last executing test programs: 4.136194005s ago: executing program 3 (id=4440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x46, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a310000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440500000000600054050640000050007004685000005000100060000000900020073797a3100"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000f00)={{}, 0x3, 0x858, 0x232a}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0010114}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x38, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x401], 0x0, 0x2000000026fe, 0x100000, 0x1}}, 0x40) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f0000000e40)=ANY=[@ANYBLOB="18400000fbffffff0000000000000000e3f13fc1af10f857841aa5d5b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0, 0x4, 0xa2, &(0x7f0000000540)=""/162, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x1, 0x3, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1], 0x0, 0x10, 0x20000000}, 0x94) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) unshare(0x22020600) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000500000008000b4000000000200004801c0001800b00010072656a65637400000c00028008000140000000050900010073797a30"], 0xbc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="3a0200000a0000000000000087a56813f18d6fd10b000000950000000000000054ef60d99a634de559e017824f4e8a0ca5cccce648cfd7e4463d818f2d644ac415d815978c61dc6769e3b077bdb3f846bb6e5ef0bf3591b8432fd20204733f5bb04e599fcbb89cf3fa7170438a7d1719aa534a31be5073a1b55b8b4e227fa497c2cbafac891c2e5ffe1e15a9846e337366b2a60bcbf9b75b1c1eb9221c38e401bbdb8ed6a8a34e25023b8578e7c4c34ee581906cc93fe8034aba82013850ff39cb7ab69e4c7cb90fa15093f5a893cf44a0289ce2a771911c4855179916637af8b63567fe7569553a389cf3b78b5a9376d28af8a5"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x14, r8, 0x8, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x4) (async) setsockopt$inet_int(r7, 0x0, 0x19, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 4.025127889s ago: executing program 2 (id=4442): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040) 3.843306055s ago: executing program 2 (id=4443): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xcb}) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0xb, 0x1, 0x3, 0x9, 0x90000001}) r1 = socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000280), &(0x7f00000002c0)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0xa00b}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0x8, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0xfff3, 0xf}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4054}, 0x48010) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0xf5ff}], 0x1, 0x2001, 0x0) shutdown(r3, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000001c0)="240000001a005f04deb14e7f309b1484ebd259634938a16b8020000000200000a5f2f360", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x8000000, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6260503d78d24cfc"], 0x48) r6 = socket(0x22, 0x5, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x72, r7}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="0401000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14, 0x80000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) shutdown(r2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24000000040000008c1414040000000500000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x440048c0}, 0x40081) 3.543535378s ago: executing program 1 (id=4444): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r5, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@bridge_getneigh={0x30, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_NET_NS_PID={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@private2, r7}, 0x14) socket$inet6(0xa, 0x80002, 0x0) socket$igmp(0x2, 0x3, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 3.316739135s ago: executing program 2 (id=4447): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x719f, 0x0, 0x0, 0xfffffffffffffc92, 0x0, 0x0}, 0x18) clock_gettime(0x87f60f7a31614e95, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4011) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x600) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000053400128014000180090001006c61737400000000040002801c000180090001006c617374000000000c000280080001400000000008000340000001"], 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x20050800) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup=r6, r6, 0x2f, 0x4, 0x4, @void, @value=r6}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x0, 0x52, 0xd3, &(0x7f0000000180)="0825497322946336276b15eb26ba06caa6d02c197ea263dee28260606e1f2eaacf7c4c3bf485ccf42a9e3673734a10efaebcc1b6992d58a2adc7e2ab5e26588f853897fae32a6735e61ebb9b1c06b7da439f", &(0x7f0000000380)=""/211, 0x1, 0x0, 0x15, 0xde, &(0x7f0000000480)="cc743468e4b7289a52c514ea0b35d9c4a05b73b95d", &(0x7f0000000600)="690b4c6a35ecad4ec21eb98afc2058efb96de877a3ca2ba9473f60a43b78cba524d90a42894bf1f4ed83a6453972b5e089886c19cbda3b87170fae25e975734c4c94a652fd9a5ea74a4c3c59780c0bcc450a452d17f6a0f29567113e5e7b5c8b18b62762e3bafd2ee1fbbc9bd0908335a33650def71308ed259f4997e37f7cfbce7bcc6f7ec87b6014b4fcce4dc25d2c8f2ab17824141392105c52d7fd66bdf1954a45df04c3d16b23be59dec8f3e7d53c854a663c0b258bd7800cb8991ab6a890706afe190c8ddbb8570eb2c819fd25645ce443f0cb9f5bc4f7378b16e8", 0x2, 0x0, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r10}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r12, &(0x7f0000000480), 0x0}, 0x20) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000004a00010000000000000000000a00806e0800000000000000180001804c"], 0x34}}, 0x0) 2.706767169s ago: executing program 1 (id=4449): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x4100, 0x4) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="93d90400040300", 0x7}, {&(0x7f00000001c0)="2ff7bd5d2eaafa", 0x7}], 0x2) 2.622913574s ago: executing program 2 (id=4450): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f00000004c0)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2400000004000000040064000800", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 '], 0x50) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000480)={0xc, 0x101, 0x20000001, 0x2}, 0x10) write(r2, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000004080009000d000000", 0x24) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044800}, 0x24000090) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x100, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000011) 2.493500336s ago: executing program 4 (id=4451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x20000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) ioctl$FIOCLEX(r0, 0x5451) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000006114c8000000000004000000000000009500000000000000d6ba06e509fde0de259c5d12e290ead229205dc98aabf3cd013e8f2f8a45fa3318584120d350994e347a6244ee7cc00622125eefa9ce144bc23c44e156"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x59, '\x00', r1, @fallback=0x9}, 0x94) 2.441069247s ago: executing program 1 (id=4452): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x4, 0x2, 0x4, {0xa, 0x4e21, 0x2, @local, 0x838}}}, 0x32) (async, rerun: 64) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r3, 0x40047452, 0xffffffffffffffff) r4 = accept4(r0, 0x0, 0x0, 0x800) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0x80004000, 0x9ffffc}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f00000000c0)="76657468303a300000000000000000000200004891") (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000d609000000000000040000048911bc000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x633c}, 0x94) (rerun: 32) sendmsg$rds(r4, &(0x7f0000007700)={0x0, 0x0, &(0x7f0000007640)=[{&(0x7f0000000400)=""/71, 0x47}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) write(r7, 0x0, 0x0) connect$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x9, 0x2, 0x1c, {0xa, 0x4e23, 0x10039, @dev={0xfe, 0x80, '\x00', 0xa}, 0x8eab}}, 0x24) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) (async, rerun: 64) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) 2.383225181s ago: executing program 3 (id=4453): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xe800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xe70}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000100008500000000000000000300000000000000000000000000000901"], 0x0, 0x4a, 0x0, 0x1}, 0x28) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r5, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/135, 0x87, 0x0, &(0x7f0000000600)=""/76, 0x4c}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) write(r8, &(0x7f0000000640)="074e999a808280c9258607c474973e7c060008f30700eb22cddc7984e8c28d37622242e8a6e7f815d5c3e2ceb85a4ec98b914f553f688628c0ede39f1cc2a00f6dcab8a5e0eed342027ac1aa7cc7155347fe", 0x52) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r11, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) close(r4) 2.276990627s ago: executing program 4 (id=4454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_newnexthop={0x30, 0x68, 0x401, 0x70bd28, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x44084}, 0x24018810) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x184}}, 0x0) 2.096242682s ago: executing program 4 (id=4455): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00S', 0x2}], 0x1}}], 0x2, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x64, 0x2, [@TCA_CGROUP_EMATCHES={0x60, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x50, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x25, 0x5, "36ed201e8271eed272650579f8a32bfd8156dc7095c6b6cc4c22c477b1015c0e2f"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000640)={0x2, {{0x2, 0x4e24, @rand_addr=0x64010100}}, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x24, r6, 0x701, 0x2070bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x24}}, 0x40) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x80, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_IE={0x42, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x8, @device_b, 0x6, @value=@device_b, 0xe, 0x1ff, @device_a, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x0, 0xd}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x80}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x68, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4002) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a00010025bd7000fbdbdf250a0010fffd01fe0400060000080010000200000008001900", @ANYRES32=0x0, @ANYBLOB="6ff0d26688d2ae3f565c319034c914aa8fbd866a006f01504d250550f64ccdd7596a474ae35d1dd232e1a7195eb34f691b9cf41c43d034a1d9651c8b9bddec25a236215726639e316884786c4bc3df5e1938ef0807b3f341f04789"], 0x2c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000f00)={0x0, "dc76c04e8d497742198e53723387e0bd"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001f00)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002d00)={{}, 0x0, 0x38, @inherit={0x78, &(0x7f0000000940)={0x1, 0x6, 0xbe14, 0x9, {0x22, 0x1, 0x5, 0x7, 0xffffffffffffffff}, [0x7, 0x7, 0x6981, 0x7, 0x6, 0x8]}}, @devid=r11}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000001cc0)={{r8}, 0x0, 0xc, @inherit={0x68, &(0x7f0000000bc0)={0x1, 0x4, 0x400, 0x2, {0x0, 0x7, 0x2, 0x0, 0x6}, [0x8, 0xffff, 0x7, 0x9]}}, @devid=r11}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x9c8523e85c5734c2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r10, @ANYBLOB="04002dbd7000fbdbdf250400000005000a000100000008000100", @ANYRES32=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8844) 2.093721067s ago: executing program 0 (id=4456): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x1}}, 0x2e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfe01}, 0xe) (async) listen(r0, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000012c0)=0xe) (async) accept4(r0, 0x0, 0x0, 0x80000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="02000000041a4532231aad5163532fd0029314cb", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007baaf8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0)="656a08575b1333476607f435fd8e74963ec68a7e8daa53d533fb3230d178fc5d81be94bad3d9f9748d1bbaaafd7fe94d7531eec8bebaf9f069e448f9f86158e1455b6a43beafadc3798acf3b2cb97c6aa98786ad02d8d1c72485227110532936893fa9e9b101b5c7402d6b2137de41bf1ab56a66848e377af71b3c75892aad12977ea6f30e57c97f6493fd5bb12856571a56fb945c9e3c4d6a6ecc2c3b9f54219e2a61cc57aee2928a9a6feaa197424b832c4d772e5c6a91dc2cff4da480ece607a91a24297197546c7b34bda4f5793ecca4a8b3cadf52d7d561fd960aac2798febd4bb247e90e99481160faed5817c3a7fa", &(0x7f00000002c0)=@buf="c8be9ed93bfd835934c2adabd74ca7156618b49af2f1472e1f968ebbf5f6d285a6d456a0175f97ec019ae77e4b70cfbee7dc1842da4cfa3b9411cd832631a21696c66f4eaa1fe7d456a14e70308b508394df", 0x4}, 0x20) 2.069960226s ago: executing program 2 (id=4457): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}]}}}}}}}, 0x0) r5 = getpid() r6 = syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/net\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r7, 0x3, 0x182a}, &(0x7f00000001c0)=0x8) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x4, 0x5, [{{@in6=@private0, 0x4d5, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x4, 0x3, 0xd, 0x5fc16016, 0x40000000, 0x2}, {{@in=@local, 0x4d6, 0x3c}, 0xa, @in=@multicast1, 0x3502, 0x4, 0xb2dc6f550f467a3d, 0x5, 0x4, 0x3ff, 0x7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc3}) read(r0, &(0x7f0000000000)=""/176, 0xb0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="5108caea309d3e4d428d01eb280b54b2c8a02fba8d416602d54fc92a7d7509e3d77d67cc77b2151691efe854ae0a85d7242e16f7ad620793304fa350"], 0x0) 1.827067406s ago: executing program 0 (id=4458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, &(0x7f0000000ac0)=0x8, r1, 0x0, 0x4, 0xf) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r0, 0x4, r0}, 0x10) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e00)="b9ff0200000028eeb5845591b318", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) (rerun: 32) 1.668999272s ago: executing program 4 (id=4459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a300000001014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) 1.570557075s ago: executing program 4 (id=4460): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c00000401cb80100001800c00108008000b8004"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000600)={r3, 0x1, 0x6, "bf4983e3a311"}, 0xe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r6}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000004a00010000000000000000000a00806e0800000000000000180001804c"], 0x34}}, 0x0) 1.536757399s ago: executing program 0 (id=4461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="08000800070002000000140000ee457f001c00660000401190780a010102ac1414164e200890786877aa013695bb21bf02ffd7818583d355fec4e128e2d847f7f2c2fe454442d2f856187ea35c1d9e604d4674f07deb11da30d5441f47ddec955a8528bf9aa906c5bdd745bbf3fa9464566558b651d2754b0d4bdabff1abed02fca49a153b2b116858d5fa020c76c67d2db0cf8fea7ba169b6668952a8e721ef062278693860a217aa052d6b5d8e9e8daea2b55e783ec7061bef7a079e9218f9e5e7dcdaaa45e0174a932e47de002edc885680e6fde13551c730839dd1e0ca2f6447da4686fdd466f4"], 0x2a) poll(&(0x7f0000000040)=[{r2, 0x601}, {r1, 0x10}, {r0, 0x8010}, {r3, 0x30}, {r0, 0x1000}], 0x5, 0xffffffff) 1.361063922s ago: executing program 3 (id=4462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x3405f8c17b4743e3, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000000)=']]:-@/,\x00', 0x240040, &(0x7f00000000c0)={@align=0x351c, {0x4, 0x8, 0x0, 0x8000000000000000}}, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 1.33698404s ago: executing program 1 (id=4463): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$tipc(r2, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6", @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x75ddbfdedb4202d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2009}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x240040c1) syz_emit_ethernet(0x133, &(0x7f0000000580)={@local, @local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0xf9, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, {[], {0x4e22, 0x4e22, 0xf9, 0x0, @opaque="24ebe114f6ff9df4140f23e2ad086a28ace6c099bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a944721cd27bd55e1025c025ae142fb077377a065d1fba82cd9d817eae33cb59002610b1e239a86aa11d1531f2a2e66315b2a7d5987debcf1f67c44db62356268c247f167e36beec9129f5147a87086c04f880c8ffe13a7743fe00200a3b493d5a7227fb45c46ecc3bb9e792868d39377ef2bed0779a281f3393c8ccc6f8c522542014cb75e344dd0d8b672e09b08ceb4b9f7be493bdbe2000000000000000000000021fe805a4c5783b7e0b68b05627399a05f704cc1456872217224fb874f8d"}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x150, r9, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_OURS={0xe8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, "1b"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "cfeaba09c41850ab1e2de60831c035c38b76bfaa8740c3ef675aab3232a04e819cd0943567d5a4941f4c5768f2c1f946317dee150719eb7fb179f5f2c720a1c6d3eb2cf0c91214b66692c1f9437f3abc0ec3d472c7e02c908d74b2abe4439bf7c8b1e472f07257ed612ccf3848a7b3c88ad760738b3ae42361e402ec6c000521a5036e872b8a42ac1c90d5845bb4bd22edc926c0fdc14dcbc3d442edc24d3d31bbfe343a4f39ab8c18b0a9557192205eb59af44d"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14fcffff2600010029bd70000000000006010000"], 0x14}}, 0xc000) 1.17757813s ago: executing program 3 (id=4464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x40}}, 0x382ca676999eab3c) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x8090) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r3 = gettid() sendmsg$nl_generic(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x340, 0x3c, 0x200, 0x70bd2c, 0x25dfdbff, {0x1b}, [@generic="5b2fda6832bd0654ec3962572ae35bd1d7a747aa21b1d32bbb29742ec07ef48a9fd29bdab8bb246466c552f40706a2ffbc05ea59902ae009897c64b06b3f53963fde", @generic="11a040fbf67c9c528b2f10086eb2b35e14ce941f579dc5d91eac1c334bac00fc05a30ec1ca7b60a64ddf061adea8caa712f1d822d6b7d21f0ae6cecb189f242eb61bff546b34fcf3da12c72857c25696e0ae9897601df655c9db08672f85f422f7fe0160f0b416c4ef4e5d19523cd37bcf5090c7160d202f5af0632aaf8f8698075a4c8097e411bc48b4029e3d3e672abdc063de962c5b983acfb83dc6bf6b814ac7582c21542bce196724a2", @generic="9b2f120ac3c4dd8ae6616fe50cf1326dabe091e64c70b346aeb2be665d0584d12c6dc084a5b7de8e49c43eb88b50bcc2bd60a2ff7fd2abfb7f7c9fb9cf1903db1eecab7a267bb48cf778b3d4d9eab0a1e0b9362bbe9a1fc9534aff22e6e83ba52c31cdc238cf15d34ef83af80c166e9e2534d20cb547f98676f9446a9c4f5b57a96f64d41cdb459d0e", @nested={0x8b, 0x82, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0xc3, 0x0, 0x0, @uid=r2}, @generic="f228f75e21e4186f4777bb02718fd4ade51f440242ad0d6b355f8d0eff231afe78e64dfa887dbc3c65969d31d773bd2c95f2f168e0a196938b846659e1ea71ee2c87ec9484ec066f6f2d7565284d9a1ebef43e22a60cdda876934303d82abcbeb5fb49c9870d23e936b71aa50683b3f1dd6563c76954ab"]}, @typed={0xf7, 0xcb, 0x0, 0x0, @binary="c82278323cf4abd1130334505308f5df0f01a4fc5e68dae837521f7b04710372030a1c488d5a52c1516d633385bafc9b263fb6aac911a054c0904ff85f8e352a75b9056b84e33c37291312cdd3ca9a6fcf4ca3b1c90429a687be08e7a25f3eee2c756da4c1782dc397ceddb23f85f78193fa96878026f018269a3d7403d1970bc59dec3d18f1ba349ecffe1385b4f372bfc731f876615663cc18a1c68507f5fbd462b8f43a00782c332eda36fecd5181f77c57cf038dee60886e546bc42d530e5e366b719bf3b4ec4d04e170ef8d77a0aa49dc54cd897fb238a41ceaaf850a4b43d667ce0ca143d3897131170b35932ddb4356"}, @nested={0x18, 