 res=0 errno=0 [ 1043.065976][T30759] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7272'. [ 1045.007996][T30777] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7276'. [ 1045.053483][T30781] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7278'. [ 1045.435682][T30806] netlink: 116 bytes leftover after parsing attributes in process `syz.0.7286'. [ 1045.535506][T30811] netlink: 'syz.4.7288': attribute type 1 has an invalid length. [ 1045.563272][T30812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7288'. [ 1045.581382][T30811] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1045.636226][T30812] bond6: entered promiscuous mode [ 1045.641368][T30812] bond6: entered allmulticast mode [ 1046.154898][T30837] netlink: 'syz.3.7294': attribute type 1 has an invalid length. [ 1046.168043][T30837] netlink: 'syz.3.7294': attribute type 1 has an invalid length. [ 1046.187200][T30837] netlink: 'syz.3.7294': attribute type 1 has an invalid length. [ 1046.195960][T30837] netlink: 'syz.3.7294': attribute type 1 has an invalid length. [ 1046.204705][T30837] netlink: 'syz.3.7294': attribute type 2 has an invalid length. [ 1046.212778][T30837] netlink: 'syz.3.7294': attribute type 2 has an invalid length. [ 1046.405007][T30843] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1046.447718][T30851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7298'. [ 1046.458086][T30851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7298'. [ 1046.527476][T30851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7298'. [ 1046.539202][T30851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7298'. [ 1046.554406][T30858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.897133][T30873] nbd: must specify at least one socket [ 1046.910953][T30873] nbd: must specify an index to disconnect [ 1047.510095][T30894] syzkaller0: entered promiscuous mode [ 1047.527104][T30894] syzkaller0: entered allmulticast mode [ 1047.549479][T30894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.650332][T30899] syzkaller0: entered promiscuous mode [ 1047.656733][T30899] syzkaller0: entered allmulticast mode [ 1050.172289][T30930] netlink: 'syz.1.7318': attribute type 9 has an invalid length. [ 1050.211801][T30930] netlink: 'syz.1.7318': attribute type 11 has an invalid length. [ 1050.223510][T30930] netlink: 'syz.1.7318': attribute type 12 has an invalid length. [ 1050.231523][T30930] __nla_validate_parse: 67 callbacks suppressed [ 1050.231542][T30930] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.7318'. [ 1050.306471][T30930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7318'. [ 1050.347360][T30934] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.7318'. [ 1050.364093][T30934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7318'. [ 1050.538067][T30952] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1050.918918][T30968] Bluetooth: MGMT ver 1.23 [ 1051.224054][T30976] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1051.268401][T30978] FAULT_INJECTION: forcing a failure. [ 1051.268401][T30978] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.281251][T30978] CPU: 0 UID: 0 PID: 30978 Comm: syz.3.7335 Not tainted syzkaller #0 PREEMPT(full) [ 1051.281279][T30978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1051.281293][T30978] Call Trace: [ 1051.281302][T30978] [ 1051.281311][T30978] dump_stack_lvl+0xe8/0x150 [ 1051.281347][T30978] should_fail_ex+0x412/0x560 [ 1051.281378][T30978] should_failslab+0xa8/0x100 [ 1051.281404][T30978] ? fib6_add_1+0x714/0x1460 [ 1051.281430][T30978] kmem_cache_alloc_noprof+0x87/0x650 [ 1051.281473][T30978] fib6_add_1+0x714/0x1460 [ 1051.281514][T30978] fib6_add+0x34c/0x18c0 [ 1051.281554][T30978] ? __pfx_fib6_add+0x10/0x10 [ 1051.281589][T30978] ? ip6_route_add+0xc9/0x1b0 [ 1051.281619][T30978] ip6_route_add+0xde/0x1b0 [ 1051.281649][T30978] ipv6_route_ioctl+0x3ac/0x4f0 [ 1051.281684][T30978] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 1051.281746][T30978] inet6_ioctl+0x246/0x2e0 [ 1051.281769][T30978] ? __pfx_inet6_ioctl+0x10/0x10 [ 1051.281789][T30978] ? tomoyo_path_number_perm+0x219/0x630 [ 1051.281821][T30978] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1051.281860][T30978] sock_do_ioctl+0x101/0x320 [ 1051.281887][T30978] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1051.281907][T30978] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1051.281958][T30978] sock_ioctl+0x5c6/0x7f0 [ 1051.281982][T30978] ? __pfx_sock_ioctl+0x10/0x10 [ 1051.282005][T30978] ? __fget_files+0x2a/0x420 [ 1051.282034][T30978] ? __fget_files+0x3a0/0x420 [ 1051.282062][T30978] ? __fget_files+0x2a/0x420 [ 1051.282095][T30978] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1051.282122][T30978] ? __pfx_sock_ioctl+0x10/0x10 [ 1051.282144][T30978] __se_sys_ioctl+0xfc/0x170 [ 1051.282170][T30978] do_syscall_64+0x14d/0xf80 [ 1051.282201][T30978] ? trace_irq_disable+0x3b/0x150 [ 1051.282231][T30978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.282254][T30978] ? clear_bhb_loop+0x40/0x90 [ 1051.282280][T30978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.282302][T30978] RIP: 0033:0x7f53dff9c629 [ 1051.282323][T30978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.282342][T30978] RSP: 002b:00007f53e0dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.282366][T30978] RAX: ffffffffffffffda RBX: 00007f53e0215fa0 RCX: 00007f53dff9c629 [ 1051.282382][T30978] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000003 [ 1051.282396][T30978] RBP: 00007f53e0dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.282409][T30978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.282422][T30978] R13: 00007f53e0216038 R14: 00007f53e0215fa0 R15: 00007ffe7a419798 [ 1051.282456][T30978] [ 1051.613368][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1051.717272][T30981] syzkaller1: entered promiscuous mode [ 1051.723871][T30981] syzkaller1: entered allmulticast mode [ 1051.785745][T24956] Bluetooth: hci0: command 0x0405 tx timeout [ 1051.963825][T30960] IPVS: length: 132 != 8 [ 1052.014321][T30960] pimreg: entered allmulticast mode [ 1052.060979][T30960] pimreg: left allmulticast mode [ 1052.158788][T30994] veth0_virt_wifi: entered promiscuous mode [ 1052.273617][T30994] veth0_virt_wifi: left promiscuous mode [ 1052.320028][T31003] netlink: 744 bytes leftover after parsing attributes in process `syz.4.7342'. [ 1052.363995][T31000] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7342'. [ 1052.376350][T31000] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7342'. [ 1052.389137][T31000] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1053.971152][T31063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7363'. [ 1054.048772][T31063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1054.076678][T31065] 8021q: VLANs not supported on lo [ 1054.106456][T31071] bond2: (slave batadv2): Opening slave failed [ 1054.565666][T31087] batman_adv: batadv0: Adding interface: geneve2 [ 1054.583626][T31087] batman_adv: batadv0: Interface activated: geneve2 [ 1054.610750][T31087] batadv0: mtu less than device minimum [ 1054.625190][T31087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1054.637487][T31087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1054.649290][T31087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1054.661127][T31087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1054.673081][T31087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1054.684877][T31087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1054.696734][T31087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1054.708585][T31087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1054.770026][T31095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7368'. [ 1054.831885][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1055.051251][T31099] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1055.107514][T31099] bond5 (unregistering): Released all slaves [ 1055.297112][T31113] 8021q: VLANs not supported on gre0 [ 1056.074643][T31149] tipc: Started in network mode [ 1056.092135][T31149] tipc: Node identity 4246, cluster identity 4711 [ 1056.127654][T31149] tipc: Node number set to 16966 [ 1056.269627][T31156] __nla_validate_parse: 1 callbacks suppressed [ 1056.269650][T31156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7379'. [ 1057.996094][T31188] pim6reg: entered allmulticast mode [ 1058.067536][T31187] validate_nla: 3 callbacks suppressed [ 1058.067558][T31187] netlink: 'syz.0.7381': attribute type 10 has an invalid length. [ 1058.106334][T31193] bridge_slave_1: left allmulticast mode [ 1058.112049][T31193] bridge_slave_1: left promiscuous mode [ 1058.129212][T31193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.182862][T31186] pim6reg: left allmulticast mode [ 1058.231470][T31187] syz_tun: entered promiscuous mode [ 1058.285680][T31187] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1058.710896][T31220] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7392'. [ 1060.252872][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 1060.261003][ C1] lec:lec_tx_timeout: lec0 [ 1061.231993][T31212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1061.597553][T31254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7403'. [ 1061.659684][T31256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7403'. [ 1062.066788][T31268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7407'. [ 1062.117967][T31268] vlan3: entered promiscuous mode [ 1062.351586][T31278] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7412'. [ 1062.452186][T31278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7412'. [ 1062.906064][T31298] netlink: 'syz.1.7419': attribute type 1 has an invalid length. [ 1063.025979][T31310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1063.046745][T31310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1063.078419][T31310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1063.094436][T31310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1063.172685][T31315] IPv6: NLM_F_CREATE should be specified when creating new route [ 1063.203225][T31315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7424'. [ 1063.927754][T31354] netlink: 'syz.2.7438': attribute type 1 has an invalid length. [ 1064.351455][T31365] netlink: 'syz.4.7441': attribute type 29 has an invalid length. [ 1064.393999][T31370] netlink: 'syz.4.7441': attribute type 29 has an invalid length. [ 1064.937216][T31389] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002 [ 1065.091073][T31395] netlink: 'syz.1.7450': attribute type 1 has an invalid length. [ 1065.146919][T31395] netlink: 'syz.1.7450': attribute type 11 has an invalid length. [ 1065.664110][T31416] netlink: 'syz.4.7457': attribute type 13 has an invalid length. [ 1065.763858][T25741] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1066.392396][T31431] bond2: entered promiscuous mode [ 1066.419964][T31431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1066.493734][T25741] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1066.513233][T31441] netlink: 'syz.2.7466': attribute type 28 has an invalid length. [ 1067.028962][T31441] dvmrp1: entered allmulticast mode [ 1067.202654][T31456] IPVS: set_ctl: invalid protocol: 199 172.20.20.13:20000 [ 1067.711464][T31478] sit1: entered promiscuous mode [ 1067.716699][T31478] sit1: entered