last executing test programs: 1m32.013176057s ago: executing program 3 (id=1139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (fail_nth: 1) 1m31.708445017s ago: executing program 3 (id=1141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1m30.77655691s ago: executing program 3 (id=1147): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) close(0x3) 1m30.643173097s ago: executing program 3 (id=1150): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (fail_nth: 2) 1m29.079734371s ago: executing program 3 (id=1154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) 1m27.864544881s ago: executing program 3 (id=1159): r0 = socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6a98cf64}, 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) 1m27.394125881s ago: executing program 32 (id=1159): r0 = socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6a98cf64}, 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) 3.94524277s ago: executing program 4 (id=2022): unshare(0x24060400) socket$netlink(0x10, 0x3, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 2.97281668s ago: executing program 4 (id=2040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) 2.772611865s ago: executing program 4 (id=2042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.934600864s ago: executing program 0 (id=2056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x19, 0x8d, 0x1, 0x7}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) 1.738535973s ago: executing program 5 (id=2062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x34, 0x0, 0x8, 0x201, 0xf0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) 1.664519706s ago: executing program 0 (id=2063): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0x1, 0x4) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.549565174s ago: executing program 5 (id=2065): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.460974499s ago: executing program 2 (id=2066): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 1.111140685s ago: executing program 2 (id=2068): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x24, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1000, 0x0, 0x0, 0x8000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 996.531051ms ago: executing program 5 (id=2069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) 914.656659ms ago: executing program 2 (id=2071): r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a000100"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40800) 828.500679ms ago: executing program 0 (id=2073): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x54002, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000008000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff75e500005d9800000000000056080000000000008500000007000000b7000000000000009500000000000000447f60e559084214e337a12f07198853926c5080036534d4dbe71cd56d0af679281b7af32dd1169edc057aba16f165dea48a0887fd3ca1909a98d2bab6297824fa2dc3d5113638ee7ac92f27684156b640b0eb1f972fa70aa98fa72894f08d86acc237fd63ef92"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000740)=0x3, 0x4) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000540)={r3, 0x5, 0xffffffffffffffff, 0x200}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x3ff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x8e, &(0x7f0000000480)=""/142, 0x40f00, 0x10, '\x00', r5, @sock_ops, r6, 0x8, &(0x7f0000000580)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xf, 0xffffffff, 0x7}, 0x10, 0x0, r4, 0x1, &(0x7f0000000600)=[r2, r2, r2], &(0x7f0000000640)=[{0x4, 0x1, 0x8, 0x3}], 0x10, 0xffffffff}, 0x94) 788.279564ms ago: executing program 5 (id=2074): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) 770.178087ms ago: executing program 4 (id=2075): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r2, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000010000130200"/50], &(0x7f0000000080)=""/233, 0x32, 0x31, 0x1}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) sendto$inet(r0, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 764.777396ms ago: executing program 2 (id=2076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x9, 0x1, 0x7, 0x3, 0xffffffec, 0x5, 0x0, 0x8, 0xce, 0xd, 0x5, 0x15, 0x7, 0x0, 0x7cf4}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 739.379576ms ago: executing program 1 (id=2077): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) (async) 648.468254ms ago: executing program 0 (id=2078): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 628.718652ms ago: executing program 5 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r5, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000002180)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000002480)={0x23c, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xe3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0xffffffffffffff71}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x96db37389bad4a5e}, {0xc}, {0xc, 0x90, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1ff}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x2b8c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x71}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000021c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7ca077a3b43a339f6ed98e91a49fdc8f4c1d9694783231b0d8ee", 0x1a}, {&(0x7f0000000100)="be2561028ca0f6944fb6b3d44124aa1219e8c80250164d194534f31993c3d8a6f8f571f089417e5485b636bb1ef38320e4f7c9ac8a2f6fac01503904e952744f1acae35841f2728a98b4c29cfea5835ff49f", 0x52}, {&(0x7f0000000180)="30186757ab59480846", 0x9}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="cffff98a29fa18906232b4b7aafcb23e893e1b958dd932545b06963f9a7bb37b15b80d03ece19527372f5d44ef2cbe76b458850e0bf2022ae1630441e69888b1f2ef23e2ba301d18625cec960fffec05d750bda1565514ece3dca108b0b3d8169114cc682d9640836e35f38bd0948bac628d56ef111794675d58a0cec776d75034dd0e58d60f77075a0bfa6478d2", 0x8e}], 0x9, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd86a2000}}], 0x48}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="304cbd6b64a7089f0951f3d9eceff26418cf71f08e9be8a1cfccb6fbee58179156e49ae7fe150bbe69ffc96ab57537c6c475c47b02fbbe1e5a38edad54b3743c0f5ace241a6ccffd4ce97411e1487f54", 0x50}], 0x1, &(0x7f00000004c0)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x54e6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}], 0x78}}, {{&(0x7f0000000540)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000580)="cfffa3e7df0987a98044ac99e682ef247e354e9a847f13f5ad1e6c2ff1ad6d3bc68f86c46879eabb8f807cbd71147642f04fd5facf776aae08a29dfe73a22e872af964838cab326068921f4810ddaf09ce26dd44e037ed98412d53c800ca66c496d13b7a90dcc7e6edf38cb245dcb9def063c54e325ead9b096613a4fcfb5377ce6066b6780ffc14c07957d1b37d0f56aec0f7049e9ceebf04c81a119a047d00977440a5e902e704bfcf8eb230be894b558a7140935f441f368489a8f857aabb3f7005316a6a1fab71f196a728c457d93d26660dde599501ab111087ccdf49da4275322a0db83164078d711bfc6a4421302680d5b88bfb133c9099", 0xfb}, {&(0x7f0000000700)="9cb811f4f21db1b35921dea0ffc0694977de76827bb89fec0c738b166ce4c944c7df503cac02f2098d1ee8b0494e92f6ee53d44e4178b48b5ba4ebac98df1a5eaa8541dd55ad4b8d18c1041c8f81db14abde3a020ff59859145ff6a9158d7e03687f9d59d240d23726feafd694b120a0982e3b6e216f579f349df564fae6be3f4032b0f74e39790c3a3fd0bd11ec0165840ce6292fcc35428ed48df625dca7e1bc0dfeb92e8f1bbdc7b49243cb03c94004ca200f2c9e3f45376a07a852ed74f49370712d191ab2fcc93c594cefdf5d9396be045f549cfb4d7ac0140d86c2f759101544a1ce6e", 0xe6}, {&(0x7f0000000940)="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", 0x1000}], 0x3, &(0x7f0000000800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}, {{&(0x7f0000000840)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000880)="563f748f1bf7819d060d5164869844484ca835eae7b9b96be615fd4e57759cb20c019c1e290a7227de32df854fe827a4fc79ba18bb421d38367d33c70296c50f5883d95579a96503dc0ce5c90f4dba44a5d5d208e9", 0x55}, {&(0x7f0000001940)="7d1e6dbe1b5fce07a7371980a9e81ca573c1816193eb7f4111efcc115b5fe5fa70d1e28cc1376d2bc55a890e42cac7fda9270922a7a8a67177f8429008fbe2676bf7c5547264d4f1ecc3e6b76bc65629aa56938bda7bc64edcfe455b06979878b1f19b82d00c8f15d7040b55364872661c89f78e78c71d386d457a8f1aab8931ff607490d7aa7226fa446a3cfd5e6f9f47237469acf7e588b676f5bc45a7b336d2601644a173bc4ccae829fccaba14c2030fd6027a4081c27426b9da8ba82328fe7e84e5a64c7b34b85b23e8e54bda5bb47b4aae907da2f2835545f30da955162c7fd92a837b3e589a432b2a7e19fe522d4bbffe52", 0xf5}], 0x2, &(0x7f0000001a80)}}, {{&(0x7f0000001ac0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000002140)="7d03279122e43298be2fa3a42b67787412e5e93fc4abad2a698fe5ca109f60d25274a4babb422633d3612e095b72291e0d35605d5706", 0x36}, {&(0x7f0000001b40)="b193fe81be5923a488003c8bcc91d60de236e9762a6405d3c69928ca0e958e0cadd8b6135ca63212c1aa430101a18ee975cabf7a30fee4df9bef2c81794de01751dae7794e12a9ba36cbf3adcd", 0x4d}, {&(0x7f0000001bc0)="8081007a66d144109d9d8798fbc741673752a80dd37e83bcbe9bc56d3d", 0x1d}], 0x3, &(0x7f0000001c40)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xba, 0x0, 0xc, [0x1, 0x6, 0x9, 0x81, 0x7, 0x4]}, @ssrr={0x89, 0x17, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @empty, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa8}}], 0x78}}, {{&(0x7f0000001cc0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000001d00)="5517debf4e8c7ec9ac5d7c0a9eeb03a444a0f383dc14261fe7855dedb61f5147c1c5505f8888774eee5fd27685436c09de61d05e09ee2d65b939b3d0af687629be78c7900c14674a5ed34575bb78cb8b00a4a89289330d7afeb3a873f7b133806f5a18a648267324b177545d6187885947ac4c3b686b10a5f543440dbd74caab248186b7b13c668c88d821d0d6751889774755eccba636fd61843f04c11d6a128de634e84f45d198bce02074d5c258fca515a505a6d41d0c23123599854bfd55517c44be1b80d29c81d91f0549", 0xcd}, {&(0x7f0000001e00)="9b159783345cba288effad524c5cd237cc0e6e8671f17266a4e3fc25e426b96f959f49b2d0c340f2523a840c5d16dd0d602ee80e7d1a76fa2c1fa11e81f87b634cd9fd840ccac03724d04661567847b8208f4f83007f07aa752c796b970c357dc69af0d3dbc7e112921989518f849599559e60228eb7157f697517859777b03da3f82e0ec789188fdb81b8770d79a86e302c0b20069c18f6bac25f569d6041194a80fa78799a9a18de6cb97b9034e8b662a31f755975a170024d4a47810b265ea9a63fe0da55c567c913a5b2a7e4574f73ee72baf19f6dcf252b92d4", 0xdc}, {&(0x7f0000001f00)="43c8a043db1a61077cdcbde2c202be3822bc1f46a3e98670d843ef05e366874974b96285dab43010682d4ab4b3b6677faedd157b69c845fa58b026fa7593b49425dfdae1ed0a2db00d2b122127052fd93492ca398eba05e246d2b5765da396df62c3a6824ba8ac56d58a16bd16195e331c6af864e7183a1455a879be33954621e1bdfa085b6db0adf6ea5469ebef3441be82d7f6f6c70331f29ad4bb8b6c9ad4ed7fe9dbf9d614bd7b46fc4eebd9fc44055581b77c9b4653c4ed578b5662111eec0f23afe8352cbc007c18", 0xcb}, {&(0x7f0000002000)="efa702df9ae08201f1e98877b1e23ebffd3ec7173301286487da5aa9b61dfaaff834e5d770374cf4429f233b0e89612b737058f31c80fcedfe196c83ce9f8a86c54e3a9de0478b018e85b8f3301a43498a187fcf085bae0ff92b661c87fdc35831326ef5401936171bbc98414f1b8b29cff1f7f532", 0x75}, {&(0x7f0000002080)="fe425bdcef2bbc92fdc6210c13c33033", 0x10}], 0x5, &(0x7f0000002400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x65}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}], 0x78}}], 0x7, 0x4048451) getsockopt$bt_hci(r1, 0x84, 0x85, 0x0, &(0x7f00000004c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000020000004000000000000000000900010073797a30"], 0xd8}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd0, 0xffff, 0xb, 0x2, 0x2, 0xcb17, 0x1, 0x7]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x48000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000100), 0x12) r12 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r13 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000000c0), 0x40) pread64(r13, &(0x7f0000001840)=""/4096, 0x1000, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) 589.165674ms ago: executing program 1 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0x7) (async) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x100) (async) listen(r2, 0x100) socket$inet(0xa, 0x801, 0x84) (async) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)={0x14, 0x1a, 0x229, 0x70bd2d, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0x7) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x100) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x38, r9, 0x2986b594068de4d5, 0x0, 0xfffffffd, {0x26}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8a8505cb647dfc88}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x38, r9, 0x2986b594068de4d5, 0x0, 0xfffffffd, {0x26}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8a8505cb647dfc88}, 0x0) 509.211707ms ago: executing program 4 (id=2081): sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x108, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff8000}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1a}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '(\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc7d}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x40}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x200400c5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 507.811293ms ago: executing program 2 (id=2082): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0xfff8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x35d6}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) (async, rerun: 64) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, r4, 0x1, 0x0, 0x0, {0x34}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) 469.601525ms ago: executing program 1 (id=2083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x48}}, 0x0) 419.18941ms ago: executing program 0 (id=2084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) 352.443971ms ago: executing program 4 (id=2085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 298.807808ms ago: executing program 1 (id=2086): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x47}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2400c01f) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)="a67683cca6cb1de41313b9a869399d68619f5a61fddda0831a4f088eee80d88c61427949bf52d0b12d19c2e68bf625caac9ffdfdb8db4ec3df053e6dbe539c9bd218aa9c6cfd490327e6d8a4fad8d9aa453b2e692af5bef70a4f49dad7e16fcfd0265720c41265c201f5aa520a8b6d181a2af225d3c56e1693d73001d2049b7652738d3b758beb88692256a11779073157c043a2b47e4eb5a9943fbacca49a2b5b2c47e1d25cd9cc38cc1e0dc5f677b202aca53a14927671689700156dc56c86e7d4dc11c99306db497b12097602458f867d7d06c36d12ad6e479277e3383c1195f3f2d65d0e77bac8f88e93d84afa3f539efa64de55c618c5c57c6d155e5643c64469e065533e35fc905dfbf0eba3ce4eb2e2d7599a0f9567b633ee05094b971223ed702eed92ee47ee01e85861ff427b22c9b7c6f6a74797f78b645c9b1e06b43024cb13e028283afdd187a2f01f410cb2f3b3cc42d670181cf076776618891e7053423e4a41ab447489dd2e60d7cb5b9e2fa8b6e3674cf3af4caed50a6dfe7be11cfaf4274b5f5f82c8cfb28557efbd647930897bc310f8ab7567c5d9aa9fb380e180c97a5070691503d2aff8b18f466df578f3ee56490fae5b272fcca0f6745a85152474490eed5d935e7465c3b053a0534becd121df971432f047d9d3040c3d0f5445ef1bae5456aecabca326f9c8adec5ff0ef3c5f27cef7f1e379d1e405bdc4fae6ccf7a9b3de2d83752d9bac3fcff7d9d72039af43e6f91bdc93e04487e167f1a98f20a315cdf890b618c90d0d278313da1e2351a35bc12fe370dcce6d0a706b02ddd5bbe6934d79f155c08bf9155205c1813471eb495bb01c64f0c6b88f7f9a7ee926ea84d2c55aaf14ce7a2979d2501fdece5cfb4c02775d07ed390dd5e7effa87959565b596d7a5fad51a9d78dfd5d542eb2b649def87234e2029076700e52ed37febf7d15070409f83efdae2ea0b7587715ac0b2efdbb41fc781b59d8db98a59b1573eba0066b39de4bb20668059db928bdce51e5e66620fdb1524e0dbc8d6d7598a01edb5496a4e0a2ac450dfc3d393a4c44394107b6e56cf8226108ebebbcabb742b45dbbce75a2cd391abf7d88d5c3d5f41b4f39b49e1b383801ce0c06cddfc822b56f06f1d212266c205e82b5fbb3c8eeaa745dbc9f22a5e0100fee02151d9ec4a32ee9979ddaf2f6c676e4fc1c9f69a81620162d7479886d063f6b75900b6310248454b9cbf333f789a67d8358e7f8da0b8c1cb63fbabe09d16e9013eb1cc164afd355bd85d49695bd78daee5a1cf2c8cf119f273c401894ac144f2b5fe6b25293525917743902ddbfb1bcd2704449808e847c7d65828a1602e242856b733b5cf49901e3b8cea2320e545449df2a5a4078a68d670219b609c3d60748127f1ea5faeed11ecb9ff997a9d1165439ae8523577557b2214eebeaba5d0a83d23040eda4666c07320e615f01b8981ad1213cb22876d0b898851a02d16c11b4dd66b2bbdd51367000d920723d367cc918dbc93975d463749f1262fa3d1592d1a7b6a90e49872017ff0ecf30bed5fefcf5db000ba4123d2134bc1b4ec3062541bb873a978afe6768f73f4d856c73ccdd892b0fa17fc6321de7c04ba20e08c10685531945b994977e42d09b9082029c41f610370710c2c18cbb42bb773cc42908bba5db5c0da6a0b473350fa9f9dc70673ea70566f84e641f6680948bc5b969ab74eefc86ace42f7dca5d2521a337f430625132e02d2c0ee2529c5f8f807d540cb33870b599d620dd1463b38d97b1236b66c5256884e36115f0ce306007a833f38c385df2486e8961aa504c9a195b14630af7dc5c1c9211bdf3ba29bb37dd413db5f6a528523ed21a86e437207ad709caed8b351491c3c7677dc22b6e8ff9b3ea4eb17be814ca7b086531ceb8083952dc1bf3fad24f514e1574f7312049aac1bb98bd1dc4696fe0b2c3f1e5260e409efb15918b55e6c4a305843f674f43687a9abd515db50086c814301e2c6bf090beccba4e31b3ca17512690e8b0ab907014b15f84d4da260a6a6f67be4981ee11b04598154df18c13c4152e0ba205d965420062a1b729eb4d0820129a782e32433cb2836dc90812c99a6f387856f680434bdf5d33b5e2c372e994b6f9321cf85b5bae19a5f14fc7390d6d2d2d086fa1d6dc83422927c8bade0ad54f039bf021c47aa447d5c8ec76b4ebfee434765f7c5be08fe64644d0e51e75da8ca5ec281f9c27206800471ddeef95e4244cedfaf6822f1c3a0c312ff372d283076759d54f964dfd88c3d4d36d7c8cac57512c790502cd350c6cd19f38bb588013d65632e8d1c5a2ecd56f464b4a187937ee04c69210056c61c84d58b71d34a3deb4a1a485c0319376768ac399740b57269318697193726673535c7b4afa2f503560297f819f6d1a8c6f9088fc632b9f1b830d1c9813637bccd2bcd8eff38ccb547b810e79a632db3b724336e02d5affe05e4c86370349b2059cb3729caa37dd3fd418e9092c8531ff844ad6a5850fa4e772606ed121541753f5020ee667ed80922cd6f23c223e1b2a478010171efd7165e38f61a98b6fef93445c65c0a632a64c19562987609c52d1293661fcf3f0d876ec357ca56398ea58d8b5e0f3ffccaa57e7ca75bc29ed95e16f64b6136488c35137d7617d7389da35e6c61d41e6de26fc93eb35d42975c82ce8b8fe315a795c3a4d918e102a1f7b9981fdc1751d54af6d6f0e8fad9beaf2f7a6dcdf1c7e84a2660a2331ae49ba8054f25eaf8e047c6098e54b10a2d46f9e6a7e359bdc890fa4476690731a535b05c7aa3409e8dd15ff9100a90b5d370e790d5828939d9309010abbbad476f430e02c892753bdb8319b0e1cba3d26f5cff40047507d99fdd0d8c5f08fa9591ddde4c6d46e70d10fe4775330f45e809166fc2ca1f69e12aa8d1b8c4422a0678e32a0cce1717b5d1f4f000bde01c1a4e64df34d5c4c7f2f5b157b2ea31fe66cc34ff986970bf9e4d698b7d1a8f92dd80111b2805a187d19f16ce9c750477c5c98ad3fbf09382f941e39d7d6fd380925f827d1affec33cd22dd5c26b72f36791b4b95c0e71b9ae0cb724f6022675b11a375a778be09fcca11b0188ec4b6a0501dca824ff38c6d051eef18c19cfdf62c7fc47334439d5cc1c0aa0d3c1b56e502360097c0b4c1d7e572509238a9da97944eff637db36e07f4401565ded95c74b2b62a370314aa0dfb0d246e7c5bc604094b887b766b74cb0c7b90f682e26863bd0995c43575cc2ab77c94e1638ef600148c6386a54675d5ad40caf0ffa504d9c71e41d33ded97ae691af75d1870d529c569a596e13101861a8b80f2f5e486448c4eea8439ff0dee9196728454f378c2912f2053f8dc16da18ef47b702a3207da5f3c1865b792590ee507820f069e52739e8aa3c7874f294f4e818f9fcb665ed18495e7bb160c6493e314c411dbc19c7ac83e079a7534d3a6920d9f9bd237a31b14b311a35031c193cc7dc55970b6c1162eff62899463feea34eab252c3e1215ce651c67d2a0a4717a2fa31ad77bcfb3289a9382654b43a4ec8c08143712c2bb993645b9fb9d8f8659ca8b0b3bcec1574d706559b171e29cd5e3584bcf1e8ee0e9a4f38eca9c566dac54429985d793729003037c6b19cf89f34777d957cc9628a5493cbf00488614637fa0c3000a35baac3806d2a8c076d18799ab0709d41e1d980978a85e74a63d619da431d4c18858b3e94e2a89ae07e68d6fa3fee45cee0d546f0e6dc03ec424eb1636bdea12e90987bc6383507ae307bb962230e43294eba01c13b70b8f8ba865e8d819b7ddd2803c7d2893507528b93eef88fe2b4fba8094e08279e21813ec88d2ab56144cb657b2c3665a1fd78beeb9529579cb9b8331daecc2f1192cc9383087eb2894ffbea47550e23767bfd47293578bcad106b148cf732f536980e524705edb69379e6dd45e0edebd77059a5a980ae319d0f26e127418f3b54d3edee7bbc5fb19e7cd15ba5fad1827d167f8182e56617fb5dbbc96a9919ac3302cf0b4fc44dab08231632b77a5adba736f507a5478e47e9d5d7ee871d66f09e753ce72dfac072762d0d927682184ee14d340b3b9f19427133c25456248ad849f55d9bf622250078ddb5c0299b7f5b3b336147165b5073562efebb028c890a071e8284c21b2f43ba1ba5c595545b3f4e80d15a633e6dbcefe3e215fcf260261925e64ba4fb174dcf2a3114cafb4347a56f9f32bdbd08aaefa35c95c4b7349c1d444677a3e317286e3b0c3bc1a85293a660bc0bd204981e8defaedd7eed3cb94982d0812a4e099a986eace5ecbb0edd7a7b7bb4f444958998cb1d01f1f902913c1931ed62274607a253d03d1016a418cfb8c2c823666ea2858f9e2e31f7c15ebc876d87247d17039fa848fe5303c14000e74d1dc41055911c244edfd61bc5ea95803f5a945df84204d5fb4cb59d630207bc9f0a35537f7d746f0b0c2cc5baf4e8a6a40ec07fb8b19fea7afb54965c5189d6fdecc07dafba8d32304024cd677f6fb3a4a77f10579073f98aa98e82e9a3961e8bab0e5ccbafe10bfd7f462cdee11698e4a7743d817af8f8796d4481e508b109a44f229f3b05839e0b166bbbd22f5b91a1dde42118d75c0e33e5118aff79a3cb74c2311616157b8779c64d92d3c34caf2b326a5f86239c5b17a295516661c09c0e747022cdec5f9416b623f4d29cff0baa34322f09f6de5430982e385eb49eb4d81d729b7ed2b16a86fdebdc35c5ab8c4c45d09228f7e27179e573402b47dab9ce86ccad29c423fabcc5e5960907d81f498413b1d6e90b030184c0c407ad6aef25d8eb328f95412bc7128e44c8c7e5f59b1ab695151dfa45cab1070e58380b583826e42697b40f5bb3e5847e428f5448d23da11e18a7eda374f7ba7f991ea654bb49ff0d5841764bd801b6f5838828c2f5a995cedf41dcee9e74016e7bb02e5a9410469d8ff2bebb4cdf81df5a3f0e0e95aa7147afa3d3495e24b1db171d62bcd8c82944946ef64ac946619a84f688364036dd6059c021215d1f1aa8c222441e098e70c80c66177e6104a505778f97b6e7a36f87609d0690a8d1a1773c880c8e3e57f14ac9e99a2af9f55f62c47bf8d53c8c0089c3dd1dcda658a64e6fec3667982e4a68a0a6e7815ef8c2b00964caab3af8d4c647c222d0d09980f463837353c44dd8a94b6fb42805038dc35543c69cdc97f0214a21f92168d739325d8880a8cdbe7125379aad98740cb8d86d04bf68ef6c940b3a375c484a06e955be43769156965df6af34dc2c735b03706a2e9ed5bf5fa7f74f6d1761989d9f2a079b34c7dd3b0d054c43a0e7facb39cc535466d269549fff4f1fed29b6a165ee20e405fbeb661811022ce6138982e2194a76c1076457d870e5086870e457d95b4e1b1503e15e83a9003acc2ea0a34be989e8cb38c57dcc0233055e80dbb5968a1e28894bf60a429a8cf42b01b7049d83968819ae5c12890a1215f7de000b704edc78376da76d9226af3f649783e3eb7a01bc9b51a9f28dd09c3cf20f33f44a3911ca00c92fab1ba2b2a7563986f49e6391528f2d98066ce2a019c3e4b0333bec77f3f8aeba4f237f03fb9c701f54a37f080914dcee9e409a2d1a1c177df74cd41037ce8dffac09cdcf6e22191e3f9cf25d9652c0257a5824efaa47ddb1341f1b2dc50db4be9a92278c9098de8426e257e1ed80cfd283c0122336897b98f1c991f46ebcaef95d8b37b35e7b910f4b1fb86d752ce8399c8430c8efd05b1b34027b27f0cb8c51535530c25b544072ab4", 0x1000}, {&(0x7f0000000040)="6ee0abd772d62eaed296a92a201b7a9b8335f590c0b4c04e1b0ab606d84e0c91c272ee67751e24e603d893668efa490f944f27685671", 0x36}, {&(0x7f0000000100)="0b11471a6054564be879474cdfbe6d050c1a6ae8cbdac55daa4d02aba9a36b3bb6303d8f9b1b8a980e87c8f227c3fb9380f1b387bcaeb9de0bd85894136dc3a34cdda0f96005860c9352acad8e75c11c932c8b593136b3e70acfb3906f14114ab6b1040a74638dae2f986d462518ff23f02b29f240075d0ea270e0e13938493c24ce14f07745", 0x86}, {0x0}, {&(0x7f0000001480)="15ec8abaa66eb2a62a3db54294550bf4e85b24a216a4106900a541c8f4998c69381c833d15a6a5d07385e1e6cf04a09c8c76664f80d99706f2d7fafe0360516ab64cb11431", 0x45}], 0x5}, 0x408c000) 278.694378ms ago: executing program 2 (id=2087): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r3], 0x50}}, 0x2) 220.076239ms ago: executing program 5 (id=2088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @remote}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000400)={0x9b, 0x8001, 0x3, 0x9}, 0x8) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x9, 0x4, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 166.855656ms ago: executing program 0 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x2, 0x9, 0x7, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x2, 0x4, 0x10, 0x4], 0x3, [0x8b, 0x101, 0xad1c, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x5, 0xb, 0x3, 0x2, 0x6, 0xd, 0x100], [0xfff1, 0x1, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x1, 0x2c, 0x40, 0x100, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 124.236016ms ago: executing program 1 (id=2090): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0x8000201e}) 0s ago: executing program 1 (id=2091): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff05, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x120, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xd4, 0x8, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0xffffffffffffffce}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x4c, &(0x7f0000000580)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0xd8, @dev={0xfe, 0x80, '\x00', 0xf}, 0xfffffdc3}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000680)={r7, 0x3, 0x1d, "bd348187745e36f09818804d817d15f3928daf90e06b7d1a2e70c03b82"}, 0x25) close(r4) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r8, 0x11e, 0x17, 0x0, 0x0) connect$unix(r8, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0xf4, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) kernel console output (not intermixed with test programs): syzkaller0 mtu (1514) ! [ 197.096438][ T9160] tipc: Resetting bearer [ 197.134042][ T9159] tipc: Disabling bearer [ 197.492009][ T11] block nbd2: Possible stuck request ffff888024c2e000: control (read@0,1024B). Runtime 30 seconds [ 197.503787][ T11] block nbd2: Possible stuck request ffff888024c2e1c0: control (read@1024,1024B). Runtime 30 seconds [ 197.515988][ T11] block nbd2: Possible stuck request ffff888024c2e380: control (read@2048,1024B). Runtime 30 seconds [ 197.527055][ T11] block nbd2: Possible stuck request ffff888024c2e540: control (read@3072,1024B). Runtime 30 seconds [ 197.724139][ T9187] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 197.920246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 197.928385][ C0] lec:lec_tx_timeout: lec0 [ 197.933162][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 198.863679][ T9238] lo: entered allmulticast mode [ 198.912583][ T9238] dvmrp6: entered allmulticast mode [ 198.923239][ T9236] lo: left allmulticast mode [ 199.185093][ T9254] syzkaller1: entered promiscuous mode [ 199.200393][ T9254] syzkaller1: entered allmulticast mode [ 200.940341][ T9313] erspan0 speed is unknown, defaulting to 1000 [ 201.067455][ T9313] erspan0 speed is unknown, defaulting to 1000 [ 201.074933][ T9313] erspan0 speed is unknown, defaulting to 1000 [ 201.249615][ T9323] tipc: Enabled bearer , priority 0 [ 201.337843][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.344583][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.382360][ T9323] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 201.405648][ T9323] tipc: Resetting bearer [ 201.415402][ T9313] infiniband syz2: set active [ 201.420676][ T6749] erspan0 speed is unknown, defaulting to 1000 [ 201.427311][ T9313] infiniband syz2: added erspan0 [ 201.508667][ T9322] tipc: Disabling bearer [ 201.515855][ T9313] RDS/IB: syz2: added [ 201.515940][ T9313] smc: adding ib device syz2 with port count 1 [ 201.515963][ T9313] smc: ib device syz2 port 1 has no pnetid [ 201.554228][ T6746] erspan0 speed is unknown, defaulting to 1000 [ 201.562984][ T9313] erspan0 speed is unknown, defaulting to 1000 [ 202.940246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 202.948310][ C0] lec:lec_tx_timeout: lec0 [ 202.953092][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 204.255217][ T9313] erspan0 speed is unknown, defaulting to 1000 [ 204.539088][ T9358] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 204.582094][ T9358] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 204.651925][ T9360] tipc: Enabled bearer , priority 0 [ 204.682450][ T9360] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 204.724711][ T9360] tipc: Resetting bearer [ 204.761277][ T9359] tipc: Disabling bearer [ 204.996430][ T9370] netlink: 156 bytes leftover after parsing attributes in process `syz.4.924'. [ 205.004354][ T9313] erspan0 speed is unknown, defaulting to 1000 [ 205.157055][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'. [ 205.274561][ T9383] syzkaller0: entered promiscuous mode [ 205.287076][ T9383] syzkaller0: entered allmulticast mode [ 205.611616][ T9389] syzkaller0: entered promiscuous mode [ 205.617196][ T9389] syzkaller0: entered allmulticast mode [ 205.624102][ T9313] erspan0 speed is unknown, defaulting to 1000 [ 206.011773][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 207.275244][ T9313] erspan0 speed is unknown, defaulting to 1000 [ 207.921188][ T8211] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.933835][ T8211] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.955537][ T9440] tipc: Enabled bearer , priority 0 [ 207.962270][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 207.962334][ C0] lec:lec_tx_timeout: lec0 [ 207.970573][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 208.064358][ T8211] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.083679][ T8211] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.296977][ T9441] syzkaller0: entered promiscuous mode [ 208.302795][ T9441] syzkaller0: entered allmulticast mode [ 208.309113][ T9441] tipc: Resetting bearer [ 208.404218][ T9436] tipc: Resetting bearer [ 208.966479][ T6770] tipc: Node number set to 1126538631 [ 210.124061][ T9436] tipc: Disabling bearer [ 210.148059][ T9461] tipc: Enabling of bearer rejected, failed to enable media [ 210.239535][ T9488] syzkaller0: entered promiscuous mode [ 210.259401][ T9488] syzkaller0: entered allmulticast mode [ 210.472066][ T9496] netlink: 72 bytes leftover after parsing attributes in process `syz.4.950'. [ 210.645219][ T9502] xt_ecn: cannot match TCP bits for non-tcp packets [ 210.915958][ T9517] tipc: Enabled bearer , priority 0 [ 210.975426][ T9517] tipc: Resetting bearer [ 211.120961][ T9516] tipc: Disabling bearer [ 211.201313][ T9531] tipc: Enabling of bearer rejected, failed to enable media [ 211.433135][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 211.447943][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 211.468794][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 211.639599][ T9551] tipc: Enabled bearer , priority 0 [ 211.659939][ T9554] syzkaller0: entered promiscuous mode [ 211.666488][ T9554] syzkaller0: entered allmulticast mode [ 211.682548][ T9551] syzkaller0: entered promiscuous mode [ 211.699410][ T9551] syzkaller0: entered allmulticast mode [ 211.743302][ T9550] tipc: Resetting bearer [ 211.782732][ T9550] tipc: Disabling bearer [ 212.483177][ T9593] syzkaller0: entered promiscuous mode [ 212.505401][ T9593] syzkaller0: entered allmulticast mode [ 212.574530][ T9595] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 212.821637][ T9603] tipc: Enabled bearer , priority 0 [ 212.829274][ T9605] syzkaller0: entered promiscuous mode [ 212.831778][ T9610] netlink: 64 bytes leftover after parsing attributes in process `syz.2.994'. [ 212.848897][ T9605] syzkaller0: entered allmulticast mode [ 212.871702][ T9602] tipc: Resetting bearer [ 212.901449][ T9602] tipc: Disabling bearer [ 212.942054][ T9612] netlink: 'syz.3.993': attribute type 12 has an invalid length. [ 212.980247][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 212.988385][ C0] lec:lec_tx_timeout: lec0 [ 212.993387][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 213.729995][ T9639] syzkaller0: entered promiscuous mode [ 213.749328][ T9639] syzkaller0: entered allmulticast mode [ 213.819330][ T9642] tipc: Enabled bearer , priority 0 [ 213.844638][ T9642] syzkaller0: entered promiscuous mode [ 213.850621][ T9642] syzkaller0: entered allmulticast mode [ 213.874114][ T9644] syzkaller0: entered promiscuous mode [ 213.879747][ T9644] syzkaller0: entered allmulticast mode [ 213.910431][ T9641] tipc: Resetting bearer [ 213.973088][ T9641] tipc: Disabling bearer [ 214.312619][ T9664] syzkaller0: entered promiscuous mode [ 214.328410][ T9664] syzkaller0: entered allmulticast mode [ 214.478081][ T9669] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1015'. [ 214.637326][ T9674] syzkaller0: entered promiscuous mode [ 214.645684][ T9674] syzkaller0: entered allmulticast mode [ 214.657465][ T9676] syzkaller0: entered promiscuous mode [ 214.665071][ T9676] syzkaller0: entered allmulticast mode [ 214.708063][ T9676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 214.858918][ T9684] tipc: Enabled bearer , priority 0 [ 214.867505][ T9684] syzkaller0: entered promiscuous mode [ 214.874051][ T9684] syzkaller0: entered allmulticast mode [ 214.929835][ T9683] tipc: Resetting bearer [ 214.996410][ T9683] tipc: Disabling bearer [ 216.020871][ T9735] tipc: Enabled bearer , priority 0 [ 216.048374][ T9735] syzkaller0: entered promiscuous mode [ 216.062225][ T9735] syzkaller0: entered allmulticast mode [ 216.096905][ T9733] tipc: Resetting bearer [ 216.116646][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'. [ 216.168930][ T9733] tipc: Disabling bearer [ 217.399149][ T9779] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1054'. [ 217.451454][ T9780] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1054'. [ 218.000238][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 218.008581][ C0] lec:lec_tx_timeout: lec0 [ 218.013488][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 218.390901][ T9779] gretap0: entered promiscuous mode [ 218.411190][ T9780] 0ªî{X¹¦: renamed from gretap0 [ 218.420800][ T9780] 0ªî{X¹¦: left promiscuous mode [ 218.426029][ T9780] 0ªî{X¹¦: entered allmulticast mode [ 218.454189][ T9780] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 218.622137][ T9796] syzkaller0: entered promiscuous mode [ 218.627692][ T9796] syzkaller0: entered allmulticast mode [ 218.679793][ T9804] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 219.581381][ T9840] tipc: Enabled bearer , priority 0 [ 219.610501][ T9840] tipc: Resetting bearer [ 219.637299][ T9839] tipc: Disabling bearer [ 219.792092][ T9848] syzkaller0: entered promiscuous mode [ 219.797674][ T9848] syzkaller0: entered allmulticast mode [ 220.429643][ T9854] erspan0 speed is unknown, defaulting to 1000 [ 220.698050][ T9881] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 221.136375][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 222.168041][ T9898] tipc: Enabling of bearer rejected, failed to enable media [ 223.020229][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 223.028510][ C0] lec:lec_tx_timeout: lec0 [ 223.034406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 224.723438][ T9963] syzkaller0: entered promiscuous mode [ 224.732884][ T9963] syzkaller0: entered allmulticast mode [ 224.758809][ T9967] tipc: Enabled bearer , priority 0 [ 224.826408][ T9973] FAULT_INJECTION: forcing a failure. [ 224.826408][ T9973] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 224.844433][ T9973] CPU: 1 UID: 0 PID: 9973 Comm: syz.2.1112 Not tainted syzkaller #0 PREEMPT(full) [ 224.844462][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.844482][ T9973] Call Trace: [ 224.844491][ T9973] [ 224.844501][ T9973] dump_stack_lvl+0x189/0x250 [ 224.844556][ T9973] ? __pfx____ratelimit+0x10/0x10 [ 224.844591][ T9973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.844620][ T9973] ? __pfx__printk+0x10/0x10 [ 224.844642][ T9973] ? __might_fault+0xb0/0x130 [ 224.844678][ T9973] should_fail_ex+0x414/0x560 [ 224.844710][ T9973] _copy_from_user+0x2d/0xb0 [ 224.844733][ T9973] __sys_bpf+0x1e3/0x860 [ 224.844752][ T9973] ? __pfx___sys_bpf+0x10/0x10 [ 224.844782][ T9973] ? ksys_write+0x22a/0x250 [ 224.844809][ T9973] ? __pfx_ksys_write+0x10/0x10 [ 224.844838][ T9973] __x64_sys_bpf+0x7c/0x90 [ 224.844865][ T9973] do_syscall_64+0xfa/0xfa0 [ 224.844892][ T9973] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.844919][ T9973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.844936][ T9973] ? clear_bhb_loop+0x60/0xb0 [ 224.844956][ T9973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.844973][ T9973] RIP: 0033:0x7f5ea678f6c9 [ 224.844997][ T9973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.845012][ T9973] RSP: 002b:00007f5ea75dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.845037][ T9973] RAX: ffffffffffffffda RBX: 00007f5ea69e5fa0 RCX: 00007f5ea678f6c9 [ 224.845049][ T9973] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 224.845060][ T9973] RBP: 00007f5ea75dd090 R08: 0000000000000000 R09: 0000000000000000 [ 224.845070][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.845080][ T9973] R13: 00007f5ea69e6038 R14: 00007f5ea69e5fa0 R15: 00007fff069be928 [ 224.845107][ T9973] [ 224.845585][ T9966] syzkaller0: entered promiscuous mode [ 225.038286][ T9966] syzkaller0: entered allmulticast mode [ 225.046343][ T9968] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 225.064811][ T9975] tipc: Resetting bearer [ 225.088696][ T9965] tipc: Disabling bearer [ 225.549213][T10000] FAULT_INJECTION: forcing a failure. [ 225.549213][T10000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.575626][T10000] CPU: 1 UID: 0 PID: 10000 Comm: syz.1.1119 Not tainted syzkaller #0 PREEMPT(full) [ 225.575656][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.575669][T10000] Call Trace: [ 225.575677][T10000] [ 225.575686][T10000] dump_stack_lvl+0x189/0x250 [ 225.575720][T10000] ? __pfx____ratelimit+0x10/0x10 [ 225.575749][T10000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.575777][T10000] ? __pfx__printk+0x10/0x10 [ 225.575799][T10000] ? __might_fault+0xb0/0x130 [ 225.575842][T10000] should_fail_ex+0x414/0x560 [ 225.575881][T10000] _copy_from_user+0x2d/0xb0 [ 225.575909][T10000] __sys_bind+0x199/0x3e0 [ 225.575945][T10000] ? __pfx___sys_bind+0x10/0x10 [ 225.575990][T10000] ? __pfx_ksys_write+0x10/0x10 [ 225.576027][T10000] __x64_sys_bind+0x7a/0x90 [ 225.576060][T10000] do_syscall_64+0xfa/0xfa0 [ 