last executing test programs: 7.247929089s ago: executing program 4 (id=4976): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x12, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) unshare(0x4a040080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000080)=0x1, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000003c0)=0x1, 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r2, 0x0, 0x0, 0x800, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r3}, 0x10) 5.05954073s ago: executing program 2 (id=5003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x4, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.530545159s ago: executing program 2 (id=5009): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 4.071463717s ago: executing program 0 (id=5014): r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x7f, 0x6, 0x14, @private0, @rand_addr=' \x01\x00', 0x7800, 0x7800, 0x8, 0x5}}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x800}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newqdisc={0xc0, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf}}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xe, 0x7fff, 0x2, 0x2, 0x8, 0x6, 0x7}}, {0x12, 0x2, [0x5, 0xff, 0x5, 0x6e5, 0xff, 0x100, 0x0]}}, {{0x1c, 0x1, {0x1, 0xff, 0x7c, 0x1157, 0x2, 0xd4, 0xe018, 0x1}}, {0x6, 0x2, [0x3b7a]}}, {{0x1c, 0x1, {0x1e, 0x4, 0xff01, 0xd9aa, 0x0, 0x0, 0x9, 0x6}}, {0x10, 0x2, [0x1000, 0x800, 0x9, 0x1, 0x2, 0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xc0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0x0, 0xf}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x20000000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x5}, 0x8) socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000001980)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES16=r6, @ANYRESOCT=r0], 0x1000f) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="6400000000010104000000001475b84d4979f705c15242c5b7e21a000002000000240001801400018008000100e000000108000200e000000000240002801400018008000100ac1e000108000200ac1e00010c000280050001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) 4.04121338s ago: executing program 2 (id=5015): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000200)=0xe) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x3, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010001", 0x7) 3.984013466s ago: executing program 1 (id=5016): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x6}}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @fwd={0xe}, @enum={0xe, 0x6, 0x0, 0x6, 0x4, [{0x1, 0xe2}, {0xf, 0x9}, {0x6, 0x5}, {0x6, 0x5}, {0x1}, {0xf}]}]}, {0x0, [0x30, 0x2e, 0x2e, 0x11, 0x5f]}}, &(0x7f0000000140)=""/90, 0x97, 0x5a, 0x0, 0xe}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @sched_cls, r0, 0x8, &(0x7f0000000000), 0x8}, 0x4a) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000080)) listen(r1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x6}}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @fwd={0xe}, @enum={0xe, 0x6, 0x0, 0x6, 0x4, [{0x1, 0xe2}, {0xf, 0x9}, {0x6, 0x5}, {0x6, 0x5}, {0x1}, {0xf}]}]}, {0x0, [0x30, 0x2e, 0x2e, 0x11, 0x5f]}}, &(0x7f0000000140)=""/90, 0x97, 0x5a, 0x0, 0xe}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @sched_cls, r0, 0x8, &(0x7f0000000000), 0x8}, 0x4a) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000100)) (async) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000080)) (async) listen(r1, 0x0) (async) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) 1.415201471s ago: executing program 0 (id=5017): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000200)="01eb050842e36c92d9e3e900b677cb7e9286ccc067ecbed0cf7372eaa29371003353", 0x22}], 0x1) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000030601"], 0x14}}, 0x8081) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000100)="20ef9a2b628112d1568b9934e720c834f4e4985421b108156f66d7b5b509bf0cf18c5c04255b6d8921c205a2f98e79173c7c62876b6a6149a6bbc9258b3b5f8d17a747a9a9b742ebfaf416c70452fc62bd8c3a793b95d93fe1b9aeca4f2dcd6ca3e507f81fbb98c87762449a06679ffebe2203d4edba7cf24698eb8285b1d744aa717a161bd83eb06231b29dfadbedf3dd47aa22470a394956ca8f132e4b7a34c9cd82c6a3d3", 0xa6}, {&(0x7f0000000300)="f325cf5ad324b74d68a98512e91741a0b7c3b339468ad359bc79c787c060a1a168418fce3ae370ed0f1e296edd29a0ddc04e18c2c398b7e4c1420d9a97b571b7ee74f3a5ff9eeb9abc451b9b4032b32143a5e25771485863fadcd431fea0869652a15fbea6fd89ab3124cb980e1b4c9f5e99bcfc1be0c14dc1e060c8", 0x7c}, {&(0x7f0000000380)="4cd1d2cf3b095609158f7b15dc68c01f1cbc6b5605e894ed9f6d61f269f9b1212a7655d59bd0db472ebaf4e8091635372f56428c7f8c2729dab5f34d205fb2936695330d4d5414848a8469d7a55504fe94eb697b8f77daa15da42b75f8711423798258a845819be0f748a5ea4efd344c79f50df724f2fc6a4c6a79d01ad7a29ff946d52136dbf822", 0x88}, {&(0x7f0000000080)="77594173146737e2bd3b673cb519ec2ad0e3a3ba1b6f7db03310ac990b35a862d3743089622c177f394e", 0x2a}, {&(0x7f0000000440)="0898a9d4999de9a50ce50e278ae7c8096deb3c5beb24b1aa56a44ea927cb40e089ba87588ba0d68662e1f7fe3823b2572bc729a1813b05c6f501ac732c720f0bb8e7223d1e5d6862c3f0e9419c6b9bfeff0c0a7b12f2eb3b75a12fbbe94641e0e5d5e60d00c6f04ab2ce30f3d7103a49a0c462e01dc0b9588c3b1877afd077fb36c9e556691ce78bc2c88a29ad47c01b0e720a15ff297522f93d4be8170d610611e7888f3213de25c19a8e6209088f171dc02b96e059bbbade43a8e4e4a40eb2883ef14fa290e82f4090bc124a2055b9f787e3b466f3168358a811254e04489c072e004a33f209eb77abd1e825da66fad81cc117", 0xf4}, {&(0x7f00000005c0)="00b35bff36e5e7f0447cafbe7eacb2e1ec93deb579153b5fa23bb2baf0ded3e73f6f9cf83d72051c92d6f0b2e02e21a62e9d7c73a97c4c828e4933409941a2e2763d25953045c3f70b14a48fb162e1dda72e37917aad0fe3fc1ad610901a48fd46231208ac05342280bf421aa512c763a32ae995d4ba8731dc9c2af1814e3379118d58b0876520689e447c9894dfbd4750aa2e9ad61d", 0x96}, {&(0x7f00000001c0)="2d5a947e65846887e95b8586458d080eddefd2d3e546b2c2f3cc0d86f26d1676958c", 0x22}], 0x7, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r0, 0x801, 0x400, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}}, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x44b, 0xfffffffe, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14}]}, 0x48}}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES16=r8, @ANYBLOB="0100000000e2ffffffff36000000080001007063690011000200303030303a30303a31302e300000000b08007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x9b}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) shutdown(r3, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) close(r9) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r11 = socket$kcm(0x2, 0xa, 0x2) (async) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020100090a00000000000000000000000000000002000000e000000100000000000000000300050000000000020000007f0000010000000000000000020013000300"/76], 0x50}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 1.414023119s ago: executing program 1 (id=5018): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x47, 0x0, &(0x7f0000002100)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020025797a30000000000800410072786500140033"], 0x38}}, 0x0) r2 = socket$inet6(0xa, 0x805, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e23, 0x20001000, @mcast1, 0xffd}}, 0x8, 0x6, 0x8, 0x65, 0x1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r3, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) 1.380704521s ago: executing program 3 (id=5019): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x2, 0x200, 0x67, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, 0x7800, 0x10, 0x5, 0x6}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x0, 0x20}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x50}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.342476358s