allmulticast mode [ 1067.859246][T31483] bond0: (slave ipvlan0): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 1068.039791][T31492] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 1068.057396][T31485] net_ratelimit: 11 callbacks suppressed [ 1068.057417][T31485] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1068.708861][T31533] __nla_validate_parse: 78 callbacks suppressed [ 1068.708885][T31533] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7489'. [ 1068.741279][T10937] IPVS: starting estimator thread 0... [ 1068.893555][T31537] IPVS: using max 25 ests per chain, 60000 per kthread [ 1068.941515][T31545] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7491'. [ 1068.954043][T31545] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7491'. [ 1069.243779][T31557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7492'. [ 1069.287378][T31559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1069.401597][T31559] IPv6: Can't replace route, no match found [ 1069.504109][T31570] netlink: 'syz.2.7496': attribute type 1 has an invalid length. [ 1069.575544][T31563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.606508][T31563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1069.691779][ T5487] veth0_vlan: left promiscuous mode [ 1069.762169][ T5487] veth0_vlan: entered promiscuous mode [ 1069.900400][T31563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.945889][T31563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1070.037646][T31598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7502'. [ 1070.067489][T31599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7502'. [ 1070.110724][T31587] syzkaller1: entered promiscuous mode [ 1070.129014][T31587] syzkaller1: entered allmulticast mode [ 1070.241979][T31563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.275766][T31563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1070.459015][T31563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.470132][T31563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1070.507802][T31607] team0: Device gtp0 is of different type [ 1070.685242][T31617] tipc: Started in network mode [ 1070.690545][T31617] tipc: Node identity 080211, cluster identity 4711 [ 1070.714015][T31617] tipc: Enabled bearer , priority 0 [ 1070.755273][T31617] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 1070.763907][T31617] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 1070.847039][T24816] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1070.863122][T24816] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1070.871413][T24816] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1070.915518][T24816] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1070.957218][T31621] tipc: Resetting bearer [ 1070.963718][ T30] audit: type=1800 audit(1771542727.579:14): pid=31617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7507" name="memory.events" dev="tmpfs" ino=758 res=0 errno=0 [ 1071.029327][T24816] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1071.054396][T24816] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1071.107285][T24817] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1071.127657][T24817] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1071.356465][T31645] xt_policy: too many policy elements [ 1071.823513][T25741] tipc: Node number set to 134353152 [ 1072.246305][T31691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7525'. [ 1072.270991][T31691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7525'. [ 1072.329162][T31691] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7525'. [ 1072.649642][T31713] FAULT_INJECTION: forcing a failure. [ 1072.649642][T31713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.694217][T31713] CPU: 0 UID: 0 PID: 31713 Comm: syz.4.7531 Not tainted syzkaller #0 PREEMPT(full) [ 1072.694248][T31713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1072.694262][T31713] Call Trace: [ 1072.694271][T31713] [ 1072.694281][T31713] dump_stack_lvl+0xe8/0x150 [ 1072.694317][T31713] should_fail_ex+0x412/0x560 [ 1072.694348][T31713] _copy_from_user+0x2d/0xb0 [ 1072.694379][T31713] ___sys_sendmsg+0x1c6/0x360 [ 1072.694418][T31713] ? __pfx____sys_sendmsg+0x10/0x10 [ 1072.694487][T31713] ? __fget_files+0x2a/0x420 [ 1072.694516][T31713] ? __fget_files+0x3a0/0x420 [ 1072.694558][T31713] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1072.694592][T31713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1072.694633][T31713] ? __pfx_ksys_write+0x10/0x10 [ 1072.694668][T31713] do_syscall_64+0x14d/0xf80 [ 1072.694699][T31713] ? trace_irq_disable+0x3b/0x150 [ 1072.694730][T31713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.694752][T31713] ? clear_bhb_loop+0x40/0x90 [ 1072.694799][T31713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.694821][T31713] RIP: 0033:0x7fef2c99c629 [ 1072.694842][T31713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.694862][T31713] RSP: 002b:00007fef2d92c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.694885][T31713] RAX: ffffffffffffffda RBX: 00007fef2cc15fa0 RCX: 00007fef2c99c629 [ 1072.694901][T31713] RDX: 0000000000000800 RSI: 0000200000000340 RDI: 0000000000000003 [ 1072.694916][T31713] RBP: 00007fef2d92c090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.694932][T31713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.694945][T31713] R13: 00007fef2cc16038 R14: 00007fef2cc15fa0 R15: 00007ffff570cbd8 [ 1072.694980][T31713] [ 1072.996954][T31719] : entered promiscuous mode [ 1073.659582][T31750] netlink: 'syz.0.7542': attribute type 1 has an invalid length. [ 1073.817137][T31756] netlink: zone id is out of range [ 1073.834420][T31756] netlink: zone id is out of range [ 1073.839699][T31756] netlink: zone id is out of range [ 1073.846665][T31756] netlink: zone id is out of range [ 1073.853671][T31756] netlink: zone id is out of range [ 1073.859026][T31756] netlink: zone id is out of range [ 1073.865105][T31756] netlink: zone id is out of range [ 1073.883473][T31756] netlink: zone id is out of range [ 1073.903340][T31756] netlink: zone id is out of range [ 1073.908523][T31756] netlink: zone id is out of range [ 1074.186084][T31763] netlink: 'syz.4.7545': attribute type 8 has an invalid length. [ 1074.271730][T31769] netlink: 'syz.3.7548': attribute type 2 has an invalid length. [ 1074.292306][T31769] : entered promiscuous mode [ 1074.301980][T31769] __nla_validate_parse: 2 callbacks suppressed [ 1074.302001][T31769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7548'. [ 1074.378775][T31771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1074.413503][T31776] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.7550'. [ 1074.562517][T31790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7552'. [ 1074.605571][T31794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1074.692513][T31798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7552'. [ 1075.335223][T31817] bond7: entered promiscuous mode [ 1075.340602][T31817] bond7: entered allmulticast mode [ 1075.346586][T31817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1075.576587][T31838] ip6gre0: entered promiscuous mode [ 1075.858336][T31855] FAULT_INJECTION: forcing a failure. [ 1075.858336][T31855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.962066][T31855] CPU: 1 UID: 0 PID: 31855 Comm: syz.1.7569 Not tainted syzkaller #0 PREEMPT(full) [ 1075.962098][T31855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1075.962111][T31855] Call Trace: [ 1075.962120][T31855] [ 1075.962129][T31855] dump_stack_lvl+0xe8/0x150 [ 1075.962162][T31855] should_fail_ex+0x412/0x560 [ 1075.962190][T31855] _copy_from_user+0x2d/0xb0 [ 1075.962221][T31855] __sys_bpf+0x229/0x950 [ 1075.962256][T31855] ? __pfx___sys_bpf+0x10/0x10 [ 1075.962301][T31855] ? ksys_write+0x242/0x270 [ 1075.962325][T31855] ? __pfx_ksys_write+0x10/0x10 [ 1075.962355][T31855] __x64_sys_bpf+0x7c/0x90 [ 1075.962383][T31855] do_syscall_64+0x14d/0xf80 [ 1075.962414][T31855] ? trace_irq_disable+0x3b/0x150 [ 1075.962443][T31855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.962465][T31855] ? clear_bhb_loop+0x40/0x90 [ 1075.962490][T31855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.962513][T31855] RIP: 0033:0x7f181c19c629 [ 1075.962533][T31855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.962552][T31855] RSP: 002b:00007f181d08e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1075.962575][T31855] RAX: ffffffffffffffda RBX: 00007f181c415fa0 RCX: 00007f181c19c629 [ 1075.962591][T31855] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1075.962604][T31855] RBP: 00007f181d08e090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.962617][T31855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.962629][T31855] R13: 00007f181c416038 R14: 00007f181c415fa0 R15: 00007ffe14dfa7a8 [ 1075.962662][T31855] [ 1076.801707][T31884] netlink: 'syz.1.7574': attribute type 1 has an invalid length. [ 1076.839635][T31885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7574'. [ 1076.994886][T31892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7576'. [ 1077.660320][T31919] netlink: 'syz.0.7583': attribute type 12 has an invalid length. [ 1078.123250][T31934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7588'. [ 1078.151462][T31934] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1078.667303][T31953] vlan3: entered promiscuous mode [ 1078.679191][T31953] syz_tun: entered promiscuous mode [ 1079.444470][T31979] 8021q: VLANs not supported on ip6tnl0 [ 1079.644041][T31987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7597'. [ 1079.805725][T31989] net_ratelimit: 63 callbacks suppressed [ 1079.805747][T31989] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1079.904501][T31991] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7599'. [ 1080.117045][T32005] syzkaller0: entered promiscuous mode [ 1080.131329][T32005] syzkaller0: entered allmulticast mode [ 1080.147371][T32008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7604'. [ 1080.667481][T32033] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7609'. [ 1080.939134][T32049] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1080.970020][T32051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7615'. [ 1081.053124][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1081.470865][T32079] batman_adv: batadv0: Adding interface: geneve3 [ 1081.480426][T32079] batman_adv: batadv0: Interface activated: geneve3 [ 1081.492704][T32078] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7624'. [ 1081.608161][T32089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'. [ 1081.658305][T32089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7628'. [ 1081.698631][T24816] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.708561][T32089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'. [ 1081.720017][T24816] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.729077][T32089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7628'. [ 1081.741328][T24816] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.751814][T24816] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1081.769605][T32096] syzkaller0: entered promiscuous mode [ 1081.775304][T32096] syzkaller0: entered allmulticast mode [ 1082.138158][T32114] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 1082.302164][T32123] openvswitch: netlink: EtherType 0 is less than min 600 [ 1083.265884][T32160] tipc: Enabled bearer , priority 0 [ 1083.281318][T32164] openvswitch: netlink: EtherType 0 is less than min 600 [ 1083.554034][T32173] netlink: 'syz.3.7652': attribute type 2 has an invalid length. [ 1083.651301][T32160] syzkaller0: entered promiscuous mode [ 1083.669193][T32160] syzkaller0: entered allmulticast mode [ 1083.686375][T32160] tipc: Resetting bearer [ 1083.745218][T32171] sch_fq: defrate 4294967293 ignored. [ 1083.784784][T32173] : entered promiscuous mode [ 1083.805563][T32158] tipc: Resetting bearer [ 1086.196085][T32158] tipc: Disabling bearer [ 1086.218955][T32174] syzkaller1: entered promiscuous mode [ 1086.225388][T32174] syzkaller1: entered allmulticast mode [ 1086.721891][T32216] openvswitch: netlink: EtherType 0 is less than min 600 [ 1087.085501][T32234] __nla_validate_parse: 1 callbacks suppressed [ 1087.085525][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7671'. [ 1087.237352][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7673'. [ 1087.309259][T32243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7674'. [ 1087.426951][T32249] xt_NFQUEUE: number of total queues is 0 [ 1087.456179][T32249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7675'. [ 1087.631356][T32243] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7674'. [ 1087.768519][T32263] openvswitch: netlink: EtherType 0 is less than min 600 [ 1087.778949][T32264] FAULT_INJECTION: forcing a failure. [ 1087.778949][T32264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.810733][T32264] CPU: 0 UID: 0 PID: 32264 Comm: syz.4.7680 Not tainted syzkaller #0 PREEMPT(full) [ 1087.810764][T32264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1087.810778][T32264] Call Trace: [ 1087.810788][T32264] [ 1087.810806][T32264] dump_stack_lvl+0xe8/0x150 [ 1087.810843][T32264] should_fail_ex+0x412/0x560 [ 1087.810873][T32264] _copy_from_user+0x2d/0xb0 [ 1087.810905][T32264] ___sys_sendmsg+0x1c6/0x360 [ 1087.810943][T32264] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.811011][T32264] ? __fget_files+0x2a/0x420 [ 1087.811040][T32264] ? __fget_files+0x3a0/0x420 [ 1087.811080][T32264] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1087.811114][T32264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.811155][T32264] ? __pfx_ksys_write+0x10/0x10 [ 1087.811189][T32264] do_syscall_64+0x14d/0xf80 [ 1087.811220][T32264] ? trace_irq_disable+0x3b/0x150 [ 1087.811250][T32264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.811272][T32264] ? clear_bhb_loop+0x40/0x90 [ 1087.811299][T32264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.811320][T32264] RIP: 0033:0x7fef2c99c629 [ 1087.811341][T32264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.811359][T32264] RSP: 002b:00007fef2d92c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.811382][T32264] RAX: ffffffffffffffda RBX: 00007fef2cc15fa0 RCX: 00007fef2c99c629 [ 1087.811398][T32264] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1087.811412][T32264] RBP: 00007fef2d92c090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.811425][T32264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.811438][T32264] R13: 00007fef2cc16038 R14: 00007fef2cc15fa0 R15: 00007ffff570cbd8 [ 1087.811473][T32264] [ 1088.274696][T32278] tipc: Cannot configure node identity twice [ 1088.450476][T32292] ªªªªª9ÿ: renamed from lo [ 1088.628507][T32302] openvswitch: netlink: EtherType 0 is less than min 600 [ 1089.022051][T32315] mac80211_hwsim hwsim68 syzkaller0: left promiscuous mode [ 1089.033072][T32315] mac80211_hwsim hwsim68 syzkaller0: left allmulticast mode [ 1089.596838][T32344] openvswitch: netlink: EtherType 0 is less than min 600 [ 1090.770368][T32369] openvswitch: netlink: EtherType 0 is less than min 600 [ 1090.933402][T32377] netlink: 'syz.3.7718': attribute type 8 has an invalid length. [ 1090.996056][T32379] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1091.861181][T32404] FAULT_INJECTION: forcing a failure. [ 1091.861181][T32404] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.894016][T32404] CPU: 1 UID: 0 PID: 32404 Comm: syz.0.7733 Not tainted syzkaller #0 PREEMPT(full) [ 1091.894045][T32404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1091.894059][T32404] Call Trace: [ 1091.894067][T32404] [ 1091.894077][T32404] dump_stack_lvl+0xe8/0x150 [ 1091.894112][T32404] should_fail_ex+0x412/0x560 [ 1091.894143][T32404] should_failslab+0xa8/0x100 [ 1091.894169][T32404] ? skb_clone+0x212/0x3a0 [ 1091.894213][T32404] kmem_cache_alloc_noprof+0x87/0x650 [ 1091.894246][T32404] ? __netlink_lookup+0xc6/0x8b0 [ 1091.894278][T32404] skb_clone+0x212/0x3a0 [ 1091.894312][T32404] __netlink_deliver_tap+0x404/0x850 [ 1091.894348][T32404] ? netlink_deliver_tap+0x2e/0x1b0 [ 1091.894375][T32404] netlink_deliver_tap+0x19c/0x1b0 [ 1091.894401][T32404] netlink_unicast+0x7e3/0x9b0 [ 1091.894431][T32404] ? __pfx_netlink_unicast+0x10/0x10 [ 1091.894456][T32404] ? netlink_sendmsg+0x650/0xb40 [ 1091.894479][T32404] ? skb_put+0x11b/0x210 [ 1091.894512][T32404] netlink_sendmsg+0x813/0xb40 [ 1091.894547][T32404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1091.894575][T32404] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1091.894602][T32404] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1091.894627][T32404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1091.894651][T32404] ____sys_sendmsg+0xa68/0xad0 [ 1091.894690][T32404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1091.894729][T32404] ? import_iovec+0x73/0xa0 [ 1091.894762][T32404] ___sys_sendmsg+0x2a5/0x360 [ 1091.894799][T32404] ? __pfx____sys_sendmsg+0x10/0x10 [ 1091.894867][T32404] ? __fget_files+0x2a/0x420 [ 1091.894897][T32404] ? __fget_files+0x3a0/0x420 [ 1091.894937][T32404] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1091.894972][T32404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1091.895013][T32404] ? __pfx_ksys_write+0x10/0x10 [ 1091.895047][T32404] do_syscall_64+0x14d/0xf80 [ 1091.895077][T32404] ? trace_irq_disable+0x3b/0x150 [ 1091.895107][T32404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.895129][T32404] ? clear_bhb_loop+0x40/0x90 [ 1091.895155][T32404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.895177][T32404] RIP: 0033:0x7ff61fb9c629 [ 1091.895205][T32404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.895223][T32404] RSP: 002b:00007ff620a08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.895246][T32404] RAX: ffffffffffffffda RBX: 00007ff61fe15fa0 RCX: 00007ff61fb9c629 [ 1091.895261][T32404] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1091.895275][T32404] RBP: 00007ff620a08090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.895289][T32404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.895302][T32404] R13: 00007ff61fe16038 R14: 00007ff61fe15fa0 R15: 00007ffc1a64a678 [ 1091.895338][T32404] [ 1092.208148][T32406] openvswitch: netlink: EtherType 0 is less than min 600 [ 1092.247274][T32408] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.7732'. [ 1092.446540][T32414] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1092.456725][T32414] batman_adv: batadv0: Interface deactivated: dummy0 [ 1092.474143][T32414] batman_adv: batadv0: Removing interface: dummy0 [ 1092.539014][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7739'. [ 1092.568035][T32427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7739'. [ 1092.578345][T32427] netlink: 'syz.4.7739': attribute type 6 has an invalid length. [ 1092.596133][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7739'. [ 1092.606123][T32427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7739'. [ 1092.615980][T32427] netlink: 'syz.4.7739': attribute type 6 has an invalid length. [ 1092.631866][T32411] raw_sendmsg: syz.3.7738 forgot to set AF_INET. Fix it! [ 1092.828784][T32437] netlink: 'syz.3.7741': attribute type 89 has an invalid length. [ 1093.053558][T32449] openvswitch: netlink: EtherType 0 is less than min 600 [ 1093.533304][T32471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7752'. [ 1093.654325][T32477] netlink: 'syz.2.7754': attribute type 1 has an invalid length. [ 1093.801299][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.813960][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.834451][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.882689][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.456574][T32510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7764'. [ 1094.480445][T32510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7764'. [ 1094.505900][T32515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7763'. [ 1094.516131][ T7400] lec:lec_start_xmit: lec0:No lecd attached [ 1094.654994][T32520] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1094.738134][T32520] bond4 (unregistering): Released all slaves [ 1095.468866][T32540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.476493][T32540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.575830][T32540] batman_adv: batadv0: Interface deactivated: dummy0 [ 1095.984909][T32540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.054878][T32540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.623669][T32540] bond1: left promiscuous mode [ 1096.652528][T32540] ip6erspan0: left allmulticast mode [ 1096.669773][T32540] team1: left promiscuous mode [ 1096.674871][T32540] team1: left allmulticast mode [ 1096.683500][T32540] team2: left promiscuous mode [ 1096.688340][T32540] team2: left allmulticast mode [ 1096.734888][T32540] batman_adv: batadv0: Interface deactivated: geneve2 [ 1096.756569][T32540] sit1: left promiscuous mode [ 1096.761336][T32540] sit1: left allmulticast mode [ 1096.933756][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.009976][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.067100][T32573] netlink: 'syz.3.7777': attribute type 1 has an invalid length. [ 1097.078541][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.096030][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.122123][T32581] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1097.208360][T32573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1097.264359][T32576] __nla_validate_parse: 2 callbacks suppressed [ 1097.264383][T32576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7779'. [ 1097.639461][T32596] geneve4: entered promiscuous mode [ 1097.650572][T32596] geneve4: entered allmulticast mode [ 1097.944229][T32610] lo: Caught tx_queue_len zero misconfig [ 1097.986341][T32604] geneve1: Caught tx_queue_len zero misconfig [ 1098.058147][T32604] bond4: option arp_all_targets: invalid value (129) [ 1098.075400][T32608] xt_socket: unknown flags 0xfc [ 1098.094074][T32604] bond4 (unregistering): Released all slaves [ 1098.344598][T32623] pim6reg1: entered promiscuous mode [ 1098.350678][T32623] pim6reg1: entered allmulticast mode [ 1098.728838][T13223] IPVS: starting estimator thread 0... [ 1098.737427][T32643] netlink: zone id is out of range [ 1098.749964][T32643] netlink: zone id is out of range [ 1098.756655][T32643] netlink: zone id is out of range [ 1098.762151][T32643] netlink: zone id is out of range [ 1098.768766][T32643] netlink: zone id is out of range [ 1098.777983][T32643] netlink: zone id is out of range [ 1098.788171][T32643] netlink: zone id is out of range [ 1098.805527][T32643] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7797'. [ 