last executing test programs: 22.816551804s ago: executing program 1 (id=1463): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, 0x0, 0x62a1}}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000340)=0x2, 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000300000001040000000000000000050000013400cc30090a01080000000000000000050000050800044000000003080007400000002608000a400000000205000d40ca000000140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 22.705499437s ago: executing program 1 (id=1467): unshare(0x28000600) unshare(0x10000) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a0000145d45727249897c2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040054}, 0x800) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r3, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 19.610041204s ago: executing program 1 (id=1474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x339399bcded658c9}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r10, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r11, 0x89e0, 0x0) 19.204163721s ago: executing program 3 (id=1481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0xc0000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000080)={0x9, 0x100, 0x1, 0x9, 0x2, [0x8, 0x3, 0x3]}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a05002c0012800e0001006970366772657461700000001800028014000c000000000000000000fffffffffffffffe533a5e7d77b7bb8fc4957fc7bae5abd62dc9683e6110254c1db1f95ea7f1d74e964c35ccb5c517a1ab1f6409e2507fdb1fde1b5d183d209d7711f2fc61c9a5bda63782200e48a5736f2be11da1cc44a71bf4d085853b8732589da4cac1fbae0a433c41aecf"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 64) 18.343760906s ago: executing program 1 (id=1485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000180)={&(0x7f00000000c0), 0x0, 0x20, 0x2, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8c4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvlan1\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, r4, 0x25, 0x2, @val=@tracing={0x0, 0x12348d87}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000002fc0)=ANY=[@ANYRES64=r5], &(0x7f0000000100)='GPL\x00', 0x103, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r7}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000002900)=r8, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x123) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, 0x4e20, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x4000000000}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) 18.310481363s ago: executing program 3 (id=1486): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x101) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r0, &(0x7f0000000080)="eb9f2c85d95e485fadfeddbde0d59ef865862e909d5252864f499af7a314701ce4921e7faf26505c97eadd92a27f6b3b19f21364959b19155ecf344ff0933496674091b8e0306b2592be7a1a3854b53d658a60cfb1ddeb410b2b18b642617e97802c532357c1152c576b2cbe55f42c300b5d70f2365599ff292208559dc2e9311c5a2c61a9622a2bb34c7fed4e4aa7ad92b30fdf20604b11aa7e102b", &(0x7f0000000180)=""/4096, 0x4}, 0x20) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xf0000014}) 18.09653755s ago: executing program 3 (id=1488): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x45) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x24, 0x11, 0x0, 0x101, 0x70bc27, 0x21dfdbfa, {0x3}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x42}]}]}, 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) gettid() close(0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 18.013354465s ago: executing program 3 (id=1489): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000a231f966671c131e26f2d4ee4f6402391ac5fbf85739202b2d84f3b02726b854ce3eae06bc2ca9e1c5f7018818f6d10103896699b6d88479cf8ad53955df396f6b0cca788ac2030d684a6fb2c329999b714e1df1b9588b55463b7ca254118eb6cae343137220c6fc5e7959a8f6ff15c8c3f2ba27688afb7f02e7842191e5b3034e907dac8fa48779922be017c941a209ee47aa72c3d372827a71508e76945448ef2baf119f232c3c6a26db58933457649e2835a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) recvmmsg(r1, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6f5b, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="3306040307000600fc010000000000000000000000000001fc010000000000000000000000000000fe88000000000000000000000000010115883f76d8dbc9956621caf0a9f2357b5a91dc2a457b6f66cbcdf6d2863178221e2955133ac1d49eb7f21e7635d2525e3332d5433619ccaa0b83bc"], 0x38) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000324900000900000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00 \x00'/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000003840)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, r4, 0x0, 0x0, 0xfffffffffffffe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0xffffffff, 0x8}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r5, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x2000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000640)="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", 0x0, 0x4}, 0xfffffffffffffe26) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x1}, {0x1000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x40}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7f}, {0x0, 0x0, 0xd}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x401}, {}, {0x80}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0xc0b2}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x4f99}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x101}, {}, {}, {0x0, 0x0, 0x5, 0x0, 0x1}, {}, {}, {}, {0x2000000}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x9}, {}, {}, {0x1a}, {}, {}, {}, {0x0, 0x0, 0x80000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffa}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000) shutdown(r2, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={r3, &(0x7f0000000000)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, &(0x7f0000000040)={@align=0x2, {0x3ff, 0xa, 0x401, 0xb}}, 0x56, &(0x7f0000000100), &(0x7f0000000140)=0x10}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 17.071952616s ago: executing program 4 (id=1490): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nicvf0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x7, 0x8, 0x2, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f0000000100)) 16.790531639s ago: executing program 0 (id=1491): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900250000000005000000", 0x29}], 0x1) (fail_nth: 7) 16.7897822s ago: executing program 1 (id=1492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fa3f000000000000080000008500000007000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) r2 = socket(0x2b, 0x1, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000280)="a2b2feae49d9ef290f87c81893b5275b", 0x10) listen(r2, 0x5) accept4$inet6(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x1, 0x79c0, 0xfffffffb, 0x9, {{0x33, 0x4, 0x0, 0xd, 0xcc, 0x65, 0x0, 0x3, 0x4, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x31, 0x2, [{0x5, 0xb, "560a8e95ae3080ec95"}, {0x0, 0x9, "1edbd90e53578a"}, {0x6, 0xe, "a3d6de88d5c8ba3b03e8b9bb"}, {0x2, 0x9, "d821e10b8bcc81"}]}, @ssrr={0x89, 0x7, 0x87, [@remote]}, @rr={0x7, 0x23, 0xcb, [@local, @multicast1, @empty, @broadcast, @local, @multicast1, @remote, @rand_addr=0x64010101]}, @generic={0x89, 0xc, "96b1ab948ecb3b1a0450"}, @timestamp_prespec={0x44, 0x24, 0xb6, 0x3, 0x8, [{@empty, 0x2}, {@multicast1, 0x2}, {@empty, 0x8}, {@rand_addr=0x64010101, 0x8000}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x9a, 0x1, 0x2, [{@loopback, 0x4b1}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x77, 0x3, 0x1, [{@local, 0xfffffffd}, {@broadcast, 0x2}, {@local, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000600)={'tunl0\x00', r5, 0x8, 0x7800, 0x401, 0x10, {{0x19, 0x4, 0x3, 0x36, 0x64, 0x65, 0x0, 0xc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xfe, 0x1, 0x9, [{@multicast1, 0xd}, {@broadcast, 0xf}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4}, {@remote, 0x8}, {@loopback, 0x9}]}, @noop, @noop, @ssrr={0x89, 0x13, 0x69, [@dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @private=0xa010101, @private=0xa010100]}, @end]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}]}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xb4a02fe0ce239ff3, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 16.789160761s ago: executing program 2 (id=1493): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd000804f4ff0900250000000005000000", 0x29}], 0x1) 16.707201818s ago: executing program 4 (id=1494): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x105, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc7, 0x10, 0x0, 0xe}, 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 16.68447861s ago: executing program 2 (id=1495): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000300000000cd3dc762c2c53e31c4abdc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000300000000cd3dc762c2c53e31c4abdc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000540), &(0x7f0000000740)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x81, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x40, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40880b5}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20006911}, 0x4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20006911}, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400006024ac090000000a000000"], 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x800, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x800, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x400, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x2, 0xfff3}, {0xfff3, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40001) accept4(r2, 0x0, 0x0, 0x800) (async) r5 = accept4(r2, 0x0, 0x0, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40050}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 16.612365005s ago: executing program 0 (id=1496): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0xc, 0x15e, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x600088c0}, 0x400c040) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffc00}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@broadcast, @broadcast, 0x0, "172b976a321804be7f40906aed0a11619badb44c86e77d61253ac2a5060131a6", 0xe1e, 0x1, 0x1cf, 0x3}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0xc, 0x15e, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x600088c0}, 0x400c040) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffc00}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x10) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@broadcast, @broadcast, 0x0, "172b976a321804be7f40906aed0a11619badb44c86e77d61253ac2a5060131a6", 0xe1e, 0x1, 0x1cf, 0x3}, 0x3c) (async) 16.591564241s ago: executing program 4 (id=1497): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) write$tun(r1, &(0x7f0000000400)={@void, @val={0x3, 0x3, 0x8, 0x6, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x25, 0x64, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @local}, "9304ba061707002000ffffff82000004c2"}}, 0x2f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r3, 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x404c080) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x404c080) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408d0}, 0x4001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) close(0x3) 16.47456655s ago: executing program 0 (id=1498): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x7}]}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x10}}]}, 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc01, {0x7, 0x0, 0x0, r2, 0x80, 0x6e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FLAGS_EXT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) 16.430946707s ago: executing program 2 (id=1499): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x4, @empty, 0xffffffff, 0x4}, 0x80, 0x0}, 0x24040051) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') close(0x4) 16.42883259s ago: executing program 3 (id=1500): r0 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3bc09a36fc303e390c5b34000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x50}}, 0x4000850) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={@rand_addr=0x64010100, 0x1, 0x0, 0x50, 0x0, [{@multicast1}, {@remote}, {@local}, {@empty}, {}]}}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) nanosleep(&(0x7f0000001480)={0x77359400}, &(0x7f00000014c0)) pselect6(0x40, &(0x7f0000000240)={0x7, 0xfffffffffffffff9, 0x98a7, 0x2, 0x1, 0xffffffffffffffff, 0x5b06, 0xfffffffffffffff7}, &(0x7f0000000280)={0x2, 0x0, 0x545, 0x1, 0x3, 0x8000000000000001, 0x8, 0x2}, &(0x7f0000000300)={0x7, 0x9, 0x779, 0x7, 0xf, 0x8000000000, 0x4, 0x8}, &(0x7f0000000380)={r2, r3+10000000}, &(0x7f0000001440)={&(0x7f00000003c0)={[0xc]}, 0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x408a3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x3}, @IFLA_VTI_IKEY={0x8, 0x2, 0x8}]]}}}]}, 0x40}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r4, 0x3, {0x0, 0x1, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r7}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000807a) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 16.312548757s ago: executing program 0 (id=1501): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x10, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 16.293385411s ago: executing program 2 (id=1502): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5a5, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5a5, 0x4) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) write(r0, &(0x7f00000001c0)='+', 0x1) (async) write(r0, &(0x7f00000001c0)='+', 0x1) r1 = socket$inet6(0xa, 0x2, 0x3a) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x3, @local}}, 0x1e) (async) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x3, @local}}, 0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x400000013) recvfrom(r0, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) (async) recvfrom(r0, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.134929342s ago: executing program 2 (id=1503): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 16.09690005s ago: executing program 0 (id=1504): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nicvf0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x7, 0x8, 0x2, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f0000000100)) 16.040251467s ago: executing program 4 (id=1505): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000001c0)={{r0, &(0x7f0000000040)='GPL\x00', 0x80180, &(0x7f0000000080)={@align=0x3, {0xb515, 0x5, 0x401, 0x2}}, 0x10001, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x15}, {[0x5, 0x7, 0x95, 0x3]}, 0x5, 0x1e, &(0x7f0000000180)=""/30}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0xd, 0x6, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x80, 0x8000, 0xcfd0, 0x1}}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r11, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x8000, 0x40, 0x5, 0xfff, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x66, 0x0, 0xb6, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x128, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000001}, 0x44840) 15.985643088s ago: executing program 0 (id=1506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001081c400170db00000000000000", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x1, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) listen(0xffffffffffffffff, 0x1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) recvmmsg(r5, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2140, 0x0) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @local, 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000000)='b', 0x1}], 0x1}}], 0x2, 0x40090) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15.904345542s ago: executing program 4 (id=1507): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) (async) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) socketpair(0xa, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) (async) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x16, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r5}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r5, &(0x7f0000000880)}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r4, 0x40}, &(0x7f0000000140)=0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7}, 0x8) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180)) socket$nl_rdma(0x10, 0x3, 0x14) 15.800722513s ago: executing program 1 (id=1508): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x11, &(0x7f0000001480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@llc={0x4, {@llc={0xdc, 0x0, "85"}}}}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0xfffffffc, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x1, 0x0, 0x401}]}]}, 0xfc}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 15.724504999s ago: executing program 4 (id=1509): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x10000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000012aaff02000000000000000000000000000106"], 0xffe) 15.557595741s ago: executing program 3 (id=1510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008087}, 0x4e040) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 15.224086006s ago: executing program 2 (id=1511): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)={r0, 0x2, 0xaf8, "616672b898bfc9f5"}) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)={r0, 0x2, 0xaf8, "616672b898bfc9f5"}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1802000003000000000000000300000085000000170000008500000011000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1802000003000000000000000300000085000000170000008500000011000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x54}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8948, &(0x7f0000000200)={'bond0\x00', 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @ldst={0x0, 0x2, 0x6, 0x9, 0x9, 0xb4, 0xfffffffffffffff0}, @exit, @alu={0x4, 0x1, 0x7, 0x3, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x2e8, 0x11, &(0x7f0000000640)=""/17, 0x41000, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x9, 0x6, 0xbe}, 0x10, 0x63c4, 0xffffffffffffffff, 0x5, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r2, r9], &(0x7f0000000bc0)=[{0x1, 0x3, 0x3, 0x2}, {0x3, 0x4, 0xb, 0x9}, {0x4, 0x5, 0xe, 0x6}, {0x4, 0x3, 0x5, 0x1}, {0x2, 0x1, 0x0, 0x1}], 0x10, 0x200}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000000)='wg2\x00') sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r11, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e23, 0xc7, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x38, &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000029000047d2b4c386f49557d247d9f0d7edfe491ed98aed3308f91c24b589a15d42cb4c4f422f3853f5cd68af66b11572d55256e0420007952690e1913b590a04a5e117a432bc479bfe8f1d79c6c20c904aa73dd9017d14512988f96a951008b2d144e002abb59619849364c11e257d"], 0x18}, 0x814) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8051}, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8051}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, &(0x7f00000000c0)) 139.513684ms ago: executing program 32 (id=1506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001081c400170db00000000000000", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x1, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) listen(0xffffffffffffffff, 0x1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) recvmmsg(r5, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2140, 0x0) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @local, 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000000)='b', 0x1}], 0x1}}], 0x2, 0x40090) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 114.82755ms ago: executing program 33 (id=1508): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x11, &(0x7f0000001480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@llc={0x4, {@llc={0xdc, 0x0, "85"}}}}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0xfffffffc, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x1, 0x0, 0x401}]}]}, 0xfc}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 86.692059ms ago: executing program 34 (id=1511): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)={r0, 0x2, 0xaf8, "616672b898bfc9f5"}) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)={r0, 0x2, 0xaf8, "616672b898bfc9f5"}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1802000003000000000000000300000085000000170000008500000011000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1802000003000000000000000300000085000000170000008500000011000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x54, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x54}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8948, &(0x7f0000000200)={'bond0\x00', 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@exit, @ldst={0x0, 0x2, 0x6, 0x9, 0x9, 0xb4, 0xfffffffffffffff0}, @exit, @alu={0x4, 0x1, 0x7, 0x3, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x2e8, 0x11, &(0x7f0000000640)=""/17, 0x41000, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x9, 0x6, 0xbe}, 0x10, 0x63c4, 0xffffffffffffffff, 0x5, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r2, r9], &(0x7f0000000bc0)=[{0x1, 0x3, 0x3, 0x2}, {0x3, 0x4, 0xb, 0x9}, {0x4, 0x5, 0xe, 0x6}, {0x4, 0x3, 0x5, 0x1}, {0x2, 0x1, 0x0, 0x1}], 0x10, 0x200}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000000)='wg2\x00') sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r11, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e23, 0xc7, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x38, &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000029000047d2b4c386f49557d247d9f0d7edfe491ed98aed3308f91c24b589a15d42cb4c4f422f3853f5cd68af66b11572d55256e0420007952690e1913b590a04a5e117a432bc479bfe8f1d79c6c20c904aa73dd9017d14512988f96a951008b2d144e002abb59619849364c11e257d"], 0x18}, 0x814) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8051}, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8051}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, &(0x7f00000000c0)) 44.821751ms ago: executing program 35 (id=1510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008087}, 0x4e040) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 36 (id=1509): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x10000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000012aaff02000000000000000000000000000106"], 0xffe) kernel console output (not intermixed with test programs): ave been left with an inconsistent configuration, please check. [ 98.783395][ T7131] bond2: (slave gretap0): making interface the new active one [ 98.793966][ T7131] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 98.803588][ T7149] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 98.944514][ T7155] __nla_validate_parse: 14 callbacks suppressed [ 98.944536][ T7155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.365'. [ 99.033542][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 99.064333][ T7163] netlink: 'syz.4.367': attribute type 26 has an invalid length. [ 99.092895][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 99.672783][ T7201] batman_adv: batadv0: Adding interface: dummy0 [ 99.686967][ T7201] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.716788][ T7201] batman_adv: batadv0: Interface activated: dummy0 [ 99.783653][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 99.816358][ T7202] batadv0: mtu less than device minimum [ 99.828085][ T7202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.839278][ T7202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.850405][ T7202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.861516][ T7202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.872792][ T7202] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.907256][ T7206] syzkaller1: entered promiscuous mode [ 99.913007][ T7206] syzkaller1: entered allmulticast mode [ 100.010867][ T7209] syzkaller1: entered promiscuous mode [ 100.017561][ T7209] syzkaller1: entered allmulticast mode [ 100.473842][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'. [ 100.500857][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 100.829878][ T7231] bond1: Removing last arp target with arp_interval on [ 100.856226][ T7236] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 100.878835][ T7233] syzkaller0: entered promiscuous mode [ 100.889062][ T7233] syzkaller0: entered allmulticast mode [ 100.952556][ T7233] tipc: Enabled bearer , priority 0 [ 100.978491][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 100.997819][ T7236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.006867][ T7236] bond1: (slave bond2): making interface the new active one [ 101.014944][ T7236] bond1: (slave bond2): Enslaving as an active interface with an up link [ 101.052145][ T7233] ipvlan2: entered allmulticast mode [ 101.063104][ T7233] batadv0: entered allmulticast mode [ 101.074977][ T7233] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 101.185129][ T7232] tipc: Resetting bearer [ 101.230989][ T7232] tipc: Disabling bearer [ 101.375639][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 101.384651][ T7263] batman_adv: batadv0: Interface deactivated: dummy0 [ 101.392326][ T7263] batman_adv: batadv0: Removing interface: dummy0 [ 101.418957][ T7264] netlink: 104 bytes leftover after parsing attributes in process `syz.1.391'. [ 101.567533][ T7269] syzkaller0: entered promiscuous mode [ 101.582646][ T7269] syzkaller0: entered allmulticast mode [ 101.810436][ T7277] syzkaller1: entered promiscuous mode [ 101.846075][ T7277] syzkaller1: entered allmulticast mode [ 101.881313][ T7281] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 101.972867][ T7281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.018201][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 102.038642][ T7283] vlan2: entered promiscuous mode [ 102.073082][ T7283] bond1: entered promiscuous mode [ 102.101787][ T7283] vlan2: entered allmulticast mode [ 102.124899][ T7283] bond1: entered allmulticast mode [ 102.237424][ T7281] bond1: (slave bridge1): making interface the new active one [ 102.274864][ T7281] bridge1: entered promiscuous mode [ 102.293778][ T7281] bridge1: entered allmulticast mode [ 102.322257][ T7281] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 102.646005][ T7305] netlink: 'syz.3.403': attribute type 27 has an invalid length. [ 102.689961][ T7307] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 102.814383][ T7307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.887772][ T7315] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 102.936061][ T7315] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 103.965239][ T7359] trusted_key: syz.0.417 sent an empty control message without MSG_MORE. [ 104.028315][ T7363] __nla_validate_parse: 5 callbacks suppressed [ 104.028333][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 104.297486][ T7371] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 104.315514][ T7369] syzkaller0: entered promiscuous mode [ 104.328906][ T7369] syzkaller0: entered allmulticast mode [ 104.340950][ T7371] netlink: 96 bytes leftover after parsing attributes in process `syz.2.422'. [ 104.354155][ T7371] netlink: 1 bytes leftover after parsing attributes in process `syz.2.422'. [ 104.376352][ T7371] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 104.376568][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 104.477739][ T7375] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 104.503623][ T7375] netlink: 228 bytes leftover after parsing attributes in process `syz.3.424'. [ 104.541668][ T7385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.427'. [ 104.597532][ T7375] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 104.660933][ T7388] netlink: 60 bytes leftover after parsing attributes in process `syz.4.427'. [ 104.958674][ T7404] geneve2: entered promiscuous mode [ 104.985472][ T7404] geneve2: entered allmulticast mode [ 105.041225][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.433'. [ 105.146768][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.435'. [ 105.172558][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 105.413653][ T7438] net_ratelimit: 14 callbacks suppressed [ 105.413676][ T7438] IPv6: addrconf: prefix option has invalid lifetime [ 105.574295][ T7436] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 106.066790][ T7480] netlink: 'syz.0.452': attribute type 11 has an invalid length. [ 106.074696][ T7479] xfrm0: entered allmulticast mode [ 106.124104][ T7484] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.666180][ T7511] veth5: entered allmulticast mode [ 106.755528][ T7511] bond3: (slave veth5): Enslaving as an active interface with an up link [ 106.828428][ T7514] bond3 (unregistering): (slave veth5): Releasing backup interface [ 106.884888][ T7514] bond3 (unregistering): Released all slaves [ 106.896692][ T7518] xt_CT: No such helper "netbios-ns" [ 107.410483][ T7557] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 108.188708][ T7593] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 108.501090][ T7613] geneve3: entered promiscuous mode [ 109.263365][ T7654] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 109.300187][ T7656] __nla_validate_parse: 21 callbacks suppressed [ 109.300208][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 109.321880][ T7654] netlink: 104 bytes leftover after parsing attributes in process `syz.4.503'. [ 109.349906][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 109.360419][ T7660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.506'. [ 109.372944][ T7654] ip_vti0: Master is either lo or non-ether device [ 109.393151][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.400416][ T7660] bridge0: port 2(bridge_slave_1) entered listening state [ 109.407827][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.415056][ T7660] bridge0: port 1(bridge_slave_0) entered listening state [ 109.530423][ T7666] netlink: 56 bytes leftover after parsing attributes in process `syz.1.507'. [ 109.548676][ T7667] netlink: 32 bytes leftover after parsing attributes in process `syz.0.509'. [ 109.894516][ T7679] syzkaller1: entered promiscuous mode [ 109.916015][ T7679] syzkaller1: entered allmulticast mode [ 110.129782][ T7688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.517'. [ 110.182752][ T7688] bridge0: port 3(syz_tun) entered blocking state [ 110.189474][ T7688] bridge0: port 3(syz_tun) entered forwarding state [ 110.533559][ T7718] 8021q: VLANs not supported on lo [ 110.573093][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 110.620712][ T7726] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.527'. [ 110.632525][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'. [ 111.120893][ T7756] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 111.309068][ T7759] gre1: entered allmulticast mode [ 111.881999][ T7823] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 112.097960][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.105247][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.222985][ T7821] syzkaller0: entered promiscuous mode [ 112.240195][ T7821] syzkaller0: entered allmulticast mode [ 112.893388][ T7886] geneve2: entered promiscuous mode [ 112.960313][ T7891] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 113.047797][ T7891] bond2: entered promiscuous mode [ 113.073313][ T7891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.121648][ T7904] bond2: (slave veth5): making interface the new active one [ 113.146021][ T7904] veth5: entered promiscuous mode [ 113.189885][ T7904] bond2: (slave veth5): Enslaving as an active interface with an up link [ 113.485418][ T7939] batman_adv: batadv0: Adding interface: dummy0 [ 113.491962][ T7939] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.517898][ T7939] batman_adv: batadv0: Interface activated: dummy0 [ 113.928180][ T7955] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 113.935885][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.943361][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.041628][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.069867][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.102190][ T7955] tipc: Resetting bearer [ 114.306659][ T7986] __nla_validate_parse: 14 callbacks suppressed [ 114.306678][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 114.356330][ T6997] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 114.367327][ T6997] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.392191][ T7986] ipvlan2: entered allmulticast mode [ 114.397784][ T7986] gretap0: entered allmulticast mode [ 114.413247][ T6997] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 114.433937][ T6997] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.453576][ T6997] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 114.512364][ T6997] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.550481][ T6997] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 114.563546][ T6997] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.580837][ T6997] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.599992][ T7993] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 114.612468][ T6997] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.623294][ T6997] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.651196][ T6997] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.095545][ T8024] netlink: 'syz.2.590': attribute type 10 has an invalid length. [ 115.835812][ T8024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.847514][ T8024] team0: Port device netdevsim1 added [ 115.950981][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 115.990895][ T8034] vti0: entered promiscuous mode [ 116.109612][ T8045] block nbd0: not configured, cannot reconfigure [ 116.128352][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 116.164080][ T8045] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 116.230975][ T8050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.259753][ T8050] Bluetooth: MGMT ver 1.23 [ 116.651094][ T8076] team_slave_0: mtu less than device minimum [ 116.803430][ T8085] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 116.840418][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.607'. [ 116.995967][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 117.009377][ T8100] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 117.136498][ T8113] syzkaller0: entered promiscuous mode [ 117.147568][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 117.154285][ T8113] syzkaller0: entered allmulticast mode [ 117.163013][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 117.182139][ T8116] ipvlan2: entered allmulticast mode [ 117.187807][ T8116] batadv0: entered allmulticast mode [ 117.194078][ T8116] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 117.237788][ T8117] batadv0: mtu less than device minimum [ 117.243958][ T8117] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.255124][ T8117] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.266092][ T8117] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.277065][ T8117] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.288155][ T8117] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.299262][ T8117] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.310177][ T8117] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.321172][ T8117] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.332208][ T8117] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.352538][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 117.445801][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 117.587620][ T8141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.621'. [ 117.603002][ T8137] syzkaller0: entered promiscuous mode [ 117.608869][ T8137] syzkaller0: entered allmulticast mode [ 117.627345][ T8141] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 117.980686][ T8156] syzkaller1: entered promiscuous mode [ 118.001611][ T8156] syzkaller1: entered allmulticast mode [ 118.959343][ T8220] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 119.661097][ T8240] __nla_validate_parse: 12 callbacks suppressed [ 119.661116][ T8240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.656'. [ 119.697821][ T7835] IPVS: starting estimator thread 0... [ 119.795937][ T8254] IPVS: using max 42 ests per chain, 100800 per kthread [ 119.807495][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 119.816754][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 120.241305][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 121.020922][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 122.551913][ T8240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.715488][ T8293] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 122.779835][ T8299] netlink: 'syz.4.668': attribute type 11 has an invalid length. [ 122.836191][ T8293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.942819][ T8305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.673'. [ 122.982473][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.675'. [ 123.163557][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 123.213836][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 123.266189][ T8323] syzkaller1: entered promiscuous mode [ 123.287507][ T8323] syzkaller1: entered allmulticast mode [ 123.463760][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 123.490724][ T8339] nbd: must specify a size in bytes for the device [ 123.681270][ T6992] tipc: Subscription rejected, illegal request [ 123.740148][ T8361] netlink: 'syz.0.687': attribute type 3 has an invalid length. [ 124.020659][ T8375] syzkaller1: entered promiscuous mode [ 124.035865][ T8378] net_ratelimit: 14 callbacks suppressed [ 124.035884][ T8378] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 124.059119][ T8375] syzkaller1: entered allmulticast mode [ 124.079298][ T8377] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 124.853259][ T8409] __nla_validate_parse: 1 callbacks suppressed [ 124.853280][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 125.176512][ T8428] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 125.279244][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 125.319527][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 125.363222][ T8439] netlink: 'syz.1.712': attribute type 9 has an invalid length. [ 125.455663][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 125.582552][ T8454] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.716'. [ 125.641896][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 125.938683][ T8478] syzkaller1: entered promiscuous mode [ 125.955001][ T8478] syzkaller1: entered allmulticast mode [ 126.043162][ T5746] IPVS: starting estimator thread 0... [ 126.049822][ T8480] IPVS: rr: FWM 3 0x00000003 - no destination available [ 126.062386][ T8480] netlink: 68 bytes leftover after parsing attributes in process `syz.2.725'. [ 126.144812][ T8481] IPVS: using max 49 ests per chain, 117600 per kthread [ 126.442327][ T8499] IPVS: Error connecting to the multicast addr [ 126.552980][ T8502] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 126.562389][ T8502] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.732'. [ 126.572877][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'. [ 126.608300][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 126.703832][ T8507] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 127.605072][ T8394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.615578][ T8393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.766079][ T8515] raw_sendmsg: syz.1.738 forgot to set AF_INET. Fix it! [ 127.784200][ T8522] netlink: 'syz.3.739': attribute type 12 has an invalid length. [ 127.811333][ T8522] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.141388][ T8540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.189850][ T8546] IPVS: Scheduler module ip_vs_ not found [ 128.199422][ T8545] bond3: (slave veth3): Enslaving as an active interface with an up link [ 128.231985][ T8550] bridge0: port 3(syz_tun) entered disabled state [ 128.262276][ T8550] syz_tun (unregistering): left allmulticast mode [ 128.271373][ T8550] syz_tun (unregistering): left promiscuous mode [ 128.277931][ T8550] bridge0: port 3(syz_tun) entered disabled state [ 128.296675][ T8554] bond0: option miimon: invalid value (18446744072967730723) [ 128.311457][ T8554] bond0: option miimon: allowed values 0 - 2147483647 [ 128.499858][ T8563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.633252][ T8563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.674067][ T8582] ip6_vti0: entered promiscuous mode [ 128.724555][ T8563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.849615][ T8563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.913506][ T8601] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.938539][ T6995] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.962551][ T6995] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.983336][ T8608] netlink: 'syz.3.764': attribute type 6 has an invalid length. [ 128.992849][ T6999] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.010558][ T6999] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.144684][ T8618] netlink: 'syz.2.767': attribute type 29 has an invalid length. [ 129.363403][ T8629] openvswitch: netlink: Key type 37 is out of range max 32 [ 129.537931][ T8639] x_tables: duplicate underflow at hook 1 [ 129.598438][ T8639] netlink: 'syz.4.775': attribute type 46 has an invalid length. [ 129.892089][ T8659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.213731][ T8686] pim6reg: entered allmulticast mode [ 130.222156][ T8686] pim6reg: left allmulticast mode [ 130.265473][ T8689] __nla_validate_parse: 13 callbacks suppressed [ 130.265494][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'. [ 130.344191][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 130.422920][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 130.435897][ T8699] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 130.448036][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.790'. [ 130.487859][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.790'. [ 130.749302][ T8726] FAULT_INJECTION: forcing a failure. [ 130.749302][ T8726] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.762841][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.1.799 Not tainted syzkaller #0 PREEMPT(full) [ 130.762868][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.762888][ T8726] Call Trace: [ 130.762899][ T8726] [ 130.762907][ T8726] dump_stack_lvl+0xe8/0x150 [ 130.762951][ T8726] should_fail_ex+0x40c/0x560 [ 130.762977][ T8726] _copy_from_iter+0x1d3/0x1660 [ 130.763001][ T8726] ? __might_fault+0xaf/0x130 [ 130.763027][ T8726] ? __might_fault+0xcb/0x130 [ 130.763045][ T8726] ? _copy_from_iter+0x21b/0x1660 [ 130.763062][ T8726] ? __pfx__copy_from_iter+0x10/0x10 [ 130.763081][ T8726] ? __pfx__copy_from_iter+0x10/0x10 [ 130.763100][ T8726] copy_page_from_iter+0x219/0x2d0 [ 130.763119][ T8726] skb_copy_datagram_from_iter+0x2f4/0x720 [ 130.763138][ T8726] tun_get_user+0xc71/0x4350 [ 130.763157][ T8726] ? is_bpf_text_address+0x292/0x2b0 [ 130.763185][ T8726] ? lock_release+0x4b/0x3c0 [ 130.763207][ T8726] ? arch_stack_walk+0xfb/0x150 [ 130.763226][ T8726] ? aa_file_perm+0x4ed/0x15f0 [ 130.763243][ T8726] ? __pfx_tun_get_user+0x10/0x10 [ 130.763262][ T8726] ? kstrtoull+0x12f/0x1d0 [ 130.763280][ T8726] ? ref_tracker_alloc+0x341/0x4b0 [ 130.763296][ T8726] ? get_pid_task+0x20/0x1f0 [ 130.763309][ T8726] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 130.763325][ T8726] ? rcu_is_watching+0x15/0xb0 [ 130.763343][ T8726] ? tun_get+0x1c/0x2f0 [ 130.763359][ T8726] ? tun_get+0x1c/0x2f0 [ 130.763376][ T8726] ? rcu_is_watching+0x15/0xb0 [ 130.763389][ T8726] ? tun_get+0x1c/0x2f0 [ 130.763405][ T8726] ? lock_release+0x4b/0x3c0 [ 130.763425][ T8726] ? apparmor_file_permission+0x1f4/0x300 [ 130.763445][ T8726] ? tun_get+0x1c/0x2f0 [ 130.763463][ T8726] tun_chr_write_iter+0x113/0x200 [ 130.763481][ T8726] vfs_write+0x612/0xba0 [ 130.763505][ T8726] ? __pfx_vfs_write+0x10/0x10 [ 130.763545][ T8726] ? __fget_files+0x2a/0x420 [ 130.763573][ T8726] ksys_write+0x150/0x270 [ 130.763599][ T8726] ? __pfx_ksys_write+0x10/0x10 [ 130.763627][ T8726] ? rcu_is_watching+0x15/0xb0 [ 130.763663][ T8726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.763685][ T8726] do_syscall_64+0x174/0x580 [ 130.763711][ T8726] ? trace_irq_disable+0x3b/0x140 [ 130.763738][ T8726] ? clear_bhb_loop+0x40/0x90 [ 130.763755][ T8726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.763769][ T8726] RIP: 0033:0x7f8d16f9ce59 [ 130.763788][ T8726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.763800][ T8726] RSP: 002b:00007f8d17e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.763821][ T8726] RAX: ffffffffffffffda RBX: 00007f8d17215fa0 RCX: 