0x18, 0x0, 0x1, [@typed={0x8, 0xd5, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x143, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x13}]}, @typed={0xc, 0xad, 0x0, 0x0, @u64=0x6}, @typed={0x9, 0x28, 0x0, 0x0, @str='SEG6\x00'}]}, 0x340}, 0x1, 0x0, 0x0, 0x4084}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x4000001) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000800)={0x3, 0x2, 0xa}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0xffff}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x25}}]}, 0x4c}}, 0x4008000) sendmsg$NFT_BATCH(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_USERDATA={0x10, 0x7, 0x1, 0x0, "5aab60b6bc2f8522ec5809e3"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x9, 0x19, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0xc, 0x7, 0x5, 0x2, 0xffffffffffffffff}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000d00)='syzkaller\x00', 0x1, 0x37, &(0x7f0000000d40)=""/55, 0x41100, 0x6a, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x3, 0x7, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000dc0)=[r9], &(0x7f0000000e00)=[{0x2, 0x4, 0x6, 0xf}, {0x3, 0x2, 0xe, 0xa}, {0x2, 0x5, 0xa, 0x5}, {0x5, 0x5, 0xf, 0xc}, {0x5, 0x5, 0xf, 0x6}, {0x0, 0x1, 0xe, 0x7}, {0x0, 0x3, 0x3, 0xa}, {0x5, 0x4, 0x4, 0x3}], 0x10, 0x6}, 0x94) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000f40)={0x3, 0x0, 0x9}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r10, &(0x7f0000000f80)="7c7f1f68d6690ebaedc6da838fa6753ab578491ef84caf1f3b2de877e6103324e53c73b04b8a0ff9d397a995210a1f40f7943a8c4df210fa6f6f4c3c61f7ff25952387fca091e0a7aed191aa6c241cfac89aa57654034967491989a35e1f89e95f5b4190120981e90c0f9fc176838b76e176f383f5b01e7ffe5e8c109a1675d9621a7579faa4e803a0a3002308521b8d55ee58b48f9b221bc7150fc5550bdf0e72205239a0960847c3f4f00b1e576503c7dea5aa1dd3dfc6646326e4fa66ddfd76b9913a61ff81a50ebd027ca0d02a8109d1e8dc2626489881", 0xd9, 0x4010, &(0x7f0000001080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @mcast2, 0x3}}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000001100)={{{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x4e23, 0x80, 0x4e24, 0x4730, 0x2, 0x80, 0x20, 0x33, 0x0, r2}, {0x9, 0x1, 0xba, 0x8000, 0x90, 0x2, 0x5, 0x7}, {0x6, 0x1, 0x8, 0xfffffffffffffffb}, 0x4, 0x6e6bbb, 0x3, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x4d3, 0x2b}, 0x2, @in6=@empty, 0x3507, 0x3, 0x2, 0x1, 0xfffffffc, 0x8, 0xfffffffc}}, 0xe8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000001200)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20048090) getsockname$packet(r9, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f0000001400)=0x3, 0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), r0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r11, 0x20, 0x70bd2a, 0xa38b, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0), r0) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f00000018c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001600)={0x278, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2399}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7b8917ccc60f2106c6572b4a9de09d709f6b1c910b89a384f3"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd392}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb61}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x14ca}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc94}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 1.113078865s ago: executing program 0 (id=4465): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000003c0)={0x5, 0x0, 0x100000000, 0x1, 0x8}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x80, 0x7800, 0x0, 0x8, {{0x9, 0x4, 0x1, 0x10, 0x24, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@end, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x7, 0x12, [@remote]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x0, @void}, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000400)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x3, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0xfc, 0xdc, "1bc2"}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.028451749s ago: executing program 2 (id=4466): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x32, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000ff7f000000000000be00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70c0000000000009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0x6, 0x14, &(0x7f0000000a80)=""/20, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x1, 0x6, 0x7fff, 0x410000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0xffffffffffffffbf) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0x3, "91abc12404cf37"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'macvlan0\x00', @broadcast}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r7], 0x3c}}, 0x0) (async) close(r7) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) (async) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r12, 0x40047438, &(0x7f0000000240)=0x2) ioctl$PPPIOCBRIDGECHAN(r12, 0x40047435, &(0x7f0000000200)=0x2) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0xde, 0x85, 0xfffff038}, {0x6, 0xfc, 0x0, 0xffffffff}]}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r13, 0x6, 0x1a, 0x0, 0x0) (async, rerun: 32) r14 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 997.97121ms ago: executing program 3 (id=4467): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000002000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000040601010000000000000000010000050500010007000000e5b8313d5168e287ff1474249a839e2d448342e6f1b190e88642acafdf1e0b482d4031be5ba7b48c2df454732c7158846ade9a8697c7dd58fe112439f86b13bf31e6b92965c439518c9c34eb0ed885f5a1a22788ab0bca77bcc3f8218fef39d0714a79c0303981e91eaff47db43139cb57971fbd7d07"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2886}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x1cf94b1f273faa1b}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x2400c000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 604.328582ms ago: executing program 1 (id=4468): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x100000) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x3d, "d8520ef034d5819c53aeed62d565f490b0d0c09b2203b505f534a64e171cf94ff7d044d8b9793097d11b49d81cd37f92bbd34dc356fe4f70da3480caeb"}, &(0x7f00000003c0)=0x45) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000400)={r5, 0x4, 0x30}, &(0x7f0000000440)=0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @remote}, 0x1c, 0x0}, 0x40d0) 520.013135ms ago: executing program 4 (id=4469): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x2, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRES8=r1], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000080)={0x2, [0x0, 0x0]}) recvmmsg(r5, &(0x7f0000006100)=[{{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000180)=""/214, 0xd6}], 0x1}, 0x6}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0000ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd2, &(0x7f0000000a00)=""/210, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000000740)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/139, 0x8b}], 0x1, &(0x7f00000006c0)=""/90, 0x5a}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000980)=@assoc_value, &(0x7f0000000900)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000880)={{r1, &(0x7f00000009c0)='\xee\x9e)\x04\x00'/17, 0x80, &(0x7f0000000480)={@align=0x101, {0x101, 0xff75, 0x7fff, 0x3}}, 0x8, &(0x7f0000000500), &(0x7f0000000780)=0x3ff}, 0x1, &(0x7f0000000840)=[{0x1, 0x3, &(0x7f00000007c0)='\\-\x00', &(0x7f0000000800)="80ed2c3e48222b567cd5456cd8a197767d59906067c402e677a25e3889961b601887ff", 0x23, 0x20}]}) mkdirat$cgroup(r8, &(0x7f00000004c0)='syz1\x00', 0x1ff) 337.464131ms ago: executing program 0 (id=4470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a30fffffff514000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) 199.544972ms ago: executing program 1 (id=4471): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8, 0x6}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x80000, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) shutdown(r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x18, r10, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24048011}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={r11, 0xa, 0x20, 0x2000000002, 0x60ea2cdc}, &(0x7f0000000840)=0x18) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 80.256835ms ago: executing program 3 (id=4472): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x59}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1c, 0xd601, 0x9}}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x48, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 0s ago: executing program 0 (id=4473): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x17, 0x1000, 0x7, 0xc98}}) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r2, 0x89e0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0xc, 0x1ffffdfb}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x5f, 0x51]}}, 0x0, 0x2c, 0x0, 0x1, 0x9}, 0x28) (async) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000000), 0x4) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x4) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000500)=0xf338cc85023ba7e3) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): [T20752] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3717'. [ 508.532776][T20756] netlink: 'syz.0.3719': attribute type 10 has an invalid length. [ 508.532795][T20756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3719'. [ 508.533144][T20752] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3717'. [ 508.538407][T20752] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3717'. [ 508.546004][T20752] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3717'. [ 509.139740][T20778] nbd: socks must be embedded in a SOCK_ITEM attr [ 509.140000][T20778] block nbd0: shutting down sockets [ 509.360806][T20784] bond7 (unregistering): Released all slaves [ 509.566715][T20802] netlink: 'syz.1.3731': attribute type 10 has an invalid length. [ 509.617942][T20807] netlink: 'syz.1.3731': attribute type 10 has an invalid length. [ 509.622036][T20802] team0: Port device dummy0 added [ 509.671184][T20807] team0: Port device dummy0 removed [ 509.720697][T20805] syzkaller0: entered promiscuous mode [ 509.720722][T20805] syzkaller0: entered allmulticast mode [ 509.724039][T20809] syzkaller1: entered promiscuous mode [ 509.724061][T20809] syzkaller1: entered allmulticast mode [ 509.788154][T20805] 0: reclassify loop, rule prio 0, protocol 700 [ 509.972887][T20778] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 509.972912][T20778] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 510.321450][T20778] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 510.321476][T20778] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 510.356679][T20778] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 510.356703][T20778] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 510.398873][T20778] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 510.398898][T20778] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 510.422294][T20827] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 510.468565][T20827] ÿÿÿ: renamed from bond_slave_0 [ 510.606897][T20831] syzkaller1: entered promiscuous mode [ 510.606924][T20831] syzkaller1: entered allmulticast mode [ 510.645675][T20831] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 510.689740][T20842] bond4 (unregistering): Released all slaves [ 511.347785][T20875] FAULT_INJECTION: forcing a failure. [ 511.347785][T20875] name failslab, interval 1, probability 0, space 0, times 0 [ 511.347819][T20875] CPU: 0 UID: 0 PID: 20875 Comm: syz.2.3752 Not tainted syzkaller #0 PREEMPT(full) [ 511.347840][T20875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 511.347851][T20875] Call Trace: [ 511.347859][T20875] [ 511.347867][T20875] dump_stack_lvl+0xe8/0x150 [ 511.347899][T20875] should_fail_ex+0x410/0x560 [ 511.347925][T20875] ? __alloc_skb+0x1db/0x7a0 [ 511.347948][T20875] should_failslab+0xa8/0x100 [ 511.347975][T20875] ? __alloc_skb+0x1db/0x7a0 [ 511.347995][T20875] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 511.348023][T20875] ? __alloc_skb+0x18d/0x7a0 [ 511.348047][T20875] ? __alloc_skb+0x1db/0x7a0 [ 511.348075][T20875] __alloc_skb+0x1db/0x7a0 [ 511.348104][T20875] netlink_sendmsg+0x5d4/0xb40 [ 511.348135][T20875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.348160][T20875] ? apparmor_socket_sendmsg+0x98/0x360 [ 511.348185][T20875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.348204][T20875] sock_sendmsg_nosec+0x14e/0x190 [ 511.348225][T20875] ____sys_sendmsg+0x54e/0x850 [ 511.348265][T20875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.348301][T20875] ? import_iovec+0x73/0xa0 [ 511.348341][T20875] ___sys_sendmsg+0x2a5/0x360 [ 511.348367][T20875] ? __lock_acquire+0x747/0x2de0 [ 511.348394][T20875] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.348461][T20875] ? __fget_files+0x2a/0x420 [ 511.348488][T20875] ? __fget_files+0x3a2/0x420 [ 511.348526][T20875] __x64_sys_sendmsg+0x1b1/0x290 [ 511.348557][T20875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.348606][T20875] do_syscall_64+0x166/0x520 [ 511.348635][T20875] ? trace_irq_disable+0x3b/0x140 [ 511.348655][T20875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.348676][T20875] ? clear_bhb_loop+0x70/0xc0 [ 511.348701][T20875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.348722][T20875] RIP: 0033:0x7f411959e159 [ 511.348741][T20875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.348758][T20875] RSP: 002b:00007f411a39a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.348781][T20875] RAX: ffffffffffffffda RBX: 00007f4119825fa0 RCX: 00007f411959e159 [ 511.348797][T20875] RDX: 0000000004000804 RSI: 00002000000000c0 RDI: 0000000000000003 [ 511.348811][T20875] RBP: 00007f411a39a090 R08: 0000000000000000 R09: 0000000000000000 [ 511.348824][T20875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.348838][T20875] R13: 00007f4119826038 R14: 00007f4119825fa0 R15: 00007ffed92cb198 [ 511.348870][T20875] [ 511.683731][T20882] FAULT_INJECTION: forcing a failure. [ 511.683731][T20882] name failslab, interval 1, probability 0, space 0, times 0 [ 511.683763][T20882] CPU: 0 UID: 0 PID: 20882 Comm: syz.4.3754 Not tainted syzkaller #0 PREEMPT(full) [ 511.683786][T20882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 511.683798][T20882] Call Trace: [ 511.683807][T20882] [ 511.683816][T20882] dump_stack_lvl+0xe8/0x150 [ 511.683849][T20882] should_fail_ex+0x410/0x560 [ 511.683879][T20882] should_failslab+0xa8/0x100 [ 511.683907][T20882] __kmalloc_cache_noprof+0xa3/0x600 [ 511.683929][T20882] ? __kmalloc_cache_noprof+0x14d/0x600 [ 511.683949][T20882] ? sctp_add_bind_addr+0x8c/0x370 [ 511.683970][T20882] ? sctp_add_bind_addr+0x8c/0x370 [ 511.683996][T20882] sctp_add_bind_addr+0x8c/0x370 [ 511.684021][T20882] sctp_copy_local_addr_list+0x31a/0x4e0 [ 511.684045][T20882] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 511.684067][T20882] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 511.684091][T20882] ? sctp_v6_is_any+0x64/0x80 [ 511.684115][T20882] ? sctp_copy_one_addr+0x93/0x360 [ 511.684139][T20882] sctp_bind_addr_copy+0xb3/0x3c0 [ 511.684161][T20882] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 511.684193][T20882] sctp_connect_new_asoc+0x2ff/0x6b0 [ 511.684232][T20882] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 511.684265][T20882] ? sctp_get_af_specific+0x29/0x80 [ 511.684285][T20882] ? sctp_inet6_send_verify+0x80/0x300 [ 511.684305][T20882] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 511.684333][T20882] __sctp_connect+0x5cb/0xdc0 [ 511.684368][T20882] ? __pfx___sctp_connect+0x10/0x10 [ 511.684393][T20882] ? security_sctp_bind_connect+0x7e/0x2c0 [ 511.684420][T20882] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 511.684465][T20882] sctp_getsockopt_connectx3+0x227/0x360 [ 511.684491][T20882] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 511.684519][T20882] ? sctp_getsockopt+0x12f/0xb90 [ 511.684546][T20882] ? __local_bh_enable_ip+0xd6/0x140 [ 511.684578][T20882] sctp_getsockopt+0x984/0xb90 [ 511.684605][T20882] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 511.684629][T20882] do_sock_getsockopt+0x4aa/0x640 [ 511.684663][T20882] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 511.684707][T20882] ? __fget_files+0x2a/0x420 [ 511.684733][T20882] ? __fget_files+0x3a2/0x420 [ 511.684760][T20882] ? __fget_files+0x2a/0x420 [ 511.684795][T20882] __x64_sys_getsockopt+0x1a4/0x240 [ 511.684832][T20882] do_syscall_64+0x166/0x520 [ 511.684861][T20882] ? trace_irq_disable+0x3b/0x140 [ 511.684881][T20882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.684903][T20882] ? clear_bhb_loop+0x70/0xc0 [ 511.684928][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.684949][T20882] RIP: 0033:0x7fd129f9e159 [ 511.684969][T20882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.684986][T20882] RSP: 002b:00007fd1281f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 511.685009][T20882] RAX: ffffffffffffffda RBX: 00007fd12a225fa0 RCX: 00007fd129f9e159 [ 511.685024][T20882] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 511.685037][T20882] RBP: 00007fd1281f6090 R08: 0000200000000240 R09: 0000000000000000 [ 511.685052][T20882] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.685066][T20882] R13: 00007fd12a226038 R14: 00007fd12a225fa0 R15: 00007ffc7fead668 [ 511.685100][T20882] [ 511.760292][T20887] netlink: 'syz.1.3756': attribute type 11 has an invalid length. [ 512.148870][T20889] bond2 (unregistering): Released all slaves [ 512.306875][ T2022] block nbd1: Possible stuck request ffff888026f1e000: control (read@0,1024B). Runtime 240 seconds [ 512.530231][T20909] FAULT_INJECTION: forcing a failure. [ 512.530231][T20909] name failslab, interval 1, probability 0, space 0, times 0 [ 512.530264][T20909] CPU: 0 UID: 0 PID: 20909 Comm: syz.3.3762 Not tainted syzkaller #0 PREEMPT(full) [ 512.530287][T20909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 512.530299][T20909] Call Trace: [ 512.530308][T20909] [ 512.530316][T20909] dump_stack_lvl+0xe8/0x150 [ 512.530349][T20909] should_fail_ex+0x410/0x560 [ 512.530376][T20909] ? __alloc_skb+0x1db/0x7a0 [ 512.530400][T20909] should_failslab+0xa8/0x100 [ 512.530426][T20909] ? __alloc_skb+0x1db/0x7a0 [ 512.530448][T20909] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 512.530479][T20909] ? __alloc_skb+0x18d/0x7a0 [ 512.530503][T20909] ? __alloc_skb+0x1db/0x7a0 [ 512.530533][T20909] __alloc_skb+0x1db/0x7a0 [ 512.530562][T20909] netlink_sendmsg+0x5d4/0xb40 [ 512.530592][T20909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.530621][T20909] ? apparmor_socket_sendmsg+0x98/0x360 [ 512.530647][T20909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.530667][T20909] sock_sendmsg_nosec+0x14e/0x190 [ 512.530691][T20909] ____sys_sendmsg+0x54e/0x850 [ 512.530727][T20909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.530764][T20909] ? import_iovec+0x73/0xa0 [ 512.530793][T20909] ___sys_sendmsg+0x2a5/0x360 [ 512.530819][T20909] ? __lock_acquire+0x747/0x2de0 [ 512.530844][T20909] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.530906][T20909] ? __fget_files+0x2a/0x420 [ 512.530933][T20909] ? __fget_files+0x3a2/0x420 [ 512.530971][T20909] __x64_sys_sendmsg+0x1b1/0x290 [ 512.531001][T20909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.531049][T20909] do_syscall_64+0x166/0x520 [ 512.531078][T20909] ? trace_irq_disable+0x3b/0x140 [ 512.531099][T20909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.531120][T20909] ? clear_bhb_loop+0x70/0xc0 [ 512.531150][T20909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.531171][T20909] RIP: 0033:0x7f7936b9e159 [ 512.531190][T20909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.531208][T20909] RSP: 002b:00007f7937b3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.531231][T20909] RAX: ffffffffffffffda RBX: 00007f7936e25fa0 RCX: 00007f7936b9e159 [ 512.531247][T20909] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000014 [ 512.531261][T20909] RBP: 00007f7937b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 512.531275][T20909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.531287][T20909] R13: 00007f7936e26038 R14: 00007f7936e25fa0 R15: 00007fff44cf91b8 [ 512.531318][T20909] [ 512.748637][T20923] __nla_validate_parse: 65 callbacks suppressed [ 512.749406][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 513.145195][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3768'. [ 513.358866][T20939] bond7 (unregistering): Released all slaves [ 513.672511][T20954] netlink: 'syz.2.3776': attribute type 1 has an invalid length. [ 513.759212][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3777'. [ 513.759247][T20956] bond0: option lp_interval: invalid value (0) [ 513.759268][T20956] bond0: option lp_interval: allowed values 1 - 2147483647 [ 513.804894][T20959] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3778'. [ 513.984178][T20971] tipc: Enabling of bearer rejected, failed to enable media [ 514.284960][T20983] xt_bpf: check failed: parse error [ 514.290817][T20983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.396680][T20980] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3782'. [ 515.503844][T21005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3786'. [ 516.402602][T21023] FAULT_INJECTION: forcing a failure. [ 516.402602][T21023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.402631][T21023] CPU: 0 UID: 0 PID: 21023 Comm: syz.3.3792 Not tainted syzkaller #0 PREEMPT(full) [ 516.402651][T21023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 516.402661][T21023] Call Trace: [ 516.402668][T21023] [ 516.402676][T21023] dump_stack_lvl+0xe8/0x150 [ 516.402702][T21023] should_fail_ex+0x410/0x560 [ 516.402727][T21023] _copy_from_iter+0x1d3/0x1660 [ 516.402746][T21023] ? __alloc_skb+0x27a/0x7a0 [ 516.402768][T21023] ? __alloc_skb+0x27a/0x7a0 [ 516.402789][T21023] ? __alloc_skb+0x27a/0x7a0 [ 516.402808][T21023] ? __pfx__copy_from_iter+0x10/0x10 [ 516.402826][T21023] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 516.402850][T21023] ? __alloc_skb+0x27a/0x7a0 [ 516.402868][T21023] ? __alloc_skb+0x27a/0x7a0 [ 516.402892][T21023] ? netlink_sendmsg+0x650/0xb40 [ 516.402908][T21023] ? skb_put+0x112/0x210 [ 516.402931][T21023] netlink_sendmsg+0x6c0/0xb40 [ 516.402956][T21023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.402981][T21023] ? apparmor_socket_sendmsg+0x98/0x360 [ 516.403002][T21023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.403018][T21023] sock_sendmsg_nosec+0x14e/0x190 [ 516.403038][T21023] ____sys_sendmsg+0x54e/0x850 [ 516.403066][T21023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.403096][T21023] ? import_iovec+0x73/0xa0 [ 516.403120][T21023] ___sys_sendmsg+0x2a5/0x360 [ 516.403140][T21023] ? __lock_acquire+0x747/0x2de0 [ 516.403162][T21023] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.403234][T21023] ? __fget_files+0x2a/0x420 [ 516.403256][T21023] ? __fget_files+0x3a2/0x420 [ 516.403293][T21023] __x64_sys_sendmsg+0x1b1/0x290 [ 516.403319][T21023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.403360][T21023] do_syscall_64+0x166/0x520 [ 516.403383][T21023] ? trace_irq_disable+0x3b/0x140 [ 516.403400][T21023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.403417][T21023] ? clear_bhb_loop+0x70/0xc0 [ 516.403438][T21023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.403454][T21023] RIP: 0033:0x7f7936b9e159 [ 516.403471][T21023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.403487][T21023] RSP: 002b:00007f7937b3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.403505][T21023] RAX: ffffffffffffffda RBX: 00007f7936e25fa0 RCX: 00007f7936b9e159 [ 516.403518][T21023] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000014 [ 516.403530][T21023] RBP: 00007f7937b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 516.403540][T21023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.403551][T21023] R13: 00007f7936e26038 R14: 00007f7936e25fa0 R15: 00007fff44cf91b8 [ 516.403581][T21023] [ 518.565942][T21034] netlink: 'syz.3.3793': attribute type 4 has an invalid length. [ 518.592843][T21031] tipc: Enabling of bearer rejected, already enabled [ 518.616717][T21029] netlink: 'syz.3.3793': attribute type 4 has an invalid length. [ 518.780685][T21046] syzkaller0: entered promiscuous mode [ 518.780707][T21046] syzkaller0: entered allmulticast mode [ 518.783522][T19499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.784251][T19499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.014054][T21064] tap0: tun_chr_ioctl cmd 1074025677 [ 519.014174][T21064] tap0: linktype set to 778 [ 519.115920][T21070] batman_adv: batadv0: Adding interface: macvlan2 [ 519.116050][T21070] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.116084][T21070] batman_adv: batadv0: Interface activated: macvlan2 [ 519.226657][T21076] netlink: 'syz.0.3806': attribute type 1 has an invalid length. [ 519.290479][T21076] bond4: entered promiscuous mode [ 519.290917][T21076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.317658][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3807'. [ 519.318096][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3806'. [ 519.351532][T21076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.352017][T21076] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 519.352038][T21076] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 519.393285][T21076] bond4: (slave wireguard0): making interface the new active one [ 519.393311][T21076] wireguard0: entered promiscuous mode [ 519.412327][T21076] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 519.452451][T21093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3810'. [ 519.505035][ T7237] IPVS: starting estimator thread 0... [ 519.595759][T21096] IPVS: using max 31 ests per chain, 74400 per kthread [ 519.708432][T21101] trusted_key: syz.4.3813 sent an empty control message without MSG_MORE. [ 519.836910][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3815'. [ 519.837306][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3815'. [ 520.013377][T21113] FAULT_INJECTION: forcing a failure. [ 520.013377][T21113] name failslab, interval 1, probability 0, space 0, times 0 [ 520.013411][T21113] CPU: 1 UID: 0 PID: 21113 Comm: syz.3.3817 Not tainted syzkaller #0 PREEMPT(full) [ 520.013433][T21113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 520.013446][T21113] Call Trace: [ 520.013454][T21113] [ 520.013463][T21113] dump_stack_lvl+0xe8/0x150 [ 520.013494][T21113] should_fail_ex+0x410/0x560 [ 520.013524][T21113] should_failslab+0xa8/0x100 [ 520.013552][T21113] __kmalloc_cache_noprof+0xa3/0x600 [ 520.013574][T21113] ? __kmalloc_cache_noprof+0x14d/0x600 [ 520.013593][T21113] ? sctp_add_bind_addr+0x8c/0x370 [ 520.013612][T21113] ? sctp_add_bind_addr+0x8c/0x370 [ 520.013640][T21113] sctp_add_bind_addr+0x8c/0x370 [ 520.013666][T21113] sctp_copy_local_addr_list+0x31a/0x4e0 [ 520.013690][T21113] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 520.013713][T21113] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 520.013737][T21113] ? sctp_v6_is_any+0x64/0x80 [ 520.013762][T21113] ? sctp_copy_one_addr+0x93/0x360 [ 520.013787][T21113] sctp_bind_addr_copy+0xb3/0x3c0 [ 520.013809][T21113] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 520.013843][T21113] sctp_connect_new_asoc+0x2ff/0x6b0 [ 520.013873][T21113] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 520.013906][T21113] ? sctp_get_af_specific+0x29/0x80 [ 520.013926][T21113] ? sctp_inet6_send_verify+0x80/0x300 [ 520.013946][T21113] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 520.013976][T21113] __sctp_connect+0x5cb/0xdc0 [ 520.014014][T21113] ? __pfx___sctp_connect+0x10/0x10 [ 520.014037][T21113] ? security_sctp_bind_connect+0x7e/0x2c0 [ 520.014058][T21113] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 520.014097][T21113] sctp_getsockopt_connectx3+0x227/0x360 [ 520.014123][T21113] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 520.014147][T21113] ? sctp_getsockopt+0x12f/0xb90 [ 520.014172][T21113] ? __local_bh_enable_ip+0xd6/0x140 [ 520.014199][T21113] sctp_getsockopt+0x984/0xb90 [ 520.014221][T21113] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 520.014244][T21113] do_sock_getsockopt+0x4aa/0x640 [ 520.014275][T21113] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 520.014317][T21113] ? __fget_files+0x2a/0x420 [ 520.014342][T21113] ? __fget_files+0x3a2/0x420 [ 520.014365][T21113] ? __fget_files+0x2a/0x420 [ 520.014399][T21113] __x64_sys_getsockopt+0x1a4/0x240 [ 520.014435][T21113] do_syscall_64+0x166/0x520 [ 520.014464][T21113] ? trace_irq_disable+0x3b/0x140 [ 520.014485][T21113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.014506][T21113] ? clear_bhb_loop+0x70/0xc0 [ 520.014531][T21113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.014551][T21113] RIP: 0033:0x7f7936b9e159 [ 520.014570][T21113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.014587][T21113] RSP: 002b:00007f7937b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 520.014608][T21113] RAX: ffffffffffffffda RBX: 00007f7936e25fa0 RCX: 00007f7936b9e159 [ 520.014624][T21113] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 520.014637][T21113] RBP: 00007f7937b3d090 R08: 0000200000000240 R09: 0000000000000000 [ 520.014651][T21113] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.014664][T21113] R13: 00007f7936e26038 R14: 00007f7936e25fa0 R15: 00007fff44cf91b8 [ 520.014697][T21113] [ 520.449411][T21122] netlink: 'syz.1.3821': attribute type 1 has an invalid length. [ 520.499151][T21122] bond2: entered promiscuous mode [ 520.500874][T21122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.527551][T21125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3820'. [ 520.530844][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3821'. [ 520.591501][T21122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.592107][T21122] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 520.592130][T21122] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 520.632607][T21122] bond2: (slave wireguard0): making interface the new active one [ 520.632632][T21122] wireguard0: entered promiscuous mode [ 520.634031][T21122] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 521.056530][T21147] tap0: tun_chr_ioctl cmd 1074025677 [ 521.056649][T21147] tap0: linktype set to 778 [ 521.063818][T21147] dummy0: entered allmulticast mode [ 521.121351][T21153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3829'. [ 521.122503][T21153] hsr0: entered promiscuous mode [ 521.497202][T21196] netlink: 'syz.0.3834': attribute type 1 has an invalid length. [ 521.528359][T21196] bond5: entered promiscuous mode [ 521.529139][T21196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 521.540315][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3834'. [ 521.565031][T21196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 521.577838][T21196] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 521.577864][T21196] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 521.624031][T21196] bond5: (slave wireguard1): making interface the new active one [ 521.624056][T21196] wireguard1: entered promiscuous mode [ 521.635485][T21204] FAULT_INJECTION: forcing a failure. [ 521.635485][T21204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.636938][T21204] CPU: 0 UID: 0 PID: 21204 Comm: syz.2.3836 Not tainted syzkaller #0 PREEMPT(full) [ 521.636965][T21204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 521.636978][T21204] Call Trace: [ 521.636988][T21204] [ 521.636997][T21204] dump_stack_lvl+0xe8/0x150 [ 521.637029][T21204] should_fail_ex+0x410/0x560 [ 521.637059][T21204] _copy_from_user+0x2d/0xb0 [ 521.637087][T21204] kstrtouint_from_user+0xd6/0x180 [ 521.637112][T21204] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 521.637147][T21204] ? lock_acquire+0x115/0x350 [ 521.637174][T21204] proc_fail_nth_write+0x8e/0x210 [ 521.637195][T21204] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 521.637223][T21204] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 521.637243][T21204] vfs_write+0x296/0xba0 [ 521.637283][T21204] ? __pfx_vfs_write+0x10/0x10 [ 521.637313][T21204] ? __fget_files+0x2a/0x420 [ 521.637345][T21204] ? __fget_files+0x3a2/0x420 [ 521.637371][T21204] ? __fget_files+0x2a/0x420 [ 521.637406][T21204] ksys_write+0x150/0x270 [ 521.637438][T21204] ? __pfx_ksys_write+0x10/0x10 [ 521.637479][T21204] do_syscall_64+0x166/0x520 [ 521.637508][T21204] ? trace_irq_disable+0x3b/0x140 [ 521.637529][T21204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.637553][T21204] ? clear_bhb_loop+0x70/0xc0 [ 521.637578][T21204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.637599][T21204] RIP: 0033:0x7f411955e98e [ 521.637617][T21204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.637635][T21204] RSP: 002b:00007f41177f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.637656][T21204] RAX: ffffffffffffffda RBX: 00007f41177f66c0 RCX: 00007f411955e98e [ 521.637672][T21204] RDX: 0000000000000001 RSI: 00007f41177f60a0 RDI: 0000000000000005 [ 521.637685][T21204] RBP: 00007f41177f6090 R08: 0000000000000000 R09: 0000000000000000 [ 521.637699][T21204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.637712][T21204] R13: 00007f4119826128 R14: 00007f4119826090 R15: 00007ffed92cb198 [ 521.637746][T21204] [ 521.639715][T21196] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 521.642634][T21198] tipc: Enabling of bearer rejected, already enabled [ 522.003500][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3840'. [ 522.003533][T21212] bond0: option lp_interval: invalid value (0) [ 522.003551][T21212] bond0: option lp_interval: allowed values 1 - 2147483647 [ 522.127817][T21217] vlan2: entered allmulticast mode [ 522.127840][T21217] bridge_slave_0: entered allmulticast mode [ 522.128202][T21217] bridge0: port 1(vlan2) entered blocking state [ 522.128369][T21217] bridge0: port 1(vlan2) entered disabled state [ 522.130641][T21217] vlan2: entered promiscuous mode [ 522.130660][T21217] bridge_slave_0: entered promiscuous mode [ 522.294596][T21220] netlink: 'syz.1.3843': attribute type 1 has an invalid length. [ 522.319869][T21220] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 522.452598][T21221] tap0: tun_chr_ioctl cmd 1074025677 [ 522.452687][T21221] tap0: linktype set to 778 [ 522.597044][T21235] bond6 (unregistering): Released all slaves [ 522.664574][T21242] bridge_slave_1: entered promiscuous mode [ 522.700434][T21242] bridge2: entered promiscuous mode [ 522.700454][T21242] bridge2: entered allmulticast mode [ 523.319454][T21270] netlink: 'syz.2.3858': attribute type 1 has an invalid length. [ 523.323183][T21270] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 523.490811][T21281] tap0: tun_chr_ioctl cmd 1074025677 [ 523.490897][T21281] tap0: linktype set to 778 [ 523.583283][T21282] syzkaller1: entered promiscuous mode [ 523.583299][T21282] syzkaller1: entered allmulticast mode [ 526.100493][T21287] syzkaller1: entered promiscuous mode [ 526.100510][T21287] syzkaller1: entered allmulticast mode [ 526.103039][T21291] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 526.520505][T21315] __nla_validate_parse: 5 callbacks suppressed [ 526.520528][T21315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3867'. [ 526.681006][T21324] tap0: tun_chr_ioctl cmd 1074025677 [ 526.681095][T21324] tap0: linktype set to 778 [ 526.842883][T21331] syzkaller1: entered promiscuous mode [ 526.842908][T21331] syzkaller1: entered allmulticast mode [ 527.039274][T21329] bond7 (unregistering): Released all slaves [ 527.158733][T21350] ip6erspan0: entered allmulticast mode [ 527.165139][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3882'. [ 527.506833][T21370] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3888'. [ 527.509993][T21367] tap0: tun_chr_ioctl cmd 1074025677 [ 527.510091][T21367] tap0: linktype set to 778 [ 527.573162][T21371] erspan0: entered promiscuous mode [ 527.598929][T21368] erspan0: left promiscuous mode [ 527.737252][T21381] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 527.826295][T21382] ip_tables: iptables: counters copy to user failed while replacing table [ 528.076619][T21388] bond7 (unregistering): Released all slaves [ 528.213911][T21394] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 528.487933][T21400] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 528.915263][T21423] tap0: tun_chr_ioctl cmd 1074025677 [ 528.917784][T21423] tap0: linktype set to 778 [ 529.302105][T21443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3910'. [ 529.423936][T21435] syzkaller0: entered promiscuous mode [ 529.423959][T21435] syzkaller0: entered allmulticast mode [ 529.703844][T21453] tipc: Started in network mode [ 529.703874][T21453] tipc: Node identity 629d35d547aa, cluster identity 4711 [ 529.704024][T21453] tipc: Enabled bearer , priority 0 [ 529.882205][T21462] xt_TCPMSS: Only works on TCP SYN packets [ 529.904674][T21453] syzkaller0: entered promiscuous mode [ 529.904699][T21453] syzkaller0: entered allmulticast mode [ 529.905096][T21453] tipc: Resetting bearer [ 530.114825][T21452] tipc: Resetting bearer [ 530.559219][T21480] netlink: 'syz.3.3919': attribute type 2 has an invalid length. [ 530.559243][T21480] netlink: 'syz.3.3919': attribute type 11 has an invalid length. [ 530.559258][T21480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3919'. [ 533.119954][T21452] tipc: Disabling bearer [ 533.123996][T21473] tap0: tun_chr_ioctl cmd 1074025677 [ 533.124067][T21473] tap0: linktype set to 778 [ 533.190485][T18117] tipc: Node number set to 624375253 [ 533.305205][T21484] vlan3: entered promiscuous mode [ 533.539051][T21492] bond6 (unregistering): Released all slaves [ 533.711646][T21501] bridge1: entered promiscuous mode [ 534.005023][T21513] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 534.021966][T21517] FAULT_INJECTION: forcing a failure. [ 534.021966][T21517] name failslab, interval 1, probability 0, space 0, times 0 [ 534.021998][T21517] CPU: 0 UID: 0 PID: 21517 Comm: syz.1.3931 Not tainted syzkaller #0 PREEMPT(full) [ 534.022021][T21517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 534.022034][T21517] Call Trace: [ 534.022043][T21517] [ 534.022051][T21517] dump_stack_lvl+0xe8/0x150 [ 534.022084][T21517] should_fail_ex+0x410/0x560 [ 534.022114][T21517] should_failslab+0xa8/0x100 [ 534.022139][T21517] ? dst_alloc+0x105/0x170 [ 534.022159][T21517] kmem_cache_alloc_noprof+0xa1/0x600 [ 534.022192][T21517] ? dst_alloc+0x105/0x170 [ 534.022217][T21517] dst_alloc+0x105/0x170 [ 534.022241][T21517] rt_dst_clone+0x52/0x680 [ 534.022274][T21517] ip_mc_finish_output+0xea/0x2e0 [ 534.022303][T21517] ip_mc_output+0x254/0x580 [ 534.022330][T21517] ip_send_skb+0x45/0xc0 [ 534.022353][T21517] udp_send_skb+0x7ed/0xf70 [ 534.022390][T21517] udp_sendmsg+0x1971/0x2140 [ 534.022432][T21517] ? __pfx_udp_sendmsg+0x10/0x10 [ 534.022468][T21517] ? __lock_acquire+0x747/0x2de0 [ 534.022494][T21517] ? current_check_autobind_udp_socket+0x271/0x5b0 [ 534.022537][T21517] ? aa_sock_msg_perm+0xfc/0x210 [ 534.022563][T21517] ? sock_rps_record_flow+0x19/0x350 [ 534.022589][T21517] ? inet_sendmsg+0x23e/0x320 [ 534.022609][T21517] ? apparmor_socket_sendmsg+0x98/0x360 [ 534.022634][T21517] ? __pfx_inet_sendmsg+0x10/0x10 [ 534.022656][T21517] sock_sendmsg_nosec+0x10f/0x190 [ 534.022680][T21517] ____sys_sendmsg+0x54e/0x850 [ 534.022714][T21517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.022751][T21517] ? import_iovec+0x73/0xa0 [ 534.022780][T21517] ___sys_sendmsg+0x2a5/0x360 [ 534.022810][T21517] ? __lock_acquire+0x747/0x2de0 [ 534.022835][T21517] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.022868][T21517] ? kstrtouint+0x6e/0xe0 [ 534.022915][T21517] ? __fget_files+0x2a/0x420 [ 534.022942][T21517] ? __fget_files+0x3a2/0x420 [ 534.022980][T21517] __sys_sendmmsg+0x273/0x4d0 [ 534.023013][T21517] ? __pfx___sys_sendmmsg+0x10/0x10 [ 534.023051][T21517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 534.023096][T21517] ? ksys_write+0x242/0x270 [ 534.023129][T21517] ? __pfx_ksys_write+0x10/0x10 [ 534.023165][T21517] __x64_sys_sendmmsg+0xa0/0xc0 [ 534.023205][T21517] do_syscall_64+0x166/0x520 [ 534.023233][T21517] ? trace_irq_disable+0x3b/0x140 [ 534.023254][T21517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.023281][T21517] ? clear_bhb_loop+0x70/0xc0 [ 534.023306][T21517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.023327][T21517] RIP: 0033:0x7fd4e579e159 [ 534.023346][T21517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.023365][T21517] RSP: 002b:00007fd4e670d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 534.023386][T21517] RAX: ffffffffffffffda RBX: 00007fd4e5a25fa0 RCX: 00007fd4e579e159 [ 534.023402][T21517] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000005 [ 534.023416][T21517] RBP: 00007fd4e670d090 R08: 0000000000000000 R09: 0000000000000000 [ 534.023430][T21517] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 534.023443][T21517] R13: 00007fd4e5a26038 R14: 00007fd4e5a25fa0 R15: 00007ffe782a1ab8 [ 534.023476][T21517] [ 534.244634][T21524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3932'. [ 534.291651][T21524] bond0: option lp_interval: invalid value (18446744072468158191) [ 534.291678][T21524] bond0: option lp_interval: allowed values 1 - 2147483647 [ 534.904881][T21541] FAULT_INJECTION: forcing a failure. [ 534.904881][T21541] name failslab, interval 1, probability 0, space 0, times 0 [ 534.904914][T21541] CPU: 1 UID: 0 PID: 21541 Comm: syz.2.3936 Not tainted syzkaller #0 PREEMPT(full) [ 534.904934][T21541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 534.904944][T21541] Call Trace: [ 534.904951][T21541] [ 534.904959][T21541] dump_stack_lvl+0xe8/0x150 [ 534.904987][T21541] should_fail_ex+0x410/0x560 [ 534.905011][T21541] should_failslab+0xa8/0x100 [ 534.905038][T21541] __kmalloc_cache_noprof+0xa3/0x600 [ 534.905057][T21541] ? __kmalloc_cache_noprof+0x14d/0x600 [ 534.905073][T21541] ? sctp_add_bind_addr+0x8c/0x370 [ 534.905089][T21541] ? sctp_add_bind_addr+0x8c/0x370 [ 534.905112][T21541] sctp_add_bind_addr+0x8c/0x370 [ 534.905134][T21541] sctp_copy_local_addr_list+0x31a/0x4e0 [ 534.905154][T21541] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 534.905173][T21541] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 534.905194][T21541] ? sctp_v6_is_any+0x64/0x80 [ 534.905214][T21541] ? sctp_copy_one_addr+0x93/0x360 [ 534.905235][T21541] sctp_bind_addr_copy+0xb3/0x3c0 [ 534.905254][T21541] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 534.905292][T21541] sctp_connect_new_asoc+0x2ff/0x6b0 [ 534.905317][T21541] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 534.905344][T21541] ? sctp_get_af_specific+0x29/0x80 [ 534.905361][T21541] ? sctp_inet6_send_verify+0x80/0x300 [ 534.905378][T21541] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 534.905402][T21541] __sctp_connect+0x5cb/0xdc0 [ 534.905436][T21541] ? __pfx___sctp_connect+0x10/0x10 [ 534.905457][T21541] ? security_sctp_bind_connect+0x7e/0x2c0 [ 534.905478][T21541] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 534.905508][T21541] sctp_getsockopt_connectx3+0x227/0x360 [ 534.905530][T21541] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 534.905552][T21541] ? sctp_getsockopt+0x12f/0xb90 [ 534.905575][T21541] ? __local_bh_enable_ip+0xd6/0x140 [ 534.905602][T21541] sctp_getsockopt+0x984/0xb90 [ 534.905623][T21541] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 534.905645][T21541] do_sock_getsockopt+0x4aa/0x640 [ 534.905674][T21541] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 534.905711][T21541] ? __fget_files+0x2a/0x420 [ 534.905734][T21541] ? __fget_files+0x3a2/0x420 [ 534.905755][T21541] ? __fget_files+0x2a/0x420 [ 534.905785][T21541] __x64_sys_getsockopt+0x1a4/0x240 [ 534.905817][T21541] do_syscall_64+0x166/0x520 [ 534.905841][T21541] ? trace_irq_disable+0x3b/0x140 [ 534.905858][T21541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.905876][T21541] ? clear_bhb_loop+0x70/0xc0 [ 534.905897][T21541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.905914][T21541] RIP: 0033:0x7f411959e159 [ 534.905931][T21541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.905945][T21541] RSP: 002b:00007f411a39a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 534.905964][T21541] RAX: ffffffffffffffda RBX: 00007f4119825fa0 RCX: 00007f411959e159 [ 534.905977][T21541] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 534.905988][T21541] RBP: 00007f411a39a090 R08: 0000200000000240 R09: 0000000000000000 [ 534.906000][T21541] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.906011][T21541] R13: 00007f4119826038 R14: 00007f4119825fa0 R15: 00007ffed92cb198 [ 534.906042][T21541] [ 535.317898][T21549] netlink: 'syz.3.3937': attribute type 1 has an invalid length. [ 535.374206][T21549] bond2: entered promiscuous mode [ 535.376691][T21549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.432266][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3937'. [ 535.493163][T21550] bond7 (unregistering): Released all slaves [ 535.615682][T21549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.618016][T21549] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 535.618041][T21549] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 535.632320][T21549] bond2: (slave wireguard0): making interface the new active one [ 535.632346][T21549] wireguard0: entered promiscuous mode [ 535.638142][T21549] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 535.638208][T21545] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 535.692660][T21564] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 535.692763][T21564] syzkaller0: linktype set to 7 [ 536.016080][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'. [ 536.247339][T21580] xt_cluster: you have exceeded the maximum number of cluster nodes (175 > 32) [ 536.357030][T21585] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 536.359506][T21585] x_tables: duplicate underflow at hook 1 [ 536.392459][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3947'. [ 536.819164][T21597] tun0: tun_chr_ioctl cmd 1074025675 [ 536.819187][T21597] tun0: persist enabled [ 536.829978][T21597] tun0: tun_chr_ioctl cmd 1074025675 [ 536.830013][T21597] tun0: persist disabled [ 536.911226][T21601] FAULT_INJECTION: forcing a failure. [ 536.911226][T21601] name failslab, interval 1, probability 0, space 0, times 0 [ 536.911260][T21601] CPU: 0 UID: 0 PID: 21601 Comm: syz.2.3951 Not tainted syzkaller #0 PREEMPT(full) [ 536.911284][T21601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 536.911296][T21601] Call Trace: [ 536.911307][T21601] [ 536.911317][T21601] dump_stack_lvl+0xe8/0x150 [ 536.911350][T21601] should_fail_ex+0x410/0x560 [ 536.911379][T21601] should_failslab+0xa8/0x100 [ 536.911407][T21601] __kmalloc_cache_noprof+0xa3/0x600 [ 536.911429][T21601] ? __kmalloc_cache_noprof+0x14d/0x600 [ 536.911448][T21601] ? sctp_add_bind_addr+0x8c/0x370 [ 536.911468][T21601] ? sctp_add_bind_addr+0x8c/0x370 [ 536.911496][T21601] sctp_add_bind_addr+0x8c/0x370 [ 536.911522][T21601] sctp_copy_local_addr_list+0x31a/0x4e0 [ 536.911546][T21601] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 536.911569][T21601] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 536.911593][T21601] ? sctp_v6_is_any+0x64/0x80 [ 536.911624][T21601] ? sctp_copy_one_addr+0x93/0x360 [ 536.911649][T21601] sctp_bind_addr_copy+0xb3/0x3c0 [ 536.911671][T21601] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 536.911704][T21601] sctp_connect_new_asoc+0x2ff/0x6b0 [ 536.911733][T21601] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 536.911766][T21601] ? sctp_get_af_specific+0x29/0x80 [ 536.911786][T21601] ? sctp_inet6_send_verify+0x80/0x300 [ 536.911806][T21601] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 536.911835][T21601] __sctp_connect+0x5cb/0xdc0 [ 536.911873][T21601] ? __pfx___sctp_connect+0x10/0x10 [ 536.911898][T21601] ? security_sctp_bind_connect+0x7e/0x2c0 [ 536.911924][T21601] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 536.911958][T21601] sctp_getsockopt_connectx3+0x227/0x360 [ 536.911984][T21601] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 536.912011][T21601] ? sctp_getsockopt+0x12f/0xb90 [ 536.912038][T21601] ? __local_bh_enable_ip+0xd6/0x140 [ 536.912066][T21601] sctp_getsockopt+0x984/0xb90 [ 536.912089][T21601] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 536.912111][T21601] do_sock_getsockopt+0x4aa/0x640 [ 536.912140][T21601] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 536.912181][T21601] ? __fget_files+0x2a/0x420 [ 536.912208][T21601] ? __fget_files+0x3a2/0x420 [ 536.912234][T21601] ? __fget_files+0x2a/0x420 [ 536.912269][T21601] __x64_sys_getsockopt+0x1a4/0x240 [ 536.912305][T21601] do_syscall_64+0x166/0x520 [ 536.912333][T21601] ? trace_irq_disable+0x3b/0x140 [ 536.912354][T21601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.912375][T21601] ? clear_bhb_loop+0x70/0xc0 [ 536.912400][T21601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.912420][T21601] RIP: 0033:0x7f411959e159 [ 536.912440][T21601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.912457][T21601] RSP: 002b:00007f411a39a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 536.912479][T21601] RAX: ffffffffffffffda RBX: 00007f4119825fa0 RCX: 00007f411959e159 [ 536.912495][T21601] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 536.912506][T21601] RBP: 00007f411a39a090 R08: 0000200000000240 R09: 0000000000000000 [ 536.912520][T21601] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.912533][T21601] R13: 00007f4119826038 R14: 00007f4119825fa0 R15: 00007ffed92cb198 [ 536.912567][T21601] [ 537.359260][T21607] bond3 (unregistering): Released all slaves [ 537.808129][T21642] syzkaller1: entered promiscuous mode [ 537.808154][T21642] syzkaller1: entered allmulticast mode [ 537.898830][T21644] FAULT_INJECTION: forcing a failure. [ 537.898830][T21644] name failslab, interval 1, probability 0, space 0, times 0 [ 537.898864][T21644] CPU: 1 UID: 0 PID: 21644 Comm: syz.1.3964 Not tainted syzkaller #0 PREEMPT(full) [ 537.898887][T21644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 537.898901][T21644] Call Trace: [ 537.898910][T21644] [ 537.898919][T21644] dump_stack_lvl+0xe8/0x150 [ 537.898951][T21644] should_fail_ex+0x410/0x560 [ 537.898981][T21644] should_failslab+0xa8/0x100 [ 537.899009][T21644] __kmalloc_cache_noprof+0xa3/0x600 [ 537.899041][T21644] ? __kmalloc_cache_noprof+0x14d/0x600 [ 537.899060][T21644] ? sctp_add_bind_addr+0x8c/0x370 [ 537.899080][T21644] ? sctp_add_bind_addr+0x8c/0x370 [ 537.899107][T21644] sctp_add_bind_addr+0x8c/0x370 [ 537.899133][T21644] sctp_copy_local_addr_list+0x31a/0x4e0 [ 537.899158][T21644] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 537.899180][T21644] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 537.899204][T21644] ? sctp_v6_is_any+0x64/0x80 [ 537.899228][T21644] ? sctp_copy_one_addr+0x93/0x360 [ 537.899253][T21644] sctp_bind_addr_copy+0xb3/0x3c0 [ 537.899276][T21644] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 537.899310][T21644] sctp_connect_new_asoc+0x2ff/0x6b0 [ 537.899339][T21644] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 537.899379][T21644] ? sctp_get_af_specific+0x29/0x80 [ 537.899399][T21644] ? sctp_inet6_send_verify+0x80/0x300 [ 537.899419][T21644] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 537.899448][T21644] __sctp_connect+0x5cb/0xdc0 [ 537.899486][T21644] ? __pfx___sctp_connect+0x10/0x10 [ 537.899511][T21644] ? security_sctp_bind_connect+0x7e/0x2c0 [ 537.899536][T21644] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 537.899570][T21644] sctp_getsockopt_connectx3+0x227/0x360 [ 537.899595][T21644] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 537.899622][T21644] ? sctp_getsockopt+0x12f/0xb90 [ 537.899648][T21644] ? __local_bh_enable_ip+0xd6/0x140 [ 537.899680][T21644] sctp_getsockopt+0x984/0xb90 [ 537.899706][T21644] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 537.899730][T21644] do_sock_getsockopt+0x4aa/0x640 [ 537.899763][T21644] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 537.899806][T21644] ? __fget_files+0x2a/0x420 [ 537.899833][T21644] ? __fget_files+0x3a2/0x420 [ 537.899860][T21644] ? __fget_files+0x2a/0x420 [ 537.899895][T21644] __x64_sys_getsockopt+0x1a4/0x240 [ 537.899931][T21644] do_syscall_64+0x166/0x520 [ 537.899960][T21644] ? trace_irq_disable+0x3b/0x140 [ 537.899980][T21644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.900002][T21644] ? clear_bhb_loop+0x70/0xc0 [ 537.900033][T21644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.900054][T21644] RIP: 0033:0x7fd4e579e159 [ 537.900073][T21644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.900092][T21644] RSP: 002b:00007fd4e670d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 537.900114][T21644] RAX: ffffffffffffffda RBX: 00007fd4e5a25fa0 RCX: 00007fd4e579e159 [ 537.900129][T21644] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 537.900142][T21644] RBP: 00007fd4e670d090 R08: 0000200000000240 R09: 0000000000000000 [ 537.900156][T21644] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.900170][T21644] R13: 00007fd4e5a26038 R14: 00007fd4e5a25fa0 R15: 00007ffe782a1ab8 [ 537.900204][T21644] [ 538.444456][T21648] wg2 speed is unknown, defaulting to 1000 [ 538.482467][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 538.752593][T21658] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 538.771237][T21659] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.147402][T21651] infiniband syz1: set down [ 539.147505][T21651] infiniband syz1: added syzkaller0 [ 539.192125][T21651] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 539.192193][T21651] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 539.192232][T21651] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 539.274369][T21651] RDS/IB: syz1: added [ 539.274424][T21651] smc: adding ib device syz1 with port count 1 [ 539.274443][T21651] smc: ib device syz1 port 1 has no pnetid [ 539.514216][T21679] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3972'. [ 539.633505][T19488] smc: removing ib device syz1 [ 539.723216][T19488] smbdirect: ib_dev[syz1] removed [ 539.775173][T21687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'. [ 539.794312][T21670] bond1 (unregistering): Released all slaves [ 539.809083][T21689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3975'. [ 539.916806][T21692] FAULT_INJECTION: forcing a failure. [ 539.916806][T21692] name failslab, interval 1, probability 0, space 0, times 0 [ 539.916840][T21692] CPU: 1 UID: 0 PID: 21692 Comm: syz.3.3976 Not tainted syzkaller #0 PREEMPT(full) [ 539.916863][T21692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 539.916875][T21692] Call Trace: [ 539.916883][T21692] [ 539.916893][T21692] dump_stack_lvl+0xe8/0x150 [ 539.916926][T21692] should_fail_ex+0x410/0x560 [ 539.916956][T21692] should_failslab+0xa8/0x100 [ 539.916983][T21692] __kmalloc_cache_noprof+0xa3/0x600 [ 539.917006][T21692] ? sctp_add_bind_addr+0x8c/0x370 [ 539.917025][T21692] ? sctp_add_bind_addr+0x8c/0x370 [ 539.917054][T21692] sctp_add_bind_addr+0x8c/0x370 [ 539.917080][T21692] sctp_copy_local_addr_list+0x31a/0x4e0 [ 539.917106][T21692] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 539.917129][T21692] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 539.917153][T21692] ? sctp_v6_is_any+0x64/0x80 [ 539.917178][T21692] ? sctp_copy_one_addr+0x93/0x360 [ 539.917203][T21692] sctp_bind_addr_copy+0xb3/0x3c0 [ 539.917226][T21692] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 539.917266][T21692] sctp_connect_new_asoc+0x2ff/0x6b0 [ 539.917296][T21692] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 539.917330][T21692] ? sctp_get_af_specific+0x29/0x80 [ 539.917350][T21692] ? sctp_inet6_send_verify+0x80/0x300 [ 539.917371][T21692] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 539.917400][T21692] __sctp_connect+0x5cb/0xdc0 [ 539.917440][T21692] ? __pfx___sctp_connect+0x10/0x10 [ 539.917465][T21692] ? security_sctp_bind_connect+0x7e/0x2c0 [ 539.917491][T21692] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 539.917525][T21692] sctp_getsockopt_connectx3+0x227/0x360 [ 539.917550][T21692] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 539.917578][T21692] ? sctp_getsockopt+0x12f/0xb90 [ 539.917605][T21692] ? __local_bh_enable_ip+0xd6/0x140 [ 539.917637][T21692] sctp_getsockopt+0x984/0xb90 [ 539.917662][T21692] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 539.917687][T21692] do_sock_getsockopt+0x4aa/0x640 [ 539.917721][T21692] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 539.917764][T21692] ? __fget_files+0x2a/0x420 [ 539.917791][T21692] ? __fget_files+0x3a2/0x420 [ 539.917820][T21692] ? __fget_files+0x2a/0x420 [ 539.917855][T21692] __x64_sys_getsockopt+0x1a4/0x240 [ 539.917893][T21692] do_syscall_64+0x166/0x520 [ 539.917921][T21692] ? trace_irq_disable+0x3b/0x140 [ 539.917941][T21692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.917962][T21692] ? clear_bhb_loop+0x70/0xc0 [ 539.917988][T21692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.918008][T21692] RIP: 0033:0x7f7936b9e159 [ 539.918027][T21692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.918046][T21692] RSP: 002b:00007f7937b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 539.918067][T21692] RAX: ffffffffffffffda RBX: 00007f7936e25fa0 RCX: 00007f7936b9e159 [ 539.918083][T21692] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 539.918095][T21692] RBP: 00007f7937b3d090 R08: 0000200000000240 R09: 0000000000000000 [ 539.918109][T21692] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.918122][T21692] R13: 00007f7936e26038 R14: 00007f7936e25fa0 R15: 00007fff44cf91b8 [ 539.918157][T21692] [ 540.300885][T21651] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 540.430703][T21699] FAULT_INJECTION: forcing a failure. [ 540.430703][T21699] name failslab, interval 1, probability 