1098.815850][T32643] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7797'. [ 1098.829806][T32641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7795'. [ 1098.845948][T32647] IPVS: using max 28 ests per chain, 67200 per kthread [ 1098.937219][T32654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7800'. [ 1098.953116][T32654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7800'. [ 1098.982518][T32654] netlink: 'syz.3.7800': attribute type 1 has an invalid length. [ 1099.326237][T32677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7805'. [ 1099.405095][T32679] batman_adv: batadv0: Adding interface: geneve4 [ 1099.448635][T32679] batman_adv: batadv0: Interface activated: geneve4 [ 1099.484189][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.511164][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.525819][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.545013][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.679477][T32695] netlink: 'syz.4.7808': attribute type 26 has an invalid length. [ 1099.755739][T32704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1100.057504][T32722] tipc: Started in network mode [ 1100.077578][T32722] tipc: Node identity 4246, cluster identity 4711 [ 1100.104786][T32722] tipc: Node number set to 16966 [ 1100.125739][T32724] netlink: 'syz.4.7820': attribute type 11 has an invalid length. [ 1100.167628][T32724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7820'. [ 1100.178884][T32726] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 1100.189652][T32726] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 1100.252964][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1100.261066][ C1] lec:lec_tx_timeout: lec0 [ 1100.383972][T32737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7823'. [ 1100.396707][T32737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7823'. [ 1100.560674][T32748] netlink: 'syz.4.7826': attribute type 1 has an invalid length. [ 1100.811630][T32766] syzkaller1: entered promiscuous mode [ 1100.843067][T32766] syzkaller1: entered allmulticast mode [ 1101.107949][ T315] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1101.348900][ T330] sctp: [Deprecated]: syz.0.7841 (pid 330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1101.348900][ T330] Use struct sctp_sack_info instead [ 1102.314182][ T389] FAULT_INJECTION: forcing a failure. [ 1102.314182][ T389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.327900][ T389] CPU: 1 UID: 0 PID: 389 Comm: syz.2.7862 Not tainted syzkaller #0 PREEMPT(full) [ 1102.327929][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1102.327943][ T389] Call Trace: [ 1102.327952][ T389] [ 1102.327961][ T389] dump_stack_lvl+0xe8/0x150 [ 1102.327996][ T389] should_fail_ex+0x412/0x560 [ 1102.328027][ T389] _copy_from_user+0x2d/0xb0 [ 1102.328058][ T389] ___sys_sendmsg+0x1c6/0x360 [ 1102.328097][ T389] ? __pfx____sys_sendmsg+0x10/0x10 [ 1102.328134][ T389] ? kstrtouint+0x6e/0xe0 [ 1102.328184][ T389] ? __fget_files+0x2a/0x420 [ 1102.328213][ T389] ? __fget_files+0x3a0/0x420 [ 1102.328253][ T389] __sys_sendmmsg+0x27c/0x4e0 [ 1102.328289][ T389] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1102.328318][ T389] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1102.328378][ T389] ? ksys_write+0x242/0x270 [ 1102.328403][ T389] ? __pfx_ksys_write+0x10/0x10 [ 1102.328432][ T389] __x64_sys_sendmmsg+0xa0/0xc0 [ 1102.328466][ T389] do_syscall_64+0x14d/0xf80 [ 1102.328495][ T389] ? trace_irq_disable+0x3b/0x150 [ 1102.328526][ T389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.328548][ T389] ? clear_bhb_loop+0x40/0x90 [ 1102.328583][ T389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.328605][ T389] RIP: 0033:0x7f78ab99c629 [ 1102.328626][ T389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.328644][ T389] RSP: 002b:00007f78ac912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1102.328667][ T389] RAX: ffffffffffffffda RBX: 00007f78abc15fa0 RCX: 00007f78ab99c629 [ 1102.328683][ T389] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 1102.328697][ T389] RBP: 00007f78ac912090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.328709][ T389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.328721][ T389] R13: 00007f78abc16038 R14: 00007f78abc15fa0 R15: 00007ffd4335f0f8 [ 1102.328755][ T389] [ 1102.984431][ T406] __nla_validate_parse: 1 callbacks suppressed [ 1102.984453][ T406] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7867'. [ 1103.161397][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.170984][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.874978][ T431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7877'. [ 1104.541628][ T462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7885'. [ 1104.602508][ T456] netlink: 'syz.2.7882': attribute type 1 has an invalid length. [ 1104.605837][ T462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7885'. [ 1104.990429][ T474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7888'. [ 1105.595059][ T499] netlink: 'syz.4.7896': attribute type 1 has an invalid length. [ 1105.608287][ T495] gretap0: entered promiscuous mode [ 1105.614347][ T495] vlan4: entered promiscuous mode [ 1105.627142][ T500] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7896'. [ 1105.726816][ T499] bond9: entered promiscuous mode [ 1105.732371][ T499] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1105.761905][ T498] dummy0: entered promiscuous mode [ 1105.768561][ T498] macsec0: entered promiscuous mode [ 1105.775121][ T498] macsec0: entered allmulticast mode [ 1105.780534][ T498] dummy0: entered allmulticast mode [ 1105.810741][ T498] dummy0: left allmulticast mode [ 1105.816858][ T498] dummy0: left promiscuous mode [ 1106.930223][ T522] netlink: 'syz.4.7905': attribute type 1 has an invalid length. [ 1107.062039][ T523] gretap2: entered allmulticast mode [ 1107.072229][ T523] bond10: (slave gretap2): making interface the new active one [ 1107.097638][ T523] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 1107.250829][ T536] batman_adv: batadv0: Interface activated: dummy0 [ 1107.286042][ T536] batadv0: mtu less than device minimum [ 1107.302023][ T536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1107.313950][ T536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1107.325750][ T536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1107.337877][ T536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1107.349822][ T536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1107.361641][ T536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1107.373497][ T536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1107.385343][ T536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1107.397126][ T536] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1107.648202][ T559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7914'. [ 1107.746323][ T568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7919'. [ 1107.759704][ T563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7918'. [ 1107.802392][ T568] bond4: entered promiscuous mode [ 1107.840421][ T568] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1107.866792][ T563] vlan3: entered promiscuous mode [ 1107.937029][ T576] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1108.033626][ T581] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1108.083469][ T581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1108.182693][ T586] ip6tnl0: Caught tx_queue_len zero misconfig [ 1108.191238][ T586] netlink: 280 bytes leftover after parsing attributes in process `syz.4.7924'. [ 1108.371936][ T593] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7925'. [ 1108.571738][ T599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7927'. [ 1108.593869][ T599] vlan3: entered promiscuous mode [ 1108.748107][ T603] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7928'. [ 1108.783014][ T603] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7928'. [ 1109.114294][ T618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7934'. [ 1109.204986][ T626] tunl0: Caught tx_queue_len zero misconfig [ 1109.469278][ T642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7938'. [ 1109.707887][ T651] bond11: entered promiscuous mode [ 1110.015228][ T672] sctp: [Deprecated]: syz.4.7950 (pid 672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1110.015228][ T672] Use struct sctp_sack_info instead [ 1110.080118][ T674] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1110.097347][ T674] bond3 (unregistering): Released all slaves [ 1110.104684][ T676] Cannot find add_set index 2 as target [ 1110.266154][ T682] batman_adv: batadv0: Adding interface: dummy0 [ 1110.274206][ T682] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.304124][ T682] batman_adv: batadv0: Interface activated: dummy0 [ 1110.494665][ T691] netlink: 'syz.4.7958': attribute type 1 has an invalid length. [ 1110.858103][ T705] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7963'. [ 1111.187121][ T720] netlink: 'syz.1.7969': attribute type 10 has an invalid length. [ 1111.282080][ T720] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1111.330983][ T720] team0: Failed to send options change via netlink (err -105) [ 1111.354245][ T720] team0: Port device geneve0 added [ 1112.440829][ T778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.487427][ T778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.576584][ T778] bond0 (unregistering): Released all slaves [ 1112.603783][ T783] netlink: 'syz.0.7988': attribute type 1 has an invalid length. [ 1112.614614][ T783] netlink: 'syz.0.7988': attribute type 2 has an invalid length. [ 1112.652486][ T780] netlink: 'syz.1.7987': attribute type 1 has an invalid length. [ 1112.683023][ T780] netlink: 'syz.1.7987': attribute type 3 has an invalid length. [ 1112.691256][ T780] NCSI netlink: No device for ifindex 813332851 [ 1112.775073][ T792] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.789819][ T792] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.851872][ T792] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.862330][ T792] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.927533][ T792] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1112.939910][ T792] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.007137][ T792] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.018345][ T792] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.169086][T31784] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.179800][T31784] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.204733][T31784] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.223696][T31784] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.232476][ T812] __nla_validate_parse: 7 callbacks suppressed [ 1113.232498][ T812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7996'. [ 1113.263395][T31784] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.272412][T31784] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.298031][ T3563] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.307238][ T3563] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.406853][ T812] macvtap1: entered promiscuous mode [ 1113.413160][ T812] mac80211_hwsim hwsim59 wlan1: entered promiscuous mode [ 1113.721200][ T823] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7999'. [ 