ago: executing program 2 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c803c010b800800090000000000080009000000000008000a0fedf746ffaf4ce48d99d67203c37921fb4ed792262147"], 0x16c}}, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8a8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x15c}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48041}, 0xc080) 1.263449454s ago: executing program 0 (id=5021): setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r2, 0xe81, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x200000c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r10, 0xe4}, 0x18) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) setsockopt$packet_int(r13, 0x107, 0xc, &(0x7f0000000340)=0xfffff801, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r11, 0x4010744d, &(0x7f0000000180)) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80480000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x2d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48d1) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2c, r14, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 1.182340547s ago: executing program 4 (id=5022): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newneigh={0x78, 0x1c, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_PROTOCOL={0x5, 0xc, 0x22}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_FDB_EXT_ATTRS={0x44, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xba}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xaa}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x10}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xe}]}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x78}}, 0x20004000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) (async) getpid() (async) write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) (async) socket(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newneigh={0x78, 0x1c, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_PROTOCOL={0x5, 0xc, 0x22}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_FDB_EXT_ATTRS={0x44, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xba}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xaa}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x10}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xe}]}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x78}}, 0x20004000) (async) 1.12308299s ago: executing program 3 (id=5023): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, 0x0, 0x0, 0x4004000, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x40, 0x80}]}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x400000000000000}}, 0x1c) 1.015356768s ago: executing program 2 (id=5024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x3c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)={0x28, r3, 0x87, 0x70bd2d, 0x0, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x3391e2e3ee5267a1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x20008000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24004886) 1.012684613s ago: executing program 1 (id=5025): socket$netlink(0x10, 0x3, 0x0) epoll_create(0x10000e9) (async) r0 = epoll_create(0x10000e9) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483c0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 991.795198ms ago: executing program 4 (id=5026): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x10000009}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 897.760926ms ago: executing program 3 (id=5027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="c6", 0x1}, {&(0x7f00000002c0)="41a88d1946fbd923c6d44c3760609693483bd779df9b25776169c9a956ac84c2eed9a3a352980257834242fdcc393d859d0d4f6c800827d1bd99468e4e1c9b39", 0x40}], 0x2}], 0x1, 0x0) sendto$llc(r3, &(0x7f0000000100)="a97a3dc0a47898fe45d7e850b291556ea17186f608ded19f4d5353", 0x1b, 0x4, &(0x7f0000000140)={0x1a, 0x338, 0x2, 0xcb, 0x7, 0x9, @multicast}, 0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r7 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1fc, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x148, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47}]}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff66ac}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x1f8, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa9, 0x6, "4e77ccfb43e606edf371a4e33699d88d2289bdbc883b8be8d7ef3262ea4ef2dfb2ad0887f4593845763b0e96755940de4d7f64650099ad870b12470c76f0b0d64c98236bbf612e7a7311ba859b16a2d3e302b6247a795c0caef7e423c56b885ca000e8d5d6c195f2d7b3320fe3d40169b74dd782cd4a3d23c841268d46c94b7287872bfd078012c162d1bd0d682b002a5207f65a43d8a939362e6be92395b8d568e663eae6"}, @NFTA_TABLE_USERDATA={0x50, 0x6, "0f3146f12f4f5e4198eb1877b60fdeafae73c49ee3b740d147ee570bca3530d2445f08b2aa4633496b4b9fb02483bd66a7ad73bbb369a39649a363d9465bd8262ed1cabb63202a320c000000"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xa7, 0x6, "a35a72288f0ea485e6b6e626d9a67bc3089f5d302e981693c633644ddb6bdc23eb227c7f0cfc0dc7b1629d03d67baea93701ed8e5d3ad33a2869eb14c1a2f6b16d71a7ebf4ce61ce1729749212d2cb3bab62557f40e752b0f707132f8bcc57f18f8ead51cd62d4a956536238b43b8d33765a75026333d6a1c4377dbe3f3224f2498e47a278a06696925949a58f7581721cab473e93a0d274df01307d9dcbbc2a1dac28"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x88, 0xb, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x94, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_POSITION_ID={0xffffffffffffffdd, 0xa, 0x1, 0x0, 0x20000000}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @last={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @payload={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x0, 0x3, 0x1, 0x0, 0x36}, @NFTA_PAYLOAD_CSUM_FLAGS, @NFTA_PAYLOAD_OFFSET={0x0, 0x3, 0x1, 0x0, 0x6a}]}}}, {0x0, 0x1, 0x0, 0x1, @ct={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x0, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0xb}]}}}, {0x0, 0x1, 0x0, 0x1, @target={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY, @NFTA_TPROXY_REG_PORT={0x0, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0xe}]}}}, {0x0, 0x1, 0x0, 0x1, @range={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP, @NFTA_RANGE_OP]}}}, {0x0, 0x1, 0x0, 0x1, @dup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV, @NFTA_DUP_SREG_DEV, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xb}]}}}]}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x110, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x9e, 0x6, "c6a4f26c546bceb5a07512ef38b44e65380a371af40b2a8da63cedaa3cc4d237e586281a309b734bcf67517035853c9b0b5fc82602d69cca5431a21ddeaf5821bb5d898d50fe17b6e93e8151fdf926be53314b9d8dd46f78d5d30f9b1482918dcc551a1f712145e20581d6f948d3510115c45c1c09f0c05785ac0c371424aeebb978bd8209cbb5ce6f64c6b125247edf9e6fad76886ba14fee48"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x3a, 0x6, "c24d6a7365e8fdf0a91d311fb8d5f184c7bd8fdd800cfa9a334cc426c64e318c26fc64df17201a09acef07b11ae98c740ddb9196ea27"}]}, @NFT_MSG_DELCHAIN={0x124, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xa8, 0xc, "536b8af02a6f88f65a262f1cd734839023dd2b68ca3fcfceaaa51de6687aae8f03d557b07a0d9045c4ce93c7e7015ab3ea5bbeaf3ba5e5aa1ee1d54ca24c306d54f0a9a9ca701dd6b55918daa872a6a86d201610bf8d42ddea84ba7fc78c93c67d0d75ca6651e0895564754574d77a8a4944b0bd160630d08148fee47111b44c124494f8ea6ab5938ef5753f2eb717ffcea7281eee71c75b6abe00cd60c6e5bb18294e85"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7ec}, 0x1, 0x0, 0x0, 0x40010}, 0x4080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}}, 0x0) 835.540437ms ago: executing program 0 (id=5028): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$kcm(0x2, 0x2, 0x73) r3 = socket$kcm(0x2, 0x2, 0x73) close(r3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000000)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="501000003081000014001280090001009763614e0000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x24044801}, 0x0) close(r4) 736.632276ms ago: executing program 1 (id=5029): r0 = socket$caif_stream(0x25, 0x1, 0x0) connect$caif(r0, &(0x7f0000001780)=@util={0x25, "8c3778e2a2253b827d46e5f207b62408"}, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x10, r2}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 713.494402ms ago: executing program 4 (id=5030): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x2, r3}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@private2, r3}, 0x14) sendto$l2tp6(r0, 0x0, 0x0, 0xc096, &(0x7f0000000000)={0xa, 0x0, 0x5, @private2, 0x1, 0x8}, 0x20) 479.678777ms ago: executing program 1 (id=5031): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="afa63660", 0x4}], 0x1) recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff500000000ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r3], 0x50}}, 0x0) 478.424245ms ago: executing program 3 (id=5032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000028000480240001800a00010071756575650000001400028006007f1b160800000600024000000000140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) close(r2) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000600), &(0x7f0000001380)=@udp=r3}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r3, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00fe8000000000000000000000000000007cff4318949b94a84279b75e05611e95b1881b37251ec5ee6022834cdf642f9969efe16a55b2da6405ed4ac9"], 0x104}}, 0x0) 404.983896ms ago: executing program 2 (id=5033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x49a082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e01, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x2) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x7800, 0x20, 0x6, 0x6, {{0x35, 0x4, 0x2, 0x36, 0xd4, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xfa, 0x3, 0x3, [{@multicast1, 0x4}, {@broadcast, 0x1ff}, {@broadcast, 0x3}]}, @timestamp={0x44, 0xc, 0xfd, 0x0, 0x8, [0x5, 0xffff8001]}, @timestamp_addr={0x44, 0x14, 0x49, 0x1, 0xa, [{@loopback, 0x200}, {@multicast1, 0x7}]}, @noop, @generic={0x94, 0xe, "ef1689200b9748bb5592256b"}, @rr={0x7, 0x1f, 0x72, [@broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x54, 0xeb, 0x3, 0xa, [{@private=0xa010100, 0x80000001}, {@multicast1, 0x7}, {@private=0xa010100, 0x2}, {@remote, 0x80}, {@private=0xa010101, 0x705}, {@multicast2, 0x2fbf}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x3}, {@remote, 0x800}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xffff}, {@local, 0x7}]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4884000}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=@getae={0x240, 0x1f, 0x400, 0x70bd29, 0x25dfdbfb, {{@in=@remote, 0x4d4, 0x2, 0xff}, @in=@broadcast, 0x40, 0x3503}, [@etimer_thresh={0x8, 0xc, 0x1}, @tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d4, 0xff}, 0xa, @in=@rand_addr=0x64010101, 0x3506, 0x3, 0x2, 0x81, 0xffff7fff, 0x2, 0x6}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3502, 0x4, 0x2, 0x8, 0x8, 0x3, 0x2}, {{@in6=@remote, 0x4d5, 0x6c}, 0x2, @in6=@private1, 0x3506, 0x1, 0xa892148796f8515, 0x8, 0x103, 0x9}]}, @address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x33, 0x7}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@remote}, @sa={0xe4, 0x6, {{@in=@multicast2, @in6=@private1, 0x4e21, 0x0, 0x4e23, 0x1000, 0x2, 0x80, 0x80, 0x89, r6, r7}, {@in6=@rand_addr=' \x01\x00', 0x4d3, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, {0xfffffffffffffff8, 0x7, 0xc9, 0x7fffffff, 0xb, 0x7, 0x7fffffff, 0x97fc}, {0x26c, 0x9, 0x5, 0x1}, {0x2, 0x9, 0x3}, 0x70bd29, 0x3506, 0x2, 0x4, 0x7}}]}, 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) socket$unix(0x1, 0x1, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0xa00, 0x0) ioctl$PPPIOCSDEBUG(r12, 0x40047440, &(0x7f00000005c0)=0x2) 403.614767ms ago: executing program 0 (id=5034): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @default, @netrom={'nr', 0x0}, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default]}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'veth0_vlan\x00', {0x9}, 0x300}) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100)={'syz_tun', 0x32, 0x36}, 0xa) getpeername(r0, &(0x7f0000000140)=@un=@abs, &(0x7f00000001c0)=0x80) r2 = accept4(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0x80, 0x100000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x6, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4008) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x28400408}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, 0x24}}, 0x1) r6 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000500)=r5, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x26, 0x80000, 0xc) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000006b80)=[{{&(0x7f0000000540)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/177, 0xb1}, {&(0x7f0000001740)=""/216, 0xd8}, {&(0x7f0000001840)=""/125, 0x7d}], 0x5, &(0x7f0000001940)=""/66, 0x42}, 0x3}, {{&(0x7f00000019c0)=@xdp, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001a40)=""/253, 0xfd}, {&(0x7f0000001b40)=""/249, 0xf9}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)=""/237, 0xed}, {&(0x7f0000001d80)=""/104, 0x68}], 0x5, &(0x7f0000001e80)=""/229, 0xe5}, 0xfff}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001f80)=""/255, 0xff}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/114, 0x72}, {&(0x7f0000002200)=""/152, 0x98}, {&(0x7f00000022c0)=""/88, 0x58}, {&(0x7f0000002340)=""/181, 0xb5}], 0x6, &(0x7f0000002480)=""/98, 0x62}}, {{&(0x7f0000002500)=@ieee802154, 0x80, &(0x7f0000003600)=[{&(0x7f0000002580)=""/8, 0x8}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/3, 0x3}], 0x3, &(0x7f0000003640)=""/46, 0x2e}, 0xfff}, {{&(0x7f0000003680)=@sco, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003700)=""/155, 0x9b}, {&(0x7f00000037c0)=""/252, 0xfc}, {&(0x7f00000038c0)=""/224, 0xe0}, {&(0x7f00000039c0)=""/31, 0x1f}], 0x4, &(0x7f0000003a40)=""/4096, 0x1000}, 0xff}, {{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000004a40)=""/50, 0x32}, {&(0x7f0000004a80)=""/78, 0x4e}, {&(0x7f0000004b00)=""/37, 0x25}, {&(0x7f0000004b40)=""/112, 0x70}, {&(0x7f0000004bc0)=""/19, 0x13}, {&(0x7f0000004c00)=""/247, 0xf7}, {&(0x7f0000004d00)=""/109, 0x6d}], 0x7}, 0x1000}, {{&(0x7f0000004e00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004e80)=""/117, 0x75}], 0x1, &(0x7f0000004f40)=""/213, 0xd5}}, {{&(0x7f0000005040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005380)=[{&(0x7f00000050c0)=""/139, 0x8b}, {&(0x7f0000005180)=""/150, 0x96}, {0xffffffffffffffff}, {&(0x7f0000005240)=""/209, 0xd1}, {&(0x7f0000005340)}], 0x5, &(0x7f0000005400)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000006400)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006500)=[{&(0x7f0000006480)=""/85, 0x55}], 0x1, &(0x7f0000006540)=""/126, 0x7e}, 0x3}, {{&(0x7f00000065c0)=@nl=@unspec, 0x80, &(0x7f0000006a00)=[{&(0x7f0000006640)=""/154, 0x9a}, {&(0x7f0000006700)=""/188, 0xbc}, {&(0x7f00000067c0)=""/183, 0xb7}, {&(0x7f0000006880)=""/86, 0x56}, {&(0x7f0000006900)=""/234, 0xea}], 0x5, &(0x7f0000006a80)=""/203, 0xcb}, 0x9}], 0xa, 0x10100, &(0x7f0000006e40)={r9, r10+10000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000006e80)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000006f80)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000006fc0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, @in=@local, 