0, space 0, times 0 [ 540.430735][T21699] CPU: 1 UID: 0 PID: 21699 Comm: syz.2.3980 Not tainted syzkaller #0 PREEMPT(full) [ 540.430756][T21699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 540.430769][T21699] Call Trace: [ 540.430777][T21699] [ 540.430785][T21699] dump_stack_lvl+0xe8/0x150 [ 540.430819][T21699] should_fail_ex+0x410/0x560 [ 540.430849][T21699] should_failslab+0xa8/0x100 [ 540.430876][T21699] __kmalloc_noprof+0xfe/0x720 [ 540.430895][T21699] ? hash_netnet6_add+0x1cbb/0x2fc0 [ 540.430923][T21699] ? hash_netnet6_add+0x150e/0x2fc0 [ 540.430947][T21699] ? hash_netnet6_add+0x150e/0x2fc0 [ 540.430980][T21699] hash_netnet6_add+0x150e/0x2fc0 [ 540.431041][T21699] hash_netnet6_uadt+0x840/0xea0 [ 540.431071][T21699] ? __pfx_hash_netnet6_add+0x10/0x10 [ 540.431097][T21699] ? __pfx_hash_netnet6_uadt+0x10/0x10 [ 540.431121][T21699] ? __nla_validate_parse+0x2429/0x2d50 [ 540.431167][T21699] call_ad+0x18d/0xb50 [ 540.431188][T21699] ? __lock_acquire+0x747/0x2de0 [ 540.431215][T21699] ? __pfx_call_ad+0x10/0x10 [ 540.431251][T21699] ? __nla_parse+0x40/0x60 [ 540.431280][T21699] ip_set_ad+0x82a/0x9d0 [ 540.431311][T21699] ? __pfx_ip_set_ad+0x10/0x10 [ 540.431330][T21699] ? __mutex_lock+0x30b/0x1550 [ 540.431396][T21699] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 540.431427][T21699] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 540.431475][T21699] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 540.431555][T21699] netlink_rcv_skb+0x226/0x4a0 [ 540.431577][T21699] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 540.431607][T21699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.431645][T21699] ? bpf_lsm_capable+0x9/0x20 [ 540.431663][T21699] ? security_capable+0x7e/0x2c0 [ 540.431694][T21699] nfnetlink_rcv+0x2b9/0x28c0 [ 540.431731][T21699] ? __dev_queue_xmit+0x29b/0x3920 [ 540.431764][T21699] ? __local_bh_enable_ip+0xd6/0x140 [ 540.431790][T21699] ? lockdep_hardirqs_on+0x7b/0x110 [ 540.431817][T21699] ? __dev_queue_xmit+0x29b/0x3920 [ 540.431842][T21699] ? __local_bh_enable_ip+0xd6/0x140 [ 540.431864][T21699] ? __dev_queue_xmit+0x29b/0x3920 [ 540.431892][T21699] ? __dev_queue_xmit+0x1efb/0x3920 [ 540.431926][T21699] ? __dev_queue_xmit+0x29b/0x3920 [ 540.431962][T21699] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 540.432003][T21699] ? __pfx___dev_queue_xmit+0x10/0x10 [ 540.432043][T21699] ? __copy_skb_header+0xa3/0x4a0 [ 540.432093][T21699] ? skb_clone+0x246/0x3a0 [ 540.432125][T21699] ? __netlink_deliver_tap+0x681/0x6e0 [ 540.432143][T21699] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.432172][T21699] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.432191][T21699] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.432218][T21699] netlink_unicast+0x7bd/0x940 [ 540.432262][T21699] netlink_sendmsg+0x813/0xb40 [ 540.432291][T21699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.432319][T21699] ? apparmor_socket_sendmsg+0x98/0x360 [ 540.432343][T21699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.432363][T21699] sock_sendmsg_nosec+0x14e/0x190 [ 540.432386][T21699] ____sys_sendmsg+0x54e/0x850 [ 540.432418][T21699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.432453][T21699] ? import_iovec+0x73/0xa0 [ 540.432480][T21699] ___sys_sendmsg+0x2a5/0x360 [ 540.432505][T21699] ? __lock_acquire+0x747/0x2de0 [ 540.432529][T21699] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.432594][T21699] ? __fget_files+0x2a/0x420 [ 540.432620][T21699] ? __fget_files+0x3a2/0x420 [ 540.432665][T21699] __x64_sys_sendmsg+0x1b1/0x290 [ 540.432695][T21699] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.432743][T21699] do_syscall_64+0x166/0x520 [ 540.432771][T21699] ? trace_irq_disable+0x3b/0x140 [ 540.432790][T21699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.432811][T21699] ? clear_bhb_loop+0x70/0xc0 [ 540.432835][T21699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.432856][T21699] RIP: 0033:0x7f411959e159 [ 540.432876][T21699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.432894][T21699] RSP: 002b:00007f411a39a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.432917][T21699] RAX: ffffffffffffffda RBX: 00007f4119825fa0 RCX: 00007f411959e159 [ 540.432932][T21699] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000007 [ 540.432946][T21699] RBP: 00007f411a39a090 R08: 0000000000000000 R09: 0000000000000000 [ 540.432959][T21699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.432971][T21699] R13: 00007f4119826038 R14: 00007f4119825fa0 R15: 00007ffed92cb198 [ 540.433004][T21699] [ 540.564995][T21699] netlink: 'syz.2.3980': attribute type 1 has an invalid length. [ 540.662033][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'. [ 540.686534][T21699] bond7: entered promiscuous mode [ 540.686938][T21699] 8021q: adding VLAN 0 to HW filter on device bond7 [ 540.895015][T21709] 8021q: adding VLAN 0 to HW filter on device bond7 [ 540.897021][T21709] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 540.902826][T21709] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 541.008708][T21709] bond7: (slave wireguard0): making interface the new active one [ 541.008736][T21709] wireguard0: entered promiscuous mode [ 541.010623][T21709] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 541.131522][T21718] netlink: 'syz.2.3982': attribute type 21 has an invalid length. [ 541.131547][T21718] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3982'. [ 541.236806][T21718] netlink: 'syz.2.3982': attribute type 4 has an invalid length. [ 541.236831][T21718] netlink: 'syz.2.3982': attribute type 3 has an invalid length. [ 541.236844][T21718] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3982'. [ 541.369917][T21728] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3984'. [ 541.583537][T21737] netlink: 'syz.0.3987': attribute type 1 has an invalid length. [ 541.629026][T21737] bond6: entered promiscuous mode [ 541.629488][T21737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 541.633618][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3987'. [ 541.701855][T21737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 541.702275][T21737] bond6: (slave wireguard2): The slave device specified does not support setting the MAC address [ 541.702296][T21737] bond6: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 541.768871][T21737] bond6: (slave wireguard2): making interface the new active one [ 541.768897][T21737] wireguard2: entered promiscuous mode [ 541.809643][T21737] bond6: (slave wireguard2): Enslaving as an active interface with an up link [ 541.818662][T21733] batman_adv: batadv0: Adding interface: syzkaller0 [ 541.818682][T21733] batman_adv: batadv0: Interface activated: syzkaller0 [ 541.832482][T21731] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 541.962724][T21731] batman_adv: batadv0: Removing interface: syzkaller0 [ 542.009880][T21752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3991'. [ 542.082666][T21754] nft_compat: unsupported protocol 1 [ 542.097797][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'. [ 542.170796][T21759] FAULT_INJECTION: forcing a failure. [ 542.170796][T21759] name failslab, interval 1, probability 0, space 0, times 0 [ 542.170831][T21759] CPU: 1 UID: 0 PID: 21759 Comm: syz.1.3992 Not tainted syzkaller #0 PREEMPT(full) [ 542.170854][T21759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 542.170867][T21759] Call Trace: [ 542.170875][T21759] [ 542.170883][T21759] dump_stack_lvl+0xe8/0x150 [ 542.170915][T21759] should_fail_ex+0x410/0x560 [ 542.170945][T21759] should_failslab+0xa8/0x100 [ 542.170972][T21759] __kmalloc_noprof+0xfe/0x720 [ 542.170993][T21759] ? hash_netnet6_add+0x1cbb/0x2fc0 [ 542.171020][T21759] ? hash_netnet6_add+0x150e/0x2fc0 [ 542.171045][T21759] ? hash_netnet6_add+0x150e/0x2fc0 [ 542.171077][T21759] hash_netnet6_add+0x150e/0x2fc0 [ 542.171139][T21759] hash_netnet6_uadt+0x840/0xea0 [ 542.171172][T21759] ? __pfx_hash_netnet6_add+0x10/0x10 [ 542.171199][T21759] ? __pfx_hash_netnet6_uadt+0x10/0x10 [ 542.171224][T21759] ? __nla_validate_parse+0x2429/0x2d50 [ 542.171279][T21759] call_ad+0x18d/0xb50 [ 542.171301][T21759] ? __lock_acquire+0x747/0x2de0 [ 542.171330][T21759] ? __pfx_call_ad+0x10/0x10 [ 542.171367][T21759] ? __nla_parse+0x40/0x60 [ 542.171397][T21759] ip_set_ad+0x82a/0x9d0 [ 542.171429][T21759] ? __pfx_ip_set_ad+0x10/0x10 [ 542.171449][T21759] ? __mutex_lock+0x30b/0x1550 [ 542.171513][T21759] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 542.171538][T21759] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 542.171576][T21759] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 542.171637][T21759] netlink_rcv_skb+0x226/0x4a0 [ 542.171655][T21759] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 542.171680][T21759] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.171705][T21759] ? bpf_lsm_capable+0x9/0x20 [ 542.171720][T21759] ? security_capable+0x7e/0x2c0 [ 542.171745][T21759] nfnetlink_rcv+0x2b9/0x28c0 [ 542.171773][T21759] ? __dev_queue_xmit+0x29b/0x3920 [ 542.171800][T21759] ? __local_bh_enable_ip+0xd6/0x140 [ 542.171820][T21759] ? lockdep_hardirqs_on+0x7b/0x110 [ 542.171842][T21759] ? __dev_queue_xmit+0x29b/0x3920 [ 542.171864][T21759] ? __local_bh_enable_ip+0xd6/0x140 [ 542.171883][T21759] ? __dev_queue_xmit+0x29b/0x3920 [ 542.171904][T21759] ? __dev_queue_xmit+0x1efb/0x3920 [ 542.171930][T21759] ? __dev_queue_xmit+0x29b/0x3920 [ 542.171958][T21759] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 542.171990][T21759] ? __pfx___dev_queue_xmit+0x10/0x10 [ 542.172020][T21759] ? __copy_skb_header+0xa3/0x4a0 [ 542.172058][T21759] ? skb_clone+0x246/0x3a0 [ 542.172083][T21759] ? __netlink_deliver_tap+0x681/0x6e0 [ 542.172098][T21759] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.172119][T21759] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.172135][T21759] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.172156][T21759] netlink_unicast+0x7bd/0x940 [ 542.172188][T21759] netlink_sendmsg+0x813/0xb40 [ 542.172212][T21759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.172236][T21759] ? apparmor_socket_sendmsg+0x98/0x360 [ 542.172256][T21759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.172272][T21759] sock_sendmsg_nosec+0x14e/0x190 [ 542.172291][T21759] ____sys_sendmsg+0x54e/0x850 [ 542.172317][T21759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.172346][T21759] ? import_iovec+0x73/0xa0 [ 542.172369][T21759] ___sys_sendmsg+0x2a5/0x360 [ 542.172390][T21759] ? __lock_acquire+0x747/0x2de0 [ 542.172409][T21759] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.172429][T21759] ? __lock_acquire+0x747/0x2de0 [ 542.172478][T21759] ? __fget_files+0x2a/0x420 [ 542.172499][T21759] ? __fget_files+0x3a2/0x420 [ 542.172529][T21759] __x64_sys_sendmsg+0x1b1/0x290 [ 542.172553][T21759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.172592][T21759] do_syscall_64+0x166/0x520 [ 542.172615][T21759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.172631][T21759] ? clear_bhb_loop+0x70/0xc0 [ 542.172651][T21759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.172667][T21759] RIP: 0033:0x7fd4e579e159 [ 542.172683][T21759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.172697][T21759] RSP: 002b:00007fd4e670d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.172714][T21759] RAX: ffffffffffffffda RBX: 00007fd4e5a25fa0 RCX: 00007fd4e579e159 [ 542.172726][T21759] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000007 [ 542.172737][T21759] RBP: 00007fd4e670d090 R08: 0000000000000000 R09: 0000000000000000 [ 542.172748][T21759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.172757][T21759] R13: 00007fd4e5a26038 R14: 00007fd4e5a25fa0 R15: 00007ffe782a1ab8 [ 542.172783][T21759] [ 542.187436][T21759] netlink: 'syz.1.3992': attribute type 1 has an invalid length. [ 542.430754][T21759] bond4: entered promiscuous mode [ 542.431164][T21759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 542.550222][T21767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 542.566329][T21767] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 542.566353][T21767] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 542.611227][ T2022] block nbd1: Possible stuck request ffff888026f1e000: control (read@0,1024B). Runtime 270 seconds [ 542.669954][T21767] bond4: (slave wireguard1): making interface the new active one [ 542.669978][T21767] wireguard1: entered promiscuous mode [ 542.723856][T21767] bond4: (slave wireguard1): Enslaving as an active interface with an up link [ 543.025814][T21793] netlink: 'syz.1.4003': attribute type 2 has an invalid length. [ 543.164021][T21804] netlink: 'syz.3.4002': attribute type 1 has an invalid length. [ 543.733141][T21790] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 543.754870][ T7780] s`z1: Port: 1 Link DOWN [ 543.764971][T21812] netlink: 'syz.0.4004': attribute type 3 has an invalid length. [ 543.766952][ T7237] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.766982][ T7237] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.767021][ T7237] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.767045][ T7237] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.767079][ T7237] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.767104][ T7237] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.767138][ T7237] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.767161][ T7237] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.044870][T21849] netlink: 'syz.1.4016': attribute type 4 has an invalid length. [ 547.067331][T21859] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 547.083974][T21852] __nla_validate_parse: 12 callbacks suppressed [ 547.083993][T21852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4015'. [ 547.088619][T21859] pimreg9: entered allmulticast mode [ 547.106681][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4018'. [ 547.296628][T21874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4022'. [ 547.388584][T21878] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4024'. [ 547.434632][T21882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4026'. [ 547.490657][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4026'. [ 547.490686][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4026'. [ 547.681456][T21889] xt_hashlimit: size too large, truncated to 1048576 [ 548.075056][T21897] tap0: tun_chr_ioctl cmd 1074025677 [ 548.075160][T21897] tap0: linktype set to 778 [ 548.284494][T21901] netlink: 964 bytes leftover after parsing attributes in process `syz.1.4031'. [ 548.353000][T21907] lo speed is unknown, defaulting to 1000 [ 548.369531][T21907] lo speed is unknown, defaulting to 1000 [ 548.370495][T21907] lo speed is unknown, defaulting to 1000 [ 548.520372][T21914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 548.645149][T21915] ip6gretap1: entered allmulticast mode [ 548.653857][T21915] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 548.654506][T21915] batman_adv: batadv0: Adding interface: ip6gretap1 [ 548.654520][T21915] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.654705][T21915] batman_adv: batadv0: Interface activated: ip6gretap1 [ 548.733991][T21924] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20001 [ 548.871452][T21907] infiniband syz0: set down [ 548.871510][T21185] lo speed is unknown, defaulting to 1000 [ 548.871833][T21907] infiniband syz0: added lo [ 548.874561][T21926] sit0: entered promiscuous mode [ 548.914543][T21926] hsr0: entered promiscuous mode [ 548.921085][T21907] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 548.921124][T21907] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 548.921166][T21907] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 548.924912][T21926] ipip0: entered promiscuous mode [ 548.997568][T21926] vxlan0: entered promiscuous mode [ 549.002834][T21907] RDS/IB: syz0: added [ 549.002893][T21907] smc: adding ib device syz0 with port count 1 [ 549.002912][T21907] smc: ib device syz0 port 1 has no pnetid [ 549.050593][T21937] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4038'. [ 549.051926][T21926] bond1: entered promiscuous mode [ 549.051963][T21926] geneve2: entered promiscuous mode [ 549.072333][T21926] erspan1: entered promiscuous mode [ 549.084801][T21926] bond2: entered promiscuous mode [ 549.091383][T21926] veth2: entered promiscuous mode [ 549.092787][T21926] veth3: entered promiscuous mode [ 549.106221][T21926] bond3: entered promiscuous mode [ 549.106912][T21926] veth4: entered promiscuous mode [ 549.119856][T21926] veth5: entered promiscuous mode [ 549.121946][T21926] gtp0: entered promiscuous mode [ 549.122864][T21926] ip6tnl1: entered promiscuous mode [ 549.154929][T21926] batadv1: entered promiscuous mode [ 549.155098][T21926] vlan0: entered promiscuous mode [ 549.183481][T21926] dummy1: entered promiscuous mode [ 549.195722][T21926] veth6: entered promiscuous mode [ 549.196035][T21926] veth7: entered promiscuous mode [ 549.207177][T21926] syzkaller1: entered promiscuous mode [ 549.213055][T21907] lo speed is unknown, defaulting to 1000 [ 549.216383][ T7227] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.216412][ T7227] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.217358][ T7227] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.217384][ T7227] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.217419][ T7227] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.217450][ T7227] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.217484][ T7227] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.217508][ T7227] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.370005][T21951] IPVS: set_ctl: invalid protocol: 151 172.20.20.187:20003 [ 549.489547][T21185] lo speed is unknown, defaulting to 1000 [ 549.494374][T21950] lo: entered promiscuous mode [ 549.494624][T21950] tunl0: entered promiscuous mode [ 549.499160][T21950] gre0: entered promiscuous mode [ 549.519749][T21950] gretap0: entered promiscuous mode [ 549.533937][T21950] erspan0: entered promiscuous mode [ 549.541114][T21950] ip_vti0: entered promiscuous mode [ 549.544665][T21950] ip6_vti0: entered promiscuous mode [ 549.569206][T21950] sit0: entered promiscuous mode [ 549.592707][T21950] ip6tnl0: entered promiscuous mode [ 549.601724][T21950] ip6gre0: entered promiscuous mode [ 549.631136][T21950] syz_tun: entered promiscuous mode [ 549.644470][T21950] ip6gretap0: entered promiscuous mode [ 549.660164][T21950] bridge0: entered promiscuous mode [ 549.673207][T21950] vcan0: entered promiscuous mode [ 549.692651][T21950] bond0: entered promiscuous mode [ 549.701911][T21950] team0: entered promiscuous mode [ 549.712832][T21950] nlmon0: entered promiscuous mode [ 549.720153][T21950] batadv0: entered promiscuous mode [ 549.731146][T21950] vxcan0: entered promiscuous mode [ 549.732097][T21950] vxcan1: entered promiscuous mode [ 549.733082][T21950] veth0: entered promiscuous mode [ 549.753097][T21950] veth1: entered promiscuous mode [ 549.763901][T21950] wg0: entered promiscuous mode [ 549.794802][T21950] wg1: entered promiscuous mode [ 549.809023][T21950] wg2: entered promiscuous mode [ 549.816151][T21950] veth0_to_bridge: entered promiscuous mode [ 549.820920][T21950] bridge_slave_0: entered promiscuous mode [ 549.827189][T21950] veth1_to_bridge: entered promiscuous mode [ 549.829947][T21950] bridge_slave_1: entered promiscuous mode [ 