00007f8d16f9ce59 [ 130.763838][ T8726] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 130.763847][ T8726] RBP: 00007f8d17e18090 R08: 0000000000000000 R09: 0000000000000000 [ 130.763855][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.763864][ T8726] R13: 00007f8d17216038 R14: 00007f8d17215fa0 R15: 00007ffd34b3d8e8 [ 130.763881][ T8726] [ 131.307151][ T8741] netlink: 'syz.3.806': attribute type 11 has an invalid length. [ 131.370710][ T8741] netlink: 'syz.3.806': attribute type 11 has an invalid length. [ 131.461502][ T8741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.490344][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 131.514631][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'. [ 131.525089][ T8741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.546456][ T8741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.578541][ T8741] veth1_vlan: left promiscuous mode [ 131.585427][ T8741] veth0_vlan: left promiscuous mode [ 131.591438][ T8741] veth0_vlan: entered promiscuous mode [ 131.614482][ T8741] veth1_vlan: entered promiscuous mode [ 131.637416][ T8741] veth1_macvtap: left promiscuous mode [ 131.643924][ T8741] veth0_macvtap: left promiscuous mode [ 131.651205][ T8741] veth0_macvtap: entered promiscuous mode [ 131.659690][ T8741] veth1_macvtap: entered promiscuous mode [ 131.672246][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.681457][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.690451][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.699297][ T8741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.738048][ T8741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.753432][ T8741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.765458][ T8741] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.802840][ T6992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.814655][ T6992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.824109][ T6992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.894276][ T6992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.918960][ T6999] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 131.927357][ T6999] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 131.945509][ T7981] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.030793][ T7981] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.175225][ T7982] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.238314][ T8776] syzkaller0: entered promiscuous mode [ 132.251361][ T8776] syzkaller0: entered allmulticast mode [ 132.468041][ T8789] geneve3: entered promiscuous mode [ 132.473394][ T8789] geneve3: entered allmulticast mode [ 132.653495][ T8796] syzkaller1: entered promiscuous mode [ 132.676911][ T8796] syzkaller1: entered allmulticast mode [ 132.743008][ T8803] FAULT_INJECTION: forcing a failure. [ 132.743008][ T8803] name failslab, interval 1, probability 0, space 0, times 0 [ 132.755743][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.2.824 Not tainted syzkaller #0 PREEMPT(full) [ 132.755772][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.755784][ T8803] Call Trace: [ 132.755793][ T8803] [ 132.755802][ T8803] dump_stack_lvl+0xe8/0x150 [ 132.755829][ T8803] should_fail_ex+0x40c/0x560 [ 132.755854][ T8803] should_failslab+0xa8/0x100 [ 132.755885][ T8803] ? dst_alloc+0x105/0x170 [ 132.755906][ T8803] kmem_cache_alloc_noprof+0x87/0x650 [ 132.755936][ T8803] ? __pfx_fib6_table_lookup+0x10/0x10 [ 132.755955][ T8803] ? __pfx_ip6_dst_gc+0x10/0x10 [ 132.755984][ T8803] dst_alloc+0x105/0x170 [ 132.756007][ T8803] ip6_pol_route+0xba1/0x14d0 [ 132.756025][ T8803] ? ip6_pol_route+0x163/0x14d0 [ 132.756046][ T8803] ? __pfx_ip6_pol_route+0x10/0x10 [ 132.756063][ T8803] ? ip6t_do_table+0x1d1/0x15b0 [ 132.756084][ T8803] ? trace_irq_enable+0x3b/0x140 [ 132.756110][ T8803] ? ip6t_do_table+0x1d1/0x15b0 [ 132.756127][ T8803] ? ip6t_do_table+0x1d1/0x15b0 [ 132.756145][ T8803] ? ip6t_do_table+0x13c4/0x15b0 [ 132.756165][ T8803] fib6_rule_lookup+0x556/0x730 [ 132.756195][ T8803] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 132.756212][ T8803] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 132.756244][ T8803] ? ip6t_do_table+0x1d1/0x15b0 [ 132.756265][ T8803] ip6_route_input+0x78d/0xb20 [ 132.756287][ T8803] ? __pfx_ip6_route_input+0x10/0x10 [ 132.756310][ T8803] ? nf_nat_ipv6_in+0x200/0x2c0 [ 132.756339][ T8803] ? NF_HOOK+0x9e/0x3c0 [ 132.756360][ T8803] ? rcu_is_watching+0x15/0xb0 [ 132.756381][ T8803] ? ip6_rcv_finish_core+0x222/0x420 [ 132.756405][ T8803] ip6_rcv_finish+0x141/0x280 [ 132.756428][ T8803] NF_HOOK+0x336/0x3c0 [ 132.756450][ T8803] ? __pfx_sock_wfree+0x10/0x10 [ 132.756477][ T8803] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 132.756500][ T8803] ? NF_HOOK+0x9e/0x3c0 [ 132.756522][ T8803] ? __pfx_NF_HOOK+0x10/0x10 [ 132.756543][ T8803] ? ip6_rcv_core+0xa1/0x1870 [ 132.756568][ T8803] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 132.756604][ T8803] ? netif_receive_skb+0x102/0xbf0 [ 132.756626][ T8803] netif_receive_skb+0x278/0xbf0 [ 132.756651][ T8803] ? __pfx_netif_receive_skb+0x10/0x10 [ 132.756672][ T8803] ? __pfx__copy_from_iter+0x10/0x10 [ 132.756697][ T8803] ? tun_rx_batched+0x185/0x790 [ 132.756723][ T8803] tun_rx_batched+0x1de/0x790 [ 132.756752][ T8803] ? __pfx_tun_rx_batched+0x10/0x10 [ 132.756782][ T8803] ? tun_get_user+0x26ca/0x4350 [ 132.756810][ T8803] ? rcu_is_watching+0x15/0xb0 [ 132.756830][ T8803] ? lock_acquire+0x5f/0x350 [ 132.756860][ T8803] ? tun_get_user+0x2373/0x4350 [ 132.756883][ T8803] ? rcu_is_watching+0x15/0xb0 [ 132.756903][ T8803] ? trace_irq_enable+0x3b/0x140 [ 132.756931][ T8803] tun_get_user+0x2b04/0x4350 [ 132.756955][ T8803] ? is_bpf_text_address+0x292/0x2b0 [ 132.756991][ T8803] ? lock_release+0x4b/0x3c0 [ 132.757019][ T8803] ? arch_stack_walk+0xfb/0x150 [ 132.757040][ T8803] ? tun_get_user+0x26ca/0x4350 [ 132.757067][ T8803] ? aa_file_perm+0x4ed/0x15f0 [ 132.757088][ T8803] ? __pfx_tun_get_user+0x10/0x10 [ 132.757116][ T8803] ? kstrtoull+0x12f/0x1d0 [ 132.757140][ T8803] ? ref_tracker_alloc+0x341/0x4b0 [ 132.757168][ T8803] ? get_pid_task+0x20/0x1f0 [ 132.757186][ T8803] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.757208][ T8803] ? rcu_is_watching+0x15/0xb0 [ 132.757228][ T8803] ? tun_get+0x1c/0x2f0 [ 132.757251][ T8803] ? tun_get+0x1c/0x2f0 [ 132.757273][ T8803] ? rcu_is_watching+0x15/0xb0 [ 132.757292][ T8803] ? tun_get+0x1c/0x2f0 [ 132.757314][ T8803] ? lock_release+0x4b/0x3c0 [ 132.757343][ T8803] ? apparmor_file_permission+0x1f4/0x300 [ 132.757369][ T8803] ? tun_get+0x1c/0x2f0 [ 132.757394][ T8803] tun_chr_write_iter+0x113/0x200 [ 132.757420][ T8803] vfs_write+0x612/0xba0 [ 132.757451][ T8803] ? __pfx_vfs_write+0x10/0x10 [ 132.757482][ T8803] ? __fget_files+0x2a/0x420 [ 132.757509][ T8803] ksys_write+0x150/0x270 [ 132.757536][ T8803] ? __pfx_ksys_write+0x10/0x10 [ 132.757564][ T8803] ? rcu_is_watching+0x15/0xb0 [ 132.757591][ T8803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.757611][ T8803] do_syscall_64+0x174/0x580 [ 132.757637][ T8803] ? trace_irq_disable+0x3b/0x140 [ 132.757661][ T8803] ? clear_bhb_loop+0x40/0x90 [ 132.757684][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.757704][ T8803] RIP: 0033:0x7fdfb9b9ce59 [ 132.757723][ T8803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.757739][ T8803] RSP: 002b:00007fdfba96f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.757761][ T8803] RAX: ffffffffffffffda RBX: 00007fdfb9e15fa0 RCX: 00007fdfb9b9ce59 [ 132.757775][ T8803] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 132.757787][ T8803] RBP: 00007fdfba96f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.757799][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.757810][ T8803] R13: 00007fdfb9e16038 R14: 00007fdfb9e15fa0 R15: 00007fff65049148 [ 132.757833][ T8803] [ 133.258827][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.265235][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.472177][ T8813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.827'. [ 133.885895][ T8823] syzkaller1: entered promiscuous mode [ 133.891515][ T8823] syzkaller1: entered allmulticast mode [ 133.924285][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.833'. [ 134.036733][ T8837] sctp: [Deprecated]: syz.2.835 (pid 8837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.036733][ T8837] Use struct sctp_sack_info instead [ 134.157043][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 134.358817][ T8853] FAULT_INJECTION: forcing a failure. [ 134.358817][ T8853] name failslab, interval 1, probability 0, space 0, times 0 [ 134.371632][ T8853] CPU: 0 UID: 0 PID: 8853 Comm: syz.3.839 Not tainted syzkaller #0 PREEMPT(full) [ 134.371660][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.371672][ T8853] Call Trace: [ 134.371679][ T8853] [ 134.371687][ T8853] dump_stack_lvl+0xe8/0x150 [ 134.371715][ T8853] should_fail_ex+0x40c/0x560 [ 134.371740][ T8853] should_failslab+0xa8/0x100 [ 134.371770][ T8853] __kmalloc_node_noprof+0xf0/0x7b0 [ 134.371799][ T8853] ? alloc_slab_obj_exts+0xbf/0x250 [ 134.371826][ T8853] alloc_slab_obj_exts+0xbf/0x250 [ 134.371861][ T8853] __memcg_slab_post_alloc_hook+0x5b6/0xe60 [ 134.371892][ T8853] ? dst_alloc+0x105/0x170 [ 134.371911][ T8853] kmem_cache_alloc_noprof+0x343/0x650 [ 134.371932][ T8853] ? dst_alloc+0x105/0x170 [ 134.371949][ T8853] ? kmem_cache_alloc_noprof+0x156/0x650 [ 134.371971][ T8853] ? __pfx_ip6_dst_gc+0x10/0x10 [ 134.371997][ T8853] dst_alloc+0x105/0x170 [ 134.372018][ T8853] ip6_pol_route+0xba1/0x14d0 [ 134.372037][ T8853] ? ip6_pol_route+0x163/0x14d0 [ 134.372057][ T8853] ? __pfx_ip6_pol_route+0x10/0x10 [ 134.372083][ T8853] ? ip6t_do_table+0x1d1/0x15b0 [ 134.372109][ T8853] ? trace_irq_enable+0x3b/0x140 [ 134.372137][ T8853] ? ip6t_do_table+0x1d1/0x15b0 [ 134.372154][ T8853] ? ip6t_do_table+0x1d1/0x15b0 [ 134.372173][ T8853] ? ip6t_do_table+0x13c4/0x15b0 [ 134.372193][ T8853] fib6_rule_lookup+0x556/0x730 [ 134.372223][ T8853] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 134.372242][ T8853] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 134.372283][ T8853] ? ip6t_do_table+0x1d1/0x15b0 [ 134.372307][ T8853] ip6_route_input+0x78d/0xb20 [ 134.372329][ T8853] ? __pfx_ip6_route_input+0x10/0x10 [ 134.372354][ T8853] ? nf_nat_ipv6_in+0x200/0x2c0 [ 134.372388][ T8853] ? NF_HOOK+0x9e/0x3c0 [ 134.372410][ T8853] ? rcu_is_watching+0x15/0xb0 [ 134.372434][ T8853] ? ip6_rcv_finish_core+0x222/0x420 [ 134.372460][ T8853] ip6_rcv_finish+0x141/0x280 [ 134.372486][ T8853] NF_HOOK+0x336/0x3c0 [ 134.372510][ T8853] ? __pfx_sock_wfree+0x10/0x10 [ 134.372547][ T8853] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 134.372571][ T8853] ? NF_HOOK+0x9e/0x3c0 [ 134.372593][ T8853] ? __pfx_NF_HOOK+0x10/0x10 [ 134.372616][ T8853] ? ip6_rcv_core+0xa1/0x1870 [ 134.372641][ T8853] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 134.372669][ T8853] ? netif_receive_skb+0x102/0xbf0 [ 134.372692][ T8853] netif_receive_skb+0x278/0xbf0 [ 134.372715][ T8853] ? __pfx_netif_receive_skb+0x10/0x10 [ 134.372737][ T8853] ? __pfx__copy_from_iter+0x10/0x10 [ 134.372763][ T8853] ? tun_rx_batched+0x185/0x790 [ 134.372789][ T8853] tun_rx_batched+0x1de/0x790 [ 134.372817][ T8853] ? __pfx_tun_rx_batched+0x10/0x10 [ 134.372842][ T8853] ? tun_get_user+0x26ca/0x4350 [ 134.372864][ T8853] ? rcu_is_watching+0x15/0xb0 [ 134.372883][ T8853] ? lock_acquire+0x5f/0x350 [ 134.372911][ T8853] ? tun_get_user+0x2373/0x4350 [ 134.372934][ T8853] ? rcu_is_watching+0x15/0xb0 [ 134.372954][ T8853] ? trace_irq_enable+0x3b/0x140 [ 134.372982][ T8853] tun_get_user+0x2b04/0x4350 [ 134.373005][ T8853] ? is_bpf_text_address+0x292/0x2b0 [ 134.373044][ T8853] ? lock_release+0x4b/0x3c0 [ 134.373071][ T8853] ? arch_stack_walk+0xfb/0x150 [ 134.373093][ T8853] ? tun_get_user+0x26ca/0x4350 [ 134.373120][ T8853] ? aa_file_perm+0x4ed/0x15f0 [ 134.373142][ T8853] ? __pfx_tun_get_user+0x10/0x10 [ 134.373170][ T8853] ? kstrtoull+0x12f/0x1d0 [ 134.373193][ T8853] ? ref_tracker_alloc+0x341/0x4b0 [ 134.373214][ T8853] ? get_pid_task+0x20/0x1f0 [ 134.373233][ T8853] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 134.373265][ T8853] ? rcu_is_watching+0x15/0xb0 [ 134.373285][ T8853] ? tun_get+0x1c/0x2f0 [ 134.373307][ T8853] ? tun_get+0x1c/0x2f0 [ 134.373328][ T8853] ? rcu_is_watching+0x15/0xb0 [ 134.373346][ T8853] ? tun_get+0x1c/0x2f0 [ 134.373367][ T8853] ? lock_release+0x4b/0x3c0 [ 134.373394][ T8853] ? apparmor_file_permission+0x1f4/0x300 [ 134.373421][ T8853] ? tun_get+0x1c/0x2f0 [ 134.373446][ T8853] tun_chr_write_iter+0x113/0x200 [ 134.373471][ T8853] vfs_write+0x612/0xba0 [ 134.373503][ T8853] ? __pfx_vfs_write+0x10/0x10 [ 134.373532][ T8853] ? __fget_files+0x2a/0x420 [ 134.373557][ T8853] ksys_write+0x150/0x270 [ 134.373585][ T8853] ? __pfx_ksys_write+0x10/0x10 [ 134.373612][ T8853] ? rcu_is_watching+0x15/0xb0 [ 134.373633][ T8853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.373654][ T8853] do_syscall_64+0x174/0x580 [ 134.373681][ T8853] ? trace_irq_disable+0x3b/0x140 [ 134.373707][ T8853] ? clear_bhb_loop+0x40/0x90 [ 134.373730][ T8853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.373749][ T8853] RIP: 0033:0x7f551e19ce59 [ 134.373858][ T8853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.373875][ T8853] RSP: 002b:00007f551efcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.373896][ T8853] RAX: ffffffffffffffda RBX: 00007f551e415fa0 RCX: 00007f551e19ce59 [ 134.373912][ T8853] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.373924][ T8853] RBP: 00007f551efcd090 R08: 0000000000000000 R09: 0000000000000000 [ 134.373936][ T8853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.373948][ T8853] R13: 00007f551e416038 R14: 00007f551e415fa0 R15: 00007fff3e3ebcd8 [ 134.373973][ T8853] [ 135.068014][ T8855] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 135.118858][ T8855] bond4: entered promiscuous mode [ 135.133603][ T8855] bond4: entered allmulticast mode [ 135.139653][ T8855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.151772][ T8859] erspan1: entered allmulticast mode [ 135.160362][ T8859] bond4: (slave erspan1): making interface the new active one [ 135.168304][ T8859] erspan1: entered promiscuous mode [ 135.175188][ T8859] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 135.208369][ T8855] syz.4.841 (8855) used obsolete PPPIOCDETACH ioctl [ 135.245307][ T8868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.400359][ T8874] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 135.438246][ T8876] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 135.459673][ T8876] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.471474][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 135.488714][ T8876] bond5: (slave veth7): Enslaving as an active interface with a down link [ 135.504059][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.513112][ T8876] bond5: (slave batadv0): making interface the new active one [ 135.521938][ T8876] batadv0: entered promiscuous mode [ 135.527879][ T8876] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 135.614877][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.649018][ T8881] netlink: 277 bytes leftover after parsing attributes in process `syz.3.847'. [ 136.500412][ T8907] tipc: Started in network mode [ 136.512049][ T8907] tipc: Node identity ac14140f, cluster identity 4711 [ 136.527562][ T8907] tipc: New replicast peer: 255.255.255.255 [ 136.541035][ T8907] tipc: Enabled bearer , priority 10 [ 136.689513][ T8912] bond5 (unregistering): Released all slaves [ 136.869011][ T8930] FAULT_INJECTION: forcing a failure. [ 136.869011][ T8930] name failslab, interval 1, probability 0, space 0, times 0 [ 136.883356][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.1.863 Not tainted syzkaller #0 PREEMPT(full) [ 136.883385][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.883396][ T8930] Call Trace: [ 136.883404][ T8930] [ 136.883412][ T8930] dump_stack_lvl+0xe8/0x150 [ 136.883438][ T8930] should_fail_ex+0x40c/0x560 [ 136.883462][ T8930] should_failslab+0xa8/0x100 [ 136.883493][ T8930] __kmalloc_noprof+0xe8/0x750 [ 136.883519][ T8930] ? get_pid_task+0x20/0x1f0 [ 136.883543][ T8930] ? tomoyo_realpath_from_path+0xef/0x640 [ 136.883569][ T8930] tomoyo_realpath_from_path+0xef/0x640 [ 136.883589][ T8930] ? lock_release+0x4b/0x3c0 [ 136.883623][ T8930] ? tomoyo_path_number_perm+0x219/0x5f0 [ 136.883653][ T8930] tomoyo_path_number_perm+0x246/0x5f0 [ 136.883681][ T8930] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.883714][ T8930] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 136.883743][ T8930] ? preempt_count_add+0x91/0x190 [ 136.883768][ T8930] ? sb_end_write+0xe5/0x190 [ 136.883784][ T8930] ? vfs_write+0x9ce/0xba0 [ 136.883807][ T8930] ? hook_file_ioctl+0x1f0/0x5c0 [ 136.883844][ T8930] ? ksys_write+0x1fc/0x270 [ 136.883867][ T8930] security_file_ioctl+0xc3/0x2a0 [ 136.883892][ T8930] __se_sys_ioctl+0x47/0x170 [ 136.883916][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.883932][ T8930] do_syscall_64+0x174/0x580 [ 136.883953][ T8930] ? trace_irq_disable+0x3b/0x140 [ 136.883975][ T8930] ? clear_bhb_loop+0x40/0x90 [ 136.883993][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.884009][ T8930] RIP: 0033:0x7f8d16f9ce59 [ 136.884024][ T8930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.884038][ T8930] RSP: 002b:00007f8d17e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.884056][ T8930] RAX: ffffffffffffffda RBX: 00007f8d17215fa0 RCX: 00007f8d16f9ce59 [ 136.884073][ T8930] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000003 [ 136.884083][ T8930] RBP: 00007f8d17e18090 R08: 0000000000000000 R09: 0000000000000000 [ 136.884093][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.884102][ T8930] R13: 00007f8d17216038 R14: 00007f8d17215fa0 R15: 00007ffd34b3d8e8 [ 136.884121][ T8930] [ 137.109311][ T8930] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.123293][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.865'. [ 137.218010][ T8937] ip6gre1: entered promiscuous mode [ 137.223967][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 137.233187][ T8937] ip6gre1: entered allmulticast mode [ 137.368799][ T8941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.867'. [ 137.413528][ T8954] tipc: Started in network mode [ 137.418729][ T8954] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 137.426905][ T8954] tipc: Enabled bearer , priority 0 [ 137.528090][ T8961] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 137.547501][ T8961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.874'. [ 137.560209][ T8961] dummy0: entered promiscuous mode [ 137.565748][ T8961] dummy0: entered allmulticast mode [ 137.571318][ T8961] batman_adv: batadv0: Interface deactivated: dummy0 [ 137.580189][ T8961] batman_adv: batadv0: Removing interface: dummy0 [ 137.596248][ T8961] bridge0: port 3(dummy0) entered blocking state [ 137.609557][ T8961] bridge0: port 3(dummy0) entered disabled state [ 137.629513][ T8961] bridge0: port 3(dummy0) entered blocking state [ 137.636078][ T8961] bridge0: port 3(dummy0) entered forwarding state [ 137.653223][ T5811] tipc: Node number set to 2886997007 [ 137.679637][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.873'. [ 137.719947][ T8972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.801121][ T8977] FAULT_INJECTION: forcing a failure. [ 137.801121][ T8977] name failslab, interval 1, probability 0, space 0, times 0 [ 137.814671][ T8977] CPU: 0 UID: 0 PID: 8977 Comm: syz.4.879 Not tainted syzkaller #0 PREEMPT(full) [ 137.814702][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.814714][ T8977] Call Trace: [ 137.814722][ T8977] [ 137.814729][ T8977] dump_stack_lvl+0xe8/0x150 [ 137.814755][ T8977] should_fail_ex+0x40c/0x560 [ 137.814778][ T8977] should_failslab+0xa8/0x100 [ 137.814807][ T8977] __kmalloc_noprof+0xe8/0x750 [ 137.814834][ T8977] ? __pfx_dynamic_dname+0x10/0x10 [ 137.814853][ T8977] ? tomoyo_encode+0x2ad/0x570 [ 137.814876][ T8977] tomoyo_encode+0x2ad/0x570 [ 137.814900][ T8977] tomoyo_realpath_from_path+0x5fa/0x640 [ 137.814927][ T8977] ? tomoyo_path_number_perm+0x219/0x5f0 [ 137.814956][ T8977] tomoyo_path_number_perm+0x246/0x5f0 [ 137.814984][ T8977] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.815020][ T8977] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.815049][ T8977] ? preempt_count_add+0x91/0x190 [ 137.815077][ T8977] ? sb_end_write+0xe5/0x190 [ 137.815098][ T8977] ? vfs_write+0x9ce/0xba0 [ 137.815126][ T8977] ? hook_file_ioctl+0x1f0/0x5c0 [ 137.815169][ T8977] ? ksys_write+0x1fc/0x270 [ 137.815200][ T8977] security_file_ioctl+0xc3/0x2a0 [ 137.815227][ T8977] __se_sys_ioctl+0x47/0x170 [ 137.815254][ T8977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.815275][ T8977] do_syscall_64+0x174/0x580 [ 137.815301][ T8977] ? trace_irq_disable+0x3b/0x140 [ 137.815329][ T8977] ? clear_bhb_loop+0x40/0x90 [ 137.815352][ T8977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.815372][ T8977] RIP: 0033:0x7f7e7239ce59 [ 137.815391][ T8977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.815407][ T8977] RSP: 002b:00007f7e73208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.815427][ T8977] RAX: ffffffffffffffda RBX: 00007f7e72615fa0 RCX: 00007f7e7239ce59 [ 137.815441][ T8977] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000003 [ 137.815454][ T8977] RBP: 00007f7e73208090 R08: 0000000000000000 R09: 0000000000000000 [ 137.815466][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.815478][ T8977] R13: 00007f7e72616038 R14: 00007f7e72615fa0 R15: 00007ffed038e8b8 [ 137.815502][ T8977] [ 138.057264][ T8977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.179983][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 138.205857][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 138.214886][ T8988] netlink: 'syz.4.883': attribute type 18 has an invalid length. [ 138.394676][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 138.455020][ T7835] tipc: Node number set to 10136234 [ 138.511287][ T9011] bond6: option miimon: invalid value (18446744073709551607) [ 138.520350][ T9011] bond6: option miimon: allowed values 0 - 2147483647 [ 138.542694][ T9011] bond6 (unregistering): Released all slaves [ 138.599829][ T4941] block nbd0: Receive control failed (result -32) [ 138.610155][ T9023] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 138.640176][ T9023] netlink: 'syz.1.892': attribute type 4 has an invalid length. [ 138.727832][ T9029] syzkaller1: entered promiscuous mode [ 138.738255][ T9029] syzkaller1: entered allmulticast mode [ 138.746015][ T9031] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 139.261299][ T9048] lo speed is unknown, defaulting to 1000 [ 139.267460][ T9048] lo speed is unknown, defaulting to 1000 [ 139.273747][ T9048] lo speed is unknown, defaulting to 1000 [ 139.280111][ T9048] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 139.295578][ T9048] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 139.312675][ T9048] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 139.324634][ T9048] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.336331][ T9048] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.353304][ T9048] lo speed is unknown, defaulting to 1000 [ 139.360316][ T9048] lo speed is unknown, defaulting to 1000 [ 139.368516][ T9048] lo speed is unknown, defaulting to 1000 [ 139.375458][ T9048] lo speed is unknown, defaulting to 1000 [ 139.381989][ T9048] lo speed is unknown, defaulting to 1000 [ 141.566945][ T9023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.708471][ T9060] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 141.717011][ T9060] nbd: illegal input index 871591272 [ 142.018848][ T9078] syzkaller1: entered promiscuous mode [ 142.041293][ T9078] syzkaller1: entered allmulticast mode [ 142.075327][ T9089] __nla_validate_parse: 2 callbacks suppressed [ 142.075342][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 142.103450][ T9089] ipip0: entered promiscuous mode [ 143.135224][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 144.985109][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 145.013972][ T9121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.918'. [ 145.439819][ T9138] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 145.448767][ T7982] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 145.487115][ T9148] netlink: 'syz.4.924': attribute type 12 has an invalid length. [ 145.495444][ T9148] netlink: 'syz.4.924': attribute type 29 has an invalid length. [ 145.503328][ T9148] netlink: 148 bytes leftover after parsing attributes in process `syz.4.924'. [ 145.524893][ T9148] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 145.532788][ T9148] netlink: 47 bytes leftover after parsing attributes in process `syz.4.924'. [ 145.550553][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.924'. [ 145.597807][ T9151] netlink: 'syz.2.925': attribute type 5 has an invalid length. [ 145.932199][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 145.945894][ T9170] syzkaller1: entered promiscuous mode [ 145.974958][ T9170] syzkaller1: entered allmulticast mode [ 146.027789][ T9179] netlink: 80 bytes leftover after parsing attributes in process `syz.2.936'. [ 146.042836][ T9181] FAULT_INJECTION: forcing a failure. [ 146.042836][ T9181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.075023][ T9181] CPU: 0 UID: 0 PID: 9181 Comm: syz.0.935 Not tainted syzkaller #0 PREEMPT(full) [ 146.075052][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.075064][ T9181] Call Trace: [ 146.075071][ T9181] [ 146.075087][ T9181] dump_stack_lvl+0xe8/0x150 [ 146.075114][ T9181] should_fail_ex+0x40c/0x560 [ 146.075138][ T9181] _copy_to_user+0x31/0xb0 [ 146.075168][ T9181] simple_read_from_buffer+0xe1/0x170 [ 146.075195][ T9181] proc_fail_nth_read+0x1bb/0x230 [ 146.075224][ T9181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.075252][ T9181] ? rw_verify_area+0x24a/0x4c0 [ 146.075277][ T9181] ? tun_chr_write_iter+0x18a/0x200 [ 146.075303][ T9181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.075328][ T9181] vfs_read+0x213/0xa80 [ 146.075356][ T9181] ? __pfx___mutex_lock+0x10/0x10 [ 146.075383][ T9181] ? __pfx_vfs_read+0x10/0x10 [ 146.075412][ T9181] ? __fget_files+0x3a2/0x420 [ 146.075434][ T9181] ? __fget_files+0x2a/0x420 [ 146.075460][ T9181] ksys_read+0x150/0x270 [ 146.075487][ T9181] ? __pfx_ksys_read+0x10/0x10 [ 146.075515][ T9181] ? rcu_is_watching+0x15/0xb0 [ 146.075536][ T9181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.075556][ T9181] do_syscall_64+0x174/0x580 [ 146.075582][ T9181] ? trace_irq_disable+0x3b/0x140 [ 146.075610][ T9181] ? clear_bhb_loop+0x40/0x90 [ 146.075632][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.075652][ T9181] RIP: 0033:0x7fc0fb75d68e [ 146.075670][ T9181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.075687][ T9181] RSP: 002b:00007fc0fc6bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.075708][ T9181] RAX: ffffffffffffffda RBX: 00007fc0fc6bc6c0 RCX: 00007fc0fb75d68e [ 146.075721][ T9181] RDX: 000000000000000f RSI: 00007fc0fc6bc0a0 RDI: 0000000000000005 [ 146.075732][ T9181] RBP: 00007fc0fc6bc090 R08: 0000000000000000 R09: 0000000000000000 [ 146.075743][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.075754][ T9181] R13: 00007fc0fba16038 R14: 00007fc0fba15fa0 R15: 00007ffd4df17508 [ 146.075774][ T9181] [ 146.327657][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 146.406388][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 146.478405][ T9198] x_tables: duplicate entry at hook 1 [ 146.494980][ T7982] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.533885][ T9198] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 147.105633][ T13] batadv0: left promiscuous mode [ 147.198466][ T9225] __nla_validate_parse: 3 callbacks suppressed [ 147.198485][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.954'. [ 147.226765][ T9226] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 147.313145][ T9234] dvmrp5: entered allmulticast mode [ 147.373810][ T9239] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.960'. [ 147.395850][ T9239] ksmbd: Unknown IPC event: 1, ignore. [ 147.467250][ T9246] gre1: entered allmulticast mode [ 147.649384][ T9261] syzkaller1: entered promiscuous mode [ 147.667007][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 147.676022][ T9261] syzkaller1: entered allmulticast mode [ 147.692848][ T9268] veth0_to_hsr: entered promiscuous mode [ 147.705263][ T9268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.762571][ T9270] netlink: 'syz.3.968': attribute type 9 has an invalid length. [ 148.387928][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'. [ 148.411400][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'. [ 148.539394][ T9303] ip6tnl0: Caught tx_queue_len zero misconfig [ 148.584574][ T9307] netlink: 'syz.1.980': attribute type 9 has an invalid length. [ 148.786218][ T9318] netlink: 244 bytes leftover after parsing attributes in process `syz.0.986'. [ 149.132552][ T9340] FAULT_INJECTION: forcing a failure. [ 149.132552][ T9340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.168422][ T9340] CPU: 0 UID: 0 PID: 9340 Comm: syz.0.989 Not tainted syzkaller #0 PREEMPT(full) [ 149.168451][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.168463][ T9340] Call Trace: [ 149.168470][ T9340] [ 149.168478][ T9340] dump_stack_lvl+0xe8/0x150 [ 149.168506][ T9340] should_fail_ex+0x40c/0x560 [ 149.168531][ T9340] _copy_from_user+0x2d/0xb0 [ 149.168559][ T9340] copy_from_sockptr+0x5e/0x90 [ 149.168582][ T9340] packet_setsockopt+0x94c/0x1510 [ 149.168602][ T9340] ? __pfx_packet_setsockopt+0x10/0x10 [ 149.168621][ T9340] ? lock_release+0x4b/0x3c0 [ 149.168658][ T9340] ? aa_sk_perm+0x6d5/0x900 [ 149.168691][ T9340] ? __pfx_aa_sk_perm+0x10/0x10 [ 149.168719][ T9340] ? lock_release+0x4b/0x3c0 [ 149.168755][ T9340] ? aa_sock_opt_perm+0xff/0x1a0 [ 149.168775][ T9340] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 149.168802][ T9340] ? __pfx_packet_setsockopt+0x10/0x10 [ 149.168820][ T9340] do_sock_setsockopt+0x17c/0x1b0 [ 149.168851][ T9340] __x64_sys_setsockopt+0x13d/0x1b0 [ 149.168878][ T9340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.168896][ T9340] do_syscall_64+0x174/0x580 [ 149.168921][ T9340] ? trace_irq_disable+0x3b/0x140 [ 149.168948][ T9340] ? clear_bhb_loop+0x40/0x90 [ 149.168968][ T9340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.168987][ T9340] RIP: 0033:0x7fc0fb79ce59 [ 149.169004][ T9340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.169020][ T9340] RSP: 002b:00007fc0fc67a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.169041][ T9340] RAX: ffffffffffffffda RBX: 00007fc0fba16180 RCX: 00007fc0fb79ce59 [ 149.169055][ T9340] RDX: 0000000000000013 RSI: 0000000000000107 RDI: 0000000000000003 [ 149.169067][ T9340] RBP: 00007fc0fc67a090 R08: 0000000000000004 R09: 0000000000000000 [ 149.169078][ T9340] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 149.169090][ T9340] R13: 00007fc0fba16218 R14: 00007fc0fba16180 R15: 00007ffd4df17508 [ 149.169119][ T9340] [ 149.597754][ T9347] netlink: 'syz.3.994': attribute type 9 has an invalid length. [ 149.729620][ T9349] syzkaller1: entered promiscuous mode [ 149.748314][ T9349] syzkaller1: entered allmulticast mode [ 150.134018][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 150.180058][ T9369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 150.251011][ T9378] bond6: entered promiscuous mode [ 150.273584][ T9378] bond6: entered allmulticast mode [ 150.286804][ T9369] team_slave_1: entered promiscuous mode [ 150.312595][ T9369] team_slave_1: entered allmulticast mode [ 150.332301][ T9369] bond6: (slave team_slave_1): Enslaving as an active interface with an up link [ 150.620310][ T9394] syzkaller0: entered promiscuous mode [ 150.633827][ T9394] syzkaller0: entered allmulticast mode [ 150.713108][ T9391] FAULT_INJECTION: forcing a failure. [ 150.713108][ T9391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.739699][ T9391] CPU: 0 UID: 0 PID: 9391 Comm: syz.3.1006 Not tainted syzkaller #0 PREEMPT(full) [ 150.739727][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.739739][ T9391] Call Trace: [ 150.739746][ T9391] [ 150.739755][ T9391] dump_stack_lvl+0xe8/0x150 [ 150.739782][ T9391] should_fail_ex+0x40c/0x560 [ 150.739806][ T9391] _copy_to_user+0x31/0xb0 [ 150.739833][ T9391] simple_read_from_buffer+0xe1/0x170 [ 150.739859][ T9391] proc_fail_nth_read+0x1bb/0x230 [ 150.739886][ T9391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.739914][ T9391] ? rw_verify_area+0x24a/0x4c0 [ 150.739945][ T9391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.739971][ T9391] vfs_read+0x213/0xa80 [ 150.740037][ T9391] ? __pfx___mutex_lock+0x10/0x10 [ 150.740065][ T9391] ? __pfx_vfs_read+0x10/0x10 [ 150.740095][ T9391] ? __fget_files+0x3a2/0x420 [ 150.740117][ T9391] ? __fget_files+0x2a/0x420 [ 150.740142][ T9391] ksys_read+0x150/0x270 [ 150.740169][ T9391] ? __pfx_ksys_read+0x10/0x10 [ 150.740196][ T9391] ? rcu_is_watching+0x15/0xb0 [ 150.740218][ T9391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.740239][ T9391] do_syscall_64+0x174/0x580 [ 150.740265][ T9391] ? trace_irq_disable+0x3b/0x140 [ 150.740292][ T9391] ? clear_bhb_loop+0x40/0x90 [ 150.740314][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.740334][ T9391] RIP: 0033:0x7f551e15d68e [ 150.740352][ T9391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.740369][ T9391] RSP: 002b:00007f551ef8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.740390][ T9391] RAX: ffffffffffffffda RBX: 00007f551ef8b6c0 RCX: 00007f551e15d68e [ 150.740405][ T9391] RDX: 000000000000000f RSI: 00007f551ef8b0a0 RDI: 0000000000000004 [ 150.740417][ T9391] RBP: 00007f551ef8b090 R08: 0000000000000000 R09: 0000000000000000 [ 150.740429][ T9391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.740441][ T9391] R13: 00007f551e416218 R14: 00007f551e416180 R15: 00007fff3e3ebcd8 [ 150.740464][ T9391] [ 151.040039][ T9407] bridge0: port 3(dummy0) entered disabled state [ 151.046672][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.054886][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.063177][ T9407] bridge0: entered allmulticast mode [ 151.207330][ T9408] lo: Caught tx_queue_len zero misconfig [ 151.226971][ T9408] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.1011'. [ 151.231522][ T9407] syzkaller0: entered promiscuous mode [ 151.241809][ T9407] syzkaller0: entered allmulticast mode [ 151.251329][ T9407] bridge0: port 3(dummy0) entered disabled state [ 151.251715][ T9408] netlink: 'syz.3.1011': attribute type 4 has an invalid length. [ 151.267722][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1011'. [ 151.282787][ T9407] bridge_slave_1: left allmulticast mode [ 151.306859][ T9407] bridge_slave_1: left promiscuous mode [ 151.313469][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.323607][ T9407] bridge_slave_0: left allmulticast mode [ 151.330076][ T9407] bridge_slave_0: left promiscuous mode [ 151.336661][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.585946][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1016'. [ 151.618058][ T5718] lo speed is unknown, defaulting to 1000 [ 151.624025][ T5718] syz2: Port: 1 Link DOWN [ 153.152945][ T9374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.272634][ T9479] __nla_validate_parse: 29 callbacks suppressed [ 153.272658][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 153.292916][ T9480] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 153.305768][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 153.710192][ T9516] netlink: 'syz.4.1026': attribute type 8 has an invalid length. [ 153.787376][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 153.824082][ T9520] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 153.842603][ T9525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1030'. [ 154.070715][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.125532][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 154.292328][ T9561] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 154.320272][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1039'. [ 154.458786][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 154.591375][ T9576] netlink: 'syz.2.1044': attribute type 9 has an invalid length. [ 154.667199][ T9582] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1046'. [ 154.798426][ T9588] gre2: entered promiscuous mode [ 154.883710][ T9599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1054'. [ 155.091062][ T9616] netlink: 'syz.2.1058': attribute type 9 has an invalid length. [ 155.315081][ T9634] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1063'. [ 155.430402][ T9638] netlink: 'syz.0.1064': attribute type 10 has an invalid length. [ 155.584320][ T9638] dummy0: left promiscuous mode [ 155.609334][ T9638] dummy0: left allmulticast mode [ 155.639420][ T9638] team0: Port device dummy0 added [ 156.261324][ T9691] IPVS: ip_vs_edit_dest(): server weight less than zero [ 156.324207][ T9694] FAULT_INJECTION: forcing a failure. [ 156.324207][ T9694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.378861][ T9694] CPU: 1 UID: 0 PID: 9694 Comm: syz.4.1083 Not tainted syzkaller #0 PREEMPT(full) [ 156.378889][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.378901][ T9694] Call Trace: [ 156.378908][ T9694] [ 156.378916][ T9694] dump_stack_lvl+0xe8/0x150 [ 156.378942][ T9694] should_fail_ex+0x40c/0x560 [ 156.378965][ T9694] _copy_from_iter+0x1d3/0x1660 [ 156.378992][ T9694] ? rcu_is_watching+0x15/0xb0 [ 156.379015][ T9694] ? __pfx__copy_from_iter+0x10/0x10 [ 156.379036][ T9694] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 156.379067][ T9694] ? netlink_sendmsg+0x650/0xb40 [ 156.379096][ T9694] ? skb_put+0x112/0x210 [ 156.379124][ T9694] netlink_sendmsg+0x6c0/0xb40 [ 156.379158][ T9694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.379188][ T9694] ? aa_sock_msg_perm+0xf1/0x1b0 [ 156.379207][ T9694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.379231][ T9694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.379262][ T9694] ____sys_sendmsg+0x9b9/0xa20 [ 156.379351][ T9694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.379380][ T9694] ? lock_release+0x4b/0x3c0 [ 156.379411][ T9694] ? import_iovec+0x73/0xa0 [ 156.379439][ T9694] ___sys_sendmsg+0x2a5/0x360 [ 156.379466][ T9694] ? _parse_integer_limit+0x1ae/0x1f0 [ 156.379488][ T9694] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.379520][ T9694] ? kstrtouint+0x6e/0xe0 [ 156.379553][ T9694] ? rcu_is_watching+0x15/0xb0 [ 156.379573][ T9694] ? lock_release+0x4b/0x3c0 [ 156.379600][ T9694] ? __might_fault+0xcb/0x130 [ 156.379625][ T9694] __sys_sendmmsg+0x273/0x4d0 [ 156.379657][ T9694] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.379691][ T9694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.379726][ T9694] ? ksys_write+0x242/0x270 [ 156.379754][ T9694] ? __pfx_ksys_write+0x10/0x10 [ 156.379783][ T9694] __x64_sys_sendmmsg+0xa0/0xc0 [ 156.379812][ T9694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.379833][ T9694] do_syscall_64+0x174/0x580 [ 156.379858][ T9694] ? trace_irq_disable+0x3b/0x140 [ 156.379886][ T9694] ? clear_bhb_loop+0x40/0x90 [ 156.379908][ T9694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.379931][ T9694] RIP: 0033:0x7f7e7239ce59 [ 156.379950][ T9694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.379966][ T9694] RSP: 002b:00007f7e73208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.379987][ T9694] RAX: ffffffffffffffda RBX: 00007f7e72615fa0 RCX: 00007f7e7239ce59 [ 156.380002][ T9694] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 156.380015][ T9694] RBP: 00007f7e73208090 R08: 0000000000000000 R09: 0000000000000000 [ 156.380027][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.380038][ T9694] R13: 00007f7e72616038 R14: 00007f7e72615fa0 R15: 00007ffed038e8b8 [ 156.380061][ T9694] [ 156.383915][ T9699] netlink: 'syz.0.1086': attribute type 13 has an invalid length. [ 156.675613][ T9699] netlink: 'syz.0.1086': attribute type 17 has an invalid length. [ 156.919820][ T9699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.931786][ T9699] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.041978][ T9699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.053356][ T9699] veth5: left allmulticast mode [ 157.061509][ T9699] gre1: left allmulticast mode [ 157.087611][ T9699] ip6gre1: left promiscuous mode [ 157.092837][ T9699] ip6gre1: left allmulticast mode [ 157.100254][ T9699] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.109827][ T7972] lo speed is unknown, defaulting to 1000 [ 157.117479][ T7972] syz2: Port: 1 Link ACTIVE [ 157.253896][ T9736] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 157.837220][ T9779] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 157.854853][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 158.068109][ T9787] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 158.199272][ T9781] syzkaller1: entered promiscuous mode [ 158.223271][ T9781] syzkaller1: entered allmulticast mode [ 158.286030][ T9800] netlink: zone id is out of range [ 158.300406][ T9794] ip6gre1: entered promiscuous mode [ 158.300938][ T9800] netlink: zone id is out of range [ 158.313577][ T9794] ip6gre1: entered allmulticast mode [ 158.323160][ T9803] FAULT_INJECTION: forcing a failure. [ 158.323160][ T9803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.325386][ T6983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.337001][ T9800] netlink: zone id is out of range [ 158.360864][ T9803] CPU: 1 UID: 0 PID: 9803 Comm: syz.3.1109 Not tainted syzkaller #0 PREEMPT(full) [ 158.360902][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.360914][ T9803] Call Trace: [ 158.360921][ T9803] [ 158.360930][ T9803] dump_stack_lvl+0xe8/0x150 [ 158.360966][ T9803] should_fail_ex+0x40c/0x560 [ 158.360991][ T9803] _copy_from_iter+0x1d3/0x1660 [ 158.361019][ T9803] ? rcu_is_watching+0x15/0xb0 [ 158.361043][ T9803] ? __pfx__copy_from_iter+0x10/0x10 [ 158.361064][ T9803] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 158.361096][ T9803] ? netlink_sendmsg+0x650/0xb40 [ 158.361126][ T9803] ? skb_put+0x112/0x210 [ 158.361153][ T9803] netlink_sendmsg+0x6c0/0xb40 [ 158.361187][ T9803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.361219][ T9803] ? aa_sock_msg_perm+0xf1/0x1b0 [ 158.361239][ T9803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.361264][ T9803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.361295][ T9803] ____sys_sendmsg+0x9b9/0xa20 [ 158.361329][ T9803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.361359][ T9803] ? lock_release+0x4b/0x3c0 [ 158.361390][ T9803] ? import_iovec+0x73/0xa0 [ 158.361417][ T9803] ___sys_sendmsg+0x2a5/0x360 [ 158.361445][ T9803] ? _parse_integer_limit+0x1ae/0x1f0 [ 158.361468][ T9803] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.361498][ T9803] ? kstrtouint+0x6e/0xe0 [ 158.361530][ T9803] ? rcu_is_watching+0x15/0xb0 [ 158.361548][ T9803] ? lock_release+0x4b/0x3c0 [ 158.361577][ T9803] ? __might_fault+0xcb/0x130 [ 158.361602][ T9803] __sys_sendmmsg+0x273/0x4d0 [ 158.361633][ T9803] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.361667][ T9803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.361703][ T9803] ? ksys_write+0x242/0x270 [ 158.361732][ T9803] ? __pfx_ksys_write+0x10/0x10 [ 158.361762][ T9803] __x64_sys_sendmmsg+0xa0/0xc0 [ 158.361791][ T9803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.361812][ T9803] do_syscall_64+0x174/0x580 [ 158.361840][ T9803] ? clear_bhb_loop+0x40/0x90 [ 158.361863][ T9803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.361882][ T9803] RIP: 0033:0x7f551e19ce59 [ 158.361912][ T9803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.361928][ T9803] RSP: 002b:00007f551efcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.361954][ T9803] RAX: ffffffffffffffda RBX: 00007f551e415fa0 RCX: 00007f551e19ce59 [ 158.361969][ T9803] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 158.361983][ T9803] RBP: 00007f551efcd090 R08: 0000000000000000 R09: 0000000000000000 [ 158.361995][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.362007][ T9803] R13: 00007f551e416038 R14: 00007f551e415fa0 R15: 00007fff3e3ebcd8 [ 158.362031][ T9803] [ 158.656052][ T9800] netlink: zone id is out of range [ 158.659925][ T6983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.678475][ T9800] netlink: zone id is out of range [ 158.683724][ T9800] netlink: zone id is out of range [ 158.689055][ T9800] netlink: zone id is out of range [ 158.694222][ T9800] netlink: zone id is out of range [ 158.718958][ T7972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.729442][ T9795] netlink: 'syz.4.1107': attribute type 2 has an invalid length. [ 158.772103][ T9804] 8021q: VLANs not supported on vxcan0 [ 158.866596][ T5746] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.896148][ T7972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.968623][ T9819] __nla_validate_parse: 11 callbacks