1113.731552][ T823] net_ratelimit: 35 callbacks suppressed [ 1113.731574][ T823] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1113.848804][ T828] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8001'. [ 1113.860916][ T828] 0ªî{X¹¦: renamed from gretap0 [ 1113.867006][ T830] netlink: 'syz.3.8002': attribute type 1 has an invalid length. [ 1113.877549][ T828] 0ªî{X¹¦: entered allmulticast mode [ 1113.889251][ T828] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1113.945928][ T833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8002'. [ 1114.080932][ T831] syzkaller0: entered promiscuous mode [ 1114.087232][ T831] syzkaller0: entered allmulticast mode [ 1114.112608][ T833] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1114.132501][ T844] batman_adv: batadv0: Interface deactivated: dummy0 [ 1114.150222][ T844] batman_adv: batadv0: Removing interface: dummy0 [ 1114.236693][ T846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8006'. [ 1114.257066][ T846] netlink: 'syz.1.8006': attribute type 21 has an invalid length. [ 1114.275341][ T848] netlink: 'syz.3.8007': attribute type 10 has an invalid length. [ 1114.285043][ T848] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8007'. [ 1116.275109][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1116.439063][ T848] bond0: entered promiscuous mode [ 1116.444365][ T848] bond_slave_0: entered promiscuous mode [ 1116.450275][ T848] bond_slave_1: entered promiscuous mode [ 1116.458551][ T848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.468533][ T848] bridge0: port 4(bond0) entered blocking state [ 1116.476031][ T848] bridge0: port 4(bond0) entered disabled state [ 1116.482698][ T848] bond0: entered allmulticast mode [ 1116.488309][ T848] bond_slave_0: entered allmulticast mode [ 1116.506758][ T848] bond_slave_1: entered allmulticast mode [ 1119.275117][ T898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1119.296997][ T898] bridge0: entered allmulticast mode [ 1119.307680][ T898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1119.387981][ T890] syzkaller1: entered promiscuous mode [ 1119.394406][ T890] syzkaller1: entered allmulticast mode [ 1120.207415][ T943] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8034'. [ 1120.385677][ T958] x_tables: duplicate underflow at hook 2 [ 1121.209886][ T992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8052'. [ 1121.283918][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1121.292032][ C1] lec:lec_tx_timeout: lec0 [ 1121.417146][ T1002] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8055'. [ 1123.588785][ T1002] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1123.743751][ T1031] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8060'. [ 1123.971154][ T30] audit: type=1800 audit(1771542780.589:15): pid=1043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8065" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1883 res=0 errno=0 [ 1124.033019][ T1054] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1124.040420][ T1054] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1124.074854][ T1043] netlink: 'syz.1.8065': attribute type 2 has an invalid length. [ 1124.082957][ T1043] netlink: 'syz.1.8065': attribute type 1 has an invalid length. [ 1124.186895][ T1065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8071'. [ 1124.489259][ T1083] netlink: 'syz.1.8079': attribute type 1 has an invalid length. [ 1124.508163][ T1083] gretap1: entered allmulticast mode [ 1124.601201][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8081'. [ 1124.718327][ T1099] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1124.744788][ T1096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8080'. [ 1124.980947][ T1116] netlink: 'syz.2.8089': attribute type 1 has an invalid length. [ 1125.010642][ T1116] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1125.035939][ T1124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8091'. [ 1125.086372][ T1124] netlink: 15918 bytes leftover after parsing attributes in process `syz.4.8091'. [ 1125.449721][ T1135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8090'. [ 1125.691505][ T1146] netlink: 'syz.2.8097': attribute type 1 has an invalid length. [ 1125.893821][ T1146] bond6: entered promiscuous mode [ 1125.906360][ T1146] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1126.113720][T28900] Bluetooth: hci2: link tx timeout [ 1126.119624][T28900] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1126.369050][ T1165] xt_hashlimit: size too large, truncated to 1048576 [ 1126.405184][ T1174] batman_adv: batadv0: Adding interface: geneve4 [ 1126.405783][ T1176] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1126.420531][ T1174] batman_adv: batadv0: Interface activated: geneve4 [ 1126.451009][ T1165] xt_hashlimit: invalid interval [ 1126.572693][ T1183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8105'. [ 1126.606203][ T1188] mac80211_hwsim hwsim68 syzkaller0: left promiscuous mode [ 1126.621666][ T1188] mac80211_hwsim hwsim68 syzkaller0: left allmulticast mode [ 1126.647422][ T1186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1126.657862][ T1186] openvswitch: netlink: Flow actions attr not present in new flow. [ 1126.794844][ T1194] netlink: 'syz.1.8106': attribute type 33 has an invalid length. [ 1126.802811][ T1194] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1126.939785][ T1197] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1127.769793][ T1223] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.8117'. [ 1127.798816][ T1223] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1127.851286][ T1229] ipvlan2: entered promiscuous mode [ 1128.175722][T28900] Bluetooth: hci2: command 0x0406 tx timeout [ 1128.269595][ T1252] netlink: 'syz.1.8124': attribute type 28 has an invalid length. [ 1129.006006][ T1277] FAULT_INJECTION: forcing a failure. [ 1129.006006][ T1277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.021249][ T1277] CPU: 0 UID: 0 PID: 1277 Comm: syz.4.8132 Not tainted syzkaller #0 PREEMPT(full) [ 1129.021277][ T1277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1129.021290][ T1277] Call Trace: [ 1129.021298][ T1277] [ 1129.021307][ T1277] dump_stack_lvl+0xe8/0x150 [ 1129.021343][ T1277] should_fail_ex+0x412/0x560 [ 1129.021373][ T1277] _copy_to_user+0x31/0xb0 [ 1129.021408][ T1277] simple_read_from_buffer+0xe1/0x170 [ 1129.021433][ T1277] proc_fail_nth_read+0x1bb/0x230 [ 1129.021457][ T1277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.021480][ T1277] ? rw_verify_area+0x2a6/0x4d0 [ 1129.021494][ T1277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.021515][ T1277] vfs_read+0x20c/0xa70 [ 1129.021529][ T1277] ? fdget_pos+0x246/0x320 [ 1129.021554][ T1277] ? __pfx___mutex_lock+0x10/0x10 [ 1129.021579][ T1277] ? __pfx_vfs_read+0x10/0x10 [ 1129.021595][ T1277] ? __fget_files+0x2a/0x420 [ 1129.021619][ T1277] ? __fget_files+0x3a0/0x420 [ 1129.021639][ T1277] ? __fget_files+0x2a/0x420 [ 1129.021667][ T1277] ksys_read+0x150/0x270 [ 1129.021683][ T1277] ? __pfx_ksys_read+0x10/0x10 [ 1129.021707][ T1277] do_syscall_64+0x14d/0xf80 [ 1129.021729][ T1277] ? trace_irq_disable+0x3b/0x150 [ 1129.021751][ T1277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.021767][ T1277] ? clear_bhb_loop+0x40/0x90 [ 1129.021786][ T1277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.021801][ T1277] RIP: 0033:0x7fef2c95cece [ 1129.021816][ T1277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1129.021830][ T1277] RSP: 002b:00007fef2d92bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1129.021846][ T1277] RAX: ffffffffffffffda RBX: 00007fef2d92c6c0 RCX: 00007fef2c95cece [ 1129.021858][ T1277] RDX: 000000000000000f RSI: 00007fef2d92c0a0 RDI: 0000000000000007 [ 1129.021889][ T1277] RBP: 00007fef2d92c090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.021903][ T1277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.021925][ T1277] R13: 00007fef2cc16038 R14: 00007fef2cc15fa0 R15: 00007ffff570cbd8 [ 1129.021965][ T1277] [ 1129.348277][ T1281] syzkaller0: entered promiscuous mode [ 1129.354475][ T1281] syzkaller0: entered allmulticast mode [ 1129.518583][ T1286] tunl0: Caught tx_queue_len zero misconfig [ 1130.998780][ T1240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1131.425892][ T1310] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1131.503622][ T1310] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1131.518904][ T1310] bond7: (slave macvlan4): making interface the new active one [ 1131.576326][ T1310] bond7: (slave macvlan4): Enslaving as an active interface with an up link [ 1131.610896][ T1316] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:7840:f2ff:fe7d:1280 error=-28 [ 1131.644584][ T1327] __nla_validate_parse: 1 callbacks suppressed [ 1131.644604][ T1327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8148'. [ 1131.960084][ T1316] infiniband syz0: set down [ 1131.965218][ T1316] infiniband syz0: added bond0 [ 1132.007493][ T1316] RDS/IB: syz0: added [ 1132.011669][ T1316] smc: adding ib device syz0 with port count 1 [ 1132.018117][ T1316] smc: ib device syz0 port 1 has no pnetid [ 1132.304303][ T1349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8155'. [ 1132.460891][ T1355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8158'. [ 1132.473837][ T1359] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8160'. [ 1133.038050][ T1377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8166'. [ 1133.357664][ T1394] netlink: 'syz.4.8171': attribute type 10 has an invalid length. [ 1133.389518][ T1394] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8171'. [ 1133.434295][ T1391] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8170'. [ 1133.645083][ T1403] netlink: 'syz.4.8173': attribute type 1 has an invalid length. [ 1133.713911][ T1407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8173'. [ 1133.751599][ T1403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.813747][ T1403] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8173'. [ 1133.872184][ T1407] bond0: (slave geneve0): making interface the new active one [ 1133.882183][ T1407] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1133.895551][T24816] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.904963][T24816] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.919255][T31780] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.948790][T31780] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.106747][ T1417] netlink: 'syz.4.8177': attribute type 10 has an invalid length. [ 1134.130872][ T1417] veth1_macvtap: left promiscuous mode [ 1134.155584][ T1417] team0: Device veth1_macvtap failed to register rx_handler [ 1134.616115][ T1430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1134.821595][ T1435] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1135.086114][ T1443] openvswitch: netlink: Key 6 has unexpected len 20 expected 2 [ 1135.224344][ T1444] netlink: 'syz.4.8187': attribute type 33 has an invalid length. [ 1135.813237][ T1456] bond4: option tlb_dynamic_lb: invalid value (10) [ 1135.821736][ T1456] bond4 (unregistering): Released all slaves [ 1136.336699][ T1472] netlink: 'syz.4.8198': attribute type 1 has an invalid length. [ 1136.377579][ T1472] netlink: ct family unspecified [ 1136.382736][ T1472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1136.471235][ T1477] pim6reg99999999: entered allmulticast mode [ 1136.549327][ T1477] syzkaller0: entered promiscuous mode [ 1136.555124][ T1477] syzkaller0: entered allmulticast mode [ 1136.762319][ T1484] __nla_validate_parse: 3 callbacks suppressed [ 1136.762340][ T1484] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8201'. [ 1137.028230][ T1487] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1139.518634][ T1492] sctp: [Deprecated]: syz.2.8204 (pid 1492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1139.518634][ T1492] Use struct sctp_sack_info instead [ 1139.549943][ T1492] sctp: [Deprecated]: syz.2.8204 (pid 1492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1139.549943][ T1492] Use struct sctp_sack_info instead [ 1139.569641][ T1492] sctp: [Deprecated]: syz.2.8204 (pid 1492) Use of int in maxseg socket option. [ 1139.569641][ T1492] Use struct sctp_assoc_value instead [ 1139.616713][ T1494] netlink: 'syz.4.8205': attribute type 5 has an invalid length. [ 1139.704195][ T1496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8206'. [ 1140.049833][ T1519] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8213'. [ 1140.111576][ T1523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8217'. [ 1140.154501][ T1526] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.8215'. [ 1140.328645][ T1539] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8221'. [ 1142.883561][ T1510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1143.301375][ T1564] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8227'. [ 1143.343278][ T1560] netlink: 'syz.1.8227': attribute type 13 has an invalid length. [ 1143.557442][ T1569] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8229'. [ 1143.787160][ T1578] netlink: 'syz.3.8233': attribute type 2 has an invalid length. [ 1143.816494][ T1581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8234'. [ 1144.104740][ T1594] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1144.132713][ T1591] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1144.231799][ T1596] netlink: 'syz.4.8239': attribute type 16 has an invalid length. [ 1144.262655][ T1596] netlink: 'syz.4.8239': attribute type 17 has an invalid length. [ 1144.586210][ T1596] bridge0: port 4(syz_tun) entered blocking state [ 1144.593023][ T1596] bridge0: port 4(syz_tun) entered forwarding state [ 1144.610576][ T1596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.622109][ T1596] caif0: left allmulticast mode [ 1144.630362][ T1596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1144.856829][ T1623] : entered promiscuous mode [ 1145.250010][ T1643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8253'. [ 1145.431744][ T1651] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8257'. [ 1145.656294][ T1665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8261'. [ 1146.120427][ T1691] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8270'. [ 1146.198698][ T1695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8272'. [ 1146.763495][ T1710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8276'. [ 1146.852441][ T1710] netlink: 'syz.2.8276': attribute type 29 has an invalid length. [ 1146.874209][ T1710] netlink: 'syz.2.8276': attribute type 3 has an invalid length. [ 1146.883958][ T1710] netlink: 'syz.2.8276': attribute type 29 has an invalid length. [ 1147.361045][ T1727] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8283'. [ 1147.720814][ T1735] syzkaller0: entered promiscuous mode [ 1147.740466][ T1735] syzkaller0: entered allmulticast mode [ 1148.477970][ T1766] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8295'. [ 1150.217382][ T1769] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8297'. [ 1150.299642][ T1774] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1150.346774][ T1773] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1150.379450][ T1773] bond4 (unregistering): Released all slaves [ 1150.600102][ T1783] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1150.825343][ T1786] netlink: 'syz.1.8302': attribute type 2 has an invalid length. [ 1151.049811][ T1791] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1151.094410][ T1791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1151.125508][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1151.197667][ T1791] netlink: 'syz.3.8305': attribute type 15 has an invalid length. [ 1152.440113][ T1828] netlink: 'syz.2.8313': attribute type 10 has an invalid length. [ 1152.477157][ T1828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8313'. [ 1152.542217][ T1828] team0: Port device geneve0 added [ 1152.585928][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.604503][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.628735][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.654119][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.683653][ T1834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8315'. [ 1152.784635][ T1842] hsr0: entered promiscuous mode [ 1152.803159][ T1834] IPVS: Scheduler module ip_vs_sip not found [ 1152.812010][ T1845] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1153.175552][ T1861] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1153.429780][ T1869] tap0: tun_chr_ioctl cmd 1074025680 [ 1153.451606][ T1871] tap0: tun_chr_ioctl cmd 1074025680 [ 1153.869348][ T1894] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8334'. [ 1153.911555][ T1894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8334'. [ 1154.249440][ T1910] tipc: Enabling of bearer rejected, failed to enable media [ 1154.264642][ T1910] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8339'. [ 1154.761318][ T1929] netlink: 'syz.1.8346': attribute type 2 has an invalid length. [ 1154.922668][ T1934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8346'. [ 1155.451914][ T1947] gretap0: entered promiscuous mode [ 1155.466528][ T1947] vlan3: entered promiscuous mode [ 1155.639091][ T5945] IPVS: starting estimator thread 0... [ 1155.734162][ T1955] IPVS: using max 25 ests per chain, 60000 per kthread [ 1155.836762][ T1962] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8355'. [ 1156.164017][ T1971] netlink: 'syz.0.8360': attribute type 10 has an invalid length. [ 1156.631178][ T1979] syzkaller0: entered promiscuous mode [ 1156.643105][ T1979] syzkaller0: entered allmulticast mode [ 1157.497603][ T2000] syz.1.8367: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1157.517700][ T2000] CPU: 0 UID: 0 PID: 2000 Comm: syz.1.8367 Not tainted syzkaller #0 PREEMPT(full) [ 1157.517731][ T2000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1157.517746][ T2000] Call Trace: [ 1157.517755][ T2000] [ 1157.517766][ T2000] dump_stack_lvl+0xe8/0x150 [ 1157.517803][ T2000] warn_alloc+0x249/0x340 [ 1157.517829][ T2000] ? stack_trace_save+0xa9/0x100 [ 1157.517856][ T2000] ? __pfx_warn_alloc+0x10/0x10 [ 1157.517888][ T2000] ? kasan_save_track+0x4f/0x80 [ 1157.517909][ T2000] ? kasan_save_track+0x3e/0x80 [ 1157.517928][ T2000] ? __kasan_kmalloc+0x93/0xb0 [ 1157.517949][ T2000] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1157.517971][ T2000] ? xskq_create+0x56/0x170 [ 1157.517999][ T2000] ? xsk_setsockopt+0x54c/0x990 [ 1157.518024][ T2000] ? do_sock_setsockopt+0x17c/0x1b0 [ 1157.518053][ T2000] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1157.518081][ T2000] ? do_syscall_64+0x14d/0xf80 [ 1157.518127][ T2000] __vmalloc_node_range_noprof+0x132/0x1730 [ 1157.518186][ T2000] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1157.518217][ T2000] ? __kasan_kmalloc+0x93/0xb0 [ 1157.518247][ T2000] vmalloc_user_noprof+0xad/0xe0 [ 1157.518270][ T2000] ? xskq_create+0xbf/0x170 [ 1157.518300][ T2000] xskq_create+0xbf/0x170 [ 1157.518346][ T2000] xsk_init_queue+0x8a/0xe0 [ 1157.518377][ T2000] xsk_setsockopt+0x54c/0x990 [ 1157.518409][ T2000] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1157.518437][ T2000] ? __pfx_aa_sk_perm+0x10/0x10 [ 1157.518464][ T2000] ? aa_sock_opt_perm+0xff/0x1a0 [ 1157.518495][ T2000] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1157.518518][ T2000] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1157.518547][ T2000] do_sock_setsockopt+0x17c/0x1b0 [ 1157.518582][ T2000] __x64_sys_setsockopt+0x13d/0x1b0 [ 1157.518619][ T2000] do_syscall_64+0x14d/0xf80 [ 1157.518649][ T2000] ? trace_irq_disable+0x3b/0x150 [ 1157.518680][ T2000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.518703][ T2000] ? clear_bhb_loop+0x40/0x90 [ 1157.518730][ T2000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.518753][ T2000] RIP: 0033:0x7f181c19c629 [ 1157.518775][ T2000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.518794][ T2000] RSP: 002b:00007f181d08e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1157.518818][ T2000] RAX: ffffffffffffffda RBX: 00007f181c415fa0 RCX: 00007f181c19c629 [ 1157.518835][ T2000] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1157.518849][ T2000] RBP: 00007f181c232b39 R08: 0000000000000004 R09: 0000000000000000 [ 1157.518863][ T2000] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.518877][ T2000] R13: 00007f181c416038 R14: 00007f181c415fa0 R15: 00007ffe14dfa7a8 [ 1157.518914][ T2000] [ 1157.520472][ T2000] Mem-Info: [ 1157.903459][ T2000] active_anon:13307 inactive_anon:0 isolated_anon:0 [ 1157.903459][ T2000] active_file:3969 inactive_file:40360 isolated_file:0 [ 1157.903459][ T2000] unevictable:768 dirty:150 writeback:0 [ 1157.903459][ T2000] slab_reclaimable:14231 slab_unreclaimable:169836 [ 1157.903459][ T2000] mapped:31134 shmem:1506 pagetables:1412 [ 1157.903459][ T2000] sec_pagetables:0 bounce:0 [ 1157.903459][ T2000] kernel_misc_reclaimable:0 [ 1157.903459][ T2000] free:1199920 free_pcp:15213 free_cma:0 [ 1158.073623][ T2000] Node 0 active_anon:46028kB inactive_anon:0kB active_file:15876kB inactive_file:161240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124536kB dirty:600kB writeback:0kB shmem:4488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15812kB pagetables:5580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1158.228351][ T2000] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1158.395765][ T2000] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1158.522913][ T2026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8373'. [ 1158.574437][ T2000] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 1158.580299][ T2000] Node 0 DMA32 free:892628kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41428kB inactive_anon:0kB active_file:15876kB inactive_file:161240kB unevictable:1536kB writepending:636kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:58376kB local_pcp:37036kB free_cma:0kB [ 1158.693500][ T2028] syzkaller0: entered promiscuous mode [ 1158.699043][ T2028] syzkaller0: entered allmulticast mode [ 1158.708517][ T2000] lowmem_reserve[]: 0 0 0 0 0 [ 1158.734613][ T2000] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1158.833417][ T2000] lowmem_reserve[]: 0 0 0 0 0 [ 1158.838243][ T2000] Node 1 Normal free:3944968kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1158.943729][ T2000] lowmem_reserve[]: 0 0 0 0 0 [ 1158.948541][ T2000] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 1158.979178][ T2000] Node 0 DMA32: 1650*4kB (UME) 7042*8kB (UME) 4104*16kB (UME) 543*32kB (UME) 599*64kB (UME) 337*128kB (UM) 250*256kB (UME) 252*512kB (UME) 214*1024kB (UME) 116*2048kB (UME) 8*4096kB (U) = 909944kB [ 