549.831646][T21950] veth0_to_bond: entered promiscuous mode [ 549.831798][T21950] bond_slave_0: entered promiscuous mode [ 549.859245][T21950] veth1_to_bond: entered promiscuous mode [ 549.876392][T21950] bond_slave_1: entered promiscuous mode [ 549.879736][T21950] veth0_to_team: entered promiscuous mode [ 549.890447][T21950] team_slave_0: entered promiscuous mode [ 549.898135][T21950] veth1_to_team: entered promiscuous mode [ 549.921239][T21950] team_slave_1: entered promiscuous mode [ 549.922153][T21950] veth0_to_batadv: entered promiscuous mode [ 549.932263][T21950] batadv_slave_0: entered promiscuous mode [ 549.942185][T21950] veth1_to_batadv: entered promiscuous mode [ 549.953973][T21950] batadv_slave_1: entered promiscuous mode [ 549.976763][T21950] xfrm0: entered promiscuous mode [ 549.992352][T21950] veth0_to_hsr: entered promiscuous mode [ 550.011532][T21950] veth1_to_hsr: entered promiscuous mode [ 550.028395][T21950] hsr0: entered promiscuous mode [ 550.049605][T21950] veth1_virt_wifi: entered promiscuous mode [ 550.052259][T21950] veth0_virt_wifi: entered promiscuous mode [ 550.082617][T21950] virt_wifi0: entered promiscuous mode [ 550.139507][T21950] vlan0: entered promiscuous mode [ 550.159804][T21950] vlan1: entered promiscuous mode [ 550.175051][T21950] macvlan0: entered promiscuous mode [ 550.188016][T21950] macvlan1: entered promiscuous mode [ 550.197792][T21950] ipvlan0: entered promiscuous mode [ 550.197960][T21950] ipvlan1: entered promiscuous mode [ 550.224422][T21950] macvtap0: entered promiscuous mode [ 550.234503][T21950] macsec0: entered promiscuous mode [ 550.242722][T21950] geneve0: entered promiscuous mode [ 550.250902][T21950] geneve1: entered promiscuous mode [ 550.255272][T21950] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 550.272444][T21950] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 550.284723][T21950] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 550.297171][T21950] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 550.299156][T21950] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 550.299324][T21950] syztnl2: entered promiscuous mode [ 550.299742][T21950] vxlan0: entered promiscuous mode [ 550.301817][T21950] bond1: entered promiscuous mode [ 550.301964][T21950] veth2: entered promiscuous mode [ 550.302116][T21950] veth3: entered promiscuous mode [ 550.308432][T21950] batadv1: entered promiscuous mode [ 550.308605][T21950] syztnl0: entered promiscuous mode [ 550.308724][T21950] geneve2: entered promiscuous mode [ 550.311452][T21950] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode [ 550.311676][T21950] mac80211_hwsim hwsim49 wlan2: entered promiscuous mode [ 550.312126][T21950] bond3: entered promiscuous mode [ 550.312201][T21950] gretap1: entered promiscuous mode [ 550.323903][T21950] erspan1: entered promiscuous mode [ 550.334511][T21950] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 550.341022][T21950] ip6gretap1: entered promiscuous mode [ 550.423019][T21907] lo speed is unknown, defaulting to 1000 [ 550.456405][ T7237] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.456441][ T7237] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.457019][ T7237] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.457046][ T7237] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.457115][ T7237] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.457140][ T7237] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.457172][ T7237] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.457197][ T7237] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.132984][T21907] lo speed is unknown, defaulting to 1000 [ 551.334247][T22006] netlink: 'syz.1.4051': attribute type 1 has an invalid length. [ 551.398871][T22006] bond5: entered promiscuous mode [ 551.399436][T22006] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.607021][T22013] netlink: 'syz.3.4053': attribute type 1 has an invalid length. [ 551.607046][T22013] netlink: 'syz.3.4053': attribute type 1 has an invalid length. [ 551.607060][T22013] netlink: 'syz.3.4053': attribute type 2 has an invalid length. [ 551.711083][T22011] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 551.830337][T22011] bond1: entered promiscuous mode [ 551.849271][T22011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.891645][T22016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.892138][T22016] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 551.892160][T22016] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 551.981556][T22016] bond1: (slave wireguard0): making interface the new active one [ 551.981584][T22016] wireguard0: entered promiscuous mode [ 551.999243][T22016] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 552.026380][T21907] lo speed is unknown, defaulting to 1000 [ 552.073413][T22019] netlink: 'syz.3.4054': attribute type 1 has an invalid length. [ 552.205710][T22024] __nla_validate_parse: 9 callbacks suppressed [ 552.205740][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4054'. [ 552.292447][T22019] bond3: entered promiscuous mode [ 552.292970][T22019] 8021q: adding VLAN 0 to HW filter on device bond3 [ 552.369210][T22024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 552.377530][T22024] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 552.377557][T22024] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 552.406126][T22024] bond3: (slave wireguard1): making interface the new active one [ 552.406152][T22024] wireguard1: entered promiscuous mode [ 552.431748][T22024] bond3: (slave wireguard1): Enslaving as an active interface with an up link [ 552.554318][T22032] syzkaller1: entered promiscuous mode [ 552.554346][T22032] syzkaller1: entered allmulticast mode [ 552.904995][T21907] lo speed is unknown, defaulting to 1000 [ 552.912915][T22046] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 553.010929][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4061'. [ 553.068704][T22046] 8021q: adding VLAN 0 to HW filter on device bond7 [ 553.475109][T21907] lo speed is unknown, defaulting to 1000 [ 553.891345][T21907] lo speed is unknown, defaulting to 1000 [ 573.107222][ T2022] block nbd1: Possible stuck request ffff888026f1e000: control (read@0,1024B). Runtime 300 seconds [ 580.697497][T22094] syzkaller1: entered promiscuous mode [ 580.697522][T22094] syzkaller1: entered allmulticast mode [ 580.860940][T22097] sctp: [Deprecated]: syz.1.4071 (pid 22097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.860940][T22097] Use struct sctp_sack_info instead [ 580.940439][T22109] sctp: [Deprecated]: syz.0.4075 (pid 22109) Use of int in maxseg socket option. [ 580.940439][T22109] Use struct sctp_assoc_value instead [ 581.675024][T22132] syzkaller1: entered promiscuous mode [ 581.675048][T22132] syzkaller1: entered allmulticast mode [ 581.689489][T22140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 581.810923][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 581.962927][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 581.963043][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 581.963137][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 581.963241][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 581.963341][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 581.963442][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 581.963541][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 581.963656][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 582.054369][T22152] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 582.062255][T22149] batman_adv: batadv0: Adding interface: veth0 [ 582.062274][T22149] batman_adv: batadv0: Interface activated: veth0 [ 582.137180][T22157] Bluetooth: MGMT ver 1.23 [ 582.141997][T22151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 582.144544][T22149] batman_adv: batadv0: Interface deactivated: macvlan4 [ 582.144568][T22149] batman_adv: batadv0: Removing interface: macvlan4 [ 582.159579][T22149] batman_adv: batadv0: Interface deactivated: veth0 [ 582.159601][T22149] batman_adv: batadv0: Removing interface: veth0 [ 582.257149][T22160] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 582.283351][T22156] bond3: (slave batadv1): Opening slave failed [ 582.652282][T22179] tipc: Enabling of bearer rejected, already enabled [ 583.305197][T22202] tipc: Enabled bearer , priority 0 [ 583.314161][T22202] syzkaller0: entered promiscuous mode [ 583.314185][T22202] syzkaller0: entered allmulticast mode [ 583.440615][T22206] team0: Port device team_slave_1 removed [ 583.468425][T22202] tipc: Resetting bearer [ 583.472053][T22209] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 583.533809][T22201] tipc: Resetting bearer [ 583.563010][T22201] tipc: Disabling bearer [ 584.074962][T22239] macsec1: entered promiscuous mode [ 584.178676][T22252] netlink: 'syz.4.4123': attribute type 4 has an invalid length. [ 584.182422][T22248] netlink: 'syz.4.4123': attribute type 4 has an invalid length. [ 584.215812][T22252] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 584.215916][T22248] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 584.221228][T22247] netlink: 'syz.4.4123': attribute type 1 has an invalid length. [ 584.311537][T22247] bond4: entered promiscuous mode [ 584.312000][T22247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.350303][T22248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.350508][T22248] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 584.350519][T22248] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 584.374403][T22248] bond4: (slave wireguard1): making interface the new active one [ 584.374428][T22248] wireguard1: entered promiscuous mode [ 584.392445][T22248] bond4: (slave wireguard1): Enslaving as an active interface with an up link [ 584.604045][T22262] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 585.138493][T22289] syzkaller1: entered promiscuous mode [ 585.138518][T22289] syzkaller1: entered allmulticast mode [ 585.440320][T22312] Cannot find add_set index 34 as target [ 586.250235][T22345] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 586.427097][T22356] syz.3.4144: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 586.427174][T22356] CPU: 0 UID: 0 PID: 22356 Comm: syz.3.4144 Not tainted syzkaller #0 PREEMPT(full) [ 586.427200][T22356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 586.427213][T22356] Call Trace: [ 586.427222][T22356] [ 586.427232][T22356] dump_stack_lvl+0xe8/0x150 [ 586.427268][T22356] warn_alloc+0x24d/0x270 [ 586.427291][T22356] ? kasan_save_track+0x4f/0x80 [ 586.427313][T22356] ? kasan_save_track+0x3e/0x80 [ 586.427339][T22356] ? __pfx_warn_alloc+0x10/0x10 [ 586.427359][T22356] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 586.427388][T22356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.427430][T22356] __vmalloc_node_range_noprof+0x127/0x1540 [ 586.427486][T22356] ? rcu_is_watching+0x16/0xb0 [ 586.427518][T22356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 586.427550][T22356] ? __kmalloc_cache_noprof+0x321/0x600 [ 586.427573][T22356] ? __kmalloc_cache_noprof+0x14d/0x600 [ 586.427594][T22356] ? xskq_create+0x56/0x220 [ 586.427628][T22356] xskq_create+0x148/0x220 [ 586.427657][T22356] ? xsk_init_queue+0x8a/0xe0 [ 586.427688][T22356] xsk_init_queue+0x8a/0xe0 [ 586.427718][T22356] xsk_setsockopt+0x5e0/0x960 [ 586.427748][T22356] ? __pfx_xsk_setsockopt+0x10/0x10 [ 586.427775][T22356] ? __pfx_aa_sk_perm+0x10/0x10 [ 586.427813][T22356] ? aa_sock_opt_perm+0x142/0x1e0 [ 586.427844][T22356] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 586.427868][T22356] ? __pfx_xsk_setsockopt+0x10/0x10 [ 586.427897][T22356] do_sock_setsockopt+0x17c/0x1b0 [ 586.427930][T22356] __x64_sys_setsockopt+0x13d/0x1b0 [ 586.427964][T22356] do_syscall_64+0x166/0x520 [ 586.427995][T22356] ? trace_irq_disable+0x3b/0x140 [ 586.428016][T22356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.428036][T22356] ? clear_bhb_loop+0x70/0xc0 [ 586.428063][T22356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.428083][T22356] RIP: 0033:0x7f7936b9e159 [ 586.428102][T22356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.428120][T22356] RSP: 002b:00007f7937b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 586.428142][T22356] RAX: ffffffffffffffda RBX: 00007f7936e25fa0 RCX: 00007f7936b9e159 [ 586.428159][T22356] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 586.428173][T22356] RBP: 00007f7936c3506b R08: 0000000000000004 R09: 0000000000000000 [ 586.428187][T22356] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.428202][T22356] R13: 00007f7936e26038 R14: 00007f7936e25fa0 R15: 00007fff44cf91b8 [ 586.428237][T22356] [ 586.429229][T22356] Mem-Info: [ 586.429243][T22356] active_anon:6109 inactive_anon:0 isolated_anon:0 [ 586.429243][T22356] active_file:0 inactive_file:43674 isolated_file:0 [ 586.429243][T22356] unevictable:0 dirty:90 writeback:0 [ 586.429243][T22356] slab_reclaimable:11881 slab_unreclaimable:117706 [ 586.429243][T22356] mapped:29706 shmem:525 pagetables:1652 [ 586.429243][T22356] sec_pagetables:0 bounce:0 [ 586.429243][T22356] kernel_misc_reclaimable:0 [ 586.429243][T22356] free:1283628 free_pcp:10212 free_cma:0 [ 586.429300][T22356] Node 0 active_anon:24436kB inactive_anon:0kB active_file:0kB inactive_file:174496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118824kB dirty:360kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17880kB pagetables:6488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 586.429364][T22356] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 586.429421][T22356] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 586.433333][T22356] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 586.433372][T22356] Node 0 DMA32 free:1178372kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24436kB inactive_anon:0kB active_file:0kB inactive_file:174496kB unevictable:0kB writepending:360kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:40784kB local_pcp:19968kB free_cma:0kB [ 586.433432][T22356] lowmem_reserve[]: 0 0 0 0 0 [ 586.433470][T22356] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 586.433530][T22356] lowmem_reserve[]: 0 0 0 0 0 [ 586.433568][T22356] Node 1 Normal free:3940780kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 586.433631][T22356] lowmem_reserve[]: 0 0 0 0 0 [ 586.433668][T22356] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 586.433882][T22356] Node 0 DMA32: 71*4kB (UM) 83*8kB (UME) 123*16kB (UME) 280*32kB (UME) 424*64kB (UME) 628*128kB (UME) 545*256kB (UME) 276*512kB (UME) 140*1024kB (UM) 6*2048kB (UE) 152*4096kB (UM) = 1178468kB [ 586.434056][T22356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 586.434164][T22356] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 4*16kB (UM) 10*32kB (UM) 8*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3940780kB [ 586.434324][T22356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.434342][T22356] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 586.434360][T22356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.434378][T22356] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 586.434396][T22356] 44195 total pagecache pages [ 586.434405][T22356] 0 pages in swap cache [ 586.434413][T22356] Free swap = 124996kB [ 586.434422][T22356] Total swap = 124996kB [ 586.434431][T22356] 2097051 pages RAM [ 586.434440][T22356] 0 pages HighMem/MovableOnly [ 586.434448][T22356] 428661 pages reserved [ 586.434456][T22356] 0 pages cma reserved [ 586.722487][T22361] tipc: Enabled bearer , priority 0 [ 586.754706][T22365] syzkaller0: entered promiscuous mode [ 586.754731][T22365] syzkaller0: entered allmulticast mode [ 586.767006][T22361] netlink: 'syz.4.4146': attribute type 21 has an invalid length. [ 586.915173][T22361] tipc: Resetting bearer [ 587.088918][T22380] syz.4.4146 (22380) used obsolete PPPIOCDETACH ioctl [ 587.192181][T22361] wg2 speed is unknown, defaulting to 1000 [ 587.334623][T22361] lo speed is unknown, defaulting to 1000 [ 587.592645][T22396] __nla_validate_parse: 48 callbacks suppressed [ 587.592668][T22396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4152'. [ 587.779465][T22404] dvmrp0: entered allmulticast mode [ 588.025176][T22411] 8021q: adding VLAN 0 to HW filter on device bond6 [ 588.027295][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4156'. [ 588.087371][T22417] bond6: (slave batadv2): Opening slave failed [ 588.133514][T22420] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4158'. [ 588.192252][T22425] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4158'. [ 588.323035][T22432] ip6gre1: entered allmulticast mode [ 588.740832][T22443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4164'. [ 588.845732][T22448] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4165'. [ 588.845760][T22448] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4165'. [ 589.110998][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4167'. [ 589.113230][T22455] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 589.440769][T22361] tipc: Resetting bearer [ 589.482582][T22361] tipc: Disabling bearer [ 589.574606][T22471] tc_dump_action: action bad kind [ 589.574737][T22473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4172'. [ 589.651984][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4175'. [ 589.764592][T22484] geneve1: entered promiscuous mode [ 589.766742][T22484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 590.099328][T22498] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 590.122540][T22501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.211892][T22507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.356743][T22538] ip6gre1: entered promiscuous mode [ 591.356767][T22538] ip6gre1: entered allmulticast mode [ 591.572915][T22553] netlink: 'syz.4.4193': attribute type 10 has an invalid length. [ 591.580184][T22553] team0: Port device dummy0 added [ 591.582964][T22553] netlink: 'syz.4.4193': attribute type 10 has an invalid length. [ 591.600814][T22553] team0: Port device dummy0 removed [ 591.601496][T22553] dummy0 (unregistering): left allmulticast mode [ 591.690633][T22560] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 592.072134][T22580] IPVS: length: 77 != 24 [ 592.171365][T22580] 8021q: adding VLAN 0 to HW filter on device bond8 [ 592.943113][T22615] __nla_validate_parse: 12 callbacks suppressed [ 592.943134][T22615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4211'. [ 593.252818][T22635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4214'. [ 593.405100][T22644] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4218'. [ 593.514195][T22651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4220'. [ 593.673620][T22655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.727977][T22657] bond4: (slave batadv3): Opening slave failed [ 593.878664][T22672] syzkaller0: entered promiscuous mode [ 593.878689][T22672] syzkaller0: entered allmulticast mode [ 594.154258][T22680] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4232'. [ 594.363393][T22694] team0: entered allmulticast mode [ 594.473274][ T7220] IPVS: starting estimator thread 0... [ 594.492275][T22700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4237'. [ 594.492304][T22700] netlink: 'syz.4.4237': attribute type 1 has an invalid length. [ 594.493423][T22700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4237'. [ 