225.576089][T10000] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.576119][T10000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.576140][T10000] ? clear_bhb_loop+0x60/0xb0 [ 225.576191][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.576216][T10000] RIP: 0033:0x7f3b6658f6c9 [ 225.576239][T10000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.576266][T10000] RSP: 002b:00007f3b67407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 225.576289][T10000] RAX: ffffffffffffffda RBX: 00007f3b667e5fa0 RCX: 00007f3b6658f6c9 [ 225.576315][T10000] RDX: 0000000000000024 RSI: 00002000000001c0 RDI: 0000000000000003 [ 225.576328][T10000] RBP: 00007f3b67407090 R08: 0000000000000000 R09: 0000000000000000 [ 225.576341][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.576364][T10000] R13: 00007f3b667e6038 R14: 00007f3b667e5fa0 R15: 00007ffc153f87d8 [ 225.576400][T10000] [ 225.907177][T10005] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 226.143042][T10011] syzkaller0: entered promiscuous mode [ 226.152120][T10011] syzkaller0: entered allmulticast mode [ 226.270412][T10013] syzkaller0: entered promiscuous mode [ 226.286325][T10013] syzkaller0: entered allmulticast mode [ 226.334801][T10024] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.408968][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 226.421002][T10029] netlink: 'syz.1.1130': attribute type 4 has an invalid length. [ 226.476066][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 226.492483][T10032] FAULT_INJECTION: forcing a failure. [ 226.492483][T10032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.516608][T10032] CPU: 0 UID: 0 PID: 10032 Comm: syz.3.1131 Not tainted syzkaller #0 PREEMPT(full) [ 226.516639][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.516652][T10032] Call Trace: [ 226.516661][T10032] [ 226.516670][T10032] dump_stack_lvl+0x189/0x250 [ 226.516706][T10032] ? __pfx____ratelimit+0x10/0x10 [ 226.516735][T10032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.516764][T10032] ? __pfx__printk+0x10/0x10 [ 226.516786][T10032] ? __might_fault+0xb0/0x130 [ 226.516826][T10032] should_fail_ex+0x414/0x560 [ 226.516865][T10032] _copy_from_user+0x2d/0xb0 [ 226.516894][T10032] ___sys_recvmsg+0x12e/0x510 [ 226.516925][T10032] ? __pfx____sys_recvmsg+0x10/0x10 [ 226.516996][T10032] ? __fget_files+0x3a0/0x420 [ 226.517029][T10032] do_recvmmsg+0x307/0x770 [ 226.517062][T10032] ? __pfx_do_recvmmsg+0x10/0x10 [ 226.517100][T10032] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 226.517152][T10032] __x64_sys_recvmmsg+0x190/0x240 [ 226.517180][T10032] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 226.517217][T10032] ? do_syscall_64+0xbe/0xfa0 [ 226.517252][T10032] do_syscall_64+0xfa/0xfa0 [ 226.517280][T10032] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.517309][T10032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.517330][T10032] ? clear_bhb_loop+0x60/0xb0 [ 226.517355][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.517374][T10032] RIP: 0033:0x7f0f2798f6c9 [ 226.517391][T10032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.517407][T10032] RSP: 002b:00007f0f2874e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 226.517429][T10032] RAX: ffffffffffffffda RBX: 00007f0f27be5fa0 RCX: 00007f0f2798f6c9 [ 226.517442][T10032] RDX: 0000000000000001 RSI: 00002000000057c0 RDI: 0000000000000003 [ 226.517455][T10032] RBP: 00007f0f2874e090 R08: 0000000000000000 R09: 0000000000000000 [ 226.517465][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.517477][T10032] R13: 00007f0f27be6038 R14: 00007f0f27be5fa0 R15: 00007fffc8f681d8 [ 226.517509][T10032] [ 227.073423][T10054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1136'. [ 227.335623][T10065] FAULT_INJECTION: forcing a failure. [ 227.335623][T10065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.341492][T10064] tipc: Enabled bearer , priority 0 [ 227.369962][T10064] syzkaller0: entered promiscuous mode [ 227.371950][T10065] CPU: 0 UID: 0 PID: 10065 Comm: syz.3.1139 Not tainted syzkaller #0 PREEMPT(full) [ 227.371982][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.371997][T10065] Call Trace: [ 227.372007][T10065] [ 227.372017][T10065] dump_stack_lvl+0x189/0x250 [ 227.372057][T10065] ? __pfx____ratelimit+0x10/0x10 [ 227.372091][T10065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.372258][T10065] ? __pfx__printk+0x10/0x10 [ 227.372296][T10065] ? __might_fault+0xb0/0x130 [ 227.372344][T10065] should_fail_ex+0x414/0x560 [ 227.372389][T10065] _copy_from_user+0x2d/0xb0 [ 227.372422][T10065] ___sys_sendmsg+0x158/0x2a0 [ 227.372453][T10065] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.372521][T10065] ? __fget_files+0x2a/0x420 [ 227.372545][T10065] ? __fget_files+0x3a0/0x420 [ 227.372579][T10065] __x64_sys_sendmsg+0x19b/0x260 [ 227.372611][T10065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.372648][T10065] ? __pfx_ksys_write+0x10/0x10 [ 227.372688][T10065] ? do_syscall_64+0xbe/0xfa0 [ 227.372727][T10065] do_syscall_64+0xfa/0xfa0 [ 227.372759][T10065] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.372793][T10065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.372822][T10065] ? clear_bhb_loop+0x60/0xb0 [ 227.372851][T10065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.372876][T10065] RIP: 0033:0x7f0f2798f6c9 [ 227.372900][T10065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.372922][T10065] RSP: 002b:00007f0f2874e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.372949][T10065] RAX: ffffffffffffffda RBX: 00007f0f27be5fa0 RCX: 00007f0f2798f6c9 [ 227.372967][T10065] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 227.372983][T10065] RBP: 00007f0f2874e090 R08: 0000000000000000 R09: 0000000000000000 [ 227.372996][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.373011][T10065] R13: 00007f0f27be6038 R14: 00007f0f27be5fa0 R15: 00007fffc8f681d8 [ 227.373050][T10065] [ 227.579367][ T11] block nbd2: Possible stuck request ffff888024c2e000: control (read@0,1024B). Runtime 60 seconds [ 227.594632][ T11] block nbd2: Possible stuck request ffff888024c2e1c0: control (read@1024,1024B). Runtime 60 seconds [ 227.612236][ T11] block nbd2: Possible stuck request ffff888024c2e380: control (read@2048,1024B). Runtime 60 seconds [ 227.641436][ T11] block nbd2: Possible stuck request ffff888024c2e540: control (read@3072,1024B). Runtime 60 seconds [ 227.644969][T10064] syzkaller0: entered allmulticast mode [ 227.752075][T10064] tipc: Resetting bearer [ 227.784024][T10063] tipc: Resetting bearer [ 227.793656][T10077] FAULT_INJECTION: forcing a failure. [ 227.793656][T10077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.847887][T10077] CPU: 1 UID: 0 PID: 10077 Comm: syz.1.1142 Not tainted syzkaller #0 PREEMPT(full) [ 227.847917][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.847931][T10077] Call Trace: [ 227.847939][T10077] [ 227.847949][T10077] dump_stack_lvl+0x189/0x250 [ 227.847984][T10077] ? __pfx____ratelimit+0x10/0x10 [ 227.848012][T10077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.848052][T10077] ? __pfx__printk+0x10/0x10 [ 227.848086][T10077] should_fail_ex+0x414/0x560 [ 227.848122][T10077] _copy_to_user+0x31/0xb0 [ 227.848153][T10077] simple_read_from_buffer+0xe1/0x170 [ 227.848190][T10077] proc_fail_nth_read+0x1b3/0x220 [ 227.848221][T10077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.848252][T10077] ? rw_verify_area+0x2a6/0x4d0 [ 227.848280][T10077] ? __lock_acquire+0xab9/0xd20 [ 227.848300][T10077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.848327][T10077] vfs_read+0x200/0xa30 [ 227.848355][T10077] ? fdget_pos+0x247/0x320 [ 227.848379][T10077] ? __pfx___mutex_lock+0x10/0x10 [ 227.848411][T10077] ? __pfx_vfs_read+0x10/0x10 [ 227.848442][T10077] ? __fget_files+0x2a/0x420 [ 227.848467][T10077] ? __fget_files+0x3a0/0x420 [ 227.848485][T10077] ? __fget_files+0x2a/0x420 [ 227.848516][T10077] ksys_read+0x145/0x250 [ 227.848547][T10077] ? __pfx_ksys_read+0x10/0x10 [ 227.848579][T10077] ? do_syscall_64+0xbe/0xfa0 [ 227.848614][T10077] do_syscall_64+0xfa/0xfa0 [ 227.848642][T10077] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.848671][T10077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.848692][T10077] ? clear_bhb_loop+0x60/0xb0 [ 227.848718][T10077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.848738][T10077] RIP: 0033:0x7f3b6658e0dc [ 227.848758][T10077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 227.848777][T10077] RSP: 002b:00007f3b67407030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.848799][T10077] RAX: ffffffffffffffda RBX: 00007f3b667e5fa0 RCX: 00007f3b6658e0dc [ 227.848815][T10077] RDX: 000000000000000f RSI: 00007f3b674070a0 RDI: 0000000000000004 [ 227.848828][T10077] RBP: 00007f3b67407090 R08: 0000000000000000 R09: 0000000000000012 [ 227.848841][T10077] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 227.848854][T10077] R13: 00007f3b667e6038 R14: 00007f3b667e5fa0 R15: 00007ffc153f87d8 [ 227.848890][T10077] [ 228.135409][T10063] tipc: Disabling bearer [ 228.214116][T10071] syzkaller0: entered promiscuous mode [ 228.219722][T10071] syzkaller0: entered allmulticast mode [ 228.336152][T10081] syzkaller0: entered promiscuous mode [ 228.360290][T10081] syzkaller0: entered allmulticast mode [ 228.406386][T10084] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 228.558398][T10094] FAULT_INJECTION: forcing a failure. [ 228.558398][T10094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.594994][T10099] FAULT_INJECTION: forcing a failure. [ 228.594994][T10099] name failslab, interval 1, probability 0, space 0, times 1 [ 228.601647][T10094] CPU: 1 UID: 0 PID: 10094 Comm: syz.2.1148 Not tainted syzkaller #0 PREEMPT(full) [ 228.601681][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.601697][T10094] Call Trace: [ 228.601707][T10094] [ 228.601717][T10094] dump_stack_lvl+0x189/0x250 [ 228.601759][T10094] ? __pfx____ratelimit+0x10/0x10 [ 228.601793][T10094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.601825][T10094] ? __pfx__printk+0x10/0x10 [ 228.601851][T10094] ? __might_fault+0xb0/0x130 [ 228.601898][T10094] should_fail_ex+0x414/0x560 [ 228.601952][T10094] _copy_from_user+0x2d/0xb0 [ 228.601985][T10094] __sys_bpf+0x1e3/0x860 [ 228.602012][T10094] ? __pfx___sys_bpf+0x10/0x10 [ 228.602055][T10094] ? ksys_write+0x22a/0x250 [ 228.602094][T10094] ? __pfx_ksys_write+0x10/0x10 [ 228.602136][T10094] __x64_sys_bpf+0x7c/0x90 [ 228.602174][T10094] do_syscall_64+0xfa/0xfa0 [ 228.602207][T10094] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.602242][T10094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.602265][T10094] ? clear_bhb_loop+0x60/0xb0 [ 228.602296][T10094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.602318][T10094] RIP: 0033:0x7f5ea678f6c9 [ 228.602342][T10094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.602362][T10094] RSP: 002b:00007f5ea75dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.602387][T10094] RAX: ffffffffffffffda RBX: 00007f5ea69e5fa0 RCX: 00007f5ea678f6c9 [ 228.602404][T10094] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000011 [ 228.602419][T10094] RBP: 00007f5ea75dd090 R08: 0000000000000000 R09: 0000000000000000 [ 228.602434][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.602447][T10094] R13: 00007f5ea69e6038 R14: 00007f5ea69e5fa0 R15: 00007fff069be928 [ 228.602488][T10094] [ 228.795282][T10099] CPU: 0 UID: 0 PID: 10099 Comm: syz.3.1150 Not tainted syzkaller #0 PREEMPT(full) [ 228.795309][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 228.795321][T10099] Call Trace: [ 228.795328][T10099] [ 228.795336][T10099] dump_stack_lvl+0x189/0x250 [ 228.795368][T10099] ? __pfx____ratelimit+0x10/0x10 [ 228.795396][T10099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.795425][T10099] ? __pfx__printk+0x10/0x10 [ 228.795453][T10099] ? __pfx___might_resched+0x10/0x10 [ 228.795476][T10099] ? fs_reclaim_acquire+0x7d/0x100 [ 228.795515][T10099] should_fail_ex+0x414/0x560 [ 228.795552][T10099] should_failslab+0xa8/0x100 [ 228.795576][T10099] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 228.795609][T10099] ? __get_vm_area_node+0x13f/0x300 [ 228.795644][T10099] __get_vm_area_node+0x13f/0x300 [ 228.795678][T10099] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 228.795710][T10099] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 228.795735][T10099] ? __lock_acquire+0xab9/0xd20 [ 228.795770][T10099] ? __lock_acquire+0xab9/0xd20 [ 228.795797][T10099] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.795828][T10099] ? __might_fault+0xb0/0x130 [ 228.795865][T10099] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 228.795884][T10099] __vmalloc_noprof+0xb1/0xf0 [ 228.795914][T10099] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 228.795939][T10099] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 228.795966][T10099] bpf_prog_alloc+0x3c/0x1a0 [ 228.795990][T10099] bpf_prog_load+0x735/0x19e0 [ 228.796024][T10099] ? __pfx_bpf_prog_load+0x10/0x10 [ 228.796070][T10099] ? bpf_lsm_bpf+0x9/0x20 [ 228.796093][T10099] ? security_bpf+0x7e/0x300 [ 228.796123][T10099] __sys_bpf+0x507/0x860 [ 228.796144][T10099] ? __pfx___sys_bpf+0x10/0x10 [ 228.796192][T10099] ? ksys_write+0x22a/0x250 [ 228.796225][T10099] ? __pfx_ksys_write+0x10/0x10 [ 228.796262][T10099] __x64_sys_bpf+0x7c/0x90 [ 228.796295][T10099] do_syscall_64+0xfa/0xfa0 [ 228.796323][T10099] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.796353][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.796374][T10099] ? clear_bhb_loop+0x60/0xb0 [ 228.796399][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.796420][T10099] RIP: 0033:0x7f0f2798f6c9 [ 228.796438][T10099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.796456][T10099] RSP: 002b:00007f0f2874e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.796478][T10099] RAX: ffffffffffffffda RBX: 00007f0f27be5fa0 RCX: 00007f0f2798f6c9 [ 228.796494][T10099] RDX: 000000000000002a RSI: 0000200000000240 RDI: 0000000000000005 [ 228.796507][T10099] RBP: 00007f0f2874e090 R08: 0000000000000000 R09: 0000000000000000 [ 228.796520][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.796532][T10099] R13: 00007f0f27be6038 R14: 00007f0f27be5fa0 R15: 00007fffc8f681d8 [ 228.796566][T10099] [ 228.796879][T10099] syz.3.1150: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 228.854765][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 228.854801][ C0] lec:lec_tx_timeout: lec0 [ 228.864534][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 229.120022][T10099] ,cpuset=/,mems_allowed=0-1 [ 229.130782][T10099] CPU: 0 UID: 0 PID: 10099 Comm: syz.3.1150 Not tainted syzkaller #0 PREEMPT(full) [ 229.130811][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.130824][T10099] Call Trace: [ 229.130832][T10099] [ 229.130841][T10099] dump_stack_lvl+0x189/0x250 [ 229.130879][T10099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.130909][T10099] ? __pfx__printk+0x10/0x10 [ 229.130931][T10099] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 229.130961][T10099] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 229.130993][T10099] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 229.131025][T10099] warn_alloc+0x214/0x310 [ 229.131064][T10099] ? __pfx_warn_alloc+0x10/0x10 [ 229.131107][T10099] ? __get_vm_area_node+0x2b5/0x300 [ 229.131154][T10099] __vmalloc_node_range_noprof+0x331/0x12d0 [ 229.131189][T10099] ? __lock_acquire+0xab9/0xd20 [ 229.131226][T10099] ? __lock_acquire+0xab9/0xd20 [ 229.131254][T10099] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.131286][T10099] ? __might_fault+0xb0/0x130 [ 229.131324][T10099] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 229.131345][T10099] __vmalloc_noprof+0xb1/0xf0 [ 229.131375][T10099] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 229.131401][T10099] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 229.131428][T10099] bpf_prog_alloc+0x3c/0x1a0 [ 229.131453][T10099] bpf_prog_load+0x735/0x19e0 [ 229.131488][T10099] ? __pfx_bpf_prog_load+0x10/0x10 [ 229.131535][T10099] ? bpf_lsm_bpf+0x9/0x20 [ 229.131558][T10099] ? security_bpf+0x7e/0x300 [ 229.131589][T10099] __sys_bpf+0x507/0x860 [ 229.131612][T10099] ? __pfx___sys_bpf+0x10/0x10 [ 229.131650][T10099] ? ksys_write+0x22a/0x250 [ 229.131685][T10099] ? __pfx_ksys_write+0x10/0x10 [ 229.131721][T10099] __x64_sys_bpf+0x7c/0x90 [ 229.131753][T10099] do_syscall_64+0xfa/0xfa0 [ 229.131782][T10099] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.131811][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.131841][T10099] ? clear_bhb_loop+0x60/0xb0 [ 229.131867][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.131888][T10099] RIP: 0033:0x7f0f2798f6c9 [ 229.131907][T10099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.131924][T10099] RSP: 002b:00007f0f2874e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.131947][T10099] RAX: ffffffffffffffda RBX: 00007f0f27be5fa0 RCX: 00007f0f2798f6c9 [ 229.131962][T10099] RDX: 000000000000002a RSI: 0000200000000240 RDI: 0000000000000005 [ 229.131975][T10099] RBP: 00007f0f2874e090 R08: 0000000000000000 R09: 0000000000000000 [ 229.131988][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.132000][T10099] R13: 00007f0f27be6038 R14: 00007f0f27be5fa0 R15: 00007fffc8f681d8 [ 229.132035][T10099] [ 229.132053][T10099] Mem-Info: [ 229.440269][T10099] active_anon:6266 inactive_anon:0 isolated_anon:0 [ 229.440269][T10099] active_file:3564 inactive_file:39928 isolated_file:0 [ 229.440269][T10099] unevictable:768 dirty:326 writeback:0 [ 229.440269][T10099] slab_reclaimable:10466 slab_unreclaimable:103345 [ 229.440269][T10099] mapped:34703 shmem:1357 pagetables:1308 [ 229.440269][T10099] sec_pagetables:0 bounce:0 [ 229.440269][T10099] kernel_misc_reclaimable:0 [ 229.440269][T10099] free:1326995 free_pcp:11596 free_cma:0 [ 229.560273][T10099] Node 0 active_anon:24964kB inactive_anon:0kB active_file:14256kB inactive_file:159508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138912kB dirty:1300kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13316kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 229.629292][T10099] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 229.661300][T10099] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.698520][T10099] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 229.704485][T10099] Node 0 DMA32 free:1402316kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24964kB inactive_anon:0kB active_file:14256kB inactive_file:159508kB unevictable:1536kB writepending:1300kB zspages:0kB present:3129332kB managed:2565164kB mlocked:0kB bounce:0kB free_pcp:28636kB local_pcp:15728kB