0x4e24, 0x5, 0x4e23, 0x3, 0xa, 0x20, 0xa0, 0x32, r11, r13}, {0x7fffffffffffffff, 0x14, 0x9, 0x3, 0x6, 0xc3b, 0x10000, 0xe}, {0xfffffffffffffffd, 0x3ff, 0x200, 0x3}, 0x401, 0x6e6bb1, 0x2, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d5, 0xff}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x1, 0x2, 0xfe, 0x5, 0xdd2a, 0xfffffffc}}, 0xe8) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f00000070c0)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000007100)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x2, 0x1, 0x4800000000000000, 0x9, 0x1e}, {0x2, 0x4, 0x6, 0x6, 0x236, 0xe0}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmmsg(r8, &(0x7f0000007ac0)=[{{&(0x7f0000007340)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x80, &(0x7f0000007740)=[{&(0x7f00000073c0)="472e63c9ec90009a71d4164a2271aa3d0dd74a88d228abc117b4cd85d29e0928e75e1fc4dab91e99bd1ec520fb7e4175ecabd12135157d1acfbd2ce7107cb4", 0x3f}, {&(0x7f0000007400)="02a206c4f32fc72abbfad04e018e4c36a3dcc1c3fd481fb2d6930dabb0c40d370c8513fdeba6928b267573fecd1730568cc7c290ccd16c0b831fe3832365003c3e68148b386f44068fef4fde71db446ea789e4b4e4e4c8a4f7a3a5bebad09ad4073427a90a0d", 0x66}, {&(0x7f0000007480)="44ed68672a22f04079c5ed3d097108c9d4e30ae59774e33ffe784890539714d27f41bd2f37f79d877f59cc83f07f2e6fedb057182f5249703bb4fe469888fcc281dda7b207cdf27c0e8a0bbe7473d120a3e8ecd0545e5c4a5c69c61fae57bfe4b4d06c49046e9ce5b34aaf3e3af1626668b2d4e9ff8b720b94cf5e977952148f6949c72077a6b71d365a65da2f88b5a2b82e834c872a229f0e6cdd76529a0225a6d9b6", 0xa3}, {&(0x7f0000007540)="c6ea4bafae462cc3c35052b42df741", 0xf}, {&(0x7f0000007580)="f0b833807176c99606b568b8c0b1c97c771ecc9580b4428303a4c61a80c24d1ef7fe4307464e827ffb01c643233b2d30c4416f7fc4b71f2d2817b1dcacfc3d4adf67893ce68bd806d0004e49d671833854ee72eaba62d95adc566a2d679b890c5217b3eb483a3650334572a7113b53790e8298d5a8d73017d9063d76ce1351ae050fb8a1556d60b479a59c7f6b68efd8eaa69c2369969bb225c92c45f8317f52aec989b34faa8e0d98d99ea85372c51da6b9ac2f67937237ab5e74f90e40d7ce8771ea63ebdece3993d58df707ec8af0974043a1ca56a1732018486e37ff13c5a35d346ff8d41bd4cc2e721377a416d91f4eea1f", 0xf4}, {&(0x7f0000007680)="91f8adb9f5c2bf7390d6dbb049b800da0d73c45f6b041903b7c61864f49826434e69a5be90a01fd08e56313c6653", 0x2e}, {&(0x7f00000076c0)="7f82e63c072c936e540c7c5ed7037a699078b59fdc8a3ecf3689349f47ef7219fd77184029e2a01a0ba364d25b98626c147cb113560e7e084c52d9197c45894fcddb23825ebe2850cee2e3855853be5634b669d8a74e79bc8e99ba071aaf671f66b7", 0x62}], 0x7, &(0x7f00000077c0)=[{0x78, 0xff, 0x9, "045a38606d194070240093b1aa552c3ae0a08d305768e972f8189b079225577463f0a2be351d36b2c495ef4affc67b65f178698dacf0abc7562754f5dae2194dbceaebedbc4a515dc6a59686dc29c6192251c7cb4f3b2a7c224faf1ca8e3c9f4bebdb9fe"}, {0x88, 0x109, 0x3, "3c3ae36164f7bd645ea526da8619ea3b1a6642c047ae5ef67724978625b0dd46acb5ad9831c63537573c06e8bb0b6bef0841329102cf6d6729cba1db3283cef8d929204346f347aea374897fe4d061630a3fc5cd2a6e5af958d790d33e24d648252f69217c3471c5208af62619e85acdbfc98df394f5a4"}, {0xf0, 0x102, 0x1, "d3b957faf98c13d57e3efefe197fbe39dc8f3718942315f8879b411df6d92742ff3504a98137de9d78c512727e6b0d2f8616360bbb98f2f2f5c410cc874fcc5ca7a7a9634ad07171b0c0462ec5f2d7f7933ff7b6df5cbf425acc66e0f64a4743cec761866a58253a29476c41b9f072c4793feb7e0dc481ba7d2aebd8626b5372d78d975c61523937f1952def15d52de973e642d65e05fe3c2d2d98c5e905c90954fa174d3fb64b8168bcd7cac67a34e720d5c6e09ffe354b1ce0641d2b04400add0e60031646117e02ebf0c6510024276a21cefc3cb60721334a64"}, {0x110, 0x10a, 0xe81, "0f9da93733bcfc8c74990fdf0dd59095afe027637f3bf94621490fd9d0fdd1d81a322ccb6fc12d4e4563310d99d61651a5b5c8339d616f3152d9075058bd06b612933ea6ef52728aaf13b1b5bcd8455da5c517ec8bfbb1977e54f25a8d19561b42c3a6f351e0a28ab2dc5e123bf21fea2d3f5a0135dfa23e16faf66fcf9a9a7b1cee86597c6043ac4728ffc1f38498965e29db1eec0f1caca51acd1bd575adf3b395c6f36b88c2c7d5c83055927e89ebfc878477efdc5093dbec4fd0824fb1c69355828d9fcc1f16c53ee5050a8a07a8470d525ea6ef414d0a729d9230da29b16e6c8f80c60fce35c89ac85fca881a00f146d15d60c93c5e0bcc86c5"}], 0x300}}], 0x1, 0x42) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000007bc0)={&(0x7f0000007b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000007b80)={&(0x7f0000007b40)={0x38, 0x1401, 0x20, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000000) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000007cc0)={&(0x7f0000007c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000007c80)={&(0x7f0000007c40)={0x28, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000007d80)={'ip6_vti0\x00', &(0x7f0000007d00)={'syztnl0\x00', r11, 0x4, 0xff, 0x4, 0x196770ee, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x8000, 0x0, 0x3}}) accept4$nfc_llcp(r3, &(0x7f0000007dc0), &(0x7f0000007e40)=0x60, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000007e80)={'wlan0\x00'}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r14, &(0x7f0000007f00)={&(0x7f0000007ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000000}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000007f40)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x7f}], 0x2c) 403.065299ms ago: executing program 4 (id=5035): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[], 0x14}], 0x1}, 0x0) 323.731774ms ago: executing program 4 (id=5036): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r2, 0x0, &(0x7f0000000080)) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000019300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000192c0)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [""]}, 0x14}}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000019340)=ANY=[@ANYBLOB="188e0000000ea2b21ba16d1cea0a7191e5812b0100000000a7cbfb697727"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f0000002380)=ANY=[@ANYRESOCT=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6f390000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x15, 0x5, 0x0) (async) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockname$packet(r2, 0x0, &(0x7f0000000080)) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000019300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000192c0)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [""]}, 0x14}}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000019340)=ANY=[@ANYBLOB="188e0000000ea2b21ba16d1cea0a7191e5812b0100000000a7cbfb697727"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f0000002380)=ANY=[@ANYRESOCT=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6f390000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 151.649683ms ago: executing program 0 (id=5037): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, 0x0, 0x0, 0x4004000, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x40, 0x80}]}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x600000000000000}}, 0x1c) 148.407259ms ago: executing program 3 (id=5038): setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x7}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x0, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xde, "154b14b37a8f921c085473981053b12fea59b32a01de70d793ab348aeb9d22274a9371c4d7aa0a5701761d6857d8ff0bc0e736e3fcd527f977f7452184a0a7740aa4516e2eeb073b4c10507fb3cddcbb350601c2c0bfa3e4d2544e9116e87c2511d57cdf4f05d239cdeda3e8ca72ef33df7499a3c40e20c76ccfdd34b7844e3b5cb00192fcf8baa7190d36b032a143d0345fc8b4319bfce9c2b06274b525819c9a442048193b89509c36897e5e9751ab508f5ce15515ccbb4f2ddb0fef489e8c17061cee931ee39a7d4b4c4898f49180adc52aa9672f742d870aaaf30bb1"}, &(0x7f0000000240)=0xe6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = accept4$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f00000002c0)=0x10, 