suppressed [ 158.968649][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 159.054352][ T29] audit: type=1804 audit(1781753214.598:3): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1111" name="/newroot/229/cgroup.controllers" dev="tmpfs" ino=1185 res=1 errno=0 [ 159.099012][ T9819] bridge_slave_0: invalid flags given to default FDB implementation [ 159.125974][ T29] audit: type=1800 audit(1781753214.598:4): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1111" name="cgroup.controllers" dev="tmpfs" ino=1185 res=0 errno=0 [ 159.176919][ T9821] Bluetooth: MGMT ver 1.23 [ 159.932378][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 160.153211][ T9892] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 160.188120][ T5746] dummy0: entered promiscuous mode [ 161.036940][ T9902] FAULT_INJECTION: forcing a failure. [ 161.036940][ T9902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.050386][ T9902] CPU: 0 UID: 0 PID: 9902 Comm: syz.1.1137 Not tainted syzkaller #0 PREEMPT(full) [ 161.050414][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.050427][ T9902] Call Trace: [ 161.050435][ T9902] [ 161.050442][ T9902] dump_stack_lvl+0xe8/0x150 [ 161.050473][ T9902] should_fail_ex+0x40c/0x560 [ 161.050497][ T9902] _copy_from_user+0x2d/0xb0 [ 161.050525][ T9902] __sys_bpf+0x229/0x950 [ 161.050560][ T9902] ? __pfx___sys_bpf+0x10/0x10 [ 161.050595][ T9902] ? ksys_write+0x242/0x270 [ 161.050625][ T9902] ? __pfx_ksys_write+0x10/0x10 [ 161.050655][ T9902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.050676][ T9902] __x64_sys_bpf+0x7c/0x90 [ 161.050699][ T9902] do_syscall_64+0x174/0x580 [ 161.050726][ T9902] ? trace_irq_disable+0x3b/0x140 [ 161.050753][ T9902] ? clear_bhb_loop+0x40/0x90 [ 161.050776][ T9902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.050795][ T9902] RIP: 0033:0x7f8d16f9ce59 [ 161.050813][ T9902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.050831][ T9902] RSP: 002b:00007f8d17e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.050853][ T9902] RAX: ffffffffffffffda RBX: 00007f8d17215fa0 RCX: 00007f8d16f9ce59 [ 161.050868][ T9902] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 161.050881][ T9902] RBP: 00007f8d17e18090 R08: 0000000000000000 R09: 0000000000000000 [ 161.050893][ T9902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.050905][ T9902] R13: 00007f8d17216038 R14: 00007f8d17215fa0 R15: 00007ffd34b3d8e8 [ 161.050928][ T9902] [ 162.317416][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1140'. [ 162.426713][ T9915] netlink: 'syz.3.1141': attribute type 12 has an invalid length. [ 162.574170][ T9849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.664859][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.763771][ T9928] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1143'. [ 162.837157][ T9933] FAULT_INJECTION: forcing a failure. [ 162.837157][ T9933] name failslab, interval 1, probability 0, space 0, times 0 [ 162.855731][ T9933] CPU: 1 UID: 0 PID: 9933 Comm: syz.4.1148 Not tainted syzkaller #0 PREEMPT(full) [ 162.855763][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.855776][ T9933] Call Trace: [ 162.855784][ T9933] [ 162.855794][ T9933] dump_stack_lvl+0xe8/0x150 [ 162.855823][ T9933] should_fail_ex+0x40c/0x560 [ 162.855851][ T9933] should_failslab+0xa8/0x100 [ 162.855883][ T9933] __kmalloc_noprof+0xe8/0x750 [ 162.855912][ T9933] ? bpf_test_init+0x9f/0x150 [ 162.855945][ T9933] bpf_test_init+0x9f/0x150 [ 162.855974][ T9933] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 162.856006][ T9933] ? rcu_is_watching+0x15/0xb0 [ 162.856028][ T9933] ? get_pid_task+0x20/0x1f0 [ 162.856046][ T9933] ? lock_release+0x4b/0x3c0 [ 162.856077][ T9933] ? __fget_files+0x2a/0x420 [ 162.856100][ T9933] ? rcu_is_watching+0x15/0xb0 [ 162.856122][ T9933] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 162.856160][ T9933] ? rcu_is_watching+0x15/0xb0 [ 162.856182][ T9933] ? __fget_files+0x2a/0x420 [ 162.856203][ T9933] ? __fget_files+0x3a2/0x420 [ 162.856224][ T9933] ? __fget_files+0x2a/0x420 [ 162.856248][ T9933] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 162.856280][ T9933] bpf_prog_test_run+0x2c5/0x340 [ 162.856313][ T9933] __sys_bpf+0x643/0x950 [ 162.856341][ T9933] ? __pfx___sys_bpf+0x10/0x10 [ 162.856377][ T9933] ? ksys_write+0x242/0x270 [ 162.856405][ T9933] ? __pfx_ksys_write+0x10/0x10 [ 162.856433][ T9933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.856463][ T9933] __x64_sys_bpf+0x7c/0x90 [ 162.856487][ T9933] do_syscall_64+0x174/0x580 [ 162.856514][ T9933] ? trace_irq_disable+0x3b/0x140 [ 162.856542][ T9933] ? clear_bhb_loop+0x40/0x90 [ 162.856567][ T9933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.856587][ T9933] RIP: 0033:0x7f7e7239ce59 [ 162.856606][ T9933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.856624][ T9933] RSP: 002b:00007f7e73208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.856647][ T9933] RAX: ffffffffffffffda RBX: 00007f7e72615fa0 RCX: 00007f7e7239ce59 [ 162.856661][ T9933] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 162.856673][ T9933] RBP: 00007f7e73208090 R08: 0000000000000000 R09: 0000000000000000 [ 162.856685][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.856695][ T9933] R13: 00007f7e72616038 R14: 00007f7e72615fa0 R15: 00007ffed038e8b8 [ 162.856718][ T9933] [ 163.149045][ T9921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.158000][ T9921] net_ratelimit: 341 callbacks suppressed [ 163.158026][ T9921] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 163.186882][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.194081][ T6983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.239115][ T9928] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 163.259124][ T9930] smc: net device lo applied user defined pnetid SYZ2 [ 163.266333][ T9939] smc: net device lo erased user defined pnetid SYZ2 [ 163.361715][ T9950] xt_hashlimit: size too large, truncated to 1048576 [ 163.427805][ T9960] dummy0: mtu less than device minimum [ 163.719060][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1157'. [ 163.829461][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 163.869236][ T9983] FAULT_INJECTION: forcing a failure. [ 163.869236][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.900304][ T9983] CPU: 1 UID: 0 PID: 9983 Comm: syz.4.1162 Not tainted syzkaller #0 PREEMPT(full) [ 163.900337][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.900352][ T9983] Call Trace: [ 163.900362][ T9983] [ 163.900372][ T9983] dump_stack_lvl+0xe8/0x150 [ 163.900405][ T9983] should_fail_ex+0x40c/0x560 [ 163.900434][ T9983] _copy_from_user+0x2d/0xb0 [ 163.900467][ T9983] ___sys_sendmsg+0x1c6/0x360 [ 163.900503][ T9983] ? rcu_is_watching+0x15/0xb0 [ 163.900526][ T9983] ? get_pid_task+0x20/0x1f0 [ 163.900550][ T9983] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.900586][ T9983] ? rcu_is_watching+0x15/0xb0 [ 163.900624][ T9983] ? __fget_files+0x2a/0x420 [ 163.900650][ T9983] ? __fget_files+0x3a2/0x420 [ 163.900681][ T9983] __x64_sys_sendmsg+0x1b1/0x290 [ 163.900716][ T9983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.900758][ T9983] ? rcu_is_watching+0x15/0xb0 [ 163.900781][ T9983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.900806][ T9983] do_syscall_64+0x174/0x580 [ 163.900836][ T9983] ? trace_irq_disable+0x3b/0x140 [ 163.900868][ T9983] ? clear_bhb_loop+0x40/0x90 [ 163.900895][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.900918][ T9983] RIP: 0033:0x7f7e7239ce59 [ 163.900938][ T9983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.900958][ T9983] RSP: 002b:00007f7e73208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.900984][ T9983] RAX: ffffffffffffffda RBX: 00007f7e72615fa0 RCX: 00007f7e7239ce59 [ 163.901001][ T9983] RDX: 0000000004000010 RSI: 0000200000000600 RDI: 0000000000000003 [ 163.901037][ T9983] RBP: 00007f7e73208090 R08: 0000000000000000 R09: 0000000000000000 [ 163.901052][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.901065][ T9983] R13: 00007f7e72616038 R14: 00007f7e72615fa0 R15: 00007ffed038e8b8 [ 163.901091][ T9983] [ 164.129199][ T9991] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1166'. [ 164.651032][T10018] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 164.850679][T10029] bridge_slave_0: left allmulticast mode [ 164.859817][T10029] bridge_slave_0: left promiscuous mode [ 164.870870][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.913127][T10031] FAULT_INJECTION: forcing a failure. [ 164.913127][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 164.920445][T10029] bridge_slave_1: left allmulticast mode [ 164.932337][T10031] CPU: 0 UID: 0 PID: 10031 Comm: syz.3.1178 Not tainted syzkaller #0 PREEMPT(full) [ 164.932368][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.932381][T10031] Call Trace: [ 164.932389][T10031] [ 164.932397][T10031] dump_stack_lvl+0xe8/0x150 [ 164.932427][T10031] should_fail_ex+0x40c/0x560 [ 164.932453][T10031] should_failslab+0xa8/0x100 [ 164.932486][T10031] __kmalloc_noprof+0xe8/0x750 [ 164.932514][T10031] ? sock_kmalloc+0xd6/0x160 [ 164.932536][T10031] sock_kmalloc+0xd6/0x160 [ 164.932556][T10031] ____sys_sendmsg+0x1d7/0xa20 [ 164.932592][T10031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.932627][T10031] ? lock_release+0x4b/0x3c0 [ 164.932660][T10031] ? import_iovec+0x73/0xa0 [ 164.932689][T10031] ___sys_sendmsg+0x2a5/0x360 [ 164.932718][T10031] ? rcu_is_watching+0x15/0xb0 [ 164.932739][T10031] ? get_pid_task+0x20/0x1f0 [ 164.932759][T10031] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.932799][T10031] ? rcu_is_watching+0x15/0xb0 [ 164.932834][T10031] ? __fget_files+0x2a/0x420 [ 164.932857][T10031] ? __fget_files+0x3a2/0x420 [ 164.932885][T10031] __x64_sys_sendmsg+0x1b1/0x290 [ 164.932916][T10031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.932952][T10031] ? rcu_is_watching+0x15/0xb0 [ 164.932973][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.933002][T10031] do_syscall_64+0x174/0x580 [ 164.933030][T10031] ? trace_irq_disable+0x3b/0x140 [ 164.933057][T10031] ? clear_bhb_loop+0x40/0x90 [ 164.933077][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.933094][T10031] RIP: 0033:0x7f551e19ce59 [ 164.933113][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.933128][T10031] RSP: 002b:00007f551efcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.933150][T10031] RAX: ffffffffffffffda RBX: 00007f551e415fa0 RCX: 00007f551e19ce59 [ 164.933164][T10031] RDX: 0000000004000010 RSI: 0000200000000600 RDI: 0000000000000003 [ 164.933176][T10031] RBP: 00007f551efcd090 R08: 0000000000000000 R09: 0000000000000000 [ 164.933189][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.933200][T10031] R13: 00007f551e416038 R14: 00007f551e415fa0 R15: 00007fff3e3ebcd8 [ 164.933224][T10031] [ 164.936928][T10029] bridge_slave_1: left promiscuous mode [ 165.166650][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.181077][T10029] bond0: (slave 45ÿ): Releasing backup interface [ 165.194126][T10029] bond0: (slave bond_slave_1): Releasing backup interface [ 165.204127][T10029] team0: Port device team_slave_0 removed [ 165.221709][T10029] team0: Port device team_slave_1 removed [ 165.228168][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.238774][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.257944][T10029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.293048][T10025] syzkaller1: entered promiscuous mode [ 165.301351][T10025] syzkaller1: entered allmulticast mode [ 165.324425][T10035] team0: Port device xfrm0 added [ 165.343809][T10039] netlink: 'syz.3.1180': attribute type 13 has an invalid length. [ 165.489749][ T9086] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 165.519496][T10040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1181'. [ 165.964062][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1188'. [ 166.001346][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1188'. [ 166.031369][T10070] 0ªî{X¹¦: entered promiscuous mode [ 166.046991][T10072] FAULT_INJECTION: forcing a failure. [ 166.046991][T10072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.060490][T10070] 0ªî{X¹¦: left promiscuous mode [ 166.091781][T10072] CPU: 0 UID: 0 PID: 10072 Comm: syz.1.1190 Not tainted syzkaller #0 PREEMPT(full) [ 166.091812][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.091824][T10072] Call Trace: [ 166.091833][T10072] [ 166.091841][T10072] dump_stack_lvl+0xe8/0x150 [ 166.091870][T10072] should_fail_ex+0x40c/0x560 [ 166.091895][T10072] _copy_from_user+0x2d/0xb0 [ 166.091923][T10072] ____sys_sendmsg+0x33d/0xa20 [ 166.092078][T10072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.092111][T10072] ? lock_release+0x4b/0x3c0 [ 166.092143][T10072] ? import_iovec+0x73/0xa0 [ 166.092171][T10072] ___sys_sendmsg+0x2a5/0x360 [ 166.092210][T10072] ? rcu_is_watching+0x15/0xb0 [ 166.092231][T10072] ? get_pid_task+0x20/0x1f0 [ 166.092250][T10072] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.092281][T10072] ? rcu_is_watching+0x15/0xb0 [ 166.092314][T10072] ? __fget_files+0x2a/0x420 [ 166.092336][T10072] ? __fget_files+0x3a2/0x420 [ 166.092363][T10072] __x64_sys_sendmsg+0x1b1/0x290 [ 166.092391][T10072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.092432][T10072] ? rcu_is_watching+0x15/0xb0 [ 166.092452][T10072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.092473][T10072] do_syscall_64+0x174/0x580 [ 166.092501][T10072] ? trace_irq_disable+0x3b/0x140 [ 166.092529][T10072] ? clear_bhb_loop+0x40/0x90 [ 166.092552][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.092572][T10072] RIP: 0033:0x7f8d16f9ce59 [ 166.092591][T10072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.092607][T10072] RSP: 002b:00007f8d17e18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.092629][T10072] RAX: ffffffffffffffda RBX: 00007f8d17215fa0 RCX: 00007f8d16f9ce59 [ 166.092644][T10072] RDX: 0000000004000010 RSI: 0000200000000600 RDI: 0000000000000003 [ 166.092656][T10072] RBP: 00007f8d17e18090 R08: 0000000000000000 R09: 0000000000000000 [ 166.092668][T10072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.092680][T10072] R13: 00007f8d17216038 R14: 00007f8d17215fa0 R15: 00007ffd34b3d8e8 [ 166.092702][T10072] [ 166.575188][ T9086] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.741199][T10106] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 166.759544][T10108] FAULT_INJECTION: forcing a failure. [ 166.759544][T10108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.810246][T10108] CPU: 0 UID: 0 PID: 10108 Comm: syz.2.1202 Not tainted syzkaller #0 PREEMPT(full) [ 166.810276][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.810288][T10108] Call Trace: [ 166.810296][T10108] [ 166.810304][T10108] dump_stack_lvl+0xe8/0x150 [ 166.810332][T10108] should_fail_ex+0x40c/0x560 [ 166.810358][T10108] _copy_to_user+0x31/0xb0 [ 166.810388][T10108] simple_read_from_buffer+0xe1/0x170 [ 166.810416][T10108] proc_fail_nth_read+0x1bb/0x230 [ 166.810445][T10108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.810473][T10108] ? rw_verify_area+0x24a/0x4c0 [ 166.810502][T10108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.810528][T10108] vfs_read+0x213/0xa80 [ 166.810557][T10108] ? __pfx___mutex_lock+0x10/0x10 [ 166.810585][T10108] ? __pfx_vfs_read+0x10/0x10 [ 166.810615][T10108] ? __fget_files+0x3a2/0x420 [ 166.810646][T10108] ? __fget_files+0x2a/0x420 [ 166.810674][T10108] ksys_read+0x150/0x270 [ 166.810702][T10108] ? __pfx_ksys_read+0x10/0x10 [ 166.810731][T10108] ? rcu_is_watching+0x15/0xb0 [ 166.810757][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.810778][T10108] do_syscall_64+0x174/0x580 [ 166.810804][T10108] ? trace_irq_disable+0x3b/0x140 [ 166.810831][T10108] ? clear_bhb_loop+0x40/0x90 [ 166.810854][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.810875][T10108] RIP: 0033:0x7fdfb9b5d68e [ 166.810894][T10108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.810913][T10108] RSP: 002b:00007fdfba96efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.810935][T10108] RAX: ffffffffffffffda RBX: 00007fdfba96f6c0 RCX: 00007fdfb9b5d68e [ 166.810951][T10108] RDX: 000000000000000f RSI: 00007fdfba96f0a0 RDI: 0000000000000004 [ 166.810964][T10108] RBP: 00007fdfba96f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.810978][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.810990][T10108] R13: 00007fdfb9e16038 R14: 00007fdfb9e15fa0 R15: 00007fff65049148 [ 166.811015][T10108] [ 166.811745][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 166.912675][T10106] bond7: entered promiscuous mode [ 167.052973][T10106] bond7: entered allmulticast mode [ 167.058775][T10106] 8021q: adding VLAN 0 to HW filter on device bond7 [ 167.067394][T10089] syzkaller1: entered promiscuous mode [ 167.073100][T10089] syzkaller1: entered allmulticast mode [ 167.091496][T10111] erspan1: entered allmulticast mode [ 167.121654][T10123] can: request_module (can-proto-0) failed. [ 167.132137][T10111] bond7: (slave erspan1): making interface the new active one [ 167.144192][T10111] erspan1: entered promiscuous mode [ 167.152203][T10111] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 167.156272][T10116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1204'. [ 167.196110][T10126] netlink: 'syz.2.1205': attribute type 1 has an invalid length. [ 167.228814][T10123] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 167.783486][T10149] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 167.811121][T10152] Bluetooth: MGMT ver 1.23 [ 168.027445][T10162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1219'. [ 168.067926][T10162] netlink: 'syz.2.1219': attribute type 12 has an invalid length. [ 168.078533][T10162] netlink: 'syz.2.1219': attribute type 29 has an invalid length. [ 168.089789][T10162] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1219'. [ 168.104403][T10162] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1219'. [ 168.269239][T10177] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 168.348121][T10177] bond3: entered promiscuous mode [ 168.363899][T10175] sctp: [Deprecated]: syz.1.1223 (pid 10175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.363899][T10175] Use struct sctp_sack_info instead [ 168.372347][T10177] bond3: entered allmulticast mode [ 168.434526][T10177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.547386][T10185] erspan1: entered allmulticast mode [ 168.557980][T10185] bond3: (slave erspan1): making interface the new active one [ 168.566026][T10185] erspan1: entered promiscuous mode [ 168.572906][T10185] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 168.933678][T10216] syzkaller1: entered promiscuous mode [ 168.954182][T10216] syzkaller1: entered allmulticast mode [ 169.068255][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 169.183532][T10225] FAULT_INJECTION: forcing a failure. [ 169.183532][T10225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.199049][T10225] CPU: 0 UID: 0 PID: 10225 Comm: syz.1.1237 Not tainted syzkaller #0 PREEMPT(full) [ 169.199078][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.199090][T10225] Call Trace: [ 169.199099][T10225] [ 169.199107][T10225] dump_stack_lvl+0xe8/0x150 [ 169.199142][T10225] should_fail_ex+0x40c/0x560 [ 169.199168][T10225] _copy_to_user+0x31/0xb0 [ 169.199197][T10225] bpf_test_finish+0x53c/0x6b0 [ 169.199233][T10225] ? __pfx____migrate_enable+0x10/0x10 [ 169.199253][T10225] ? __pfx_bpf_test_finish+0x10/0x10 [ 169.199294][T10225] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 169.199328][T10225] ? rcu_is_watching+0x15/0xb0 [ 169.199355][T10225] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 169.199387][T10225] ? rcu_is_watching+0x15/0xb0 [ 169.199411][T10225] ? __fget_files+0x2a/0x420 [ 169.199434][T10225] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 169.199463][T10225] bpf_prog_test_run+0x2c5/0x340 [ 169.199495][T10225] __sys_bpf+0x643/0x950 [ 169.199523][T10225] ? __pfx___sys_bpf+0x10/0x10 [ 169.199557][T10225] ? ksys_write+0x242/0x270 [ 169.199584][T10225] ? __pfx_ksys_write+0x10/0x10 [ 169.199613][T10225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.199634][T10225] __x64_sys_bpf+0x7c/0x90 [ 169.199659][T10225] do_syscall_64+0x174/0x580 [ 169.199687][T10225] ? clear_bhb_loop+0x40/0x90 [ 169.199709][T10225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.199729][T10225] RIP: 0033:0x7f8d16f9ce59 [ 169.199747][T10225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.199765][T10225] RSP: 002b:00007f8d17e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.199788][T10225] RAX: ffffffffffffffda RBX: 00007f8d17215fa0 RCX: 00007f8d16f9ce59 [ 169.199804][T10225] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 169.199817][T10225] RBP: 00007f8d17e18090 R08: 0000000000000000 R09: 0000000000000000 [ 169.199840][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.199852][T10225] R13: 00007f8d17216038 R14: 00007f8d17215fa0 R15: 00007ffd34b3d8e8 [ 169.199877][T10225] [ 169.523697][T10227] netlink: 'syz.2.1238': attribute type 29 has an invalid length. [ 169.662287][T10235] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 169.788255][T10240] bond4: left promiscuous mode [ 169.793204][T10240] erspan1: left promiscuous mode [ 169.798926][T10240] bond4: left allmulticast mode [ 169.806918][T10240] erspan1: left allmulticast mode [ 169.812804][T10240] ipip0: left promiscuous mode [ 169.961559][T10249] netlink: 'syz.4.1244': attribute type 3 has an invalid length. [ 169.969854][T10249] __nla_validate_parse: 1 callbacks suppressed [ 169.969875][T10249] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1244'. [ 170.091854][T10254] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1245'. [ 170.176153][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 170.272208][T10265] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1249'. [ 170.411230][T10254] tipc: Resetting bearer [ 170.465701][T10254] tipc: Disabling bearer [ 170.550337][T10271] syzkaller1: entered promiscuous mode [ 170.557754][T10271] syzkaller1: entered allmulticast mode [ 170.573413][T10257] lo speed is unknown, defaulting to 1000 [ 170.798931][T10280] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.818084][T10281] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.847983][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 170.896084][T10277] veth1_macvtap: left promiscuous mode [ 171.056793][T10291] FAULT_INJECTION: forcing a failure. [ 171.056793][T10291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.103651][T10291] CPU: 0 UID: 0 PID: 10291 Comm: syz.3.1257 Not tainted syzkaller #0 PREEMPT(full) [ 171.103683][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.103695][T10291] Call Trace: [ 171.103704][T10291] [ 171.103713][T10291] dump_stack_lvl+0xe8/0x150 [ 171.103743][T10291] should_fail_ex+0x40c/0x560 [ 171.103769][T10291] _copy_to_user+0x31/0xb0 [ 171.103799][T10291] simple_read_from_buffer+0xe1/0x170 [ 171.103828][T10291] proc_fail_nth_read+0x1bb/0x230 [ 171.103857][T10291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.103886][T10291] ? rw_verify_area+0x24a/0x4c0 [ 171.103912][T10291] ? __fget_files+0x2a/0x420 [ 171.103934][T10291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.103960][T10291] vfs_read+0x213/0xa80 [ 171.103988][T10291] ? __pfx___mutex_lock+0x10/0x10 [ 171.104017][T10291] ? __pfx_vfs_read+0x10/0x10 [ 171.104046][T10291] ? __fget_files+0x3a2/0x420 [ 171.104067][T10291] ? __fget_files+0x2a/0x420 [ 171.104093][T10291] ksys_read+0x150/0x270 [ 171.104119][T10291] ? __pfx_ksys_read+0x10/0x10 [ 171.104147][T10291] ? rcu_is_watching+0x15/0xb0 [ 171.104170][T10291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.104192][T10291] do_syscall_64+0x174/0x580 [ 171.104219][T10291] ? trace_irq_disable+0x3b/0x140 [ 171.104248][T10291] ? clear_bhb_loop+0x40/0x90 [ 171.104271][T10291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.104291][T10291] RIP: 0033:0x7f551e15d68e [ 171.104309][T10291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.104328][T10291] RSP: 002b:00007f551efccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.104351][T10291] RAX: ffffffffffffffda RBX: 00007f551efcd6c0 RCX: 00007f551e15d68e [ 171.104366][T10291] RDX: 000000000000000f RSI: 00007f551efcd0a0 RDI: 0000000000000005 [ 171.104379][T10291] RBP: 00007f551efcd090 R08: 0000000000000000 R09: 0000000000000000 [ 171.104392][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.104404][T10291] R13: 00007f551e416038 R14: 00007f551e415fa0 R15: 00007fff3e3ebcd8 [ 171.104428][T10291] [ 171.314832][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.366754][T10294] netlink: 'syz.0.1258': attribute type 2 has an invalid length. [ 171.684173][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 171.864217][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1271'. [ 171.948425][T10324] netlink: 'syz.4.1264': attribute type 1 has an invalid length. [ 172.326775][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 172.851827][T10400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.929984][T10403] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1289'. [ 172.983112][T10408] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 173.023214][T10408] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.154223][T10417] bond5: entered promiscuous mode [ 173.160698][T10417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.250835][T10424] lo speed is unknown, defaulting to 1000 [ 173.353916][T10435] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 173.555223][T10448] netlink: 'syz.2.1300': attribute type 23 has an invalid length. [ 174.365666][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 175.116142][T10473] __nla_validate_parse: 1 callbacks suppressed [ 175.116166][T10473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1307'. [ 175.141387][T10473] ip6gre2: entered promiscuous mode [ 175.165013][T10473] ip6gre2: entered allmulticast mode [ 175.190307][T10475] x_tables: unsorted entry at hook 3 [ 175.412512][T10492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1311'. [ 175.456872][T10492] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 175.468649][T10492] bond6 (unregistering): Released all slaves [ 175.487315][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 175.502813][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 175.546876][T10505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1311'. [ 175.588708][T10504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1315'. [ 175.906561][T10526] bond4: Unable to set up delay as MII monitoring is disabled [ 175.917001][T10526] bond4 (unregistering): Released all slaves [ 175.971755][T10532] netlink: 'syz.1.1326': attribute type 13 has an invalid length. [ 176.010980][T10534] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 176.021322][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 176.038171][T10535] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 176.058899][T10535] IPVS: rr: FWM 3 0x00000003 - no destination available [ 176.433127][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.538299][T10534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.289740][ T7982] lo speed is unknown, defaulting to 1000 [ 177.312185][ T6990] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.332934][ T7982] syz2: Port: 1 Link DOWN [ 177.364245][ T6990] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.388470][ T6993] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.431245][ T6993] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.476789][T10568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.911138][T10588] syzkaller1: entered promiscuous mode [ 177.949596][T10588] syzkaller1: entered allmulticast mode [ 178.368256][T10613] syzkaller0: entered promiscuous mode [ 178.377371][T10613] syzkaller0: entered allmulticast mode [ 178.593515][T10628] syzkaller1: entered promiscuous mode [ 178.616803][T10628] syzkaller1: entered allmulticast mode [ 179.224536][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 179.278087][T10655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.332118][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 179.427523][T10659] bond5: (slave batadv0): Releasing active interface [ 179.466133][T10655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.563704][T10655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.612165][T10655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.641904][T10676] netlink: 'syz.0.1363': attribute type 10 has an invalid length. [ 179.659295][T10676] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1363'. [ 179.721324][ T6990] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.755353][ T6990] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.794250][ T6990] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.837861][ T6999] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.115062][T10694] syzkaller1: entered promiscuous mode [ 180.153483][T10694] syzkaller1: entered allmulticast mode [ 180.186921][T10702] lo: Caught tx_queue_len zero misconfig [ 180.209113][T10702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1372'. [ 180.258004][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 180.329936][T10709] syzkaller1: entered promiscuous mode [ 180.345201][T10709] syzkaller1: entered allmulticast mode [ 180.477492][T10715] geneve0: Caught tx_queue_len zero misconfig [ 181.079052][T10748] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1386'. [ 181.104201][T10749] xfrm0: Caught tx_queue_len zero misconfig [ 181.255995][ T80] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.273153][ T80] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.321762][T10755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1389'. [ 181.659869][T10767] lo: Caught tx_queue_len zero misconfig [ 181.750282][T10770] lo speed is unknown, defaulting to 1000 [ 181.761651][T10770] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1394'. [ 181.772528][T10770] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1394'. [ 182.331935][T10806] team0: entered promiscuous mode [ 182.339649][T10806] xfrm0: entered promiscuous mode [ 182.388987][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1408'. [ 182.407116][T10808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1408'. [ 182.417449][T10808] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1408'. [ 183.091896][T10838] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1420'. [ 183.429796][T10857] syzkaller1: entered promiscuous mode [ 183.439972][T10857] syzkaller1: entered allmulticast mode [ 183.472385][T10861] openvswitch: netlink: Flow actions attr not present in new flow. [ 183.766462][T10882] lo speed is unknown, defaulting to 1000 [ 184.470648][T10928] netlink: 'syz.4.1448': attribute type 29 has an invalid length. [ 184.505027][T10928] netlink: 'syz.4.1448': attribute type 29 has an invalid length. [ 184.629164][T10939] xt_hashlimit: overflow, rate too high: 0 [ 184.645472][T10942] veth0_to_bond: default FDB implementation only supports local addresses [ 184.931412][T10964] netlink: 'syz.3.1460': attribute type 9 has an invalid length. [ 186.664853][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.294868][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.294026][T11012] __nla_validate_parse: 25 callbacks suppressed [ 188.294051][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 188.456329][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 188.598793][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 188.634810][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 188.696826][T11037] netlink: 'syz.3.1481': attribute type 12 has an invalid length. [ 189.343367][T11037] netlink: 'syz.3.1481': attribute type 12 has an invalid length. [ 189.366847][T11037] netlink: 'syz.3.1481': attribute type 12 has an invalid length. [ 189.417562][T11037] netlink: 'syz.3.1481': attribute type 12 has an invalid length. [ 189.444606][T11037] netlink: 'syz.3.1481': attribute type 12 has an invalid length. [ 189.475631][T11041] xt_hashlimit: size too large, truncated to 1048576 [ 189.489826][T11037] netlink: 'syz.3.1481': attribute type 12 has an invalid length. [ 189.506968][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 189.538605][T11046] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 189.566632][T11046] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1482'. [ 189.621763][T11051] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1482'. [ 189.721911][T11062] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1487'. [ 189.854298][T11043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.898759][T11043] team0: left promiscuous mode [ 189.914855][T11043] xfrm0: left promiscuous mode [ 189.943615][T11043] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.022723][T11043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.249612][T11043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.327868][T11043] veth1_vlan: left promiscuous mode [ 190.352844][T11043] veth0_vlan: left promiscuous mode [ 190.379242][T11043] veth0_vlan: entered promiscuous mode [ 190.418556][T11043] tipc: Resetting bearer [ 190.433753][T11043] veth1_vlan: entered promiscuous mode [ 190.535971][T11043] veth1_macvtap: left promiscuous mode [ 190.568105][T11043] veth0_macvtap: left promiscuous mode [ 190.587398][T11043] veth0_macvtap: entered promiscuous mode [ 190.608180][T11043] veth1_macvtap: entered promiscuous mode [ 190.624045][T11043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.634373][T11043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.643637][T11043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.653124][T11043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.666453][T11043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.683131][T11043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.700715][T11043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.712564][T11043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.806467][ T6999] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 190.813771][ T6999] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 190.853992][T11087] syzkaller1: entered promiscuous mode [ 190.861425][T11087] syzkaller1: entered allmulticast mode [ 190.876190][ T6992] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 190.889633][ T6992] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 190.899316][ T6992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.918286][ T6992] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 190.927265][ T6992] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 190.941819][ T6992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.950914][ T6992] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 190.963239][ T6992] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 190.972124][ T6992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.051709][ T6992] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 191.091905][ T6992] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 191.104006][T11100] netlink: 'syz.0.1491': attribute type 9 has an invalid length. [ 191.125438][ T6992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.138345][T11102] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1493'. [ 191.280080][T11108] tipc: Started in network mode [ 191.294979][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 191.301098][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 191.302762][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 191.321966][T11108] tipc: Node identity e0000001, cluster identity 4711 [ 191.344845][T11108] tipc: Enabling of bearer rejected, failed to enable media [ 191.356863][T11109] tipc: Enabling of bearer rejected, failed to enable media [ 191.469251][T11124] bridge_slave_1: invalid flags given to default FDB implementation [ 191.611488][T11140] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 191.928252][T11158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.938361][T11158] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.061113][T11166] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1508'. [ 194.337393][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.950076][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.960316][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.970871][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.980476][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.991027][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.047144][ T4941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.055410][ T4941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.066090][ T4941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.073852][ T4941] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.085826][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.092900][ T5639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.100550][ T5639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.108621][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.120945][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.128276][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 208.138045][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 208.145906][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 208.153175][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 208.161526][ T4941] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 208.171903][ T4941] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 208.267684][ T4941] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 208.275761][ T4941] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 208.283535][ T4941] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 208.294416][ T4941] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 208.306105][ T4941] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 210.014919][ T5639] Bluetooth: hci5: command tx timeout [ 210.174957][ T4941] Bluetooth: hci6: command tx timeout [ 210.176082][ T5639] Bluetooth: hci7: command tx timeout [ 210.255082][ T4941] Bluetooth: hci8: command tx timeout [ 210.335434][ T5639] Bluetooth: hci9: command tx timeout [ 212.094986][ T5639] Bluetooth: hci5: command tx timeout [ 212.255199][ T5639] Bluetooth: hci7: command tx timeout [ 212.258987][ T4941] Bluetooth: hci6: command tx timeout [ 212.335087][ T4941] Bluetooth: hci8: command tx timeout [ 212.415280][ T4941] Bluetooth: hci9: command tx timeout [ 214.174922][ T4941] Bluetooth: hci5: command tx timeout [ 214.334858][ T4941] Bluetooth: hci7: command tx timeout [ 214.335480][ T5639] Bluetooth: hci6: command tx timeout [ 214.415056][ T5639] Bluetooth: hci8: command tx timeout [ 214.495144][ T5639] Bluetooth: hci9: command tx timeout [ 216.255065][ T5639] Bluetooth: hci5: command tx timeout [ 216.415169][ T5639] Bluetooth: hci7: command tx timeout [ 216.415189][ T4941] Bluetooth: hci6: command tx timeout [ 216.496441][ T5639] Bluetooth: hci8: command tx timeout [ 216.574921][ T5639] Bluetooth: hci9: command tx timeout [ 218.655061][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.535224][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.776331][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.995862][ T4941] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 268.004499][ T4941] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 268.013434][ T4941] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 268.023287][ T4941] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 268.031324][ T4941] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 268.135632][ T4941] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 268.143239][ T4941] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 268.150946][ T4941] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 268.159577][ T4941] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 268.168296][ T4941] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 268.236539][ T5639] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 268.246964][ T5639] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 268.254571][ T5639] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 268.263944][ T5639] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 268.272451][ T5639] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 268.344941][ T5639] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 268.352534][ T5639] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 268.361266][ T5639] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 268.370109][ T5639] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 268.378845][ T5639] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 269.038604][ T4941] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 269.046215][ T4941] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 269.053722][ T4941] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 269.061835][ T4941] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 269.069578][ T4941] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 270.094835][ T5639] Bluetooth: hci10: command tx timeout [ 270.255184][ T5639] Bluetooth: hci11: command tx timeout [ 270.334925][ T5639] Bluetooth: hci12: command tx timeout [ 270.415083][ T5639] Bluetooth: hci13: command tx timeout [ 271.135406][ T5639] Bluetooth: hci14: command tx timeout [ 272.174850][ T5639] Bluetooth: hci10: command tx timeout [ 272.334870][ T5639] Bluetooth: hci11: command tx timeout [ 272.415123][ T5639] Bluetooth: hci12: command tx timeout [ 272.494979][ T5639] Bluetooth: hci13: command tx timeout [ 273.214837][ T5639] Bluetooth: hci14: command tx timeout [ 274.254894][ T5639] Bluetooth: hci10: command tx timeout [ 274.415153][ T5639] Bluetooth: hci11: command tx timeout [ 274.494975][ T5639] Bluetooth: hci12: command tx timeout [ 274.575124][ T5639] Bluetooth: hci13: command tx timeout [ 275.294888][ T5639] Bluetooth: hci14: command tx timeout [ 276.334820][ T5639] Bluetooth: hci10: command tx timeout [ 276.494862][ T5639] Bluetooth: hci11: command tx timeout [ 276.574917][ T5639] Bluetooth: hci12: command tx timeout [ 276.654958][ T5639] Bluetooth: hci13: command tx timeout [ 277.374941][ T5639] Bluetooth: hci14: command tx timeout [ 286.494955][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.694889][ T4941] Bluetooth: hci4: command 0x0406 tx timeout [ 317.216855][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.173009][ T4941] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 328.194958][ T4941] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 328.202538][ T4941] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 328.212879][ T4941] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 328.220669][ T4941] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 328.318428][ T4941] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 328.328979][ T4941] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 328.340280][ T4941] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 328.351097][ T4941] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 328.358986][ T4941] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 328.395178][ T5639] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 328.403554][ T5639] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 328.413961][ T5639] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 328.423284][ T5639] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 328.432159][ T5639] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 328.475363][ T5639] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 328.483532][ T5639] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 328.491596][ T5639] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 328.499771][ T5639] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 328.508104][ T5639] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 329.109581][ T5639] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 329.121231][ T5639] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 329.132665][ T5639] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 329.141483][ T5639] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 329.151742][ T5639] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 330.256670][ T5639] Bluetooth: hci15: command tx timeout [ 330.414900][ T5639] Bluetooth: hci16: command tx timeout [ 330.494894][ T5639] Bluetooth: hci17: command tx timeout [ 330.575005][ T5639] Bluetooth: hci18: command tx timeout [ 331.214883][ T5639] Bluetooth: hci19: command tx timeout [ 332.336739][ T5639] Bluetooth: hci15: command tx timeout [ 332.494906][ T5639] Bluetooth: hci16: command tx timeout [ 332.577156][ T5640] Bluetooth: hci17: command tx timeout [ 332.654936][ T5640] Bluetooth: hci18: command tx timeout [ 333.294895][ T5640] Bluetooth: hci19: command tx timeout [ 334.416983][ T5640] Bluetooth: hci15: command tx timeout [ 334.574860][ T5640] Bluetooth: hci16: command tx timeout [ 334.655319][ T5640] Bluetooth: hci8: command 0x0406 tx timeout [ 334.656591][ T5625] Bluetooth: hci17: command tx timeout [ 