free_cma:0kB [ 229.738355][T10099] lowmem_reserve[]: 0 0 0 0 0 [ 229.744906][T10099] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.799605][T10099] lowmem_reserve[]: 0 0 0 0 0 [ 229.813710][T10099] Node 1 Normal free:3890096kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18624kB local_pcp:10720kB free_cma:0kB [ 229.870305][T10099] lowmem_reserve[]: 0 0 0 0 0 [ 229.875111][T10099] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.896340][T10099] Node 0 DMA32: 1179*4kB (UME) 649*8kB (UME) 225*16kB (UM) 108*32kB (UME) 44*64kB (UME) 16*128kB (UME) 24*256kB (UM) 32*512kB (UM) 8*1024kB (UE) 5*2048kB (UM) 327*4096kB (UM) = 1402180kB [ 229.927939][T10099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 229.940043][T10099] Node 1 Normal: 206*4kB (UME) 59*8kB (UME) 54*16kB (UME) 96*32kB (UME) 35*64kB (UME) 7*128kB (UME) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3890352kB [ 229.959185][T10099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.969260][T10099] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.985538][T10099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.995575][T10099] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.005197][T10099] 44862 total pagecache pages [ 230.009925][T10099] 0 pages in swap cache [ 230.014903][T10099] Free swap = 124996kB [ 230.019296][T10099] Total swap = 124996kB [ 230.024057][T10099] 2097051 pages RAM [ 230.027930][T10099] 0 pages HighMem/MovableOnly [ 230.034519][T10099] 424118 pages reserved [ 230.038725][T10099] 0 pages cma reserved [ 231.232692][T10133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.308515][T10138] tipc: Enabling of bearer rejected, failed to enable media [ 231.594017][T10149] syzkaller0: entered promiscuous mode [ 231.619993][T10149] syzkaller0: entered allmulticast mode [ 232.287494][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.297738][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.315446][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.345056][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.353171][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.408181][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.416211][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.425407][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.444954][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.459578][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.327522][T10149] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 233.352438][T10166] syzkaller0: entered promiscuous mode [ 233.358460][T10166] syzkaller0: entered allmulticast mode [ 233.601322][T10182] netlink: 'syz.1.1164': attribute type 13 has an invalid length. [ 233.673068][T10187] netlink: 'syz.1.1164': attribute type 30 has an invalid length. [ 233.872560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 233.880806][ C0] lec:lec_tx_timeout: lec0 [ 233.885566][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 234.055286][T10199] FAULT_INJECTION: forcing a failure. [ 234.055286][T10199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.075571][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.2.1170 Not tainted syzkaller #0 PREEMPT(full) [ 234.075602][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.075615][T10199] Call Trace: [ 234.075624][T10199] [ 234.075633][T10199] dump_stack_lvl+0x189/0x250 [ 234.075669][T10199] ? __pfx____ratelimit+0x10/0x10 [ 234.075698][T10199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.075728][T10199] ? __pfx__printk+0x10/0x10 [ 234.075750][T10199] ? __might_fault+0xb0/0x130 [ 234.075794][T10199] should_fail_ex+0x414/0x560 [ 234.075833][T10199] _copy_from_iter+0x1de/0x1790 [ 234.075865][T10199] ? rcu_is_watching+0x15/0xb0 [ 234.075895][T10199] ? kmalloc_reserve+0xbd/0x290 [ 234.075915][T10199] ? __pfx__copy_from_iter+0x10/0x10 [ 234.075941][T10199] ? __build_skb_around+0x262/0x3f0 [ 234.075978][T10199] ? netlink_sendmsg+0x642/0xb30 [ 234.075997][T10199] ? skb_put+0x11b/0x210 [ 234.076022][T10199] netlink_sendmsg+0x6b2/0xb30 [ 234.076053][T10199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.076078][T10199] ? aa_sock_msg_perm+0xf1/0x1d0 [ 234.076112][T10199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.076133][T10199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.076155][T10199] __sock_sendmsg+0x21c/0x270 [ 234.076209][T10199] ____sys_sendmsg+0x505/0x830 [ 234.076239][T10199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.076273][T10199] ? import_iovec+0x74/0xa0 [ 234.076303][T10199] ___sys_sendmsg+0x21f/0x2a0 [ 234.076329][T10199] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.076402][T10199] ? __fget_files+0x2a/0x420 [ 234.076422][T10199] ? __fget_files+0x3a0/0x420 [ 234.076462][T10199] __x64_sys_sendmsg+0x19b/0x260 [ 234.076489][T10199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.076523][T10199] ? __pfx_ksys_write+0x10/0x10 [ 234.076558][T10199] ? do_syscall_64+0xbe/0xfa0 [ 234.076592][T10199] do_syscall_64+0xfa/0xfa0 [ 234.076621][T10199] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.076653][T10199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.076674][T10199] ? clear_bhb_loop+0x60/0xb0 [ 234.076701][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.076722][T10199] RIP: 0033:0x7f5ea678f6c9 [ 234.076741][T10199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.076758][T10199] RSP: 002b:00007f5ea75dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.076781][T10199] RAX: ffffffffffffffda RBX: 00007f5ea69e5fa0 RCX: 00007f5ea678f6c9 [ 234.076796][T10199] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 234.076809][T10199] RBP: 00007f5ea75dd090 R08: 0000000000000000 R09: 0000000000000000 [ 234.076822][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.076834][T10199] R13: 00007f5ea69e6038 R14: 00007f5ea69e5fa0 R15: 00007fff069be928 [ 234.076870][T10199] [ 234.530558][ T5839] Bluetooth: hci3: command tx timeout [ 234.656818][T10182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.721452][T10187] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 234.743534][ T6749] erspan0 speed is unknown, defaulting to 1000 [ 234.761286][T10174] erspan0 speed is unknown, defaulting to 1000 [ 234.781955][T10209] tipc: Enabling of bearer rejected, failed to enable media [ 234.926002][T10216] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 235.039347][T10221] syzkaller0: entered promiscuous mode [ 235.070293][T10221] syzkaller0: entered allmulticast mode [ 235.108192][T10221] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 235.238143][T10228] syzkaller0: entered promiscuous mode [ 235.250042][T10228] syzkaller0: entered allmulticast mode [ 235.279867][T10228] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 235.751274][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 235.853755][T10248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1182'. [ 236.001402][T10257] FAULT_INJECTION: forcing a failure. [ 236.001402][T10257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.014573][T10257] CPU: 1 UID: 0 PID: 10257 Comm: syz.2.1184 Not tainted syzkaller #0 PREEMPT(full) [ 236.014599][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.014612][T10257] Call Trace: [ 236.014621][T10257] [ 236.014630][T10257] dump_stack_lvl+0x189/0x250 [ 236.014663][T10257] ? __pfx____ratelimit+0x10/0x10 [ 236.014692][T10257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.014721][T10257] ? __pfx__printk+0x10/0x10 [ 236.014757][T10257] should_fail_ex+0x414/0x560 [ 236.014795][T10257] _copy_to_user+0x31/0xb0 [ 236.014827][T10257] simple_read_from_buffer+0xe1/0x170 [ 236.014866][T10257] proc_fail_nth_read+0x1b3/0x220 [ 236.014898][T10257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.014930][T10257] ? rw_verify_area+0x2a6/0x4d0 [ 236.014959][T10257] ? __lock_acquire+0xab9/0xd20 [ 236.014978][T10257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.015007][T10257] vfs_read+0x200/0xa30 [ 236.015036][T10257] ? fdget_pos+0x247/0x320 [ 236.015061][T10257] ? __pfx___mutex_lock+0x10/0x10 [ 236.015095][T10257] ? __pfx_vfs_read+0x10/0x10 [ 236.015126][T10257] ? __fget_files+0x2a/0x420 [ 236.015151][T10257] ? __fget_files+0x3a0/0x420 [ 236.015170][T10257] ? __fget_files+0x2a/0x420 [ 236.015201][T10257] ksys_read+0x145/0x250 [ 236.015232][T10257] ? __pfx_ksys_read+0x10/0x10 [ 236.015265][T10257] ? do_syscall_64+0xbe/0xfa0 [ 236.015299][T10257] do_syscall_64+0xfa/0xfa0 [ 236.015328][T10257] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.015357][T10257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.015379][T10257] ? clear_bhb_loop+0x60/0xb0 [ 236.015406][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.015433][T10257] RIP: 0033:0x7f5ea678e0dc [ 236.015453][T10257] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 236.015472][T10257] RSP: 002b:00007f5ea75dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.015495][T10257] RAX: ffffffffffffffda RBX: 00007f5ea69e5fa0 RCX: 00007f5ea678e0dc [ 236.015512][T10257] RDX: 000000000000000f RSI: 00007f5ea75dd0a0 RDI: 0000000000000004 [ 236.015525][T10257] RBP: 00007f5ea75dd090 R08: 0000000000000000 R09: 0000000000000000 [ 236.015539][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.015552][T10257] R13: 00007f5ea69e6038 R14: 00007f5ea69e5fa0 R15: 00007fff069be928 [ 236.015588][T10257] [ 236.353159][T10174] chnl_net:caif_netlink_parms(): no params data found [ 236.538065][T10269] FAULT_INJECTION: forcing a failure. [ 236.538065][T10269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.538133][T10262] syzkaller0: entered promiscuous mode [ 236.558020][T10269] CPU: 1 UID: 0 PID: 10269 Comm: syz.0.1189 Not tainted syzkaller #0 PREEMPT(full) [ 236.558050][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.558064][T10269] Call Trace: [ 236.558073][T10269] [ 236.558082][T10269] dump_stack_lvl+0x189/0x250 [ 236.558117][T10269] ? __pfx____ratelimit+0x10/0x10 [ 236.558147][T10269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.558177][T10269] ? __pfx__printk+0x10/0x10 [ 236.558213][T10269] should_fail_ex+0x414/0x560 [ 236.558253][T10269] _copy_to_user+0x31/0xb0 [ 236.558283][T10269] simple_read_from_buffer+0xe1/0x170 [ 236.558322][T10269] proc_fail_nth_read+0x1b3/0x220 [ 236.558362][T10269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.558393][T10269] ? rw_verify_area+0x2a6/0x4d0 [ 236.558421][T10269] ? __lock_acquire+0xab9/0xd20 [ 236.558441][T10269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.558470][T10269] vfs_read+0x200/0xa30 [ 236.558498][T10269] ? fdget_pos+0x247/0x320 [ 236.558522][T10269] ? __pfx___mutex_lock+0x10/0x10 [ 236.558555][T10269] ? __pfx_vfs_read+0x10/0x10 [ 236.558586][T10269] ? __fget_files+0x2a/0x420 [ 236.558611][T10269] ? __fget_files+0x3a0/0x420 [ 236.558630][T10269] ? __fget_files+0x2a/0x420 [ 236.558660][T10269] ksys_read+0x145/0x250 [ 236.558692][T10269] ? __pfx_ksys_read+0x10/0x10 [ 236.558727][T10269] ? do_syscall_64+0xbe/0xfa0 [ 236.558759][T10269] do_syscall_64+0xfa/0xfa0 [ 236.558787][T10269] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.558817][T10269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.558838][T10269] ? clear_bhb_loop+0x60/0xb0 [ 236.558864][T10269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.558883][T10269] RIP: 0033:0x7f33e478e0dc [ 236.558900][T10269] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 236.558915][T10269] RSP: 002b:00007f33e56b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.558934][T10269] RAX: ffffffffffffffda RBX: 00007f33e49e5fa0 RCX: 00007f33e478e0dc [ 236.558947][T10269] RDX: 000000000000000f RSI: 00007f33e56b00a0 RDI: 0000000000000004 [ 236.558958][T10269] RBP: 00007f33e56b0090 R08: 0000000000000000 R09: 0000000000000000 [ 236.558969][T10269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.558979][T10269] R13: 00007f33e49e6038 R14: 00007f33e49e5fa0 R15: 00007fffa5a8b548 [ 236.559008][T10269] [ 236.559222][T10262] syzkaller0: entered allmulticast mode [ 236.610419][ T5839] Bluetooth: hci3: command tx timeout [ 236.818141][T10266] tipc: Enabling of bearer rejected, failed to enable media [ 236.910656][T10275] syzkaller0: entered promiscuous mode [ 236.937617][T10275] syzkaller0: entered allmulticast mode [ 236.989155][T10278] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 237.118747][T10291] syzkaller0: entered promiscuous mode [ 237.143764][T10291] syzkaller0: entered allmulticast mode [ 237.440511][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.457992][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.480478][T10174] bridge_slave_0: entered allmulticast mode [ 237.530470][T10174] bridge_slave_0: entered promiscuous mode [ 237.542110][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.583266][T10174] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.595637][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'. [ 237.597140][T10174] bridge_slave_1: entered allmulticast mode [ 237.615649][T10174] bridge_slave_1: entered promiscuous mode [ 237.691400][T10328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1197'. [ 237.772629][T10174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.783462][T10330] FAULT_INJECTION: forcing a failure. [ 237.783462][T10330] name failslab, interval 1, probability 0, space 0, times 0 [ 237.788148][T10174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.806411][T10330] CPU: 0 UID: 0 PID: 10330 Comm: syz.0.1199 Not tainted syzkaller #0 PREEMPT(full) [ 237.806449][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 237.806464][T10330] Call Trace: [ 237.806472][T10330] [ 237.806482][T10330] dump_stack_lvl+0x189/0x250 [ 237.806517][T10330] ? __pfx____ratelimit+0x10/0x10 [ 237.806547][T10330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.806576][T10330] ? __pfx__printk+0x10/0x10 [ 237.806605][T10330] ? __pfx___might_resched+0x10/0x10 [ 237.806634][T10330] should_fail_ex+0x414/0x560 [ 237.806672][T10330] should_failslab+0xa8/0x100 [ 237.806697][T10330] kmem_cache_alloc_node_noprof+0x77/0x710 [ 237.806728][T10330] ? __alloc_skb+0x112/0x2d0 [ 237.806768][T10330] __alloc_skb+0x112/0x2d0 [ 237.806805][T10330] netlink_ack+0x146/0xa50 [ 237.806835][T10330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.806860][T10330] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 237.806884][T10330] ? __pfx_nl80211_post_doit+0x10/0x10 [ 237.806924][T10330] netlink_rcv_skb+0x28c/0x470 [ 237.806956][T10330] ? __lock_acquire+0xab9/0xd20 [ 237.806978][T10330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.807006][T10330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.807061][T10330] ? down_read+0x1ad/0x2e0 [ 237.807084][T10330] genl_rcv+0x28/0x40 [ 237.807107][T10330] netlink_unicast+0x82f/0x9e0 [ 237.807147][T10330] ? __pfx_netlink_unicast+0x10/0x10 [ 237.807178][T10330] ? netlink_sendmsg+0x642/0xb30 [ 237.807195][T10330] ? skb_put+0x11b/0x210 [ 237.807227][T10330] netlink_sendmsg+0x805/0xb30 [ 237.807259][T10330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.807284][T10330] ? aa_sock_msg_perm+0xf1/0x1d0 [ 237.807318][T10330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.807339][T10330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.807362][T10330] __sock_sendmsg+0x21c/0x270 [ 237.807394][T10330] ____sys_sendmsg+0x505/0x830 [ 237.807424][T10330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.807457][T10330] ? import_iovec+0x74/0xa0 [ 237.807489][T10330] ___sys_sendmsg+0x21f/0x2a0 [ 237.807521][T10330] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.807586][T10330] ? __fget_files+0x2a/0x420 [ 237.807606][T10330] ? __fget_files+0x3a0/0x420 [ 237.807643][T10330] __x64_sys_sendmsg+0x19b/0x260 [ 237.807670][T10330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.807713][T10330] ? do_syscall_64+0xbe/0xfa0 [ 237.807748][T10330] do_syscall_64+0xfa/0xfa0 [ 237.807776][T10330] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.807806][T10330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.807827][T10330] ? clear_bhb_loop+0x60/0xb0 [ 237.807853][T10330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.807873][T10330] RIP: 0033:0x7f33e478f6c9 [ 237.807893][T10330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.807911][T10330] RSP: 002b:00007f33e56b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.807933][T10330] RAX: ffffffffffffffda RBX: 00007f33e49e5fa0 RCX: 00007f33e478f6c9 [ 237.807949][T10330] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 237.807962][T10330] RBP: 00007f33e56b0090 R08: 0000000000000000 R09: 0000000000000000 [ 237.807975][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.807986][T10330] R13: 00007f33e49e6038 R14: 00007f33e49e5fa0 R15: 00007fffa5a8b548 [ 237.808022][T10330] [ 238.278111][T10333] tipc: Enabling of bearer rejected, failed to enable media [ 238.294846][T10174] team0: Port device team_slave_0 added [ 238.331963][T10174] team0: Port device team_slave_1 added [ 238.523035][T10343] syzkaller0: entered promiscuous mode [ 238.561100][T10343] syzkaller0: entered allmulticast mode [ 238.642363][T10340] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 238.658933][T10321] erspan0 speed is unknown, defaulting to 1000 [ 238.693234][ T5839] Bluetooth: hci3: command tx timeout [ 238.721073][T10348] syzkaller0: entered promiscuous mode [ 238.726616][T10348] syzkaller0: entered allmulticast mode [ 238.736020][T10174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.743305][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.779961][T10174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.871368][T10174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.889670][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.900295][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 238.924295][ C0] lec:lec_tx_timeout: lec0 [ 238.929547][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 239.020412][T10174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.183408][T10362] syzkaller0: entered promiscuous mode [ 239.189314][T10362] syzkaller0: entered allmulticast mode [ 239.245607][T10174] hsr_slave_0: entered promiscuous mode [ 239.271789][T10174] hsr_slave_1: entered promiscuous mode [ 239.304540][T10362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 239.323957][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1209'. [ 239.334057][T10365] syzkaller0: entered promiscuous mode [ 239.339654][T10365] syzkaller0: entered allmulticast mode [ 239.348134][T10368] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 239.375643][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1209'. [ 239.761566][T10387] tipc: Enabling of bearer rejected, failed to enable