0x800) r5 = socket(0x8, 0x1, 0x1) r6 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r6, &(0x7f0000000300)=""/62, 0x3e, 0x12c0143c35f8902a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={r2, 0xfffffffd}, &(0x7f0000000380)=0x8) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000003c0)) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0xfffffff5}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) tee(r4, r7, 0x3, 0x5) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000440)={r2, 0x3, 0x5}, 0x8) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x6, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f00000005c0), &(0x7f0000000600)=0x4) vmsplice(r4, &(0x7f0000001780)=[{&(0x7f0000000640)="a59101082ac7f5d906e8443277850ca8ee80a481b3237c69c7a0a534d3a170c6434196da842dbd4d7858a5ba8b", 0x2d}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="e61ab9f4b2f40b6a633bb0df94eeb268ba21ffbb2c00f8b453fe3628572e8482930c61d1c34f0a7294faae18", 0x2c}, {&(0x7f00000016c0)="9ef620ae03cbef122e1d7fc2c3d778b843dd9e94837dc338d82f4043e1288eeadfd123101280ee305277cd79cf9348f409316ee7209f374be0a70c1238f2ec301dead22047348bd56c702f629039497a32c9dd50303a39158fb74e39631e26eb6a2300610111805d96d4b337eb9efc36fb8a34d0641a0370b3806138ed400d4db91cfb954845162ea418217121658ed1387a9d8aa5ed617fb03d4ab040077994daa09d91112a1e32", 0xa8}], 0x4, 0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000017c0)={r2, @in={{0x2, 0x4e21, @remote}}}, 0x84) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000001880)={{0xfffffffa, 0x3}, 0x100, './file0\x00'}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000019c0)={0x6}, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001a00)={r2, 0x9e27, 0x7, 0x6}, &(0x7f0000001a40)=0x10) socket$alg(0x26, 0x5, 0x0) socket(0xb, 0x4, 0x2) pipe(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r9, 0x29, 0x50, &(0x7f0000001ac0)=0xde, 0x4) 146.669248ms ago: executing program 1 (id=5039): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x20040000) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000340)=0xb487, 0x4) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000004800)={'wpan1\x00', 0x0}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf251000000008000300", @ANYRES32=r7, @ANYBLOB="d64506ba3b44d0bec2de6bbadeed8cbd997ffad6b61217"], 0x1c}, 0x1, 0x0, 0x0, 0x8805}, 0x10) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) (async) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, 0x0, 0x0) (async) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000300)=0x3, 0x8) (async) shutdown(r10, 0x1) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000002baf0002157740", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=5040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x8, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) kernel console output (not intermixed with test programs): 26][T19317] infiniband syz0: Couldn't create ib_mad CQ [ 455.671430][T19317] infiniband syz0: Couldn't open port 1 [ 455.708175][T19369] syzkaller0: entered promiscuous mode [ 455.736735][T19369] syzkaller0: entered allmulticast mode [ 455.811846][T19380] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3695'. [ 455.852707][T19317] RDS/IB: syz0: added [ 455.879037][T19317] smc: adding ib device syz0 with port count 1 [ 455.901311][T19317] smc: ib device syz0 port 1 has pnetid [ 456.287593][T19387] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 456.466625][T19395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3699'. [ 456.822059][T19406] netlink: 'syz.3.3700': attribute type 11 has an invalid length. [ 456.864633][T19406] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3700'. [ 457.492906][T19433] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3709'. [ 457.680205][T19447] netlink: 'syz.0.3712': attribute type 10 has an invalid length. [ 457.720714][T19447] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3712'. [ 457.735200][T19447] xt_policy: neither incoming nor outgoing policy selected [ 457.916749][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3716'. [ 458.054483][T19464] sctp: [Deprecated]: syz.4.3719 (pid 19464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.054483][T19464] Use struct sctp_sack_info instead [ 458.073397][T19465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3718'. [ 458.786765][T19497] macvlan0: entered promiscuous mode [ 458.804141][T19497] batadv0: entered promiscuous mode [ 458.817892][T19497] debugfs: 'hsr1' already exists in 'hsr' [ 458.844559][T19497] Cannot create hsr debugfs directory [ 458.850505][T19497] hsr1: entered allmulticast mode [ 458.887319][T19497] macvlan0: entered allmulticast mode [ 458.908220][T19497] : entered allmulticast mode [ 458.913076][T19497] batadv0: entered allmulticast mode [ 458.941664][T19497] macvlan0: left promiscuous mode [ 458.961978][T19497] batadv0: left promiscuous mode [ 459.082082][T19507] netlink: 'syz.4.3732': attribute type 3 has an invalid length. [ 459.105483][T19507] netlink: 'syz.4.3732': attribute type 1 has an invalid length. [ 459.541119][T19527] syzkaller1: entered promiscuous mode [ 459.550104][T19527] syzkaller1: entered allmulticast mode [ 459.581116][T19527] netlink: 'syz.3.3738': attribute type 11 has an invalid length. [ 459.726220][T19527] net_ratelimit: 13 callbacks suppressed [ 459.726242][T19527] openvswitch: netlink: Flow actions attr not present in new flow. [ 460.241955][T19544] netlink: 'syz.2.3745': attribute type 4 has an invalid length. [ 460.255668][T19544] netlink: 'syz.2.3745': attribute type 4 has an invalid length. [ 460.286154][T19544] __nla_validate_parse: 13 callbacks suppressed [ 460.286177][T19544] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3745'. [ 460.322121][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3745'. [ 460.533084][T19556] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 460.569045][T19556] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 461.080336][T19567] netlink: 'syz.0.3752': attribute type 27 has an invalid length. [ 461.095531][T19567] netlink: 'syz.0.3752': attribute type 4 has an invalid length. [ 461.103499][T19567] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3752'. [ 461.415544][T19581] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 461.423835][T19581] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 461.431316][T19581] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 462.267431][T19613] syzkaller0: entered promiscuous mode [ 462.280341][T19613] syzkaller0: entered allmulticast mode [ 462.299302][ T5869] block nbd4: Receive control failed (result -32) [ 462.442585][T19618] netlink: 'syz.2.3766': attribute type 1 has an invalid length. [ 462.806022][T19620] bond2 (unregistering): Released all slaves [ 464.815865][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 465.030191][T19718] tipc: Started in network mode [ 465.049047][T19718] tipc: Node identity 1a9caf818be5, cluster identity 4711 [ 465.088611][T19718] tipc: Enabled bearer , priority 0 [ 465.145539][T19720] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3792'. [ 465.162797][T19720] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3792'. [ 465.198942][T19720] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3792'. [ 465.274006][T19718] tipc: Disabling bearer [ 465.342504][T19734] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3797'. [ 465.355383][T19734] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3797'. [ 465.496880][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3798'. [ 