594.555647][T22704] IPVS: using max 32 ests per chain, 76800 per kthread [ 594.562862][T22707] tipc: Enabling of bearer rejected, failed to enable media [ 594.564783][T22707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4238'. [ 594.648131][T22709] netlink: 'syz.0.4239': attribute type 1 has an invalid length. [ 594.709554][T22709] bond8: entered promiscuous mode [ 594.709978][T22709] 8021q: adding VLAN 0 to HW filter on device bond8 [ 594.750301][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4239'. [ 594.777972][T22709] 8021q: adding VLAN 0 to HW filter on device bond8 [ 594.781754][T22709] bond8: (slave wireguard3): The slave device specified does not support setting the MAC address [ 594.781780][T22709] bond8: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 594.783713][T22719] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4241'. [ 594.864438][T22709] bond8: (slave wireguard3): making interface the new active one [ 594.864466][T22709] wireguard3: entered promiscuous mode [ 594.884404][T22709] bond8: (slave wireguard3): Enslaving as an active interface with an up link [ 595.083174][T22734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.214971][T22738] ipvlan2: entered allmulticast mode [ 595.214996][T22738] macvlan1: entered allmulticast mode [ 595.215010][T22738] veth1_vlan: entered allmulticast mode [ 595.237910][T22738] batman_adv: batadv0: Adding interface: ipvlan2 [ 595.237930][T22738] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.237965][T22738] batman_adv: batadv0: Interface activated: ipvlan2 [ 595.555213][T22747] IPv6: sit1: Disabled Multicast RS [ 595.773439][T22765] netlink: 'syz.2.4259': attribute type 2 has an invalid length. [ 595.871857][T22766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 595.889522][T22776] netlink: Unknown nat attribute (0) [ 595.889559][T22776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.944135][T22766] bond5: (slave batadv2): Opening slave failed [ 596.016677][T22777] tipc: Enabled bearer , priority 0 [ 596.044382][T22774] tipc: Disabling bearer [ 596.774735][T22820] Cannot find set identified by id 65535 to match [ 597.294946][T22837] ip_tables: iptables: counters copy to user failed while replacing table [ 597.318995][T22837] ip_tables: iptables: counters copy to user failed while replacing table [ 597.836403][T22857] tipc: New replicast peer: 255.255.255.255 [ 597.837064][T22857] tipc: Enabled bearer , priority 10 [ 597.886030][T22856] netlink: 'syz.0.4281': attribute type 16 has an invalid length. [ 597.886052][T22856] netlink: 'syz.0.4281': attribute type 17 has an invalid length. [ 597.886150][T22856] lo: left promiscuous mode [ 597.893119][T22856] tunl0: left promiscuous mode [ 597.908318][T22856] gre0: left promiscuous mode [ 597.938108][T22856] gretap0: left promiscuous mode [ 597.946695][T22856] erspan0: left promiscuous mode [ 597.977687][T22856] ip_vti0: left promiscuous mode [ 597.993082][T22863] __nla_validate_parse: 7 callbacks suppressed [ 597.993102][T22863] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4284'. [ 597.993122][T22863] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4284'. [ 597.993847][T22856] ip6_vti0: left promiscuous mode [ 598.011318][T22856] sit0: left promiscuous mode [ 598.038940][T22856] ip6tnl0: left promiscuous mode [ 598.050891][T22856] ip6gre0: left promiscuous mode [ 598.059499][T22856] syz_tun: left promiscuous mode [ 598.079373][T22856] ip6gretap0: left promiscuous mode [ 598.099951][T22856] bridge0: left promiscuous mode [ 598.113156][T22870] netlink: 'syz.3.4286': attribute type 3 has an invalid length. [ 598.117215][T22856] vcan0: left promiscuous mode [ 598.124692][T22856] bond0: left promiscuous mode [ 598.130424][T22856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.143051][T22856] team0: left promiscuous mode [ 598.144149][T22856] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.153290][T22856] dummy0: left promiscuous mode [ 598.160273][T22856] nlmon0: left promiscuous mode [ 598.166708][T22856] batadv0: left promiscuous mode [ 598.174759][T22856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.182040][T22856] vxcan0: left promiscuous mode [ 598.185080][T22856] vxcan1: left promiscuous mode [ 598.188703][T22856] veth0: left promiscuous mode [ 598.189903][T22856] veth1: left promiscuous mode [ 598.229508][T22856] wg0: left promiscuous mode [ 598.243706][T22856] wg1: left promiscuous mode [ 598.255741][T22856] wg2: left promiscuous mode [ 598.261915][T22856] veth0_to_bridge: left promiscuous mode [ 598.270336][T22856] veth1_to_bridge: left promiscuous mode [ 598.280414][T22856] veth0_to_bond: left promiscuous mode [ 598.282858][T22856] ÿÿÿ: left promiscuous mode [ 598.288875][T22856] veth1_to_bond: left promiscuous mode [ 598.293276][T22856] bond_slave_1: left promiscuous mode [ 598.306928][T22856] veth0_to_team: left promiscuous mode [ 598.319179][T22856] team_slave_0: left promiscuous mode [ 598.320494][T22856] veth1_to_team: left promiscuous mode [ 598.338679][T22856] team_slave_1: left promiscuous mode [ 598.353042][T22856] veth0_to_batadv: left promiscuous mode [ 598.362110][T22856] batadv_slave_0: left promiscuous mode [ 598.370970][T22885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4288'. [ 598.373001][T22856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.373385][T22856] veth1_to_batadv: left promiscuous mode [ 598.382493][T22856] batadv_slave_1: left promiscuous mode [ 598.392074][T22856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.392483][T22856] xfrm0: left promiscuous mode [ 598.399857][T22856] veth0_to_hsr: left promiscuous mode [ 598.421623][T22856] veth1_to_hsr: left promiscuous mode [ 598.439235][T22856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.439251][T22856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.439281][T22856] hsr0: left promiscuous mode [ 598.456403][T22856] veth1_virt_wifi: left promiscuous mode [ 598.457665][T22856] veth0_virt_wifi: left promiscuous mode [ 598.458810][T22856] virt_wifi0: left promiscuous mode [ 598.458829][T22856] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 598.538939][T19494] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.539082][T19494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.561649][T19494] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.561767][T19494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.650639][T22878] ip6tnl2: entered allmulticast mode [ 598.792110][T22896] FAULT_INJECTION: forcing a failure. [ 598.792110][T22896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.792144][T22896] CPU: 1 UID: 0 PID: 22896 Comm: syz.0.4290 Not tainted syzkaller #0 PREEMPT(full) [ 598.792167][T22896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 598.792179][T22896] Call Trace: [ 598.792187][T22896] [ 598.792203][T22896] dump_stack_lvl+0xe8/0x150 [ 598.792236][T22896] should_fail_ex+0x410/0x560 [ 598.792265][T22896] _copy_from_user+0x2d/0xb0 [ 598.792293][T22896] ___sys_sendmsg+0x1c6/0x360 [ 598.792320][T22896] ? __lock_acquire+0x747/0x2de0 [ 598.792347][T22896] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.792411][T22896] ? __fget_files+0x2a/0x420 [ 598.792438][T22896] ? __fget_files+0x3a2/0x420 [ 598.792476][T22896] __x64_sys_sendmsg+0x1b1/0x290 [ 598.792506][T22896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.792555][T22896] do_syscall_64+0x166/0x520 [ 598.792584][T22896] ? trace_irq_disable+0x3b/0x140 [ 598.792605][T22896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.792626][T22896] ? clear_bhb_loop+0x70/0xc0 [ 598.792651][T22896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.792672][T22896] RIP: 0033:0x7f807759e159 [ 598.792690][T22896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.792707][T22896] RSP: 002b:00007f8078473028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.792730][T22896] RAX: ffffffffffffffda RBX: 00007f8077825fa0 RCX: 00007f807759e159 [ 598.792745][T22896] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 598.792758][T22896] RBP: 00007f8078473090 R08: 0000000000000000 R09: 0000000000000000 [ 598.792771][T22896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.792784][T22896] R13: 00007f8077826038 R14: 00007f8077825fa0 R15: 00007ffc55303598 [ 598.792817][T22896] [ 599.179405][T22905] netlink: 'syz.2.4293': attribute type 1 has an invalid length. [ 599.219327][T22905] bond9: entered promiscuous mode [ 599.219728][T22905] 8021q: adding VLAN 0 to HW filter on device bond9 [ 599.277742][T22905] 8021q: adding VLAN 0 to HW filter on device bond9 [ 599.297283][T22905] bond9: (slave gre2): The slave device specified does not support setting the MAC address [ 599.297307][T22905] bond9: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 599.343897][T22905] bond9: (slave gre2): making interface the new active one [ 599.343922][T22905] gre2: entered promiscuous mode [ 599.380125][T22916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4294'. [ 599.384659][T22905] bond9: (slave gre2): Enslaving as an active interface with an up link [ 599.389988][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 599.390213][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 599.426896][T21185] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 599.702272][T22932] netlink: 5160 bytes leftover after parsing attributes in process `syz.0.4299'. [ 599.702296][T22932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4299'. [ 599.727415][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4298'. [ 599.797957][T21185] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 599.847590][T22937] FAULT_INJECTION: forcing a failure. [ 599.847590][T22937] name failslab, interval 1, probability 0, space 0, times 0 [ 599.847623][T22937] CPU: 0 UID: 0 PID: 22937 Comm: syz.0.4301 Not tainted syzkaller #0 PREEMPT(full) [ 599.847645][T22937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 599.847658][T22937] Call Trace: [ 599.847666][T22937] [ 599.847675][T22937] dump_stack_lvl+0xe8/0x150 [ 599.847707][T22937] should_fail_ex+0x410/0x560 [ 599.847734][T22937] ? __alloc_skb+0x1db/0x7a0 [ 599.847757][T22937] should_failslab+0xa8/0x100 [ 599.847783][T22937] ? __alloc_skb+0x1db/0x7a0 [ 599.847804][T22937] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 599.847835][T22937] ? __alloc_skb+0x18d/0x7a0 [ 599.847859][T22937] ? __alloc_skb+0x1db/0x7a0 [ 599.847889][T22937] __alloc_skb+0x1db/0x7a0 [ 599.847917][T22937] netlink_sendmsg+0x5d4/0xb40 [ 599.847948][T22937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.847977][T22937] ? apparmor_socket_sendmsg+0x98/0x360 [ 599.848002][T22937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.848022][T22937] sock_sendmsg_nosec+0x14e/0x190 [ 599.848045][T22937] ____sys_sendmsg+0x54e/0x850 [ 599.848078][T22937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.848115][T22937] ? import_iovec+0x73/0xa0 [ 599.848142][T22937] ___sys_sendmsg+0x2a5/0x360 [ 599.848168][T22937] ? __lock_acquire+0x747/0x2de0 [ 599.848194][T22937] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.848256][T22937] ? __fget_files+0x2a/0x420 [ 599.848282][T22937] ? __fget_files+0x3a2/0x420 [ 599.848319][T22937] __x64_sys_sendmsg+0x1b1/0x290 [ 599.848350][T22937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.848397][T22937] do_syscall_64+0x166/0x520 [ 599.848432][T22937] ? trace_irq_disable+0x3b/0x140 [ 599.848453][T22937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.848473][T22937] ? clear_bhb_loop+0x70/0xc0 [ 599.848498][T22937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.848518][T22937] RIP: 0033:0x7f807759e159 [ 599.848536][T22937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.848554][T22937] RSP: 002b:00007f8078473028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.848576][T22937] RAX: ffffffffffffffda RBX: 00007f8077825fa0 RCX: 00007f807759e159 [ 599.848591][T22937] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 599.848605][T22937] RBP: 00007f8078473090 R08: 0000000000000000 R09: 0000000000000000 [ 599.848618][T22937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.848631][T22937] R13: 00007f8077826038 R14: 00007f8077825fa0 R15: 00007ffc55303598 [ 599.848663][T22937] [ 600.127310][T21185] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 600.189655][T22948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4305'. [ 600.190518][T22948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4305'. [ 600.194185][T22948] ip_tables: iptables: counters copy to user failed while replacing table [ 600.325874][T22946] netlink: 'syz.2.4304': attribute type 4 has an invalid length. [ 600.325897][T22946] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4304'. [ 600.339365][T22946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.950481][T22969] 8021q: adding VLAN 0 to HW filter on device bond10 [ 600.990000][T22981] FAULT_INJECTION: forcing a failure. [ 600.990000][T22981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.990033][T22981] CPU: 1 UID: 0 PID: 22981 Comm: syz.3.4315 Not tainted syzkaller #0 PREEMPT(full) [ 600.990056][T22981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 600.990069][T22981] Call Trace: [ 600.990077][T22981] [ 600.990086][T22981] dump_stack_lvl+0xe8/0x150 [ 600.990118][T22981] should_fail_ex+0x410/0x560 [ 600.990147][T22981] _copy_from_iter+0x1d3/0x1660 [ 600.990171][T22981] ? __alloc_skb+0x27a/0x7a0 [ 600.990197][T22981] ? __alloc_skb+0x27a/0x7a0 [ 600.990223][T22981] ? __alloc_skb+0x27a/0x7a0 [ 600.990246][T22981] ? __pfx__copy_from_iter+0x10/0x10 [ 600.990268][T22981] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 600.990298][T22981] ? __alloc_skb+0x27a/0x7a0 [ 600.990319][T22981] ? __alloc_skb+0x27a/0x7a0 [ 600.990347][T22981] ? netlink_sendmsg+0x650/0xb40 [ 600.990367][T22981] ? skb_put+0x112/0x210 [ 600.990403][T22981] netlink_sendmsg+0x6c0/0xb40 [ 600.990433][T22981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.990462][T22981] ? apparmor_socket_sendmsg+0x98/0x360 [ 600.990488][T22981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.990508][T22981] sock_sendmsg_nosec+0x14e/0x190 [ 600.990531][T22981] ____sys_sendmsg+0x54e/0x850 [ 600.990562][T22981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.990602][T22981] ? import_iovec+0x73/0xa0 [ 600.990631][T22981] ___sys_sendmsg+0x2a5/0x360 [ 600.990655][T22981] ? __lock_acquire+0x747/0x2de0 [ 600.990680][T22981] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.990734][T22981] ? __fget_files+0x2a/0x420 [ 600.990758][T22981] ? __fget_files+0x3a2/0x420 [ 600.990794][T22981] __x64_sys_sendmsg+0x1b1/0x290 [ 600.990825][T22981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.990872][T22981] do_syscall_64+0x166/0x520 [ 600.990899][T22981] ? trace_irq_disable+0x3b/0x140 [ 600.990919][T22981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.990948][T22981] ? clear_bhb_loop+0x70/0xc0 [ 600.990973][T22981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.990994][T22981] RIP: 0033:0x7f7936b9e159 [ 600.991012][T22981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.991030][T22981] RSP: 002b:00007f7937b3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.991050][T22981] RAX: ffffffffffffffda RBX: 00007f7936e25fa0 RCX: 00007f7936b9e159 [ 600.991066][T22981] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 600.991080][T22981] RBP: 00007f7937b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 600.991093][T22981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.991105][T22981] R13: 00007f7936e26038 R14: 00007f7936e25fa0 R15: 00007fff44cf91b8 [ 600.991136][T22981] [ 601.150443][T22973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 601.283104][T22975] bond10: (slave batadv7): Opening slave failed [ 601.598724][T22985] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.599291][T22985] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.791493][T22985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.809011][T22985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.107548][T19359] udevd[19359]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 602.362718][T23009] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 602.362927][T23012] netlink: 'syz.4.4320': attribute type 3 has an invalid length. [ 602.363138][T23012] netlink: 'syz.4.4320': attribute type 3 has an invalid length. [ 602.713217][T23040] sctp: [Deprecated]: syz.2.4327 (pid 23040) Use of int in maxseg socket option. [ 602.713217][T23040] Use struct sctp_assoc_value instead [ 602.754791][ T31] audit: type=1804 audit(1791039622.077:16): pid=23038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4326" name="/newroot/261/cgroup.controllers" dev="tmpfs" ino=1349 res=1 errno=0 [ 602.754849][ T31] audit: type=1800 audit(1791039622.077:17): pid=23038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4326" name="cgroup.controllers" dev="tmpfs" ino=1349 res=0 errno=0 [ 602.829360][T23041] 8021q: adding VLAN 0 to HW filter on device bond8 [ 603.172641][ T2022] block nbd1: Possible stuck request ffff888026f1e000: control (read@0,1024B). Runtime 330 seconds [ 603.485676][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 603.965257][T23100] __nla_validate_parse: 34 callbacks suppressed [ 603.972685][T23100] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4339'. [ 605.809342][T23086] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4337'. [ 605.809838][T23090] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4337'. [ 606.183526][T23115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4343'. [ 606.533645][T23150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.903256][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4352'. [ 607.265248][T23177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4355'. [ 607.265718][T23145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 607.265741][T23145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 607.456851][ T7232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 607.457478][ T7232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 607.458021][ T7232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 607.458058][ T7232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 608.027202][T23207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4359'. [ 608.233312][T23214] syzkaller0: entered promiscuous mode [ 608.233336][T23214] syzkaller0: entered allmulticast mode [ 608.359628][T23225] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 608.571187][T23233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4371'. [ 608.591881][T23233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.593939][T23233] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 608.868120][T23246] FAULT_INJECTION: forcing a failure. [ 608.868120][T23246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.869469][T23246] CPU: 0 UID: 0 PID: 23246 Comm: syz.3.4375 Not tainted syzkaller #0 PREEMPT(full) [ 608.869494][T23246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 608.869506][T23246] Call Trace: [ 608.869515][T23246] [ 608.869524][T23246] dump_stack_lvl+0xe8/0x150 [ 608.869557][T23246] should_fail_ex+0x410/0x560 [ 608.869586][T23246] _copy_to_user+0x31/0xb0 [ 608.869615][T23246] simple_read_from_buffer+0xe1/0x170 [ 608.869648][T23246] proc_fail_nth_read+0x1bb/0x230 [ 608.869667][T23246] ? common_file_perm+0x20e/0x2b0 [ 608.869696][T23246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 