media [ 239.853726][T10389] syzkaller0: entered promiscuous mode [ 239.859299][T10389] syzkaller0: entered allmulticast mode [ 239.924794][T10389] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 239.998118][T10395] FAULT_INJECTION: forcing a failure. [ 239.998118][T10395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.023680][T10395] CPU: 1 UID: 0 PID: 10395 Comm: syz.0.1216 Not tainted syzkaller #0 PREEMPT(full) [ 240.023713][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.023726][T10395] Call Trace: [ 240.023735][T10395] [ 240.023744][T10395] dump_stack_lvl+0x189/0x250 [ 240.023789][T10395] ? __pfx____ratelimit+0x10/0x10 [ 240.023819][T10395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.023848][T10395] ? __pfx__printk+0x10/0x10 [ 240.023884][T10395] should_fail_ex+0x414/0x560 [ 240.023923][T10395] _copy_to_user+0x31/0xb0 [ 240.023955][T10395] simple_read_from_buffer+0xe1/0x170 [ 240.023994][T10395] proc_fail_nth_read+0x1b3/0x220 [ 240.024026][T10395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.024058][T10395] ? rw_verify_area+0x2a6/0x4d0 [ 240.024085][T10395] ? __lock_acquire+0xab9/0xd20 [ 240.024105][T10395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.024134][T10395] vfs_read+0x200/0xa30 [ 240.024163][T10395] ? fdget_pos+0x247/0x320 [ 240.024187][T10395] ? __pfx___mutex_lock+0x10/0x10 [ 240.024221][T10395] ? __pfx_vfs_read+0x10/0x10 [ 240.024253][T10395] ? __fget_files+0x2a/0x420 [ 240.024277][T10395] ? __fget_files+0x3a0/0x420 [ 240.024297][T10395] ? __fget_files+0x2a/0x420 [ 240.024327][T10395] ksys_read+0x145/0x250 [ 240.024360][T10395] ? __pfx_ksys_read+0x10/0x10 [ 240.024394][T10395] ? do_syscall_64+0xbe/0xfa0 [ 240.024428][T10395] do_syscall_64+0xfa/0xfa0 [ 240.024457][T10395] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.024486][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.024507][T10395] ? clear_bhb_loop+0x60/0xb0 [ 240.024534][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.024555][T10395] RIP: 0033:0x7f33e478e0dc [ 240.024575][T10395] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.024593][T10395] RSP: 002b:00007f33e56b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.024616][T10395] RAX: ffffffffffffffda RBX: 00007f33e49e5fa0 RCX: 00007f33e478e0dc [ 240.024632][T10395] RDX: 000000000000000f RSI: 00007f33e56b00a0 RDI: 0000000000000004 [ 240.024645][T10395] RBP: 00007f33e56b0090 R08: 0000000000000000 R09: 0000000000000000 [ 240.024658][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.024671][T10395] R13: 00007f33e49e6038 R14: 00007f33e49e5fa0 R15: 00007fffa5a8b548 [ 240.024712][T10395] [ 240.747941][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 240.771531][ T5839] Bluetooth: hci3: command tx timeout [ 240.829473][T10416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'. [ 240.986230][T10174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.057435][T10174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.122888][T10174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.176234][T10174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.193779][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1222'. [ 241.318375][T10440] syzkaller0: entered promiscuous mode [ 241.326247][T10440] syzkaller0: entered allmulticast mode [ 241.337840][T10440] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 241.582711][T10174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.628359][T10174] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.665236][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1231'. [ 241.684005][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.691271][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.728206][T10451] syzkaller0: entered promiscuous mode [ 241.743701][T10451] syzkaller0: entered allmulticast mode [ 241.759829][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.767102][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.776411][T10450] tipc: Enabled bearer , priority 0 [ 241.801703][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 241.841708][T10450] tipc: Resetting bearer [ 241.907557][T10450] tipc: Disabling bearer [ 242.008652][T10459] syzkaller0: entered promiscuous mode [ 242.019955][T10459] syzkaller0: entered allmulticast mode [ 242.085961][T10462] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.285720][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1238'. [ 243.815210][T10486] syzkaller0: entered promiscuous mode [ 243.826595][T10486] syzkaller0: entered allmulticast mode [ 243.853981][T10486] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.940212][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 243.948370][ C0] lec:lec_tx_timeout: lec0 [ 243.953702][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 244.088086][T10502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'. [ 244.240841][T10174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.299417][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1248'. [ 244.322485][T10509] syzkaller1: entered promiscuous mode [ 244.334527][T10509] syzkaller1: entered allmulticast mode [ 244.517678][T10518] netlink: 'syz.2.1250': attribute type 4 has an invalid length. [ 244.560836][T10518] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1250'. [ 244.845873][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1256'. [ 244.956752][T10174] veth0_vlan: entered promiscuous mode [ 244.983296][T10540] syzkaller0: entered promiscuous mode [ 244.988834][T10540] syzkaller0: entered allmulticast mode [ 245.000954][T10540] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 245.022638][T10174] veth1_vlan: entered promiscuous mode [ 245.104200][T10174] veth0_macvtap: entered promiscuous mode [ 245.119801][T10174] veth1_macvtap: entered promiscuous mode [ 245.146328][T10174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.181896][T10174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.219010][ T8213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.241935][ T8213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.258002][ T8213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.295038][ T8213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.450417][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.462850][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.618471][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.647404][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.804955][T10566] tipc: Enabled bearer , priority 0 [ 245.839142][T10566] tipc: Resetting bearer [ 245.862105][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1267'. [ 245.928122][T10565] tipc: Disabling bearer [ 245.968186][T10574] syzkaller0: entered promiscuous mode [ 245.974361][T10574] syzkaller0: entered allmulticast mode [ 245.988832][T10574] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 246.267971][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 246.328847][T10589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1276'. [ 246.339353][T10589] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1276'. [ 246.348947][T10589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1276'. [ 246.772321][T10603] netlink: 'syz.0.1282': attribute type 29 has an invalid length. [ 246.787575][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 246.914990][T10603] C: renamed from team_slave_0 [ 246.932490][T10603] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 246.962410][T10603] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 247.023779][T10613] syzkaller0: entered promiscuous mode [ 247.033421][T10613] syzkaller0: entered allmulticast mode [ 247.057409][T10613] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 247.107342][T10620] tap0: tun_chr_ioctl cmd 1074025676 [ 247.116651][ T6746] IPVS: starting estimator thread 0... [ 247.138564][T10620] tap0: owner set to 0 [ 247.221080][T10621] IPVS: using max 29 ests per chain, 69600 per kthread [ 247.458303][T10601] erspan0 speed is unknown, defaulting to 1000 [ 247.508912][T10633] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1294'. [ 247.605569][T10641] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 247.739930][T10648] netlink: 'syz.0.1298': attribute type 10 has an invalid length. [ 247.772516][T10652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.913639][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1300'. [ 248.286538][T10671] delete_channel: no stack [ 248.744997][T10703] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1305'. [ 248.805848][T10686] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1305'. [ 248.871009][T10681] syzkaller0: entered promiscuous mode [ 248.885166][T10681] syzkaller0: entered allmulticast mode [ 248.960262][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 248.968474][ C0] lec:lec_tx_timeout: lec0 [ 248.973749][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 249.379619][T10721] IPVS: length: 239 != 24 [ 249.384709][T10715] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 249.412287][T10720] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.466360][T10715] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 249.919584][T10737] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 249.944347][T10737] netlink: 'syz.2.1317': attribute type 11 has an invalid length. [ 250.450448][T10751] tipc: Enabled bearer , priority 0 [ 250.467243][T10751] syzkaller0: entered promiscuous mode [ 250.488550][T10751] syzkaller0: entered allmulticast mode [ 250.528607][T10760] tipc: Enabling of bearer rejected, failed to enable media [ 250.559378][T10751] tipc: Resetting bearer [ 250.594573][T10750] tipc: Resetting bearer [ 250.623539][T10750] tipc: Disabling bearer [ 250.875575][T10773] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 250.981751][T10781] __nla_validate_parse: 4 callbacks suppressed [ 250.981774][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 251.255921][T10786] IPVS: Scheduler module ip_vs_sip not found [ 251.523629][T10802] syzkaller0: entered promiscuous mode [ 251.529175][T10802] syzkaller0: entered allmulticast mode [ 251.654860][T10810] syzkaller0: entered promiscuous mode [ 251.660744][T10810] syzkaller0: entered allmulticast mode [ 251.675735][T10810] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 251.711465][T10812] tipc: Enabling of bearer rejected, failed to enable media [ 251.958565][T10825] sctp: [Deprecated]: syz.4.1348 (pid 10825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.958565][T10825] Use struct sctp_sack_info instead [ 252.243989][T10835] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1351'. [ 252.298732][T10838] syzkaller0: entered promiscuous mode [ 252.320306][T10838] syzkaller0: entered allmulticast mode [ 252.337151][T10838] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 252.626057][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1358'. [ 252.768024][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1360'. [ 253.094602][T10874] tipc: Enabling of bearer rejected, failed to enable media [ 253.542364][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 253.568358][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 253.578017][T10888] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1373'. [ 253.597703][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 253.792061][T10895] syzkaller0: entered promiscuous mode [ 253.818262][T10895] syzkaller0: entered allmulticast mode [ 253.980206][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 253.988334][ C0] lec:lec_tx_timeout: lec0 [ 253.993428][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.999586][T10908] syzkaller0: entered promiscuous mode [ 254.033284][T10908] syzkaller0: entered allmulticast mode [ 254.052870][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1382'. [ 254.085939][T10908] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 254.242496][T10915] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 254.284959][T10915] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 254.382618][T10925] xt_hashlimit: size too large, truncated to 1048576 [ 255.250019][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1395'. [ 255.256064][T10953] netlink: 'syz.1.1397': attribute type 6 has an invalid length. [ 255.664771][T10972] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 255.826339][T10974] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.020578][T10974] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.057501][T10990] C: renamed from lo (while UP) [ 256.085568][T10993] __nla_validate_parse: 3 callbacks suppressed [ 256.085589][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 256.142308][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1412'. [ 256.144634][T10974] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.302414][T10974] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.338038][T11008] netlink: 'syz.0.1414': attribute type 21 has an invalid length. [ 256.361814][T11008] netlink: 'syz.0.1414': attribute type 6 has an invalid length. [ 256.403957][T11008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1414'. [ 256.514769][T11013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1416'. [ 256.586371][T11015] syzkaller0: entered promiscuous mode [ 256.616204][T11015] syzkaller0: entered allmulticast mode [ 256.661383][ T8213] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.765244][ T8211] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.793235][ T2965] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.856167][ T8213] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.173423][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 257.224024][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 257.240615][T11050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1425'. [ 257.278424][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 257.393055][T11057] syzkaller0: entered promiscuous mode [ 257.398787][T11057] syzkaller0: entered allmulticast mode [ 257.464819][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1429'. [ 257.622448][T11061] syzkaller0: entered promiscuous mode [ 257.656691][ T11] block nbd2: Possible stuck request ffff888024c2e000: control (read@0,1024B). Runtime 90 seconds [ 257.665312][T11061] syzkaller0: entered allmulticast mode [ 257.667615][ T11] block nbd2: Possible stuck request ffff888024c2e1c0: control (read@1024,1024B). Runtime 90 seconds [ 257.686511][ T11] block nbd2: Possible stuck request ffff888024c2e380: control (read@2048,1024B). Runtime 90 seconds [ 257.698238][ T11] block nbd2: Possible stuck request ffff888024c2e540: control (read@3072,1024B). Runtime 90 seconds [ 257.741486][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 257.752323][T11069] netlink: 'syz.2.1435': attribute type 20 has an invalid length. [ 257.988017][T11077] syzkaller0: entered promiscuous mode [ 258.000317][T11077] syzkaller0: entered allmulticast mode [ 258.027076][T11077] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 258.098959][T11082] netlink: 'syz.0.1440': attribute type 1 has an invalid length. [ 258.315157][T11085] bond4: (slave ip6gretap1): making interface the new active one [ 258.343665][T11085] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.366953][T11085] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.397142][T11085] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 258.831474][T11112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.837449][T11112] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 258.969405][T11118] syzkaller0: entered promiscuous mode [ 258.975096][T11118] syzkaller0: entered allmulticast mode [ 259.000617][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 259.009201][ C0] lec:lec_tx_timeout: lec0 [ 259.013935][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 259.998191][T11168] netlink: 'syz.2.1471': attribute type 3 has an invalid length. [ 260.006218][T11168] netlink: 'syz.2.1471': attribute type 1 has an invalid length. [ 260.131270][T11172] tipc: Enabling of bearer rejected, failed to enable media [ 260.268575][T11180] syzkaller0: entered promiscuous mode [ 260.290650][T11180] syzkaller0: entered allmulticast mode [ 260.321998][T11180] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.441556][T11195] openvswitch: netlink: Unknown nsh attribute 0 [ 260.448454][T11195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.521365][T11202] netlink: 'syz.2.1483': attribute type 2 has an invalid length. [ 260.999774][T11231] netlink: 'syz.4.1496': attribute type 1 has an invalid length. [ 261.063265][T11231] bond3: entered promiscuous mode [ 261.075864][T11231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.164580][T11238] syzkaller0: entered promiscuous mode [ 261.204281][T11238] syzkaller0: entered allmulticast mode [ 261.376850][T11250] __nla_validate_parse: 11 callbacks suppressed [ 261.376875][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 262.052079][T11273] syzkaller0: entered promiscuous mode [ 262.081158][T11273] syzkaller0: entered allmulticast mode [ 262.165784][T11287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.184058][T11287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.232051][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'. [ 262.244528][T11299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1519'. [ 262.776306][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.782819][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.671897][T11287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.690724][T11287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.862238][T11287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.880264][T11287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.030999][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 264.039206][ C0] lec:lec_tx_timeout: lec0 [ 264.044523][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 264.066497][T11287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.114863][T11287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.119982][T11333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1527'. [ 264.288719][T11338] syzkaller0: entered promiscuous mode [ 264.326794][T11338] syzkaller0: entered allmulticast mode [ 264.437439][ T3002] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.445928][ T3002] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.457045][T11341] tipc: Enabling of bearer rejected, failed to enable media [ 264.487409][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1533'. [ 264.513341][T11346] syzkaller0: entered promiscuous mode [ 264.524564][T11346] syzkaller0: entered allmulticast mode [ 264.564855][ T8213] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.588875][ T8213] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.600390][T11341] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 264.653836][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 264.711160][ T3002] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.719585][ T3002] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.895864][T11365] xt_hashlimit: size too large, truncated to 1048576 [ 266.749167][ T3002] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.757672][ T3002] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.767014][T11364] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 266.771340][T11369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.041595][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1546'. [ 267.051500][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1546'. [ 267.060744][T11424] vlan0: entered promiscuous mode [ 267.060770][T11424] bond0: entered promiscuous mode [ 267.060787][T11424] bond_slave_0: entered promiscuous mode [ 267.061031][T11424] bond_slave_1: entered promiscuous mode [ 267.061226][T11424] bridge_slave_1: entered promiscuous mode [ 267.128805][T11418] erspan0: entered promiscuous mode [ 267.136129][T11418] batadv_slave_1: entered promiscuous mode [ 267.142446][T11418] batadv_slave_1: left promiscuous mode [ 267.167417][T11418] erspan0: left promiscuous mode [ 267.238825][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 267.377295][T11448] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1557'. [ 268.357561][T11510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1566'. [ 269.470076][T11474] syzkaller0: entered promiscuous mode [ 269.475832][T11474] syzkaller0: entered allmulticast mode [ 269.508039][T11493] syzkaller0: entered promiscuous mode [ 269.517245][T11493] syzkaller0: entered allmulticast mode [ 269.525675][T11497] tipc: Started in network mode [ 269.531756][T11497] tipc: Node identity a2944be852d1, cluster identity 4711 [ 269.539347][T11497] tipc: Enabled bearer , priority 0 [ 269.614249][T11497] tipc: Resetting bearer [ 269.648240][T11497] tipc: Disabling bearer [ 269.810201][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 269.818323][ C0] lec:lec_tx_timeout: lec0 [ 269.823783][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 269.934114][T11528] syzkaller0: entered promiscuous mode [ 269.939669][T11528] syzkaller0: entered allmulticast mode [ 271.938419][T11587] syzkaller0: entered promiscuous mode [ 271.944275][T11587] syzkaller0: entered allmulticast mode [ 272.030066][T11589] FAULT_INJECTION: forcing a failure. [ 272.030066][T11589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.044719][T11589] CPU: 0 UID: 0 PID: 11589 Comm: syz.2.1582 Not tainted syzkaller #0 PREEMPT(full) [ 272.044751][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.044777][T11589] Call Trace: [ 272.044787][T11589] [ 272.044797][T11589] dump_stack_lvl+0x189/0x250 [ 272.044833][T11589] ? __pfx____ratelimit+0x10/0x10 [ 272.044863][T11589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.044893][T11589] ? __pfx__printk+0x10/0x10 [ 272.044915][T11589] ? __might_fault+0xb0/0x130 [ 272.044959][T11589] should_fail_ex+0x414/0x560 [ 272.044996][T11589] _copy_from_user+0x2d/0xb0 [ 272.045025][T11589] ___sys_sendmsg+0x158/0x2a0 [ 272.045051][T11589] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.045129][T11589] ? __fget_files+0x2a/0x420 [ 272.045149][T11589] ? __fget_files+0x3a0/0x420 [ 272.045180][T11589] __x64_sys_sendmsg+0x19b/0x260 [ 272.045206][T11589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.045252][T11589] ? __pfx_ksys_write+0x10/0x10 [ 272.045287][T11589] ? do_syscall_64+0xbe/0xfa0 [ 272.045387][T11589] do_syscall_64+0xfa/0xfa0 [ 272.045415][T11589] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.045446][T11589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.045467][T11589] ? clear_bhb_loop+0x60/0xb0 [ 272.045493][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.045514][T11589] RIP: 0033:0x7f5ea678f6c9 [ 272.045534][T11589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.045554][T11589] RSP: 002b:00007f5ea75dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.045577][T11589] RAX: ffffffffffffffda RBX: 00007f5ea69e5fa0 RCX: 00007f5ea678f6c9 [ 272.045591][T11589] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 272.045605][T11589] RBP: 00007f5ea75dd090 R08: 0000000000000000 R09: 0000000000000000 [ 272.045618][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.045630][T11589] R13: 00007f5ea69e6038 R14: 00007f5ea69e5fa0 R15: 00007fff069be928 [ 272.045666][T11589] [ 272.332432][T11594] Bluetooth: MGMT ver 1.23 [ 272.477801][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 272.690278][T11606] hsr_slave_0 (unregistering): left promiscuous mode [ 273.055756][T11628] syzkaller0: entered promiscuous mode [ 273.061700][T11628] syzkaller0: entered allmulticast mode [ 273.148538][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'. [ 274.860294][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 274.868521][ C0] lec:lec_tx_timeout: lec0 [ 274.873612][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 275.713228][T11651] netlink: 'syz.5.1599': attribute type 29 has an invalid length. [ 275.730355][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1599'. [ 275.853598][T11658] syzkaller0: entered promiscuous mode [ 275.859238][T11658] syzkaller0: entered allmulticast mode [ 276.546832][T11694] syzkaller0: entered promiscuous mode [ 276.552759][T11694] syzkaller0: entered allmulticast mode [ 276.816806][T11717] netlink: 'syz.2.1622': attribute type 63 has an invalid length. [ 276.868543][T11721] netlink: 'syz.2.1622': attribute type 63 has an invalid length. [ 278.488567][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1619'. [ 278.504019][T11707] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.763793][T11758] tipc: Enabled bearer , priority 0 [ 278.784440][T11758] syzkaller0: entered promiscuous mode [ 278.789967][T11758] syzkaller0: entered allmulticast mode [ 278.811350][T11758] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 278.885944][T11758] tipc: Resetting bearer [ 278.900431][T11753] tipc: Resetting bearer [ 278.929579][T11753] tipc: Disabling bearer [ 279.134109][T11775] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 279.162108][T11775] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1637'. [ 279.185620][T11783] openvswitch: netlink: Message has -2 unknown bytes. [ 279.246324][T11778] syzkaller0: entered promiscuous mode [ 279.260674][T11778] syzkaller0: entered allmulticast mode [ 279.466519][T11798] Bluetooth: MGMT ver 1.23 [ 279.881293][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 279.889454][ C0] lec:lec_tx_timeout: lec0 [ 279.894282][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 281.042943][T11793] syzkaller0: entered promiscuous mode [ 281.048556][T11793] syzkaller0: entered allmulticast mode [ 281.058945][T11796] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 281.227294][T11828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1649'. [ 281.367539][T11832] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1650'. [ 281.455158][T11837] syzkaller0: entered promiscuous mode [ 281.469175][T11837] syzkaller0: entered allmulticast mode [ 281.748384][T11857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1662'. [ 283.647553][T11872] tipc: Enabling of bearer rejected, failed to enable media [ 283.657811][T11878] syzkaller0: entered promiscuous mode [ 283.664450][T11878] syzkaller0: entered allmulticast mode [ 283.686270][T11906] syzkaller1: entered promiscuous mode [ 283.705034][T11906] syzkaller1: entered allmulticast mode [ 283.922105][T11916] syzkaller0: entered promiscuous mode [ 283.927945][T11916] syzkaller0: entered allmulticast mode [ 284.082921][T11928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.100430][T11926] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1676'. [ 284.911849][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 284.919943][ C0] lec:lec_tx_timeout: lec0 [ 284.924761][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 285.973022][T11956] tipc: Enabled bearer , priority 0 [ 285.988950][T11958] syzkaller0: entered promiscuous mode [ 285.994651][T11958] syzkaller0: entered allmulticast mode [ 286.043109][T11966] tipc: Resetting bearer [ 287.587968][T11945] tipc: Resetting bearer [ 287.601757][T11945] tipc: Disabling bearer [ 287.730922][ T11] block nbd2: Possible stuck request ffff888024c2e000: control (read@0,1024B). Runtime 120 seconds [ 287.741843][ T11] block nbd2: Possible stuck request ffff888024c2e1c0: control (read@1024,1024B). Runtime 120 seconds [ 287.752947][ T11] block nbd2: Possible stuck request ffff888024c2e380: control (read@2048,1024B). Runtime 120 seconds [ 287.765783][ T11] block nbd2: Possible stuck request ffff888024c2e540: control (read@3072,1024B). Runtime 120 seconds [ 287.785588][T11999] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1697'. [ 287.906617][T12003] syzkaller0: entered promiscuous mode [ 287.913670][T12003] syzkaller0: entered allmulticast mode [ 288.044113][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 288.054525][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 288.311739][T12026] xt_hashlimit: size too large, truncated to 1048576 [ 289.940281][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 289.948524][ C0] lec:lec_tx_timeout: lec0 [ 289.953219][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 291.180959][T12032] tipc: Enabling of bearer rejected, failed to enable media [ 291.206362][T12049] batadv_slave_0: entered promiscuous mode [ 291.213133][T12049] macsec1: entered promiscuous mode [ 291.221043][T12049] batman_adv: batadv0: Adding interface: macsec1 [ 291.227444][T12049] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.255765][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.271339][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.287727][T12049] batman_adv: batadv0: Interface activated: macsec1 [ 291.417014][T12064] syzkaller0: entered promiscuous mode [ 291.422819][T12064] syzkaller0: entered allmulticast mode [ 291.638859][T12079] tipc: Enabled bearer , priority 0 [ 291.661838][T12079] syzkaller0: entered promiscuous mode [ 291.678176][T12079] syzkaller0: entered allmulticast mode [ 291.709791][T12079] tipc: Resetting bearer [ 291.726244][T12078] tipc: Resetting bearer [ 291.756535][T12078] tipc: Disabling bearer [ 291.794211][T12086] syzkaller0: entered promiscuous mode [ 291.804124][T12086] syzkaller0: entered allmulticast mode [ 291.813966][T12086] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 291.844698][T12089] tipc: Enabling of bearer rejected, failed to enable media [ 291.860917][T12089] syzkaller0: entered promiscuous mode [ 291.876743][T12089] syzkaller0: entered allmulticast mode [ 292.131257][T12108] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1728'. [ 292.507352][T12113] syzkaller0: entered promiscuous mode [ 292.520256][T12113] syzkaller0: entered allmulticast mode [ 294.010648][T12132] tipc: Enabled bearer , priority 0 [ 294.019714][T12135] syzkaller0: entered promiscuous mode [ 294.025629][T12135] syzkaller0: entered allmulticast mode [ 294.041363][T12139] tipc: Resetting bearer [ 294.095913][T12124] tipc: Resetting bearer [ 294.142243][T12124] tipc: Disabling bearer [ 294.295407][T12167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1742'. [ 294.305602][T12156] syzkaller0: entered promiscuous mode [ 294.311350][T12156] syzkaller0: entered allmulticast mode [ 294.464167][T12176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1744'. [ 294.646677][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1748'. [ 294.656088][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1748'. [ 294.678586][T12191] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.697358][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1747'. [ 294.742397][T12184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.772664][T12191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1747'. [ 294.822808][T12200] syzkaller1: entered promiscuous mode [ 294.828513][T12200] syzkaller1: entered allmulticast mode [ 294.896885][T12189] syzkaller0: entered promiscuous mode [ 294.902743][T12189] syzkaller0: entered allmulticast mode [ 294.960343][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 294.968395][ C0] lec:lec_tx_timeout: lec0 [ 294.973188][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 295.200088][T12216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1756'. [ 295.399066][T12220] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1758'. [ 295.539771][T12225] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1759'. [ 296.469278][T12202] syzkaller0: entered promiscuous mode [ 296.476091][T12202] syzkaller0: entered allmulticast mode [ 296.484256][T12207] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 296.621273][T12228] syzkaller0: entered promiscuous mode [ 296.626921][T12228] syzkaller0: entered allmulticast mode [ 296.746419][T12232] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 296.764407][T12232] bond5 (unregistering): Released all slaves [ 297.110467][T12259] syzkaller0: entered promiscuous mode [ 297.126310][T12259] syzkaller0: entered allmulticast mode [ 297.145733][T12261] __nla_validate_parse: 3 callbacks suppressed [ 297.145753][T12261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1772'. [ 297.366664][T12271] syzkaller0: entered promiscuous mode [ 297.384875][T12271] syzkaller0: entered allmulticast mode [ 297.430919][T12271] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 297.478553][T12280] syzkaller0: entered promiscuous mode [ 297.501056][T12280] syzkaller0: entered allmulticast mode [ 297.708665][T12297] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 297.732827][T12297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1780'. [ 297.795227][T12297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1780'. [ 298.007988][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 298.034692][T12311] syzkaller0: entered promiscuous mode [ 298.040835][T12312] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1786'. [ 298.050861][T12311] syzkaller0: entered allmulticast mode [ 298.161083][T12314] syzkaller0: entered promiscuous mode [ 298.180893][T12314] syzkaller0: entered allmulticast mode [ 298.629609][T12351] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 298.685804][T12344] syzkaller0: entered promiscuous mode [ 298.768740][T12344] syzkaller0: entered allmulticast mode [ 299.218984][T12378] xt_HMARK: spi-set and port-set can't be combined [ 299.251471][T12378] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1803'. [ 299.277703][T12378] x_tables: duplicate underflow at hook 3 [ 299.288542][T12381] syzkaller0: entered promiscuous mode [ 299.294381][T12381] syzkaller0: entered allmulticast mode [ 299.361582][T12385] FAULT_INJECTION: forcing a failure. [ 299.361582][T12385] name failslab, interval 1, probability 0, space 0, times 0 [ 299.380319][T12385] CPU: 1 UID: 0 PID: 12385 Comm: syz.4.1806 Not tainted syzkaller #0 PREEMPT(full) [ 299.380349][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.380362][T12385] Call Trace: [ 299.380371][T12385] [ 299.380379][T12385] dump_stack_lvl+0x189/0x250 [ 299.380414][T12385] ? __pfx____ratelimit+0x10/0x10 [ 299.380443][T12385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.380473][T12385] ? __pfx__printk+0x10/0x10 [ 299.380491][T12385] ? netlink_sendmsg+0x805/0xb30 [ 299.380514][T12385] ? __x64_sys_sendmsg+0x19b/0x260 [ 299.380536][T12385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.380566][T12385] should_fail_ex+0x414/0x560 [ 299.380605][T12385] should_failslab+0xa8/0x100 [ 299.380629][T12385] kmem_cache_alloc_noprof+0x74/0x6e0 [ 299.380659][T12385] ? skb_clone+0x212/0x3a0 [ 299.380698][T12385] skb_clone+0x212/0x3a0 [ 299.380727][T12385] __netlink_deliver_tap+0x404/0x850 [ 299.380762][T12385] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.380784][T12385] netlink_deliver_tap+0x19c/0x1b0 [ 299.380806][T12385] netlink_sendskb+0x68/0x140 [ 299.380839][T12385] netlink_unicast+0x397/0x9e0 [ 299.380867][T12385] ? __asan_memcpy+0x40/0x70 [ 299.380905][T12385] ? __pfx_netlink_unicast+0x10/0x10 [ 299.380946][T12385] netlink_rcv_skb+0x28c/0x470 [ 299.380977][T12385] ? __lock_acquire+0xab9/0xd20 [ 299.381003][T12385] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.381032][T12385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.381086][T12385] ? down_read+0x1ad/0x2e0 [ 299.381109][T12385] genl_rcv+0x28/0x40 [ 299.381132][T12385] netlink_unicast+0x82f/0x9e0 [ 299.381173][T12385] ? __pfx_netlink_unicast+0x10/0x10 [ 299.381205][T12385] ? netlink_sendmsg+0x642/0xb30 [ 299.381223][T12385] ? skb_put+0x11b/0x210 [ 299.381245][T12385] netlink_sendmsg+0x805/0xb30 [ 299.381275][T12385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.381299][T12385] ? aa_sock_msg_perm+0xf1/0x1d0 [ 299.381334][T12385] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.381355][T12385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.381377][T12385] __sock_sendmsg+0x21c/0x270 [ 299.381410][T12385] ____sys_sendmsg+0x505/0x830 [ 299.381439][T12385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.381472][T12385] ? import_iovec+0x74/0xa0 [ 299.381503][T12385] ___sys_sendmsg+0x21f/0x2a0 [ 299.381530][T12385] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.381595][T12385] ? __fget_files+0x2a/0x420 [ 299.381615][T12385] ? __fget_files+0x3a0/0x420 [ 299.381648][T12385] __x64_sys_sendmsg+0x19b/0x260 [ 299.381675][T12385] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.381716][T12385] ? __pfx_ksys_write+0x10/0x10 [ 299.381752][T12385] ? do_syscall_64+0xbe/0xfa0 [ 299.381788][T12385] do_syscall_64+0xfa/0xfa0 [ 299.381816][T12385] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.381846][T12385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.381867][T12385] ? clear_bhb_loop+0x60/0xb0 [ 299.381894][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.381916][T12385] RIP: 0033:0x7fb85cb8f6c9 [ 299.381936][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.381955][T12385] RSP: 002b:00007fb85da74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.381979][T12385] RAX: ffffffffffffffda RBX: 00007fb85cde5fa0 RCX: 00007fb85cb8f6c9 [ 299.381995][T12385] RDX: 0000000000048000 RSI: 0000200000000280 RDI: 0000000000000003 [ 299.382008][T12385] RBP: 00007fb85da74090 R08: 0000000000000000 R09: 0000000000000000 [ 