465.584986][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3800'. [ 465.620628][T19755] netlink: 'syz.2.3803': attribute type 1 has an invalid length. [ 465.634380][T19755] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3803'. [ 466.037553][T19777] netlink: 'syz.3.3808': attribute type 29 has an invalid length. [ 466.067930][T19777] netlink: 'syz.3.3808': attribute type 29 has an invalid length. [ 466.098114][T19777] netlink: 'syz.3.3808': attribute type 29 has an invalid length. [ 466.125726][T19777] netlink: 'syz.3.3808': attribute type 29 has an invalid length. [ 466.144009][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'. [ 466.166057][T19782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 466.185528][T19782] netlink: 'syz.2.3811': attribute type 11 has an invalid length. [ 466.398658][T19792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3815'. [ 467.662213][T19850] netlink: 'syz.3.3829': attribute type 8 has an invalid length. [ 467.718686][T19850] netlink: 'syz.3.3829': attribute type 5 has an invalid length. [ 468.161987][ T1212] IPVS: starting estimator thread 0... [ 468.200100][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 468.245413][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 468.264367][T19872] IPVS: using max 25 ests per chain, 60000 per kthread [ 468.562761][T19898] tipc: Enabled bearer , priority 0 [ 468.573464][T19898] syzkaller0: entered promiscuous mode [ 468.588418][T19898] syzkaller0: entered allmulticast mode [ 468.721426][T19898] tipc: Resetting bearer [ 468.790612][T19897] tipc: Resetting bearer [ 468.864357][T19897] tipc: Disabling bearer [ 469.401751][T19939] block nbd5: Unsupported socket: shutdown callout must be supported. [ 469.908162][T19966] netlink: 'syz.0.3859': attribute type 30 has an invalid length. [ 469.937186][T19965] netlink: 'syz.3.3858': attribute type 2 has an invalid length. [ 470.100030][T19974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.181060][T19976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.455205][T19985] __nla_validate_parse: 5 callbacks suppressed [ 470.455225][T19985] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3864'. [ 470.529960][T19991] sctp: [Deprecated]: syz.0.3866 (pid 19991) Use of int in maxseg socket option. [ 470.529960][T19991] Use struct sctp_assoc_value instead [ 470.768221][T20002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3870'. [ 470.821420][T20007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3871'. [ 470.847431][T20007] validate_nla: 1 callbacks suppressed [ 470.847454][T20007] netlink: 'syz.1.3871': attribute type 21 has an invalid length. [ 471.905785][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3883'. [ 472.116984][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 472.455567][T20067] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 473.816488][T20109] IPVS: persistence engine module ip_vs_pe_ not found [ 474.147743][T20133] pim6reg: entered allmulticast mode [ 474.360581][T20150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3910'. [ 474.472128][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'. [ 474.638270][T20168] netlink: 'syz.0.3916': attribute type 1 has an invalid length. [ 474.826913][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3921'. [ 474.885061][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3921'. [ 475.057965][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3918'. [ 475.526093][ T55] block nbd0: Possible stuck request ffff88802511e000: control (read@0,1024B). Runtime 330 seconds [ 475.538393][ T55] block nbd0: Possible stuck request ffff88802511e1c0: control (read@1024,1024B). Runtime 330 seconds [ 475.550017][ T55] block nbd0: Possible stuck request ffff88802511e380: control (read@2048,1024B). Runtime 330 seconds [ 475.567579][ T55] block nbd0: Possible stuck request ffff88802511e540: control (read@3072,1024B). Runtime 330 seconds [ 475.744630][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3930'. [ 475.957529][T20220] netlink: 'syz.0.3933': attribute type 1 has an invalid length. [ 476.132146][T20220] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3933'. [ 476.217200][T20223] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 476.296308][T20223] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 477.063538][T20268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3947'. [ 477.372182][T20257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3944'. [ 477.417291][T20275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3947'. [ 478.532130][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3959'. [ 478.902373][T20337] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3962'. [ 478.951318][T20339] team0: Device wireguard1 is up. Set it down before adding it as a team port [ 478.999466][T20350] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3965'. [ 479.334695][T20356] netlink: 'syz.0.3967': attribute type 11 has an invalid length. [ 479.365814][T20356] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3967'. [ 479.882587][T20378] syzkaller0: entered promiscuous mode [ 479.905575][T20378] syzkaller0: entered allmulticast mode [ 479.930137][T20383] netlink: 'syz.3.3976': attribute type 12 has an invalid length. [ 479.992285][T20385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3977'. [ 482.313259][T20423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.429315][T20431] __nla_validate_parse: 3 callbacks suppressed [ 482.429340][T20431] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3986'. [ 482.565673][T20437] netlink: 'syz.0.3989': attribute type 4 has an invalid length. [ 482.601965][T20437] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 482.612629][T20437] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 482.725140][T20445] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3992'. [ 482.743828][T20447] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3993'. [ 482.766905][T20443] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3992'. [ 482.933588][T20456] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3996'. [ 482.998255][T20458] syz_tun: entered allmulticast mode [ 483.040861][T20461] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3999'. [ 483.096313][T20455] syz_tun: left allmulticast mode [ 483.273742][T20472] netlink: 'syz.2.4003': attribute type 2 has an invalid length. [ 483.499130][T20479] openvswitch: netlink: EtherType 50a is less than min 600 [ 484.114136][T20519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.425705][T20535] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4022'. [ 484.467021][T20538] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4021'. [ 484.478465][T20541] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4023'. [ 484.485730][T20539] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4021'. [ 484.510128][ T55] block nbd1: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 180 seconds [ 484.521161][ T55] block nbd1: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 180 seconds [ 484.534801][ T55] block nbd1: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 180 seconds [ 484.545967][ T55] block nbd1: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 180 seconds [ 484.895655][T20556] bond0: entered promiscuous mode [ 484.902910][T20556] bond_slave_0: entered promiscuous mode [ 484.913016][T20556] bond_slave_1: entered promiscuous mode [ 484.928586][T20556] bond0: left promiscuous mode [ 484.933729][T20556] bond_slave_0: left promiscuous mode [ 484.949564][T20556] bond_slave_1: left promiscuous mode [ 