1159.004018][ T2000] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1159.068227][ T2000] Node 1 Normal: 2*4kB (UE) 4*8kB (UM) 16*16kB (UME) 13*32kB (UME) 11*64kB (UME) 7*128kB (UM) 7*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 959*4096kB (M) = 3944968kB [ 1159.149191][ T2000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.199607][ T2000] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1159.237085][ T2000] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.267295][ T2000] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1159.297831][ T2000] 47978 total pagecache pages [ 1159.303438][ T2000] 0 pages in swap cache [ 1159.307721][ T2000] Free swap = 124996kB [ 1159.308066][ T7400] lec:lec_start_xmit: lec0:No lecd attached [ 1159.311900][ T2000] Total swap = 124996kB [ 1159.345098][ T2000] 2097051 pages RAM [ 1159.348972][ T2000] 0 pages HighMem/MovableOnly [ 1159.363202][ T2000] 427002 pages reserved [ 1159.374562][ T2000] 0 pages cma reserved [ 1159.562550][ T2040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8377'. [ 1159.592965][ T2040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8377'. [ 1159.616566][ T2040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8377'. [ 1159.637367][ T2040] netlink: 'syz.0.8377': attribute type 4 has an invalid length. [ 1159.656275][ T2040] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8377'. [ 1159.778643][ T2019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8371'. [ 1159.893732][ T2042] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8371'. [ 1160.163513][ T2052] FAULT_INJECTION: forcing a failure. [ 1160.163513][ T2052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.199731][ T2052] CPU: 0 UID: 0 PID: 2052 Comm: syz.1.8382 Not tainted syzkaller #0 PREEMPT(full) [ 1160.199760][ T2052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.199774][ T2052] Call Trace: [ 1160.199783][ T2052] [ 1160.199793][ T2052] dump_stack_lvl+0xe8/0x150 [ 1160.199828][ T2052] should_fail_ex+0x412/0x560 [ 1160.199856][ T2052] _copy_from_iter+0x1d3/0x1670 [ 1160.199886][ T2052] ? rcu_is_watching+0x15/0xb0 [ 1160.199920][ T2052] ? __pfx__copy_from_iter+0x10/0x10 [ 1160.199954][ T2052] ? netlink_sendmsg+0x650/0xb40 [ 1160.199977][ T2052] ? skb_put+0x11b/0x210 [ 1160.200008][ T2052] netlink_sendmsg+0x6c0/0xb40 [ 1160.200042][ T2052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.200082][ T2052] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1160.200110][ T2052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1160.200135][ T2052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1160.200159][ T2052] ____sys_sendmsg+0xa68/0xad0 [ 1160.200203][ T2052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1160.200244][ T2052] ? import_iovec+0x73/0xa0 [ 1160.200276][ T2052] ___sys_sendmsg+0x2a5/0x360 [ 1160.200310][ T2052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1160.200376][ T2052] ? __fget_files+0x2a/0x420 [ 1160.200405][ T2052] ? __fget_files+0x3a0/0x420 [ 1160.200444][ T2052] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1160.200477][ T2052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1160.200518][ T2052] ? __pfx_ksys_write+0x10/0x10 [ 1160.200552][ T2052] do_syscall_64+0x14d/0xf80 [ 1160.200584][ T2052] ? trace_irq_disable+0x3b/0x150 [ 1160.200614][ T2052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.200636][ T2052] ? clear_bhb_loop+0x40/0x90 [ 1160.200662][ T2052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.200683][ T2052] RIP: 0033:0x7f181c19c629 [ 1160.200704][ T2052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.200724][ T2052] RSP: 002b:00007f181d08e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.200746][ T2052] RAX: ffffffffffffffda RBX: 00007f181c415fa0 RCX: 00007f181c19c629 [ 1160.200763][ T2052] RDX: 000000000000c020 RSI: 0000200000000000 RDI: 0000000000000003 [ 1160.200777][ T2052] RBP: 00007f181d08e090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.200790][ T2052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.200803][ T2052] R13: 00007f181c416038 R14: 00007f181c415fa0 R15: 00007ffe14dfa7a8 [ 1160.200835][ T2052] [ 1160.702330][ T2063] openvswitch: netlink: EtherType 0 is less than min 600 [ 1160.824476][ T2067] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1160.850225][ T2067] netlink: 'syz.3.8386': attribute type 1 has an invalid length. [ 1160.858890][ T2067] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1161.121911][ T2071] netlink: 'syz.3.8388': attribute type 10 has an invalid length. [ 1161.177955][ T2075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8389'. [ 1161.197986][ T2075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8389'. [ 1161.198369][ T2072] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.264826][ T2071] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1161.276520][ T2071] team0: Failed to send options change via netlink (err -105) [ 1161.294903][ T2071] team0: Port device netdevsim0 added [ 1161.353593][ T2072] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.517775][ T2072] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.745775][ T2072] team0: Failed to send options change via netlink (err -105) [ 1161.763550][ T2072] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1161.774199][ T2092] FAULT_INJECTION: forcing a failure. [ 1161.774199][ T2092] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.785476][ T2072] team0: Port device netdevsim0 removed [ 1161.814206][ T2072] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.820607][ T2092] CPU: 1 UID: 0 PID: 2092 Comm: syz.0.8394 Not tainted syzkaller #0 PREEMPT(full) [ 1161.820680][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1161.820720][ T2092] Call Trace: [ 1161.820748][ T2092] [ 1161.820771][ T2092] dump_stack_lvl+0xe8/0x150 [ 1161.820871][ T2092] should_fail_ex+0x412/0x560 [ 1161.820954][ T2092] should_failslab+0xa8/0x100 [ 1161.821027][ T2092] ? skb_clone+0x212/0x3a0 [ 1161.821109][ T2092] kmem_cache_alloc_noprof+0x87/0x650 [ 1161.821193][ T2092] ? __netlink_lookup+0xc6/0x8b0 [ 1161.821271][ T2092] skb_clone+0x212/0x3a0 [ 1161.821384][ T2092] __netlink_deliver_tap+0x404/0x850 [ 1161.821496][ T2092] ? netlink_deliver_tap+0x2e/0x1b0 [ 1161.821568][ T2092] netlink_deliver_tap+0x19c/0x1b0 [ 1161.821639][ T2092] netlink_unicast+0x7e3/0x9b0 [ 1161.821728][ T2092] ? __pfx_netlink_unicast+0x10/0x10 [ 1161.821791][ T2092] ? netlink_sendmsg+0x650/0xb40 [ 1161.821853][ T2092] ? skb_put+0x11b/0x210 [ 1161.821943][ T2092] netlink_sendmsg+0x813/0xb40 [ 1161.822047][ T2092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1161.822121][ T2092] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1161.822192][ T2092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1161.822258][ T2092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1161.822327][ T2092] ____sys_sendmsg+0xa68/0xad0 [ 1161.822430][ T2092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1161.822528][ T2092] ? import_iovec+0x73/0xa0 [ 1161.822619][ T2092] ___sys_sendmsg+0x2a5/0x360 [ 1161.822734][ T2092] ? __pfx____sys_sendmsg+0x10/0x10 [ 1161.822939][ T2092] ? __fget_files+0x2a/0x420 [ 1161.823024][ T2092] ? __fget_files+0x3a0/0x420 [ 1161.823128][ T2092] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1161.823212][ T2092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1161.823311][ T2092] ? __pfx_ksys_write+0x10/0x10 [ 1161.823396][ T2092] do_syscall_64+0x14d/0xf80 [ 1161.823479][ T2092] ? trace_irq_disable+0x3b/0x150 [ 1161.823561][ T2092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.823622][ T2092] ? clear_bhb_loop+0x40/0x90 [ 1161.823680][ T2092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.823741][ T2092] RIP: 0033:0x7ff61fb9c629 [ 1161.823801][ T2092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.823851][ T2092] RSP: 002b:00007ff620a08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.823907][ T2092] RAX: ffffffffffffffda RBX: 00007ff61fe15fa0 RCX: 00007ff61fb9c629 [ 1161.823949][ T2092] RDX: 000000000000c020 RSI: 0000200000000000 RDI: 0000000000000003 [ 1161.823999][ T2092] RBP: 00007ff620a08090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.824032][ T2092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.824071][ T2092] R13: 00007ff61fe16038 R14: 00007ff61fe15fa0 R15: 00007ffc1a64a678 [ 1161.824170][ T2092] [ 1161.837973][ T2092] openvswitch: netlink: EtherType 0 is less than min 600 [ 1162.433350][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.549661][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.588444][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.640201][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.195723][ T2116] pim6reg: entered allmulticast mode [ 1163.267350][ T2116] pim6reg: left allmulticast mode [ 1163.405262][ T2121] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1163.435062][ T2121] bond4 (unregistering): Released all slaves [ 1163.584495][ T2130] nbd: must specify at least one socket [ 1163.729000][ T2138] tunl0: Caught tx_queue_len zero misconfig [ 1163.762200][ T2140] netlink: 'syz.2.8411': attribute type 4 has an invalid length. [ 1163.825327][ T2140] netlink: 'syz.2.8411': attribute type 4 has an invalid length. [ 1164.323399][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1164.331523][ C1] lec:lec_tx_timeout: lec0 [ 1164.408616][ T2166] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 1164.416388][ T2166] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 1164.774344][ T2173] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 1165.235920][ T2186] __nla_validate_parse: 11 callbacks suppressed [ 1165.235942][ T2186] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8427'. [ 1165.475114][ T2193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8429'. [ 1165.516192][ T2197] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1166.089306][ T2220] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 1166.637455][ T2234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8438'. [ 1166.802258][ T2237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8440'. [ 1167.012933][ T2241] openvswitch: netlink: EtherType 0 is less than min 600 [ 1167.074012][ T2245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8442'. [ 1167.220581][ T2249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8444'. [ 1167.257533][ T2249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8444'. [ 1167.482313][ T2254] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 1167.701934][ T2263] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.824859][ T2263] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.008146][ T2263] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.125266][ T2263] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.315989][T24816] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.368611][T24816] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.399989][T24816] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.431881][ T3563] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.679372][ T2290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1168.695210][ T2291] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 1168.865409][ T2302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8463'. [ 1169.005105][ T2310] netlink: 'syz.1.8471': attribute type 2 has an invalid length. [ 1169.075149][ T2315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8471'. [ 1169.123793][ T2310] : entered promiscuous mode [ 1169.263541][ T2322] openvswitch: netlink: EtherType 500 is less than min 600 [ 1169.448278][ T2330] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 1169.577920][ T2335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1169.778353][ T2347] syzkaller0: entered promiscuous mode [ 1169.785593][ T2347] syzkaller0: entered allmulticast mode [ 1169.968268][ T2354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8488'. [ 1170.287052][ T2372] __nla_validate_parse: 2 callbacks suppressed [ 1170.287075][ T2372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8493'. [ 1170.454889][ T2376] tipc: Enabled bearer , priority 0 [ 1170.500734][ T2376] syzkaller0: entered promiscuous mode [ 1170.507989][ T2376] syzkaller0: entered allmulticast mode [ 1170.584102][ T2376] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1170.605531][ T2376] bond0: (slave bond13): Enslaving as an active interface with a down link [ 1170.636168][ T2382] openvswitch: netlink: EtherType 0 is less than min 600 [ 1170.692147][ T2376] tipc: Resetting bearer [ 1170.725616][ T2375] tipc: Resetting bearer [ 1170.874027][ T2375] tipc: Disabling bearer [ 1170.925557][ T2390] IPv6: NLM_F_CREATE should be specified when creating new route [ 1171.015646][ T2386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8493'. [ 1171.275404][ T2407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8502'. [ 1171.358395][ T2419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8506'. [ 1171.481598][ T2411] tipc: Enabled bearer , priority 0 [ 1171.629288][ T2411] syzkaller0: entered promiscuous mode [ 1171.637081][ T2411] syzkaller0: entered allmulticast mode [ 1171.644823][ T2411] tipc: Resetting bearer [ 1171.691753][ T2409] tipc: Resetting bearer [ 1171.870223][ T2437] openvswitch: netlink: EtherType 0 is less than min 600 [ 1172.218603][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8515'. [ 1172.231233][ T2464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8515'. [ 1172.527711][ T2474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8517'. [ 1172.537965][ T2474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8517'. [ 1172.577704][ C0] ------------[ cut here ]------------ [ 1172.583796][ C0] ODEBUG: free active (active state 0) object: ffff8880794fe090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 1172.596762][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0 [ 1172.607239][ C0] Modules linked in: [ 1172.611666][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1172.620682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1172.630948][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1172.637397][ C0] Code: 89 44 24 20 e8 d7 89 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 c0 aa 27 8c 48 c7 c2 40 b0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1172.657089][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 1172.663252][ C0] RAX: ffffffff8a9530e0 RBX: ffffffff9a4af808 RCX: 0000000000000000 [ 1172.671280][ C0] RDX: ffffffff8c27b040 RSI: ffffffff8c27aac0 RDI: ffffffff901c37c0 [ 1172.679320][ C0] RBP: ffffffff8bcf3c40 R08: ffff8880794fe090 R09: ffffffff8bcf4f60 [ 1172.687373][ C0] R10: dffffc0000000000 R11: ffffffff81b1d890 R12: ffff8880794fe200 [ 1172.695431][ C0] R13: ffffffff901c37c0 R14: ffff8880794fe000 R15: ffff8880794fe090 [ 1172.703496][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 1172.712474][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1172.719128][ C0] CR2: 00007f53dffe9d40 CR3: 00000000a48cc000 CR4: 00000000003526f0 [ 1172.727195][ C0] Call Trace: [ 1172.730523][ C0] [ 1172.733449][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1172.739147][ C0] kfree+0x13a/0x630 [ 1172.743143][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1172.748301][ C0] rose_timer_expiry+0x4cb/0x600 [ 1172.753303][ C0] ? call_timer_fn+0x178/0x640 [ 1172.758118][ C0] call_timer_fn+0x192/0x640 [ 1172.762791][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1172.768292][ C0] ? call_timer_fn+0xd4/0x640 [ 1172.773081][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1172.778245][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1172.783523][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1172.789044][ C0] __run_timer_base+0x652/0x8b0 [ 1172.793978][ C0] ? ktime_get+0x45/0x200 [ 1172.798385][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1172.803853][ C0] ? sched_clock_cpu+0x74/0x440 [ 1172.808765][ C0] run_timer_softirq+0xb7/0x170 [ 1172.813730][ C0] handle_softirqs+0x22a/0x870 [ 1172.818590][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1172.823474][ C0] __irq_exit_rcu+0x5f/0x150 [ 1172.828121][ C0] irq_exit_rcu+0x9/0x30 [ 1172.832413][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1172.838133][ C0] [ 1172.841120][ C0] [ 1172.844226][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1172.850256][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1172.855996][ C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1172.875708][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 1172.881803][ C0] RAX: 000000000032ee7f RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1172.889879][ C0] RDX: 0000000000000001 RSI: ffffffff8def18d2 RDI: ffffffff8c27a480 [ 1172.897925][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1172.906010][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901172b0 [ 1172.914069][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1172.922097][ C0] ? do_idle+0x1bd/0x500 [ 1172.926449][ C0] default_idle+0x9/0x20 [ 1172.930743][ C0] default_idle_call+0x72/0xb0 [ 1172.935603][ C0] do_idle+0x1bd/0x500 [ 1172.939716][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1172.945953][ C0] ? __pfx_do_idle+0x10/0x10 [ 1172.950597][ C0] cpu_startup_entry+0x43/0x60 [ 1172.955475][ C0] rest_init+0x2de/0x300 [ 1172.959757][ C0] start_kernel+0x385/0x3d0 [ 1172.964436][ C0] x86_64_start_reservations+0x24/0x30 [ 1172.969936][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1172.975171][ C0] common_startup_64+0x13e/0x147 [ 1172.980158][ C0] [ 1172.983263][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1172.990570][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1172.999523][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1173.009641][ C0] Call Trace: [ 1173.012935][ C0] [ 1173.015797][ C0] vpanic+0x56c/0xa60 [ 1173.019799][ C0] ? __pfx__printk+0x10/0x10 [ 1173.024403][ C0] ? __pfx_vpanic+0x10/0x10 [ 1173.028929][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1173.034315][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1173.039540][ C0] panic+0xc5/0xd0 [ 1173.043285][ C0] ? __pfx_panic+0x10/0x10 [ 1173.047766][ C0] ? common_startup_64+0x13e/0x147 [ 1173.052930][ C0] __warn+0x315/0x4f0 [ 1173.056970][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1173.062719][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1173.068485][ C0] __report_bug+0x29a/0x540 [ 1173.073053][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1173.078908][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1173.084648][ C0] ? __pfx___report_bug+0x10/0x10 [ 1173.089701][ C0] ? run_timer_softirq+0xb7/0x170 [ 1173.094775][ C0] ? handle_softirqs+0x22a/0x870 [ 1173.099754][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1173.104538][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1173.110360][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1173.116524][ C0] ? pv_native_safe_halt+0xf/0x20 [ 1173.121576][ C0] ? default_idle+0x9/0x20 [ 1173.126025][ C0] ? default_idle_call+0x72/0xb0 [ 1173.130981][ C0] report_bug_entry+0x19a/0x290 [ 1173.135860][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 1173.141592][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 1173.147512][ C0] handle_bug+0xca/0x200 [ 1173.151815][ C0] exc_invalid_op+0x1a/0x50 [ 1173.156352][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1173.161227][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1173.167575][ C0] Code: 89 44 24 20 e8 d7 89 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 c0 aa 27 8c 48 c7 c2 40 b0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1173.187192][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 1173.193317][ C0] RAX: ffffffff8a9530e0 RBX: ffffffff9a4af808 RCX: 0000000000000000 [ 1173.201333][ C0] RDX: ffffffff8c27b040 RSI: ffffffff8c27aac0 RDI: ffffffff901c37c0 [ 1173.209341][ C0] RBP: ffffffff8bcf3c40 R08: ffff8880794fe090 R09: ffffffff8bcf4f60 [ 1173.217324][ C0] R10: dffffc0000000000 R11: ffffffff81b1d890 R12: ffff8880794fe200 [ 1173.225311][ C0] R13: ffffffff901c37c0 R14: ffff8880794fe000 R15: ffff8880794fe090 [ 1173.233305][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 1173.238712][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1173.244376][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1173.250085][ C0] kfree+0x13a/0x630 [ 1173.254042][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1173.259202][ C0] rose_timer_expiry+0x4cb/0x600 [ 1173.264180][ C0] ? call_timer_fn+0x178/0x640 [ 1173.269010][ C0] call_timer_fn+0x192/0x640 [ 1173.273646][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1173.279144][ C0] ? call_timer_fn+0xd4/0x640 [ 1173.283866][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1173.289035][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1173.294356][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1173.299954][ C0] __run_timer_base+0x652/0x8b0 [ 1173.304874][ C0] ? ktime_get+0x45/0x200 [ 1173.309263][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1173.314778][ C0] ? sched_clock_cpu+0x74/0x440 [ 1173.319677][ C0] run_timer_softirq+0xb7/0x170 [ 1173.324546][ C0] handle_softirqs+0x22a/0x870 [ 1173.329330][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1173.334133][ C0] __irq_exit_rcu+0x5f/0x150 [ 1173.338742][ C0] irq_exit_rcu+0x9/0x30 [ 1173.343007][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1173.348688][ C0] [ 1173.351655][ C0] [ 1173.354610][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1173.360603][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1173.366250][ C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1173.386091][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 1173.392265][ C0] RAX: 000000000032ee7f RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1173.400254][ C0] RDX: 0000000000000001 RSI: ffffffff8def18d2 RDI: ffffffff8c27a480 [ 1173.408238][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1173.416247][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901172b0 [ 1173.424235][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1173.432231][ C0] ? do_idle+0x1bd/0x500 [ 1173.436566][ C0] default_idle+0x9/0x20 [ 1173.440825][ C0] default_idle_call+0x72/0xb0 [ 1173.445633][ C0] do_idle+0x1bd/0x500 [ 1173.449765][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1173.455944][ C0] ? __pfx_do_idle+0x10/0x10 [ 1173.460735][ C0] cpu_startup_entry+0x43/0x60 [ 1173.465512][ C0] rest_init+0x2de/0x300 [ 1173.469770][ C0] start_kernel+0x385/0x3d0 [ 1173.474290][ C0] x86_64_start_reservations+0x24/0x30 [ 1173.479753][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1173.484875][ C0] common_startup_64+0x13e/0x147 [ 1173.489849][ C0] [ 1173.493513][ C0] Kernel Offset: disabled [ 1173.497878][ C0] Rebooting in 86400 seconds..