299.382022][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.382035][T12385] R13: 00007fb85cde6038 R14: 00007fb85cde5fa0 R15: 00007ffe74128ff8 [ 299.382071][T12385] [ 299.852909][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1810'. [ 299.980220][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 299.988307][ C0] lec:lec_tx_timeout: lec0 [ 299.993419][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 300.087980][T12405] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.141819][T12405] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.211884][T12415] netlink: 'syz.5.1818': attribute type 1 has an invalid length. [ 300.225239][T12405] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.235511][T12405] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.337008][T12415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.383507][T12422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.401419][T12422] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 300.424320][T12422] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 300.472422][T12405] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.505677][T12405] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.607692][T12425] veth5: entered promiscuous mode [ 300.634428][T12425] bond2: (slave veth5): Enslaving as an active interface with a down link [ 300.674262][T12415] vlan3: entered allmulticast mode [ 300.679813][T12415] bond2: entered allmulticast mode [ 300.730070][T12405] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.754192][T12405] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.962299][ T8213] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.984350][ T8213] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.001633][T12456] netlink: 'syz.5.1826': attribute type 12 has an invalid length. [ 301.009783][T12456] netlink: 'syz.5.1826': attribute type 29 has an invalid length. [ 301.017822][T12456] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1826'. [ 301.028189][T12456] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1826'. [ 301.143539][ T8213] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.152422][ T8213] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.236114][ T8213] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.276627][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 301.280233][ T8213] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.313198][ T8213] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.355130][ T8213] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.585640][T12487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.705621][T12496] syzkaller0: entered promiscuous mode [ 301.746868][T12502] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.751536][T12496] syzkaller0: entered allmulticast mode [ 302.303714][T12531] __nla_validate_parse: 3 callbacks suppressed [ 302.303737][T12531] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1848'. [ 302.341331][T12536] syzkaller0: entered promiscuous mode [ 302.346894][T12536] syzkaller0: entered allmulticast mode [ 302.465327][T12542] syzkaller0: entered promiscuous mode [ 302.471311][T12542] syzkaller0: entered allmulticast mode [ 302.511309][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 302.741655][T12558] FAULT_INJECTION: forcing a failure. [ 302.741655][T12558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.773257][T12558] CPU: 0 UID: 0 PID: 12558 Comm: syz.2.1859 Not tainted syzkaller #0 PREEMPT(full) [ 302.773291][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.773304][T12558] Call Trace: [ 302.773313][T12558] [ 302.773322][T12558] dump_stack_lvl+0x189/0x250 [ 302.773360][T12558] ? __pfx____ratelimit+0x10/0x10 [ 302.773388][T12558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.773418][T12558] ? __pfx__printk+0x10/0x10 [ 302.773440][T12558] ? __might_fault+0xb0/0x130 [ 302.773483][T12558] should_fail_ex+0x414/0x560 [ 302.773521][T12558] _copy_from_iter+0x1de/0x1790 [ 302.773553][T12558] ? rcu_is_watching+0x15/0xb0 [ 302.773582][T12558] ? kmalloc_reserve+0xbd/0x290 [ 302.773602][T12558] ? __pfx__copy_from_iter+0x10/0x10 [ 302.773629][T12558] ? __build_skb_around+0x262/0x3f0 [ 302.773665][T12558] ? netlink_sendmsg+0x642/0xb30 [ 302.773684][T12558] ? skb_put+0x11b/0x210 [ 302.773707][T12558] netlink_sendmsg+0x6b2/0xb30 [ 302.773739][T12558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.773763][T12558] ? aa_sock_msg_perm+0xf1/0x1d0 [ 302.773796][T12558] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.773818][T12558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.773840][T12558] __sock_sendmsg+0x21c/0x270 [ 302.773871][T12558] ____sys_sendmsg+0x505/0x830 [ 302.773901][T12558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.773934][T12558] ? import_iovec+0x74/0xa0 [ 302.773965][T12558] ___sys_sendmsg+0x21f/0x2a0 [ 302.773990][T12558] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.774051][T12558] ? __fget_files+0x2a/0x420 [ 302.774071][T12558] ? __fget_files+0x3a0/0x420 [ 302.774110][T12558] __x64_sys_sendmsg+0x19b/0x260 [ 302.774136][T12558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.774169][T12558] ? __pfx_ksys_write+0x10/0x10 [ 302.774204][T12558] ? do_syscall_64+0xbe/0xfa0 [ 302.774237][T12558] do_syscall_64+0xfa/0xfa0 [ 302.774265][T12558] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.774294][T12558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.774316][T12558] ? clear_bhb_loop+0x60/0xb0 [ 302.774341][T12558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.774362][T12558] RIP: 0033:0x7f5ea678f6c9 [ 302.774382][T12558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.774401][T12558] RSP: 002b:00007f5ea75dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.774423][T12558] RAX: ffffffffffffffda RBX: 00007f5ea69e5fa0 RCX: 00007f5ea678f6c9 [ 302.774439][T12558] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 302.774453][T12558] RBP: 00007f5ea75dd090 R08: 0000000000000000 R09: 0000000000000000 [ 302.774466][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.774479][T12558] R13: 00007f5ea69e6038 R14: 00007f5ea69e5fa0 R15: 00007fff069be928 [ 302.774514][T12558] [ 303.411212][T12575] syzkaller0: entered promiscuous mode [ 303.416902][T12575] syzkaller0: entered allmulticast mode [ 303.500314][T12578] netlink: 'syz.4.1869': attribute type 5 has an invalid length. [ 303.662197][T12587] tipc: Enabled bearer , priority 0 [ 303.682504][T12587] syzkaller0: entered promiscuous mode [ 303.695939][T12587] syzkaller0: entered allmulticast mode [ 303.729011][T12587] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 303.745626][T12587] tipc: Resetting bearer [ 303.758500][T12584] tipc: Resetting bearer [ 303.791179][T12584] tipc: Disabling bearer [ 304.130072][T12607] vlan2: entered promiscuous mode [ 304.136821][T12607] vlan2: entered allmulticast mode [ 304.142924][T12607] hsr_slave_1: entered allmulticast mode [ 304.485644][T12625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.511714][T12625] syzkaller0: entered promiscuous mode [ 304.517818][T12625] syzkaller0: entered allmulticast mode [ 304.826214][T12639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1891'. [ 304.994044][T12645] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 305.000212][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 305.017503][ C0] lec:lec_tx_timeout: lec0 [ 305.022672][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 305.190315][T12653] tipc: Enabled bearer , priority 0 [ 305.198392][T12653] syzkaller0: entered promiscuous mode [ 305.208722][T12653] syzkaller0: entered allmulticast mode [ 305.232660][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1896'. [ 305.289267][T12653] tipc: Resetting bearer [ 305.333249][T12652] tipc: Resetting bearer [ 305.356094][T12672] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1901'. [ 305.370987][T12652] tipc: Disabling bearer [ 305.590676][T12679] netlink: 'syz.2.1904': attribute type 29 has an invalid length. [ 305.610851][T12679] netlink: 'syz.2.1904': attribute type 29 has an invalid length. [ 305.623739][T12683] syzkaller0: entered promiscuous mode [ 305.629326][T12683] syzkaller0: entered allmulticast mode [ 307.445735][T12703] tipc: Enabled bearer , priority 0 [ 307.462591][T12705] syzkaller0: entered promiscuous mode [ 307.468135][T12705] syzkaller0: entered allmulticast mode [ 307.502253][T12710] tipc: Resetting bearer [ 307.531985][T12695] tipc: Resetting bearer [ 307.538485][T12722] netlink: 'syz.2.1911': attribute type 1 has an invalid length. [ 307.561832][T12722] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1911'. [ 307.589255][T12695] tipc: Disabling bearer [ 307.654288][T12726] syzkaller0: entered promiscuous mode [ 307.660465][T12726] syzkaller0: entered allmulticast mode [ 307.765659][T12732] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1915'. [ 307.775992][T12736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1915'. [ 307.822814][T12738] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 307.829369][ T30] audit: type=1800 audit(1762224326.810:2): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1918" name="memory.events" dev="tmpfs" ino=1992 res=0 errno=0 [ 307.860303][T12738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.871403][T12740] syz.2.1918 (12740) used obsolete PPPIOCDETACH ioctl [ 307.899229][ T30] audit: type=1804 audit(1762224326.880:3): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1918" name="/newroot/393/memory.events" dev="tmpfs" ino=1992 res=1 errno=0 [ 308.044152][T12745] syzkaller0: entered promiscuous mode [ 308.045389][T12749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.049771][T12745] syzkaller0: entered allmulticast mode [ 308.191523][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1923'. [ 308.214215][T12751] netlink: 'syz.5.1923': attribute type 1 has an invalid length. [ 308.318785][T12751] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1923'. [ 308.360902][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1923'. [ 308.399952][T12751] netlink: 'syz.5.1923': attribute type 1 has an invalid length. [ 308.495289][T12771] syzkaller0: entered promiscuous mode [ 308.501066][T12771] syzkaller0: entered allmulticast mode [ 308.689403][T12781] tipc: Enabled bearer , priority 0 [ 308.697493][T12781] syzkaller0: entered promiscuous mode [ 308.703579][T12781] syzkaller0: entered allmulticast mode [ 308.767273][T12781] tipc: Resetting bearer [ 308.789633][T12777] tipc: Resetting bearer [ 308.856974][T12777] tipc: Disabling bearer [ 308.958456][T12792] syzkaller0: entered promiscuous mode [ 308.978208][T12792] syzkaller0: entered allmulticast mode [ 309.127555][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1945'. [ 309.149295][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'. [ 309.190986][T12802] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1945'. [ 309.207870][T12802] openvswitch: netlink: Message has 126 unknown bytes. [ 309.232412][T12809] tipc: Enabled bearer , priority 0 [ 309.240699][T12809] syzkaller0: entered promiscuous mode [ 309.253740][T12809] syzkaller0: entered allmulticast mode [ 309.272582][T12809] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 309.306984][T12809] tipc: Resetting bearer [ 309.319818][T12808] tipc: Resetting bearer [ 309.366117][T12808] tipc: Disabling bearer [ 309.580859][T12825] tipc: Enabled bearer , priority 0 [ 309.588544][T12825] syzkaller0: entered promiscuous mode [ 309.597170][T12825] syzkaller0: entered allmulticast mode [ 309.640821][T12825] tipc: Resetting bearer [ 309.656989][T12823] tipc: Resetting bearer [ 309.689176][T12823] tipc: Disabling bearer [ 309.729999][T12829] tipc: Enabled bearer , priority 0 [ 309.755032][T12829] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 309.779069][T12829] tipc: Resetting bearer [ 309.845755][T12828] tipc: Disabling bearer [ 309.879808][T12839] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.1959'. [ 309.889932][T12839] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 310.011305][T12842] FAULT_INJECTION: forcing a failure. [ 310.011305][T12842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.031321][T12842] CPU: 0 UID: 0 PID: 12842 Comm: syz.0.1960 Not tainted syzkaller #0 PREEMPT(full) [ 310.031353][T12842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.031366][T12842] Call Trace: [ 310.031374][T12842] [ 310.031383][T12842] dump_stack_lvl+0x189/0x250 [ 310.031418][T12842] ? __pfx____ratelimit+0x10/0x10 [ 310.031448][T12842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.031477][T12842] ? __pfx__printk+0x10/0x10 [ 310.031514][T12842] should_fail_ex+0x414/0x560 [ 310.031553][T12842] _copy_to_user+0x31/0xb0 [ 310.031584][T12842] simple_read_from_buffer+0xe1/0x170 [ 310.031622][T12842] proc_fail_nth_read+0x1b3/0x220 [ 310.031655][T12842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.031686][T12842] ? rw_verify_area+0x2a6/0x4d0 [ 310.031715][T12842] ? __lock_acquire+0xab9/0xd20 [ 310.031734][T12842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.031763][T12842] vfs_read+0x200/0xa30 [ 310.031791][T12842] ? fdget_pos+0x247/0x320 [ 310.031817][T12842] ? __pfx___mutex_lock+0x10/0x10 [ 310.031850][T12842] ? __pfx_vfs_read+0x10/0x10 [ 310.031881][T12842] ? __fget_files+0x2a/0x420 [ 310.031906][T12842] ? __fget_files+0x3a0/0x420 [ 310.031925][T12842] ? __fget_files+0x2a/0x420 [ 310.031955][T12842] ksys_read+0x145/0x250 [ 310.031988][T12842] ? __pfx_ksys_read+0x10/0x10 [ 310.032022][T12842] ? do_syscall_64+0xbe/0xfa0 [ 310.032057][T12842] do_syscall_64+0xfa/0xfa0 [ 310.032085][T12842] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.032114][T12842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.032136][T12842] ? clear_bhb_loop+0x60/0xb0 [ 310.032163][T12842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.032183][T12842] RIP: 0033:0x7f33e478e0dc [ 310.032203][T12842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.032222][T12842] RSP: 002b:00007f33e56b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.032246][T12842] RAX: ffffffffffffffda RBX: 00007f33e49e5fa0 RCX: 00007f33e478e0dc [ 310.032262][T12842] RDX: 000000000000000f RSI: 00007f33e56b00a0 RDI: 0000000000000004 [ 310.032282][T12842] RBP: 00007f33e56b0090 R08: 0000000000000000 R09: 0000000000000000 [ 310.032296][T12842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.032309][T12842] R13: 00007f33e49e6038 R14: 00007f33e49e5fa0 R15: 00007fffa5a8b548 [ 310.032345][T12842] [ 310.315373][T12849] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 310.459218][T12855] tipc: Enabled bearer , priority 0 [ 310.467968][T12856] syzkaller0: entered promiscuous mode [ 310.473582][T12856] syzkaller0: entered allmulticast mode [ 310.544452][T12859] syzkaller0: entered promiscuous mode [ 310.550090][T12859] syzkaller0: entered allmulticast mode [ 310.591985][T12855] tipc: Resetting bearer [ 310.630371][T12855] tipc: Disabling bearer [ 310.687228][T12868] tipc: Enabled bearer , priority 0 [ 310.717141][T12867] bridge_slave_0: left allmulticast mode [ 310.724815][T12867] bridge_slave_0: left promiscuous mode [ 310.732265][T12867] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.747485][T12867] bridge_slave_1: left allmulticast mode [ 310.756663][T12867] bridge_slave_1: left promiscuous mode [ 310.764023][T12867] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.803569][T12867] bond0: (slave bond_slave_0): Releasing backup interface [ 310.848840][T12867] bond0: (slave bond_slave_1): Releasing backup interface [ 310.850255][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 310.864208][ C0] lec:lec_tx_timeout: lec0 [ 310.869524][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 310.917620][T12867] team0: Port device team_slave_0 removed [ 310.945523][T12867] team0: Port device team_slave_1 removed [ 310.953209][T12867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.962409][T12867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.972264][T12867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.018315][T12867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.074790][T12867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 311.123101][T12862] syzkaller0: entered promiscuous mode [ 311.128990][T12862] syzkaller0: entered allmulticast mode [ 311.177255][T12883] tipc: Enabled bearer , priority 0 [ 311.187613][T12884] tipc: Resetting bearer [ 311.203968][T12861] tipc: Resetting bearer [ 311.231616][T12861] tipc: Disabling bearer [ 311.248021][T12872] tipc: Resetting bearer [ 311.271122][T12871] tipc: Disabling bearer [ 311.502241][T12904] tipc: Enabled bearer , priority 0 [ 311.532809][T12903] syzkaller0: entered promiscuous mode [ 311.538462][T12903] syzkaller0: entered allmulticast mode [ 311.563052][T12902] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 311.573845][T12664] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 311.583654][T12664] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 311.594498][T12903] tipc: Resetting bearer [ 311.613103][T12903] tipc: Disabling bearer [ 311.625206][T12906] syzkaller0: entered promiscuous mode [ 311.631315][T12906] syzkaller0: entered allmulticast mode [ 311.639418][T12664] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 311.694118][T12664] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 311.783441][T12912] syzkaller0: entered promiscuous mode [ 311.793739][T12912] syzkaller0: entered allmulticast mode [ 312.058429][T12929] tipc: Enabled bearer , priority 0 [ 312.066908][T12929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 312.103634][T12929] tipc: Resetting bearer [ 312.192718][T12928] tipc: Disabling bearer [ 312.370348][ T5839] Bluetooth: hci0: command tx timeout [ 312.391270][T12951] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 312.851214][T12980] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.872296][T12980] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.989508][T12982] syzkaller0: entered promiscuous mode [ 313.002566][T12982] syzkaller0: entered allmulticast mode [ 313.024272][T12980] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.052468][T12980] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.093944][T12989] tipc: Enabled bearer , priority 0 [ 313.109780][T12985] syzkaller0: entered promiscuous mode [ 313.118087][T12985] syzkaller0: entered allmulticast mode [ 313.134451][T12980] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.145628][T12980] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.166085][T12995] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 