334.661691][ T5635] Bluetooth: hci9: command 0x0406 tx timeout [ 334.668655][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 334.673364][ T50] Bluetooth: hci7: command 0x0406 tx timeout [ 334.679455][ T5625] Bluetooth: hci6: command 0x0406 tx timeout [ 334.735431][ T5627] Bluetooth: hci18: command tx timeout [ 335.375105][ T5627] Bluetooth: hci19: command tx timeout [ 336.496632][ T5627] Bluetooth: hci15: command tx timeout [ 336.654802][ T5627] Bluetooth: hci16: command tx timeout [ 336.734834][ T5627] Bluetooth: hci17: command tx timeout [ 336.815034][ T5627] Bluetooth: hci18: command tx timeout [ 337.454858][ T5627] Bluetooth: hci19: command tx timeout [ 347.936440][ T30] INFO: task kworker/0:3:5358 blocked for more than 143 seconds. [ 347.944323][ T30] Not tainted syzkaller #0 [ 347.949492][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.958286][ T30] task:kworker/0:3 state:D stack:24696 pid:5358 tgid:5358 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 347.970570][ T30] Workqueue: events netdev_rx_mode_work [ 347.976364][ T30] Call Trace: [ 347.979694][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.982647][ T30] __schedule+0x17d9/0x56c0 [ 347.987388][ T30] ? __dequeue_entity+0xb2b/0x1180 [ 347.993042][ T30] ? ktime_get+0x45/0x220 [ 347.997962][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.002800][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.008098][ T30] ? __pfx___schedule+0x10/0x10 [ 348.013053][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.018015][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.022928][ T30] ? lock_release+0x4b/0x3c0 [ 348.027887][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.032756][ T30] ? schedule+0x90/0x360 [ 348.037485][ T30] ? trace_irq_enable+0x3b/0x140 [ 348.043313][ T30] schedule+0x164/0x360 [ 348.054775][ T30] schedule_preempt_disabled+0x13/0x30 [ 348.064742][ T30] __mutex_lock+0x7bf/0x1550 [ 348.074811][ T30] ? __mutex_lock+0x5d4/0x1550 [ 348.080711][ T30] ? netdev_rx_mode_work+0x18/0x3c0 [ 348.086257][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 348.091401][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.098694][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 348.104541][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.111270][ T30] ? lock_acquire+0x5f/0x350 [ 348.121276][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 348.127510][ T30] netdev_rx_mode_work+0x18/0x3c0 [ 348.132618][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 348.142105][ T30] process_scheduled_works+0xa8e/0x14e0 [ 348.148003][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.154061][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.159531][ T30] ? assign_work+0x3cf/0x5d0 [ 348.164224][ T30] worker_thread+0xa47/0xfb0 [ 348.169542][ T30] ? __kthread_parkme+0x71/0x1f0 [ 348.174833][ T30] kthread+0x388/0x470 [ 348.178992][ T30] ? __pfx_worker_thread+0x10/0x10 [ 348.184268][ T30] ? __pfx_kthread+0x10/0x10 [ 348.189497][ T30] ret_from_fork+0x514/0xb70 [ 348.194234][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 348.199472][ T30] ? __switch_to+0xc89/0x1420 [ 348.204238][ T30] ? __pfx_kthread+0x10/0x10 [ 348.209017][ T30] ret_from_fork_asm+0x1a/0x30 [ 348.213879][ T30] [ 348.217283][ T30] INFO: task kworker/u8:18:6992 blocked for more than 143 seconds. [ 348.225492][ T30] Not tainted syzkaller #0 [ 348.230464][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.239406][ T30] task:kworker/u8:18 state:D stack:24032 pid:6992 tgid:6992 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 348.252066][ T30] Workqueue: events_unbound linkwatch_event [ 348.258334][ T30] Call Trace: [ 348.261822][ T30] [ 348.264831][ T30] __schedule+0x17d9/0x56c0 [ 348.269475][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 348.274448][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.279754][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.284693][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.289863][ T30] ? debug_object_activate+0xb7/0x410 [ 348.295601][ T30] ? __pfx___schedule+0x10/0x10 [ 348.300559][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.305847][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.313193][ T30] ? lock_release+0x4b/0x3c0 [ 348.320225][ T30] ? wq_worker_sleeping+0x66/0x250 [ 348.331843][ T30] schedule+0x164/0x360 [ 348.338454][ T30] schedule_preempt_disabled+0x13/0x30 [ 348.346475][ T30] __mutex_lock+0x7bf/0x1550 [ 348.351267][ T30] ? __mutex_lock+0x5d4/0x1550 [ 348.356252][ T30] ? linkwatch_event+0xe/0x60 [ 348.362300][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 348.367838][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 348.373816][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.378825][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.383674][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 348.389545][ T30] linkwatch_event+0xe/0x60 [ 348.394678][ T30] process_scheduled_works+0xa8e/0x14e0 [ 348.400404][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.406812][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.411906][ T30] ? assign_work+0x3cf/0x5d0 [ 348.416840][ T30] worker_thread+0xa47/0xfb0 [ 348.421534][ T30] kthread+0x388/0x470 [ 348.426772][ T30] ? __pfx_worker_thread+0x10/0x10 [ 348.432091][ T30] ? __pfx_kthread+0x10/0x10 [ 348.436910][ T30] ret_from_fork+0x514/0xb70 [ 348.441659][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 348.447122][ T30] ? __switch_to+0xc89/0x1420 [ 348.451881][ T30] ? __pfx_kthread+0x10/0x10 [ 348.456571][ T30] ret_from_fork_asm+0x1a/0x30 [ 348.461402][ T30] [ 348.464488][ T30] INFO: task kworker/u8:24:6999 blocked for more than 143 seconds. [ 348.472713][ T30] Not tainted syzkaller #0 [ 348.477844][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.486647][ T30] task:kworker/u8:24 state:D stack:25080 pid:6999 tgid:6999 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 348.498824][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 348.504977][ T30] Call Trace: [ 348.508307][ T30] [ 348.513526][ T30] __schedule+0x17d9/0x56c0 [ 348.518117][ T30] ? deref_stack_reg+0x18e/0x220 [ 348.523115][ T30] ? unwind_next_frame+0x8f/0x2550 [ 348.528378][ T30] ? unwind_next_frame+0x1baf/0x2550 [ 348.533741][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 348.538912][ T30] ? unwind_next_frame+0x8f/0x2550 [ 348.544126][ T30] ? arch_stack_walk+0x11b/0x150 [ 348.549172][ T30] ? __pfx___schedule+0x10/0x10 [ 348.554074][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.558970][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.564209][ T30] ? lock_release+0x4b/0x3c0 [ 348.568909][ T30] ? wq_worker_sleeping+0x66/0x250 [ 348.574377][ T30] schedule+0x164/0x360 [ 348.580386][ T30] schedule_preempt_disabled+0x13/0x30 [ 348.587732][ T30] __mutex_lock+0x7bf/0x1550 [ 348.592568][ T30] ? __mutex_lock+0x5d4/0x1550 [ 348.597770][ T30] ? addrconf_dad_work+0x116/0x15c0 [ 348.603679][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 348.608876][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.614058][ T30] ? trace_hrtimer_start+0x82/0x200 [ 348.619565][ T30] addrconf_dad_work+0x116/0x15c0 [ 348.624879][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.630426][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 348.636090][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.640909][ T30] ? lock_acquire+0x5f/0x350 [ 348.645678][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.650508][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 348.656743][ T30] process_scheduled_works+0xa8e/0x14e0 [ 348.662399][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.668573][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.673860][ T30] ? assign_work+0x3cf/0x5d0 [ 348.678581][ T30] worker_thread+0xa47/0xfb0 [ 348.683246][ T30] kthread+0x388/0x470 [ 348.687450][ T30] ? __pfx_worker_thread+0x10/0x10 [ 348.692607][ T30] ? __pfx_kthread+0x10/0x10 [ 348.697289][ T30] ret_from_fork+0x514/0xb70 [ 348.701960][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 348.707185][ T30] ? __switch_to+0xc89/0x1420 [ 348.712098][ T30] ? __pfx_kthread+0x10/0x10 [ 348.716913][ T30] ret_from_fork_asm+0x1a/0x30 [ 348.721757][ T30] [ 348.725076][ T30] INFO: task kworker/0:9:7836 blocked for more than 144 seconds. [ 348.732860][ T30] Not tainted syzkaller #0 [ 348.738174][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.747231][ T30] task:kworker/0:9 state:D stack:24408 pid:7836 tgid:7836 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 348.760206][ T30] Workqueue: events switchdev_deferred_process_work [ 348.767018][ T30] Call Trace: [ 348.770347][ T30] [ 348.773287][ T30] __schedule+0x17d9/0x56c0 [ 348.777900][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 348.783054][ T30] ? __pfx___schedule+0x10/0x10 [ 348.788155][ T30] ? __pfx___schedule+0x10/0x10 [ 348.793108][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.797964][ T30] ? lock_release+0x4b/0x3c0 [ 348.802643][ T30] schedule+0x164/0x360 [ 348.807162][ T30] schedule_preempt_disabled+0x13/0x30 [ 348.812874][ T30] __mutex_lock+0x7bf/0x1550 [ 348.817582][ T30] ? __mutex_lock+0x5d4/0x1550 [ 348.822389][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 348.828748][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 348.833912][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 348.839802][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.844794][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.849617][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 348.855447][ T30] switchdev_deferred_process_work+0xe/0x20 [ 348.864006][ T30] process_scheduled_works+0xa8e/0x14e0 [ 348.869814][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.875972][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.881070][ T30] ? assign_work+0x3cf/0x5d0 [ 348.885812][ T30] worker_thread+0xa47/0xfb0 [ 348.890470][ T30] kthread+0x388/0x470 [ 348.894582][ T30] ? __pfx_worker_thread+0x10/0x10 [ 348.900116][ T30] ? __pfx_kthread+0x10/0x10 [ 348.904876][ T30] ret_from_fork+0x514/0xb70 [ 348.909548][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 348.915051][ T30] ? __switch_to+0xc89/0x1420 [ 348.919783][ T30] ? __pfx_kthread+0x10/0x10 [ 348.924389][ T30] ret_from_fork_asm+0x1a/0x30 [ 348.929289][ T30] [ 348.932393][ T30] INFO: task kworker/0:12:7839 blocked for more than 144 seconds. [ 348.940610][ T30] Not tainted syzkaller #0 [ 348.945671][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.954590][ T30] task:kworker/0:12 state:D stack:24408 pid:7839 tgid:7839 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 348.970481][ T30] Workqueue: infiniband ib_cache_event_task [ 348.978713][ T30] Call Trace: [ 348.982045][ T30] [ 348.985055][ T30] __schedule+0x17d9/0x56c0 [ 348.989656][ T30] ? rcu_is_watching+0x15/0xb0 [ 348.994812][ T30] ? unwind_next_frame+0x1baf/0x2550 [ 349.000213][ T30] ? unwind_next_frame+0x1baf/0x2550 [ 349.005718][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.010795][ T30] ? __pfx___schedule+0x10/0x10 [ 349.015771][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.020582][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.025442][ T30] ? lock_release+0x4b/0x3c0 [ 349.030247][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.035454][ T30] ? schedule+0x90/0x360 [ 349.039750][ T30] ? trace_irq_enable+0x3b/0x140 [ 349.045175][ T30] schedule+0x164/0x360 [ 349.049456][ T30] schedule_preempt_disabled+0x13/0x30 [ 349.054997][ T30] __mutex_lock+0x7bf/0x1550 [ 349.059636][ T30] ? __mutex_lock+0x5d4/0x1550 [ 349.064464][ T30] ? ib_get_eth_speed+0x173/0x7f0 [ 349.070083][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 349.075242][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 349.080521][ T30] ? _raw_spin_unlock+0x28/0x50 [ 349.085596][ T30] ? ib_device_get_netdev+0x220/0x2f0 [ 349.091078][ T30] ib_get_eth_speed+0x173/0x7f0 [ 349.096076][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 349.101545][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.106705][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.111811][ T30] ? lock_release+0x4b/0x3c0 [ 349.116579][ T30] ? _raw_spin_unlock+0x28/0x50 [ 349.121615][ T30] siw_query_port+0x3c/0x4a0 [ 349.126553][ T30] ib_cache_update+0x1ba/0xc50 [ 349.131762][ T30] ? trace_hrtimer_start+0x82/0x200 [ 349.137086][ T30] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 349.143312][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.148674][ T30] ? __pfx_ib_cache_update+0x10/0x10 [ 349.155662][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.161261][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 349.167460][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.172903][ T30] ? lock_acquire+0x5f/0x350 [ 349.177786][ T30] ib_cache_event_task+0xd3/0x1c0 [ 349.182886][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 349.191706][ T30] process_scheduled_works+0xa8e/0x14e0 [ 349.198438][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.204549][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.210071][ T30] ? assign_work+0x3cf/0x5d0 [ 349.214934][ T30] worker_thread+0xa47/0xfb0 [ 349.219601][ T30] kthread+0x388/0x470 [ 349.223799][ T30] ? __pfx_worker_thread+0x10/0x10 [ 349.229039][ T30] ? __pfx_kthread+0x10/0x10 [ 349.233708][ T30] ret_from_fork+0x514/0xb70 [ 349.238422][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 349.243631][ T30] ? __switch_to+0xc89/0x1420 [ 349.249125][ T30] ? __pfx_kthread+0x10/0x10 [ 349.254219][ T30] ret_from_fork_asm+0x1a/0x30 [ 349.259574][ T30] [ 349.262718][ T30] INFO: task syz.0.1506:11158 blocked for more than 144 seconds. [ 349.271324][ T30] Not tainted syzkaller #0 [ 349.276552][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.285483][ T30] task:syz.0.1506 state:D stack:22648 pid:11158 tgid:11156 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 349.297599][ T30] Call Trace: [ 349.300950][ T30] [ 349.303989][ T30] __schedule+0x17d9/0x56c0 [ 349.308770][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.313675][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.318569][ T30] ? irqentry_exit+0x218/0x8f0 [ 349.323382][ T30] ? trace_irq_disable+0x3b/0x140 [ 349.328586][ T30] ? __pfx___schedule+0x10/0x10 [ 349.333488][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.338392][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.343205][ T30] ? lock_release+0x4b/0x3c0 [ 349.347916][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.352737][ T30] schedule+0x164/0x360 [ 349.357004][ T30] schedule_preempt_disabled+0x13/0x30 [ 349.362651][ T30] __mutex_lock+0x7bf/0x1550 [ 349.367580][ T30] ? __mutex_lock+0x5d4/0x1550 [ 349.373028][ T30] ? __ethtool_get_link_ksettings+0x109/0x250 [ 349.379850][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 349.385134][ T30] ? igmp_group_added+0x238/0x910 [ 349.390401][ T30] ? igmpv3_del_delrec+0x204/0x710 [ 349.395966][ T30] __ethtool_get_link_ksettings+0x109/0x250 [ 349.402737][ T30] bond_netdev_event+0x643/0xf80 [ 349.407976][ T30] ? __pfx_bond_netdev_event+0x10/0x10 [ 349.414039][ T30] ? __pfx_inetdev_event+0x10/0x10 [ 349.419823][ T30] ? ipmr_device_event+0x1f6/0x220 [ 349.425099][ T30] notifier_call_chain+0x1a5/0x3d0 [ 349.430793][ T30] __dev_notify_flags+0x1aa/0x310 [ 349.436432][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 349.444755][ T30] ? __dev_change_flags+0x5f1/0x820 [ 349.450134][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 349.456869][ T30] netif_change_flags+0xde/0x1b0 [ 349.461935][ T30] dev_change_flags+0x128/0x260 [ 349.467208][ T30] vlan_device_event+0x1b4e/0x1f00 [ 349.472405][ T30] ? packet_notifier+0xf1b/0xf70 [ 349.477480][ T30] ? br_device_event+0x282/0x9c0 [ 349.482563][ T30] ? __pfx_phonet_device_notify+0x10/0x10 [ 349.488953][ T30] ? __pfx_vlan_device_event+0x10/0x10 [ 349.495360][ T30] ? bcm_notifier+0xa9/0x890 [ 349.500436][ T30] ? nlmsg_notify+0x142/0x1a0 [ 349.505301][ T30] ? raw_notifier+0x9d/0x7d0 [ 349.509984][ T30] ? cgw_notifier+0x314/0x380 [ 349.514775][ T30] notifier_call_chain+0x1a5/0x3d0 [ 349.520243][ T30] __dev_notify_flags+0x1aa/0x310 [ 349.525594][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 349.531755][ T30] ? __dev_change_flags+0x5f1/0x820 [ 349.537157][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 349.543156][ T30] ? netif_rx_mode_sync+0x15d/0x1e0 [ 349.548568][ T30] ? trace_irq_enable+0x3b/0x140 [ 349.553650][ T30] netif_change_flags+0xde/0x1b0 [ 349.559045][ T30] do_setlink+0xdd6/0x4670 [ 349.563605][ T30] ? __pfx_do_setlink+0x10/0x10 [ 349.568934][ T30] ? stack_trace_save+0xa9/0x100 [ 349.574431][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 349.581039][ T30] ? __mutex_trylock_common+0x15f/0x270 [ 349.587325][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 349.593346][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.598366][ T30] ? trace_contention_end+0x3d/0x140 [ 349.604002][ T30] ? __mutex_lock+0x30d/0x1550 [ 349.609287][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 349.614142][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 349.619438][ T30] ? ns_capable+0x89/0xe0 [ 349.623863][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 349.629834][ T30] rtnl_newlink+0x148e/0x1bd0 [ 349.634781][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.640256][ T30] ? unwind_next_frame+0x8f/0x2550 [ 349.645661][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.650700][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 349.656279][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.661244][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.666634][ T30] ? unwind_next_frame+0x8f/0x2550 [ 349.671814][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.676773][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 349.682058][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.687116][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.691955][ T30] ? lock_release+0x4b/0x3c0 [ 349.697159][ T30] ? lock_release+0x4b/0x3c0 [ 349.701872][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 349.707293][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 349.712551][ T30] ? kernel_text_address+0xa5/0xe0 [ 349.717799][ T30] ? __kernel_text_address+0xd/0x30 [ 349.723053][ T30] ? unwind_get_return_address+0x4d/0x90 [ 349.728892][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 349.735246][ T30] ? arch_stack_walk+0xfb/0x150 [ 349.740256][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 349.745569][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.750389][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.755509][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.760320][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.765544][ T30] ? lock_release+0x4b/0x3c0 [ 349.770201][ T30] ? bpf_lsm_capable+0x9/0x20 [ 349.774978][ T30] ? security_capable+0x7e/0x2c0 [ 349.779966][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.785069][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 349.790057][ T30] ? kasan_save_track+0x3e/0x80 [ 349.795103][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 349.800293][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.805923][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 349.810916][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.815759][ T30] netlink_rcv_skb+0x226/0x4a0 [ 349.820585][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.826161][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.831501][ T30] ? net_generic+0x1e/0x240 [ 349.836106][ T30] ? net_generic+0x1e/0x240 [ 349.840644][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.845992][ T30] netlink_unicast+0x7bb/0x940 [ 349.850828][ T30] netlink_sendmsg+0x813/0xb40 [ 349.855757][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.862020][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 349.867327][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.873154][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.878595][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 349.883469][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.888953][ T30] ? lock_release+0x4b/0x3c0 [ 349.893623][ T30] ? import_iovec+0x73/0xa0 [ 349.898267][ T30] ___sys_sendmsg+0x2a5/0x360 [ 349.904496][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.910384][ T30] ? futex_wake+0x51b/0x5f0 [ 349.915451][ T30] ? __fget_files+0x2a/0x420 [ 349.921135][ T30] ? __fget_files+0x3a2/0x420 [ 349.926377][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 349.931567][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.937841][ T30] ? rcu_is_watching+0x15/0xb0 [ 349.944332][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.950942][ T30] do_syscall_64+0x174/0x580 [ 349.956563][ T30] ? trace_irq_disable+0x3b/0x140 [ 349.961828][ T30] ? clear_bhb_loop+0x40/0x90 [ 349.966869][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.974451][ T30] RIP: 0033:0x7fc0fb79ce59 [ 349.979449][ T30] RSP: 002b:00007fc0fc6bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.988632][ T30] RAX: ffffffffffffffda RBX: 00007fc0fba15fa0 RCX: 00007fc0fb79ce59 [ 349.996814][ T30] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 350.005232][ T30] RBP: 00007fc0fb832d6f R08: 0000000000000000 R09: 0000000000000000 [ 350.013386][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.021655][ T30] R13: 00007fc0fba16038 R14: 00007fc0fba15fa0 R15: 00007ffd4df17508 [ 350.029934][ T30] [ 350.033367][ T30] INFO: task syz.1.1508:11166 blocked for more than 145 seconds. [ 350.041732][ T30] Not tainted syzkaller #0 [ 350.047070][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.055982][ T30] task:syz.1.1508 state:D stack:25512 pid:11166 tgid:11165 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 350.068005][ T30] Call Trace: [ 350.071297][ T30] [ 350.074246][ T30] __schedule+0x17d9/0x56c0 [ 350.078847][ T30] ? __pfx___schedule+0x10/0x10 [ 350.084003][ T30] ? _printk+0xdd/0x130 [ 350.088348][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.093241][ T30] ? irqentry_exit+0x218/0x8f0 [ 350.098255][ T30] ? trace_irq_disable+0x3b/0x140 [ 350.103521][ T30] ? __pfx___schedule+0x10/0x10 [ 350.108680][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.113547][ T30] ? lock_release+0x4b/0x3c0 [ 350.118459][ T30] schedule+0x164/0x360 [ 350.122690][ T30] schedule_preempt_disabled+0x13/0x30 [ 350.128333][ T30] __mutex_lock+0x7bf/0x1550 [ 350.132998][ T30] ? __mutex_lock+0x5d4/0x1550 [ 350.137969][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 350.142815][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 