608.869719][T23246] ? rw_verify_area+0x24a/0x4c0 [ 608.869747][T23246] ? tun_chr_write_iter+0x18a/0x200 [ 608.869769][T23246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 608.869789][T23246] vfs_read+0x213/0xa80 [ 608.869824][T23246] ? __pfx___mutex_lock+0x10/0x10 [ 608.869854][T23246] ? __pfx_vfs_read+0x10/0x10 [ 608.869888][T23246] ? __fget_files+0x2a/0x420 [ 608.869920][T23246] ? __fget_files+0x3a2/0x420 [ 608.869946][T23246] ? __fget_files+0x2a/0x420 [ 608.869983][T23246] ksys_read+0x150/0x270 [ 608.870015][T23246] ? __pfx_ksys_read+0x10/0x10 [ 608.870055][T23246] do_syscall_64+0x166/0x520 [ 608.870082][T23246] ? trace_irq_disable+0x3b/0x140 [ 608.870102][T23246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.870122][T23246] ? clear_bhb_loop+0x70/0xc0 [ 608.870154][T23246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.870174][T23246] RIP: 0033:0x7f7936b5e98e [ 608.870192][T23246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 608.870209][T23246] RSP: 002b:00007f7937b3cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 608.870231][T23246] RAX: ffffffffffffffda RBX: 00007f7937b3d6c0 RCX: 00007f7936b5e98e [ 608.870245][T23246] RDX: 000000000000000f RSI: 00007f7937b3d0a0 RDI: 0000000000000003 [ 608.870258][T23246] RBP: 00007f7937b3d090 R08: 0000000000000000 R09: 0000000000000000 [ 608.870270][T23246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.870283][T23246] R13: 00007f7936e26038 R14: 00007f7936e25fa0 R15: 00007fff44cf91b8 [ 608.870316][T23246] [ 609.378987][T23264] __nla_validate_parse: 2 callbacks suppressed [ 609.379007][T23264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 609.379035][T23264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4380'. [ 609.434429][T23264] geneve3: entered promiscuous mode [ 609.434451][T23264] geneve3: entered allmulticast mode [ 609.476440][T19496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.476486][T19496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.476518][T19496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.476551][T19496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.550338][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4378'. [ 610.469541][T23306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4389'. [ 610.509604][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4389'. [ 610.509689][T23306] bridge_slave_1: left allmulticast mode [ 610.509709][T23306] bridge_slave_1: left promiscuous mode [ 610.509931][T23306] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.544870][T23306] bridge_slave_0: left allmulticast mode [ 610.544887][T23306] bridge_slave_0: left promiscuous mode [ 610.545027][T23306] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.816823][T23315] x_tables: duplicate underflow at hook 1 [ 611.485459][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 611.634936][T23334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4394'. [ 611.780839][T23351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4398'. [ 611.780869][T23351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4398'. [ 611.824315][T23353] xt_hashlimit: size too large, truncated to 1048576 [ 612.176817][T23340] syzkaller0: entered promiscuous mode [ 612.176842][T23340] syzkaller0: entered allmulticast mode [ 612.177356][T23376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.547651][T23386] gtp1: entered promiscuous mode [ 612.547674][T23386] gtp1: entered allmulticast mode [ 613.063839][T23405] wg2 speed is unknown, defaulting to 1000 [ 613.078305][T23405] lo speed is unknown, defaulting to 1000 [ 613.141027][T23410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.808715][T23427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4416'. [ 614.072502][T23432] sctp: [Deprecated]: syz.1.4417 (pid 23432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.072502][T23432] Use struct sctp_sack_info instead [ 614.184122][T23438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4420'. [ 614.258232][T23436] tipc: Enabled bearer , priority 2 [ 614.802453][T23456] netlink: 'syz.2.4426': attribute type 1 has an invalid length. [ 614.833623][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 614.858686][T23463] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4428'. [ 614.874844][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 614.877584][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 614.887102][T23459] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 614.887140][T23459] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 614.887181][T23459] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 614.960368][T23465] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.979108][T23466] netlink: 'syz.2.4426': attribute type 1 has an invalid length. [ 615.029286][T23461] wg2 speed is unknown, defaulting to 1000 [ 615.131183][T23461] lo speed is unknown, defaulting to 1000 [ 615.132874][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 615.152306][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 615.172604][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 615.283571][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 615.424696][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 615.456810][T23474] wg2 speed is unknown, defaulting to 1000 [ 615.484477][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 615.496635][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 615.521369][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 615.542375][T23459] netdevsim0 speed is unknown, defaulting to 1000 [ 615.591286][T23482] IPVS: set_ctl: invalid protocol: 5678 172.20.20.187:0 [ 615.604553][T23482] netlink: 'syz.2.4430': attribute type 10 has an invalid length. [ 615.632756][T23482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.641484][T23482] bond0: entered allmulticast mode [ 615.650491][T23482] team0: Port device bond0 added [ 615.802740][T23485] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 615.908977][T23488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4433'. [ 616.042567][T23494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4433'. [ 616.042597][T23494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4433'. [ 616.208790][T23494] veth7: entered allmulticast mode [ 616.221809][T23494] bond11: (slave veth7): Enslaving as an active interface with an up link [ 616.231937][T23474] lo speed is unknown, defaulting to 1000 [ 616.340875][T23498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4434'. [ 617.093877][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4440'. [ 617.463764][T23518] wg2 speed is unknown, defaulting to 1000 [ 617.554893][T23518] lo speed is unknown, defaulting to 1000 [ 617.751431][T23519] xt_l2tp: invalid flags combination: 8 [ 617.858061][T23550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4447'. [ 618.005955][T19488] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 618.006529][T19488] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 618.006567][T19488] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 618.006603][T19488] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 618.271722][T23554] bond12: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 618.272298][T23554] bond12: (slave ip6tnl3): Error -95 calling set_mac_address [ 618.478292][T23518] netdevsim0 speed is unknown, defaulting to 1000 [ 619.220398][T23602] ip_tables: iptables: counters copy to user failed while replacing table [ 619.690113][T23621] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 619.912752][T23626] vti0: entered promiscuous mode [ 619.912777][T23626] vti0: entered allmulticast mode [ 620.237168][T23651] netlink: 'syz.3.4467': attribute type 1 has an invalid length. [ 620.349984][T23665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4467'. [ 620.368787][T23651] bond5: entered promiscuous mode [ 620.369224][T23651] 8021q: adding VLAN 0 to HW filter on device bond5 [ 620.386295][T23652] macvlan0: entered promiscuous mode [ 620.386472][T23652] macvlan0: entered allmulticast mode [ 620.386486][T23652] veth1_vlan: entered allmulticast mode [ 620.485666][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'. [ 620.485693][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'. [ 620.768323][T23665] 8021q: adding VLAN 0 to HW filter on device bond5 [ 620.768738][T23665] bond5: (slave wireguard2): The slave device specified does not support setting the MAC address [ 620.768759][T23665] bond5: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 620.844184][T23665] bond5: (slave wireguard2): making interface the new active one [ 620.844212][T23665] wireguard2: entered promiscuous mode [ 620.853286][T23665] bond5: (slave wireguard2): Enslaving as an active interface with an up link [ 621.085837][ T32] INFO: task udevd:12265 blocked in I/O wait for more than 143 seconds. [ 621.085863][ T32] Not tainted syzkaller #0 [ 621.085875][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.085885][ T32] task:udevd state:D stack:26856 pid:12265 tgid:12265 ppid:4983 task_flags:0x400140 flags:0x00080002 [ 621.085965][ T32] Call Trace: [ 621.085973][ T32] [ 621.085987][ T32] __schedule+0x17db/0x58f0 [ 621.086035][ T32] ? __lock_acquire+0x747/0 ** replaying previous printk message ** [ 621.086035][ T32] ? __lock_acquire+0x747/0x2de0 [ 621.086075][ T32] ? __pfx___schedule+0x10/0x10 [ 621.086112][ T32] ? schedule+0x90/0x2b0 [ 621.086143][ T32] schedule+0x164/0x2b0 [ 621.086171][ T32] io_schedule+0x7f/0xd0 [ 621.086201][ T32] folio_wait_bit_common+0x836/0xbc0 [ 621.086227][ T32] ? filemap_get_entry+0xcd/0x3f0 [ 621.086267][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 621.086298][ T32] ? filemap_read_folio+0x234/0x3a0 [ 621.086328][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 621.086360][ T32] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 621.086400][ T32] do_read_cache_folio+0x1ac/0x590 [ 621.086431][ T32] ? __pfx_blkdev_read_folio+0x10/0x10 [ 621.086465][ T32] read_part_sector+0xb6/0x2b0 [ 621.086491][ T32] adfspart_check_POWERTEC+0x9a/0x7a0 [ 621.086516][ T32] ? rcu_is_watching+0x16/0xb0 [ 621.086543][ T32] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 621.086568][ T32] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 621.086593][ T32] ? __kmalloc_cache_noprof+0x14d/0x600 [ 621.086613][ T32] ? bdev_disk_changed+0x56c/0x17a0 [ 621.086633][ T32] ? bdev_disk_changed+0x56c/0x17a0 [ 621.086660][ T32] bdev_disk_changed+0x851/0x17a0 [ 621.086703][ T32] ? __pfx_bdev_disk_changed+0x10/0x10 [ 621.086736][ T32] blkdev_get_whole+0x372/0x510 [ 621.086764][ T32] bdev_open+0x324/0xd70 [ 621.086793][ T32] blkdev_open+0x461/0x600 [ 621.086819][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 621.086840][ T32] do_dentry_open+0x816/0x1380 [ 621.086876][ T32] vfs_open+0x3b/0x340 [ 621.086898][ T32] ? path_openat+0x1428/0x1d60 [ 621.086922][ T32] path_openat+0x1443/0x1d60 [ 621.086958][ T32] do_file_open+0x23e/0x4a0 [ 621.086984][ T32] ? __pfx_do_file_open+0x10/0x10 [ 621.087022][ T32] ? _raw_spin_unlock+0x28/0x50 [ 621.087053][ T32] ? alloc_fd+0x651/0x6c0 [ 621.087089][ T32] do_sys_openat2+0x115/0x200 [ 621.087115][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 621.087138][ T32] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 621.087175][ T32] __x64_sys_openat+0x138/0x170 [ 621.090911][ T32] do_syscall_64+0x166/0x520 [ 621.090950][ T32] ? trace_irq_disable+0x3b/0x140 [ 621.090972][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.091540][ T32] ? clear_bhb_loop+0x70/0xc0 [ 621.091568][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.091589][ T32] RIP: 0033:0x7f7221ea7407 [ 621.091609][ T32] RSP: 002b:00007ffcbc25e080 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 621.091631][ T32] RAX: ffffffffffffffda RBX: 00007f7222614880 RCX: 00007f7221ea7407 [ 621.091647][ T32] RDX: 00000000000a0800 RSI: 0000556dd8f50dd0 RDI: ffffffffffffff9c [ 621.091663][ T32] RBP: 0000556dd8f2f910 R08: 0000000000000000 R09: 0000000000000000 [ 621.091677][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000556dd8f44830 [ 621.091690][ T32] R13: 0000556dd8f3d190 R14: 0000000000000000 R15: 0000556dd8f44830 [ 621.091724][ T32] [ 621.091845][ T32] [ 621.091845][ T32] Showing all locks held in the system: [ 621.093028][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 621.093051][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 621.093138][ T32] locks held by getty/5368: 2, on CPU#1: [ 621.093153][ T32] #0: ffff88802d2660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 621.093210][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 621.093270][ T32] locks held by udevd/12265: 1, on CPU#1: [ 621.093284][ T32] #0: ffff888026e5c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 621.093341][ T32] locks held by syz-executor/18497: 1, last CPU#1: [ 621.093355][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: path_init+0x124/0x1330 [ 621.093413][ T32] locks held by kworker/u8:35/19490: 2, on CPU#1: [ 621.093428][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.093479][ T32] #1: ffffc9000456fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.093532][ T32] locks held by kworker/u8:38/19493: 3, last CPU#0: [ 621.093546][ T32] #0: ffff88802b26d940 ((wq_completion)krds_cp_wq#6/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.093599][ T32] #1: ffffc9000480fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.093652][ T32] #2: ffff88809c244380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 621.093711][ T32] locks held by kworker/u8:41/19496: 2, last CPU#0: [ 621.093726][ T32] #0: ffff888032d93140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.093777][ T32] #1: ffffc9000483fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 621.093838][ T32] locks held by syz.2.4466/23663: 1, last CPU#0: [ 621.093851][ T32] #0: ffff888059651f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 621.093901][ T32] locks held by modprobe/23683: 3, last CPU#0: [ 621.093915][ T32] #0: ffff8880398a0a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 621.093968][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 621.094014][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x7d0 [ 621.135567][ T32] locks held by syz.3.4472/23685: 2, last CPU#1: [ 621.135607][ T32] #0: ffff88807ba98340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 621.135664][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 621.135717][ T32] locks held by dhcpcd-run-hook/23686: 2, last CPU#0: [ 621.135732][ T32] #0: ffff888083ca8308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 621.135786][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 621.135835][ T32] [ 621.135841][ T32] ============================================= [ 621.135841][ T32] [ 621.135863][ T32] NMI backtrace for cpu 0 [ 621.135878][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 621.135900][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.135912][ T32] Call Trace: [ 621.135920][ T32] [ 621.135928][ T32] dump_stack_lvl+0xe8/0x150 [ 621.135956][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 621.135982][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 621.136012][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 621.136039][ T32] sys_info+0x135/0x170 [ 621.136058][ T32] watchdog+0xfd7/0x1030 [ 621.136085][ T32] ? watchdog+0x1c7/0x1030 [ 621.136112][ T32] kthread+0x38b/0x480 [ 621.136131][ T32] ? __pfx_watchdog+0x10/0x10 [ 621.136148][ T32] ? __pfx_kthread+0x10/0x10 [ 621.136168][ T32] ret_from_fork+0x514/0xb70 [ 621.136200][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 621.136229][ T32] ? __switch_to+0xc89/0x1420 [ 621.136257][ T32] ? __pfx_kthread+0x10/0x10 [ 621.136277][ T32] ret_from_fork_asm+0x1a/0x30 [ 621.136320][ T32] [ 621.136327][ T32] Sending NMI from CPU 0 to CPUs 1: [ 621.136359][ C1] NMI backtrace for cpu 1 [ 621.136372][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 621.136393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.136404][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 621.136429][ C1] Code: e8 fe 82 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 7e 75 06 cc 44 89 f9 80 e1 07 [ 621.136445][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 621.136462][ C1] RAX: 1ffffffff35a6200 RBX: 00000000000003fd RCX: 0000000000000000 [ 621.136475][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 621.136487][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 621.136500][ C1] R10: dffffc0000000000 R11: ffffffff85736ac0 R12: dffffc0000000000 [ 621.136514][ C1] R13: 0000000000000000 R14: ffffffff9ad31300 R15: 0000000000000000 [ 621.136527][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 621.136542][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.136556][ C1] CR2: 0000555563f4ca38 CR3: 00000000802ec000 CR4: 00000000003526f0 [ 621.136573][ C1] Call Trace: [ 621.136581][ C1] [ 621.136590][ C1] wait_for_lsr+0x184/0x2f0 [ 621.136613][ C1] __serial8250_console_fifo_write+0x346/0x3e0 [ 621.136644][ C1] serial8250_console_write+0xaa1/0x1200 [ 621.136670][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 621.136690][ C1] ? __schedule+0x17f1/0x58f0 [ 621.136722][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 621.136751][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 621.136774][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 621.136802][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 621.136827][ C1] nbcon_kthread_func+0x679/0x880 [ 621.136849][ C1] ? nbcon_kthread_func+0x163/0x880 [ 621.136868][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 621.136891][ C1] ? __kthread_parkme+0x71/0x1f0 [ 621.136916][ C1] ? __kthread_parkme+0x199/0x1f0 [ 621.136943][ C1] kthread+0x38b/0x480 [ 621.136960][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 621.136978][ C1] ? __pfx_kthread+0x10/0x10 [ 621.136996][ C1] ret_from_fork+0x514/0xb70 [ 621.137023][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 621.137057][ C1] ? __switch_to+0xc89/0x1420 [ 621.137081][ C1] ? __pfx_kthread+0x10/0x10 [ 621.137099][ C1] ret_from_fork_asm+0x1a/0x30 [ 621.137133][ C1] [ 621.148388][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 622.076093][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 622.085194][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 622.095237][ T32] Call Trace: [ 622.098512][ T32] [ 622.101441][ T32] vpanic+0x56d/0xa60 [ 622.105430][ T32] ? __pfx___schedule+0x10/0x10 [ 622.110281][ T32] ? __pfx_vpanic+0x10/0x10 [ 622.114787][ T32] panic+0xc5/0xd0 [ 622.118504][ T32] ? __pfx_panic+0x10/0x10 [ 622.122917][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 622.128376][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 622.133745][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 622.139897][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 622.146052][ T32] watchdog+0x1030/0x1030 [ 622.150383][ T32] ? watchdog+0x1c7/0x1030 [ 622.154885][ T32] kthread+0x38b/0x480 [ 622.158949][ T32] ? __pfx_watchdog+0x10/0x10 [ 622.163618][ T32] ? __pfx_kthread+0x10/0x10 [ 622.168213][ T32] ret_from_fork+0x514/0xb70 [ 622.172822][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 622.177939][ T32] ? __switch_to+0xc89/0x1420 [ 622.182631][ T32] ? __pfx_kthread+0x10/0x10 [ 622.187229][ T32] ret_from_fork_asm+0x1a/0x30 [ 622.192015][ T32] [ 622.195389][ T32] Kernel Offset: disabled [ 622.199726][ T32] Rebooting in 86400 seconds..