313.219059][T12980] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.229354][T12980] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.255821][T12983] tipc: Resetting bearer [ 313.281654][T12983] tipc: Disabling bearer [ 313.397424][T13004] __nla_validate_parse: 6 callbacks suppressed [ 313.397446][T13004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2011'. [ 313.625050][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 314.862002][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2013'. [ 314.884420][ T1169] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.903751][ T1169] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.947576][T13008] macsec2: entered promiscuous mode [ 314.968805][T13008] macsec2: entered allmulticast mode [ 314.975020][T13008] bridge0: entered allmulticast mode [ 314.981432][T13008] bridge0: port 3(macsec2) entered blocking state [ 314.988196][T13008] bridge0: port 3(macsec2) entered disabled state [ 314.998217][T13008] bridge0: left allmulticast mode [ 315.016469][ T1169] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.025278][ T1169] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.100307][ T1082] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.115876][ T1082] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.146480][ T1082] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.170732][ T1082] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.285483][T13034] tipc: Enabled bearer , priority 0 [ 315.299904][T13034] syzkaller0: entered promiscuous mode [ 315.311337][T13034] syzkaller0: entered allmulticast mode [ 315.320418][T13038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2023'. [ 315.322114][T13034] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 315.363750][T13032] tipc: Resetting bearer [ 315.413524][T13032] tipc: Disabling bearer [ 315.546904][T13051] syzkaller0: entered promiscuous mode [ 315.552573][T13051] syzkaller0: entered allmulticast mode [ 315.880198][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 315.888366][ C0] lec:lec_tx_timeout: lec0 [ 315.893579][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 315.909617][T13073] tipc: Enabled bearer , priority 13 [ 315.956368][T13073] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 315.975390][T13073] bond5: entered promiscuous mode [ 315.981418][T13073] bond5: entered allmulticast mode [ 315.987228][T13073] 8021q: adding VLAN 0 to HW filter on device bond5 [ 316.017896][T13077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2036'. [ 316.105321][T13081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2038'. [ 316.119837][T13080] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.164275][T13080] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.271918][T13080] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.282525][T13080] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.327654][T13090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2041'. [ 316.339272][T13090] netlink: 'syz.0.2041': attribute type 7 has an invalid length. [ 316.347328][T13090] netlink: 'syz.0.2041': attribute type 8 has an invalid length. [ 316.355428][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 316.367313][T13090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2041'. [ 316.378175][T13090] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2041'. [ 316.395390][T13080] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.405812][T13090] netlink: 'syz.0.2041': attribute type 5 has an invalid length. [ 316.417101][T13080] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.456284][T13092] syzkaller0: entered promiscuous mode [ 316.462227][T13092] syzkaller0: entered allmulticast mode [ 316.657371][T13080] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.676938][T13080] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 316.714078][T13098] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 316.849542][ T1169] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.858670][ T1169] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.892874][ T1082] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.910385][ T1082] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.979909][T12664] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.000696][T12664] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.028158][ T1169] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.037140][ T1169] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.125775][T13113] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 317.152345][T13117] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 317.816437][ T11] block nbd2: Possible stuck request ffff888024c2e000: control (read@0,1024B). Runtime 150 seconds [ 317.827674][ T11] block nbd2: Possible stuck request ffff888024c2e1c0: control (read@1024,1024B). Runtime 150 seconds [ 317.839180][ T11] block nbd2: Possible stuck request ffff888024c2e380: control (read@2048,1024B). Runtime 150 seconds [ 317.850783][ T11] block nbd2: Possible stuck request ffff888024c2e540: control (read@3072,1024B). Runtime 150 seconds [ 318.661059][T13200] __nla_validate_parse: 8 callbacks suppressed [ 318.661081][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2079'. [ 318.743422][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 318.754629][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'. [ 318.824063][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 318.847410][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'. [ 318.937167][T13215] syzkaller0: entered promiscuous mode [ 318.943179][T13215] syzkaller0: entered allmulticast mode [ 319.009130][T13220] tipc: Enabled bearer , priority 0 [ 319.060773][T13220] syzkaller0: entered promiscuous mode [ 319.066918][T13220] syzkaller0: entered allmulticast mode [ 319.090566][ C1] ------------[ cut here ]------------ [ 319.096411][ C1] ODEBUG: free active (active state 0) object: ffff8880562e2890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 319.110207][ C1] WARNING: CPU: 1 PID: 13216 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 319.119843][ C1] Modules linked in: [ 319.124098][ C1] CPU: 1 UID: 0 PID: 13216 Comm: syz.2.2087 Not tainted syzkaller #0 PREEMPT(full) [ 319.133562][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.143717][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 319.149591][ C1] Code: 4c 89 ff e8 77 e4 92 fd 4d 8b 0f 48 c7 c7 80 0f bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 4b f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 57 36 ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 319.169483][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 319.175752][ C1] RAX: 2387eed8e92aa000 RBX: dffffc0000000000 RCX: ffff88802e798000 [ 319.183994][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 319.192132][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 319.200187][ C1] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a390440 [ 319.208200][ C1] R13: ffffffff8bbf1100 R14: ffff8880562e2890 R15: ffffffff8b6cf600 [ 319.216265][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 319.225369][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.232010][ C1] CR2: 00007ff596011f98 CR3: 000000002f9de000 CR4: 00000000003526f0 [ 319.240173][ C1] Call Trace: [ 319.243501][ C1] [ 319.246390][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 319.252091][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 319.257428][ C1] kfree+0x115/0x6d0 [ 319.261404][ C1] rose_timer_expiry+0x4cb/0x600 [ 319.266390][ C1] ? call_timer_fn+0x155/0x5f0 [ 319.271347][ C1] call_timer_fn+0x17e/0x5f0 [ 319.275992][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 319.281617][ C1] ? call_timer_fn+0xbe/0x5f0 [ 319.286367][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 319.291559][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.296792][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.302047][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 319.307540][ C1] __run_timer_base+0x61a/0x860 [ 319.312983][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 319.318393][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 319.324761][ C1] run_timer_softirq+0xb7/0x180 [ 319.329692][ C1] handle_softirqs+0x286/0x870 [ 319.334627][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 319.339445][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 319.345080][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 319.350575][ C1] __irq_exit_rcu+0xca/0x1f0 [ 319.355218][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 319.360667][ C1] irq_exit_rcu+0x9/0x30 [ 319.365019][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 319.370701][ C1] [ 319.373644][ C1] [ 319.376613][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.382651][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 319.388071][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 f0 d1 c7 10 bb 0c a0 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 319.407829][ C1] RSP: 0018:ffffc9000b247528 EFLAGS: 00000282 [ 319.413980][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88802e798000 [ 319.422087][ C1] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000000 [ 319.430089][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8230d1c7 [ 319.438116][ C1] R10: dffffc0000000000 R11: fffff94000388bf1 R12: 000000000007117e [ 319.446133][ C1] R13: dffffc0000000000 R14: ffff88813fffa5d0 R15: 0000000000001000 [ 319.454160][ C1] ? page_table_check_clear+0x187/0x700 [ 319.459745][ C1] rcu_read_lock_held+0x15/0x50 [ 319.464660][ C1] page_ext_lookup+0xe7/0x180 [ 319.469402][ C1] ? page_table_check_clear+0x187/0x700 [ 319.475303][ C1] page_table_check_clear+0x278/0x700 [ 319.480885][ C1] ? vm_normal_page+0x10d/0x240 [ 319.485811][ C1] unmap_page_range+0x344b/0x4370 [ 319.491059][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 319.496479][ C1] ? mas_find+0xb0e/0xd30 [ 319.500974][ C1] ? unmap_vmas+0x144/0x580 [ 319.505538][ C1] unmap_vmas+0x399/0x580 [ 319.509927][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 319.514941][ C1] exit_mmap+0x240/0xb40 [ 319.519216][ C1] ? uprobe_clear_state+0x20f/0x290 [ 319.524493][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 319.529303][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 319.535019][ C1] ? __pfx_exit_aio+0x10/0x10 [ 319.539839][ C1] ? uprobe_clear_state+0x27c/0x290 [ 319.545188][ C1] __mmput+0x118/0x430 [ 319.549313][ C1] exit_mm+0x1da/0x2c0 [ 319.553746][ C1] ? __pfx_exit_mm+0x10/0x10 [ 319.558378][ C1] ? rcu_is_watching+0x15/0xb0 [ 319.563204][ C1] do_exit+0x648/0x2300 [ 319.567404][ C1] ? preempt_schedule+0xae/0xc0 [ 319.572354][ C1] ? preempt_schedule_common+0x83/0xd0 [ 319.577926][ C1] ? preempt_schedule+0xae/0xc0 [ 319.582864][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 319.588482][ C1] ? __pfx_do_exit+0x10/0x10 [ 319.593185][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 319.598630][ C1] do_group_exit+0x21c/0x2d0 [ 319.603401][ C1] __x64_sys_exit_group+0x3f/0x40 [ 319.608488][ C1] x64_sys_call+0x21f7/0x2200 [ 319.613263][ C1] do_syscall_64+0xfa/0xfa0 [ 319.617831][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.623122][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.629242][ C1] ? clear_bhb_loop+0x60/0xb0 [ 319.634021][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.639947][ C1] RIP: 0033:0x7f5ea678f6c9 [ 319.644409][ C1] Code: Unable to access opcode bytes at 0x7f5ea678f69f. [ 319.651470][ C1] RSP: 002b:00007fff069bec88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 319.659918][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ea678f6c9 [ 319.667962][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.676001][ C1] RBP: 00007fff069becec R08: 00000009069bed7f R09: 00000000000927c0 [ 319.684170][ C1] R10: 00000000000073ac R11: 0000000000000246 R12: 00000000000001b2 [ 319.692404][ C1] R13: 00000000000927c0 R14: 000000000004dd26 R15: 00007fff069bed40 [ 319.700467][ C1] [ 319.703519][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.710835][ C1] CPU: 1 UID: 0 PID: 13216 Comm: syz.2.2087 Not tainted syzkaller #0 PREEMPT(full) [ 319.720234][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.730344][ C1] Call Trace: [ 319.733659][ C1] [ 319.736533][ C1] dump_stack_lvl+0x99/0x250 [ 319.741151][ C1] ? __asan_memcpy+0x40/0x70 [ 319.745779][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.751107][ C1] ? __pfx__printk+0x10/0x10 [ 319.755786][ C1] vpanic+0x237/0x6d0 [ 319.759880][ C1] ? __pfx_vpanic+0x10/0x10 [ 319.764426][ C1] panic+0xb9/0xc0 [ 319.768193][ C1] ? __pfx_panic+0x10/0x10 [ 319.772658][ C1] __warn+0x31b/0x4b0 [ 319.776683][ C1] ? debug_print_object+0x16b/0x1e0 [ 319.781925][ C1] ? debug_print_object+0x16b/0x1e0 [ 319.787239][ C1] report_bug+0x2be/0x4f0 [ 319.791607][ C1] ? debug_print_object+0x16b/0x1e0 [ 319.796827][ C1] ? debug_print_object+0x16b/0x1e0 [ 319.802093][ C1] ? debug_print_object+0x16d/0x1e0 [ 319.807320][ C1] handle_bug+0x84/0x160 [ 319.811679][ C1] exc_invalid_op+0x1a/0x50 [ 319.816221][ C1] asm_exc_invalid_op+0x1a/0x20 [ 319.821105][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 319.826964][ C1] Code: 4c 89 ff e8 77 e4 92 fd 4d 8b 0f 48 c7 c7 80 0f bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 4b f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 57 36 ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 319.846881][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 319.852985][ C1] RAX: 2387eed8e92aa000 RBX: dffffc0000000000 RCX: ffff88802e798000 [ 319.861150][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 319.869153][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 319.877228][ C1] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffffffff8a390440 [ 319.885225][ C1] R13: ffffffff8bbf1100 R14: ffff8880562e2890 R15: ffffffff8b6cf600 [ 319.893221][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 319.898899][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 319.904486][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 319.909642][ C1] kfree+0x115/0x6d0 [ 319.913594][ C1] rose_timer_expiry+0x4cb/0x600 [ 319.918572][ C1] ? call_timer_fn+0x155/0x5f0 [ 319.923449][ C1] call_timer_fn+0x17e/0x5f0 [ 319.928159][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 319.933642][ C1] ? call_timer_fn+0xbe/0x5f0 [ 319.938358][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 319.943495][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.948720][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.953934][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 319.959414][ C1] __run_timer_base+0x61a/0x860 [ 319.964312][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 319.969709][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 319.976158][ C1] run_timer_softirq+0xb7/0x180 [ 319.981142][ C1] handle_softirqs+0x286/0x870 [ 319.985931][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 319.990721][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 319.996023][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 320.001248][ C1] __irq_exit_rcu+0xca/0x1f0 [ 320.005943][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 320.011182][ C1] irq_exit_rcu+0x9/0x30 [ 320.015440][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 320.021090][ C1] [ 320.024030][ C1] [ 320.026966][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.032959][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 320.038347][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 f0 d1 c7 10 bb 0c a0 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 320.057981][ C1] RSP: 0018:ffffc9000b247528 EFLAGS: 00000282 [ 320.064156][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88802e798000 [ 320.072487][ C1] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000000 [ 320.080477][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8230d1c7 [ 320.088466][ C1] R10: dffffc0000000000 R11: fffff94000388bf1 R12: 000000000007117e [ 320.096647][ C1] R13: dffffc0000000000 R14: ffff88813fffa5d0 R15: 0000000000001000 [ 320.104722][ C1] ? page_table_check_clear+0x187/0x700 [ 320.110677][ C1] rcu_read_lock_held+0x15/0x50 [ 320.115568][ C1] page_ext_lookup+0xe7/0x180 [ 320.120283][ C1] ? page_table_check_clear+0x187/0x700 [ 320.126044][ C1] page_table_check_clear+0x278/0x700 [ 320.131434][ C1] ? vm_normal_page+0x10d/0x240 [ 320.136306][ C1] unmap_page_range+0x344b/0x4370 [ 320.141387][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 320.146785][ C1] ? mas_find+0xb0e/0xd30 [ 320.151284][ C1] ? unmap_vmas+0x144/0x580 [ 320.155803][ C1] unmap_vmas+0x399/0x580 [ 320.160159][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 320.165141][ C1] exit_mmap+0x240/0xb40 [ 320.169405][ C1] ? uprobe_clear_state+0x20f/0x290 [ 320.174651][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 320.179458][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 320.185231][ C1] ? __pfx_exit_aio+0x10/0x10 [ 320.189931][ C1] ? uprobe_clear_state+0x27c/0x290 [ 320.195149][ C1] __mmput+0x118/0x430 [ 320.199248][ C1] exit_mm+0x1da/0x2c0 [ 320.203343][ C1] ? __pfx_exit_mm+0x10/0x10 [ 320.207956][ C1] ? rcu_is_watching+0x15/0xb0 [ 320.212740][ C1] do_exit+0x648/0x2300 [ 320.216927][ C1] ? preempt_schedule+0xae/0xc0 [ 320.221799][ C1] ? preempt_schedule_common+0x83/0xd0 [ 320.227298][ C1] ? preempt_schedule+0xae/0xc0 [ 320.232191][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 320.237611][ C1] ? __pfx_do_exit+0x10/0x10 [ 320.242261][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 320.247656][ C1] do_group_exit+0x21c/0x2d0 [ 320.252329][ C1] __x64_sys_exit_group+0x3f/0x40 [ 320.257382][ C1] x64_sys_call+0x21f7/0x2200 [ 320.262077][ C1] do_syscall_64+0xfa/0xfa0 [ 320.266629][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.271932][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.278117][ C1] ? clear_bhb_loop+0x60/0xb0 [ 320.282828][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.288789][ C1] RIP: 0033:0x7f5ea678f6c9 [ 320.293382][ C1] Code: Unable to access opcode bytes at 0x7f5ea678f69f. [ 320.300448][ C1] RSP: 002b:00007fff069bec88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 320.308983][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ea678f6c9 [ 320.317142][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.325163][ C1] RBP: 00007fff069becec R08: 00000009069bed7f R09: 00000000000927c0 [ 320.333161][ C1] R10: 00000000000073ac R11: 0000000000000246 R12: 00000000000001b2 [ 320.341146][ C1] R13: 00000000000927c0 R14: 000000000004dd26 R15: 00007fff069bed40 [ 320.349234][ C1] [ 320.352676][ C1] Kernel Offset: disabled [ 320.357024][ C1] Rebooting in 86400 seconds..