485.356397][T20572] netlink: 'syz.2.4030': attribute type 6 has an invalid length. [ 485.389443][T20571] netlink: 'syz.2.4030': attribute type 6 has an invalid length. [ 485.418802][T20572] netlink: 'syz.2.4030': attribute type 6 has an invalid length. [ 485.429419][T20573] netlink: 'syz.2.4030': attribute type 6 has an invalid length. [ 485.913536][T20593] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 486.161499][T20600] batadv1: entered allmulticast mode [ 486.405153][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 486.435314][T20615] tipc: Started in network mode [ 486.450685][T20615] tipc: Node identity 56933ede5bcd, cluster identity 4711 [ 486.475391][T20615] tipc: Enabled bearer , priority 0 [ 486.494477][T20615] syzkaller0: entered promiscuous mode [ 486.500022][T20615] syzkaller0: entered allmulticast mode [ 486.545852][T20615] tipc: Resetting bearer [ 486.564472][T20614] tipc: Resetting bearer [ 486.616724][T20614] tipc: Disabling bearer [ 486.883192][T20634] netlink: 'syz.1.4050': attribute type 1 has an invalid length. [ 486.957909][T20637] sctp: [Deprecated]: syz.2.4051 (pid 20637) Use of int in max_burst socket option deprecated. [ 486.957909][T20637] Use struct sctp_assoc_value instead [ 487.435366][T20662] __nla_validate_parse: 10 callbacks suppressed [ 487.435388][T20662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4059'. [ 487.459359][T20663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4059'. [ 487.810159][T20676] tipc: Failed to remove unknown binding: 66,1,1/0:4198259481/4198259483 [ 487.954541][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4068'. [ 488.209631][T20701] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 488.397220][T20710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4076'. [ 488.441412][T20713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4076'. [ 488.504867][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4080'. [ 488.663902][T20725] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 488.712857][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4082'. [ 488.795852][T20734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4082'. [ 488.843790][T20729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.868522][T20741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4084'. [ 488.870994][T20737] IPVS: set_ctl: invalid protocol: 59 172.20.20.67:20000 [ 488.930474][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'. [ 489.026142][T20740] tipc: Enabled bearer , priority 0 [ 489.053949][T20740] syzkaller0: entered promiscuous mode [ 489.095027][T20740] syzkaller0: entered allmulticast mode [ 489.178988][T20749] tipc: Resetting bearer [ 489.229197][T20739] tipc: Resetting bearer [ 489.348672][T20739] tipc: Disabling bearer [ 489.364039][T20766] netlink: 'syz.1.4094': attribute type 1 has an invalid length. [ 489.518892][T20773] netlink: 'syz.2.4096': attribute type 1 has an invalid length. [ 489.734018][T20770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.756114][T20770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.835593][T20779] netlink: 'syz.1.4094': attribute type 5 has an invalid length. [ 489.972586][T20770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.004781][T20770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.243410][T20770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.271140][T20770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.398413][T20770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.411975][T20770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.657253][T20821] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 490.858507][T12248] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.873584][T12248] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.896581][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.905523][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.918642][T12255] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.928105][T12255] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.961550][T12255] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.987481][T12255] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.201887][T20853] netlink: 'syz.2.4116': attribute type 11 has an invalid length. [ 491.766212][T20875] netlink: 'syz.4.4125': attribute type 7 has an invalid length. [ 492.423541][T20914] vlan4: entered allmulticast mode [ 492.440703][T20914] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 492.513117][T20918] netlink: 'syz.3.4136': attribute type 1 has an invalid length. [ 492.538341][T20918] netlink: 'syz.3.4136': attribute type 4 has an invalid length. [ 492.564755][T20918] __nla_validate_parse: 14 callbacks suppressed [ 492.564778][T20918] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4136'. [ 492.634132][T20927] netlink: 'syz.1.4141': attribute type 1 has an invalid length. [ 492.656691][T20927] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4141'. [ 492.687028][T20930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4140'. [ 492.876329][T20937] netlink: 'syz.1.4143': attribute type 16 has an invalid length. [ 492.888505][T20937] netlink: 'syz.1.4143': attribute type 17 has an invalid length. [ 492.951802][T20937] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.977629][T20937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.011730][T20941] tipc: Enabling of bearer rejected, failed to enable media [ 493.335595][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4150'. [ 493.379949][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 493.979871][T20979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.035628][T20981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4159'. [ 494.266494][T20997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4162'. [ 494.850941][T21030] validate_nla: 1 callbacks suppressed [ 494.850963][T21030] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 494.882969][T21030] netlink: 'syz.4.4171': attribute type 2 has an invalid length. [ 494.914469][T21029] tipc: Enabling of bearer rejected, failed to enable media [ 494.969983][ T5234] udevd[5234]: worker [5884] /devices/virtual/block/nbd1 timeout; kill it [ 494.990075][ T5234] udevd[5234]: seq 16966 '/devices/virtual/block/nbd1' killed [ 495.036516][T21037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4175'. [ 495.182045][T21047] netlink: 'syz.3.4177': attribute type 11 has an invalid length. [ 495.216445][T21048] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.4175'. [ 495.243570][T21047] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4177'. [ 495.436451][T21053] netlink: 'syz.0.4179': attribute type 11 has an invalid length. [ 495.468258][T21053] netlink: 'syz.0.4179': attribute type 4 has an invalid length. [ 495.804125][T21070] tipc: Started in network mode [ 495.813149][T21070] tipc: Node identity 4ec7ec315307, cluster identity 4711 [ 495.875197][T21070] tipc: Enabled bearer , priority 0 [ 495.902882][T21073] syzkaller0: entered promiscuous mode [ 495.913033][T21073] syzkaller0: entered allmulticast mode [ 495.962760][T21070] tipc: Resetting bearer [ 496.009496][T21070] tipc: Enabling of bearer rejected, already enabled [ 496.095639][T21088] netlink: 'syz.2.4189': attribute type 2 has an invalid length. [ 496.162392][T21069] tipc: Resetting bearer [ 496.239258][T21069] tipc: Disabling bearer [ 497.258279][T21150] sctp: [Deprecated]: syz.2.4209 (pid 21150) Use of int in max_burst socket option. [ 497.258279][T21150] Use struct sctp_assoc_value instead [ 497.631106][T21166] __nla_validate_parse: 8 callbacks suppressed [ 