350.147954][ T30] ? ns_capable+0x89/0xe0 [ 350.152329][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 350.158244][ T30] rtnl_newlink+0x8a3/0x1bd0 [ 350.162914][ T30] ? netlink_deliver_tap+0x19c/0x1b0 [ 350.168380][ T30] ? netlink_unicast+0x77f/0x940 [ 350.173395][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.178712][ T30] ? do_syscall_64+0x174/0x580 [ 350.183536][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.189743][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.194553][ T30] ? trace_irq_enable+0x3b/0x140 [ 350.199615][ T30] ? nlmon_xmit+0xb0/0x100 [ 350.204095][ T30] ? kmem_cache_free+0x182/0x650 [ 350.209239][ T30] ? dev_hard_start_xmit+0x7c7/0x830 [ 350.214777][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 350.219922][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 350.225098][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.229897][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 350.235106][ T30] ? trace_irq_enable+0x3b/0x140 [ 350.240103][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 350.245380][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 350.250552][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 350.255966][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 350.261126][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 350.266325][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.271125][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.276359][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.281203][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.286427][ T30] ? lock_release+0x4b/0x3c0 [ 350.291141][ T30] ? bpf_lsm_capable+0x9/0x20 [ 350.295955][ T30] ? security_capable+0x7e/0x2c0 [ 350.300949][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.306064][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 350.311079][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 350.316315][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.321878][ T30] ? ref_tracker_free+0x689/0x830 [ 350.327095][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 350.332591][ T30] netlink_rcv_skb+0x226/0x4a0 [ 350.337546][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.343088][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.348508][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.353769][ T30] netlink_unicast+0x7bb/0x940 [ 350.358669][ T30] netlink_sendmsg+0x813/0xb40 [ 350.363500][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.368993][ T30] ? futex_unqueue+0x22/0x240 [ 350.373729][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 350.378754][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.384085][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.389496][ T30] sock_write_iter+0x47a/0x4c0 [ 350.394314][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 350.399775][ T30] ? __futex_wait+0x358/0x400 [ 350.404558][ T30] do_iter_readv_writev+0x612/0x8c0 [ 350.409875][ T30] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 350.415827][ T30] ? bpf_lsm_file_permission+0x9/0x20 [ 350.421295][ T30] ? security_file_permission+0x75/0x260 [ 350.427066][ T30] ? rw_verify_area+0x203/0x4c0 [ 350.431983][ T30] vfs_writev+0x343/0x990 [ 350.436442][ T30] ? __pfx_vfs_writev+0x10/0x10 [ 350.441343][ T30] ? lock_release+0x4b/0x3c0 [ 350.446127][ T30] ? __fget_files+0x3a2/0x420 [ 350.450901][ T30] ? __fget_files+0x2a/0x420 [ 350.455718][ T30] do_writev+0x154/0x2e0 [ 350.460026][ T30] ? __pfx_do_writev+0x10/0x10 [ 350.464965][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.469765][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.476016][ T30] do_syscall_64+0x174/0x580 [ 350.480662][ T30] ? trace_irq_disable+0x3b/0x140 [ 350.485885][ T30] ? clear_bhb_loop+0x40/0x90 [ 350.490646][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.496902][ T30] RIP: 0033:0x7f8d16f9ce59 [ 350.501396][ T30] RSP: 002b:00007f8d17e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 350.512066][ T30] RAX: ffffffffffffffda RBX: 00007f8d17215fa0 RCX: 00007f8d16f9ce59 [ 350.521871][ T30] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 350.530111][ T30] RBP: 00007f8d17032d6f R08: 0000000000000000 R09: 0000000000000000 [ 350.538737][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.546879][ T30] R13: 00007f8d17216038 R14: 00007f8d17215fa0 R15: 00007ffd34b3d8e8 [ 350.555001][ T30] [ 350.558151][ T30] INFO: task syz.4.1509:11172 blocked for more than 145 seconds. [ 350.566215][ T30] Not tainted syzkaller #0 [ 350.571487][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.580775][ T30] task:syz.4.1509 state:D stack:28152 pid:11172 tgid:11171 ppid:5633 task_flags:0x400040 flags:0x00080002 [ 350.592858][ T30] Call Trace: [ 350.596487][ T30] [ 350.599483][ T30] __schedule+0x17d9/0x56c0 [ 350.604549][ T30] ? __pfx___schedule+0x10/0x10 [ 350.609689][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.614680][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.619507][ T30] ? lock_release+0x4b/0x3c0 [ 350.624210][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.629115][ T30] schedule+0x164/0x360 [ 350.633550][ T30] schedule_preempt_disabled+0x13/0x30 [ 350.639268][ T30] __mutex_lock+0x7bf/0x1550 [ 350.643944][ T30] ? __mutex_lock+0x5d4/0x1550 [ 350.648877][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 350.654015][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 350.659335][ T30] ? lock_release+0x4b/0x3c0 [ 350.664038][ T30] ? __might_fault+0xaf/0x130 [ 350.668876][ T30] ? __might_fault+0xcb/0x130 [ 350.673609][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 350.678573][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 350.684909][ T30] ? __fget_files+0x2a/0x420 [ 350.690357][ T30] ? __fget_files+0x3a2/0x420 [ 350.695220][ T30] ? __fget_files+0x2a/0x420 [ 350.699889][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 350.704898][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 350.710049][ T30] __se_sys_ioctl+0xfc/0x170 [ 350.714730][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.720859][ T30] do_syscall_64+0x174/0x580 [ 350.726016][ T30] ? trace_irq_disable+0x3b/0x140 [ 350.731195][ T30] ? clear_bhb_loop+0x40/0x90 [ 350.736266][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.742231][ T30] RIP: 0033:0x7f7e7239ce59 [ 350.746786][ T30] RSP: 002b:00007f7e73208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.755368][ T30] RAX: ffffffffffffffda RBX: 00007f7e72615fa0 RCX: 00007f7e7239ce59 [ 350.763410][ T30] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 350.772245][ T30] RBP: 00007f7e72432d6f R08: 0000000000000000 R09: 0000000000000000 [ 350.780375][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.788547][ T30] R13: 00007f7e72616038 R14: 00007f7e72615fa0 R15: 00007ffed038e8b8 [ 350.797406][ T30] [ 350.800505][ T30] INFO: task syz.4.1509:11173 blocked for more than 146 seconds. [ 350.808735][ T30] Not tainted syzkaller #0 [ 350.813734][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.822606][ T30] task:syz.4.1509 state:D stack:28472 pid:11173 tgid:11171 ppid:5633 task_flags:0x400140 flags:0x00080002 [ 350.835044][ T30] Call Trace: [ 350.838382][ T30] [ 350.841384][ T30] __schedule+0x17d9/0x56c0 [ 350.846059][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 350.851163][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.856025][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.860984][ T30] ? __pfx___schedule+0x10/0x10 [ 350.865975][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.870781][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.875735][ T30] ? lock_release+0x4b/0x3c0 [ 350.880404][ T30] ? rcu_is_watching+0x15/0xb0 [ 350.885303][ T30] schedule+0x164/0x360 [ 350.889536][ T30] schedule_preempt_disabled+0x13/0x30 [ 350.895100][ T30] __mutex_lock+0x7bf/0x1550 [ 350.899881][ T30] ? __mutex_lock+0x5d4/0x1550 [ 350.904955][ T30] ? devinet_ioctl+0x2fb/0x1c50 [ 350.909961][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 350.915164][ T30] ? bpf_lsm_capable+0x9/0x20 [ 350.920207][ T30] ? security_capable+0x7e/0x2c0 [ 350.926319][ T30] devinet_ioctl+0x2fb/0x1c50 [ 350.931095][ T30] ? lock_release+0x4b/0x3c0 [ 350.935927][ T30] ? __might_fault+0xaf/0x130 [ 350.940724][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 350.947642][ T30] ? get_user_ifreq+0x12b/0x180 [ 350.952583][ T30] inet_ioctl+0x42a/0x560 [ 350.957215][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 350.962275][ T30] ? lock_release+0x4b/0x3c0 [ 350.967120][ T30] ? kfree+0x1c5/0x640 [ 350.971289][ T30] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 350.977160][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 350.982365][ T30] ? packet_ioctl+0x26b/0x350 [ 350.987196][ T30] sock_do_ioctl+0x101/0x320 [ 350.991832][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 350.997114][ T30] ? hook_file_ioctl+0x1f0/0x5c0 [ 351.002285][ T30] sock_ioctl+0x57a/0x7e0 [ 351.006789][ T30] ? lock_release+0x4b/0x3c0 [ 351.011843][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 351.016959][ T30] ? __fget_files+0x2a/0x420 [ 351.021617][ T30] ? __fget_files+0x3a2/0x420 [ 351.026461][ T30] ? __fget_files+0x2a/0x420 [ 351.031495][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 351.036638][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 351.041551][ T30] __se_sys_ioctl+0xfc/0x170 [ 351.046457][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.052770][ T30] do_syscall_64+0x174/0x580 [ 351.057667][ T30] ? trace_irq_disable+0x3b/0x140 [ 351.062793][ T30] ? clear_bhb_loop+0x40/0x90 [ 351.067741][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.073671][ T30] RIP: 0033:0x7f7e7239ce59 [ 351.078346][ T30] RSP: 002b:00007f7e731e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.087304][ T30] RAX: ffffffffffffffda RBX: 00007f7e72616090 RCX: 00007f7e7239ce59 [ 351.096362][ T30] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 351.104738][ T30] RBP: 00007f7e72432d6f R08: 0000000000000000 R09: 0000000000000000 [ 351.112871][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.121724][ T30] R13: 00007f7e72616128 R14: 00007f7e72616090 R15: 00007ffed038e8b8 [ 351.129964][ T30] [ 351.133102][ T30] INFO: task syz.3.1510:11178 blocked for more than 146 seconds. [ 351.141719][ T30] Not tainted syzkaller #0 [ 351.146968][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.156595][ T30] task:syz.3.1510 state:D stack:27056 pid:11178 tgid:11177 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 351.170593][ T30] Call Trace: [ 351.173911][ T30] [ 351.177118][ T30] __schedule+0x17d9/0x56c0 [ 351.181743][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.187047][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.191866][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.196782][ T30] ? __pfx___schedule+0x10/0x10 [ 351.201677][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.206565][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.211588][ T30] ? lock_release+0x4b/0x3c0 [ 351.216407][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.221232][ T30] schedule+0x164/0x360 [ 351.225490][ T30] schedule_preempt_disabled+0x13/0x30 [ 351.233678][ T30] __mutex_lock+0x7bf/0x1550 [ 351.238864][ T30] ? __mutex_lock+0x5d4/0x1550 [ 351.243811][ T30] ? ethnl_default_set_doit+0x87a/0xfe0 [ 351.249885][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 351.255031][ T30] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 351.261450][ T30] ? __kmalloc_noprof+0x379/0x750 [ 351.266902][ T30] ? __kmalloc_noprof+0x1b4/0x750 [ 351.271992][ T30] ethnl_default_set_doit+0x87a/0xfe0 [ 351.277513][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 351.283900][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 351.289591][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 351.295828][ T30] ? bpf_lsm_capable+0x9/0x20 [ 351.300545][ T30] ? security_capable+0x7e/0x2c0 [ 351.305659][ T30] genl_rcv_msg+0x614/0x7a0 [ 351.310203][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.315318][ T30] ? ref_tracker_free+0x689/0x830 [ 351.320384][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 351.326388][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 351.331817][ T30] netlink_rcv_skb+0x226/0x4a0 [ 351.336885][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.341945][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.347366][ T30] ? down_read+0x2be/0x330 [ 351.351948][ T30] genl_rcv+0x28/0x40 [ 351.356169][ T30] netlink_unicast+0x7bb/0x940 [ 351.361055][ T30] netlink_sendmsg+0x813/0xb40 [ 351.366040][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.372185][ T30] ? futex_unqueue+0x22/0x240 [ 351.377436][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 351.382615][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.388012][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.393353][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 351.398254][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.403603][ T30] ? lock_release+0x4b/0x3c0 [ 351.408342][ T30] ? import_iovec+0x73/0xa0 [ 351.412916][ T30] ___sys_sendmsg+0x2a5/0x360 [ 351.418343][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.424025][ T30] ? futex_wait+0x2a2/0x390 [ 351.428688][ T30] ? __fget_files+0x2a/0x420 [ 351.433324][ T30] ? __fget_files+0x3a2/0x420 [ 351.438130][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 351.443129][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.448797][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.453617][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.459839][ T30] do_syscall_64+0x174/0x580 [ 351.464498][ T30] ? trace_irq_disable+0x3b/0x140 [ 351.469692][ T30] ? clear_bhb_loop+0x40/0x90 [ 351.474435][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.480540][ T30] RIP: 0033:0x7f551e19ce59 [ 351.485047][ T30] RSP: 002b:00007f551efcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.493604][ T30] RAX: ffffffffffffffda RBX: 00007f551e415fa0 RCX: 00007f551e19ce59 [ 351.501706][ T30] RDX: 000000000004e040 RSI: 0000200000000040 RDI: 0000000000000003 [ 351.509868][ T30] RBP: 00007f551e232d6f R08: 0000000000000000 R09: 0000000000000000 [ 351.517946][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.526106][ T30] R13: 00007f551e416038 R14: 00007f551e415fa0 R15: 00007fff3e3ebcd8 [ 351.534117][ T30] [ 351.537422][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 351.547210][ T30] INFO: task syz.2.1511:11182 blocked for more than 146 seconds. [ 351.555127][ T30] Not tainted syzkaller #0 [ 351.560100][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.568903][ T30] task:syz.2.1511 state:D stack:27256 pid:11182 tgid:11180 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 351.580955][ T30] Call Trace: [ 351.584269][ T30] [ 351.587357][ T30] __schedule+0x17d9/0x56c0 [ 351.591963][ T30] ? kasan_save_track+0x4f/0x80 [ 351.597165][ T30] ? kasan_save_track+0x3e/0x80 [ 351.602101][ T30] ? kasan_save_free_info+0x40/0x50 [ 351.607409][ T30] ? __kasan_slab_free+0x5c/0x80 [ 351.612401][ T30] ? kfree+0x1c5/0x640 [ 351.616878][ T30] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 351.622568][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.628769][ T30] ? __pfx___schedule+0x10/0x10 [ 351.633753][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.638784][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.643612][ T30] ? lock_release+0x4b/0x3c0 [ 351.648683][ T30] ? rcu_is_watching+0x15/0xb0 [ 351.653491][ T30] schedule+0x164/0x360 [ 351.657986][ T30] schedule_preempt_disabled+0x13/0x30 [ 351.663521][ T30] __mutex_lock+0x7bf/0x1550 [ 351.668405][ T30] ? __mutex_lock+0x5d4/0x1550 [ 351.673213][ T30] ? dev_ioctl+0x5dc/0x1150 [ 351.678032][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 351.683107][ T30] ? bpf_lsm_capable+0x9/0x20 [ 351.687858][ T30] ? security_capable+0x7e/0x2c0 [ 351.692852][ T30] dev_ioctl+0x5dc/0x1150 [ 351.697364][ T30] sock_do_ioctl+0x23e/0x320 [ 351.702048][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 351.707275][ T30] ? hook_file_ioctl+0x1f0/0x5c0 [ 351.712289][ T30] sock_ioctl+0x57a/0x7e0 [ 351.716864][ T30] ? lock_release+0x4b/0x3c0 [ 351.722420][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 351.727367][ T30] ? __fget_files+0x2a/0x420 [ 351.732000][ T30] ? __fget_files+0x3a2/0x420 [ 351.736762][ T30] ? __fget_files+0x2a/0x420 [ 351.741384][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 351.746436][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 351.751326][ T30] __se_sys_ioctl+0xfc/0x170 [ 351.756008][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.762111][ T30] do_syscall_64+0x174/0x580 [ 351.766794][ T30] ? trace_irq_disable+0x3b/0x140 [ 351.771861][ T30] ? clear_bhb_loop+0x40/0x90 [ 351.777266][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.783250][ T30] RIP: 0033:0x7fdfb9b9ce59 [ 351.787750][ T30] RSP: 002b:00007fdfb7df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.796232][ T30] RAX: ffffffffffffffda RBX: 00007fdfb9e16090 RCX: 00007fdfb9b9ce59 [ 351.804582][ T30] RDX: 0000200000000200 RSI: 0000000000008948 RDI: 0000000000000007 [ 351.812754][ T30] RBP: 00007fdfb9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 351.820863][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.829141][ T30] R13: 00007fdfb9e16128 R14: 00007fdfb9e16090 R15: 00007fff65049148 [ 351.837447][ T30] [ 351.840533][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 351.849682][ T30] INFO: lockdep is turned off. [ 351.854483][ T30] NMI backtrace for cpu 0 [ 351.854522][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.854548][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.854557][ T30] Call Trace: [ 351.854564][ T30] [ 351.854570][ T30] dump_stack_lvl+0xe8/0x150 [ 351.854596][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 351.854638][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.854676][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 351.854699][ T30] sys_info+0x135/0x170 [ 351.854718][ T30] watchdog+0xfd7/0x1030 [ 351.854750][ T30] ? watchdog+0x1c7/0x1030 [ 351.854772][ T30] kthread+0x388/0x470 [ 351.854786][ T30] ? __pfx_watchdog+0x10/0x10 [ 351.854804][ T30] ? __pfx_kthread+0x10/0x10 [ 351.854817][ T30] ret_from_fork+0x514/0xb70 [ 351.854834][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 351.854847][ T30] ? __switch_to+0xc89/0x1420 [ 351.854869][ T30] ? __pfx_kthread+0x10/0x10 [ 351.854882][ T30] ret_from_fork_asm+0x1a/0x30 [ 351.854906][ T30] [ 351.959817][ T30] Sending NMI from CPU 0 to CPUs 1: [ 351.965117][ C1] NMI backtrace for cpu 1 [ 351.965138][ C1] CPU: 1 UID: 0 PID: 4979 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 351.965159][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.965171][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x70 [ 351.965203][ C1] Code: d8 49 74 11 65 8b 15 f9 49 74 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 17 00 00 00 74 2c 8b 91 f8 16 00 00 <83> fa 02 75 21 48 8b 91 00 17 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 351.965218][ C1] RSP: 0018:ffffc90002e4fad8 EFLAGS: 00000246 [ 351.965235][ C1] RAX: ffffffff8971fbbf RBX: ffff888034aeb300 RCX: ffff88807ee9be00 [ 351.965249][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 351.965259][ C1] RBP: ffffc90002e4fcd0 R08: ffff888034aeb9bb R09: 1ffff1100695d737 [ 351.965272][ C1] R10: dffffc0000000000 R11: ffffffff8971fb70 R12: ffff888034aeb300 [ 351.965286][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 351.965299][ C1] FS: 00007fcec2e8dc80(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 351.965314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.965325][ C1] CR2: 0000555ea2b17a38 CR3: 000000007ca04000 CR4: 00000000003526f0 [ 351.965341][ C1] Call Trace: [ 351.965349][ C1] [ 351.965355][ C1] sock_def_readable+0x4f/0x550 [ 351.965379][ C1] unix_dgram_sendmsg+0xd30/0x17b0 [ 351.965417][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 351.965447][ C1] ? aa_sock_msg_perm+0xda/0x1b0 [ 351.965465][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.965489][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 351.965515][ C1] __sys_sendto+0x626/0x6c0 [ 351.965546][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 351.965574][ C1] ? trace_irq_enable+0x3b/0x140 [ 351.965603][ C1] ? rcu_is_watching+0x15/0xb0 [ 351.965632][ C1] __x64_sys_sendto+0xde/0x100 [ 351.965655][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.965674][ C1] do_syscall_64+0x174/0x580 [ 351.965699][ C1] ? clear_bhb_loop+0x40/0x90 [ 351.965719][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.965736][ C1] RIP: 0033:0x7fcec2fdd407 [ 351.965751][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 351.965766][ C1] RSP: 002b:00007ffdc10927b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 351.965783][ C1] RAX: ffffffffffffffda RBX: 00007fcec2e8dc80 RCX: 00007fcec2fdd407 [ 351.965796][ C1] RDX: 000000000000008b RSI: 00007ffdc10928f0 RDI: 0000000000000003 [ 351.965807][ C1] RBP: 00007ffdc1092d20 R08: 0000000000000000 R09: 0000000000000000 [ 351.965817][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffdc1092d38 [ 351.965828][ C1] R13: 00007ffdc10928f0 R14: 0000000000000070 R15: 00007ffdc10928f0 [ 351.965849][ C1] [ 352.245697][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 352.252591][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 352.261715][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.271798][ T30] Call Trace: [ 352.275103][ T30] [ 352.278084][ T30] vpanic+0x56c/0xa60 [ 352.282097][ T30] ? __pfx___schedule+0x10/0x10 [ 352.286980][ T30] ? __pfx_vpanic+0x10/0x10 [ 352.291505][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 352.297684][ T30] panic+0xc5/0xd0 [ 352.301440][ T30] ? __pfx_panic+0x10/0x10 [ 352.305895][ T30] ? preempt_schedule_common+0x82/0xd0 [ 352.311448][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 352.316866][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 352.323061][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 352.329242][ T30] watchdog+0x1030/0x1030 [ 352.333608][ T30] ? watchdog+0x1c7/0x1030 [ 352.338284][ T30] kthread+0x388/0x470 [ 352.342421][ T30] ? __pfx_watchdog+0x10/0x10 [ 352.347138][ T30] ? __pfx_kthread+0x10/0x10 [ 352.352115][ T30] ret_from_fork+0x514/0xb70 [ 352.356831][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 352.362578][ T30] ? __switch_to+0xc89/0x1420 [ 352.367376][ T30] ? __pfx_kthread+0x10/0x10 [ 352.372007][ T30] ret_from_fork_asm+0x1a/0x30 [ 352.376808][ T30] [ 352.380498][ T30] Kernel Offset: disabled [ 352.384836][ T30] Rebooting in 86400 seconds..