497.631127][T21166] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4215'. [ 497.683213][T21172] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4214'. [ 497.771802][T21176] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4216'. [ 498.061127][T21189] netlink: 'syz.0.4218': attribute type 4 has an invalid length. [ 498.120935][T21193] netlink: 'syz.0.4218': attribute type 4 has an invalid length. [ 498.141427][T21192] netlink: 'syz.4.4221': attribute type 1 has an invalid length. [ 498.546201][T21216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4222'. [ 498.659018][T21222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4225'. [ 499.069979][T21243] netlink: 900 bytes leftover after parsing attributes in process `syz.1.4234'. [ 499.162934][T21249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4235'. [ 499.176271][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4235'. [ 499.191661][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4235'. [ 499.343778][T21256] netlink: 'syz.1.4237': attribute type 1 has an invalid length. [ 499.365331][T21256] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4237'. [ 500.067457][T21289] openvswitch: netlink: Flow key attribute not present in set flow. [ 500.108602][T21296] netlink: 'syz.2.4250': attribute type 11 has an invalid length. [ 500.156739][T21296] netlink: 'syz.2.4250': attribute type 11 has an invalid length. [ 500.166223][T21285] IPv6: sit3: Disabled Multicast RS [ 500.196315][T21285] sit3: entered allmulticast mode [ 500.743608][T21330] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 500.973286][T21345] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 501.431242][T21372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.903226][T21405] syzkaller0: entered allmulticast mode [ 501.920166][T21401] tipc: Started in network mode [ 501.927507][T21401] tipc: Node identity 466e3046827, cluster identity 4711 [ 501.936151][T21401] tipc: Enabled bearer , priority 0 [ 502.026581][T21410] "syz.4.4279" (21410) uses obsolete ecb(arc4) skcipher [ 502.171568][T21401] tipc: Disabling bearer [ 502.267312][T21421] netlink: 'syz.0.4283': attribute type 3 has an invalid length. [ 502.435913][T21430] netlink: 'syz.2.4285': attribute type 1 has an invalid length. [ 502.466994][T21430] netlink: 'syz.2.4285': attribute type 3 has an invalid length. [ 502.667348][T21441] netlink: 'syz.1.4291': attribute type 1 has an invalid length. [ 502.697383][T21441] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 503.076537][T21461] __nla_validate_parse: 9 callbacks suppressed [ 503.076559][T21461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4298'. [ 503.178754][T21461] netlink: 'syz.0.4298': attribute type 29 has an invalid length. [ 503.206411][T21461] netlink: 'syz.0.4298': attribute type 29 has an invalid length. [ 503.569697][T21487] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 503.599382][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4308'. [ 503.612480][T21487] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 503.640400][T21487] gretap1: entered promiscuous mode [ 503.672236][T21487] gretap1: entered allmulticast mode [ 503.799831][T21497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4309'. [ 503.983062][T21507] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.059667][T21507] : entered promiscuous mode [ 504.092786][T21515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.149689][T21515] netlink: 'syz.2.4316': attribute type 1 has an invalid length. [ 504.240152][T21519] bond3: (slave bridge0): making interface the new active one [ 504.273074][T21519] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 504.309308][T21522] tipc: Enabled bearer , priority 0 [ 504.339107][T21522] syzkaller0: entered promiscuous mode [ 504.355919][T21522] syzkaller0: entered allmulticast mode [ 504.376715][T21522] block nbd5: Unsupported socket: shutdown callout must be supported. [ 504.540293][T21523] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 504.654555][T21540] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 504.715296][T21522] tipc: Resetting bearer [ 504.787166][T21522] tipc: Disabling bearer [ 504.838190][T21551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4328'. [ 504.852082][T21543] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 504.879153][T21543] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 504.921844][T21543] gretap1: entered promiscuous mode [ 504.952543][T21543] gretap1: entered allmulticast mode [ 505.152118][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4332'. [ 505.519399][T21587] xt_l2tp: missing protocol rule (udp|l2tpip) [ 505.609260][ T55] block nbd0: Possible stuck request ffff88802511e000: control (read@0,1024B). Runtime 360 seconds [ 505.635214][ T55] block nbd0: Possible stuck request ffff88802511e1c0: control (read@1024,1024B). Runtime 360 seconds [ 505.646527][ T55] block nbd0: Possible stuck request ffff88802511e380: control (read@2048,1024B). Runtime 360 seconds [ 505.658457][ T55] block nbd0: Possible stuck request ffff88802511e540: control (read@3072,1024B). Runtime 360 seconds [ 505.761041][T21591] tipc: Enabled bearer , priority 0 [ 505.959046][T21591] syzkaller0: entered promiscuous mode [ 505.967621][T21591] syzkaller0: entered allmulticast mode [ 505.974099][T21591] tipc: Resetting bearer [ 506.071123][ T3475] tipc: Resetting bearer [ 506.083861][T21605] pim6reg1: entered promiscuous mode [ 506.094491][T21605] pim6reg1: entered allmulticast mode [ 506.229314][T21592] tipc: Resetting bearer [ 506.542158][T21628] netlink: 'syz.2.4350': attribute type 39 has an invalid length. [ 506.814834][ T1212] tipc: Node number set to 499182641 [ 508.641483][T21592] tipc: Disabling bearer [ 509.349895][T21677] netlink: 'syz.2.4360': attribute type 1 has an invalid length. [ 509.448623][T21671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4359'. [ 509.847456][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4366'. [ 509.893276][T21696] chnl_net:caif_netlink_parms(): no params data found [ 510.008495][T21701] netlink: 'syz.3.4367': attribute type 2 has an invalid length. [ 510.277938][T21708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4370'. [ 510.333261][T21710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4372'. [ 511.130919][T21754] netlink: 'syz.4.4382': attribute type 1 has an invalid length. [ 511.147645][T21753] netlink: 'syz.2.4383': attribute type 16 has an invalid length. [ 511.158133][T21753] netlink: 'syz.2.4383': attribute type 17 has an invalid length. [ 511.225635][T21756] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4382'. [ 511.245439][T21756] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4382'. [ 511.256260][T21756] netlink: 'syz.4.4382': attribute type 5 has an invalid length. [ 511.273764][T21756] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4382'. [ 511.339289][T21753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.370952][T21753] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.396350][T21753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.885627][T21783] tipc: Enabled bearer , priority 0 [ 511.912310][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4393'. [ 511.915240][T21783] syzkaller0: entered promiscuous mode [ 511.963269][T21783] syzkaller0: entered allmulticast mode [ 511.993607][T21792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4395'. [ 512.049600][T21792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4395'. [ 512.099350][T21783] tipc: Resetting bearer [ 512.211319][T21783] tipc: Resetting bearer [ 512.329040][T21783] tipc: Disabling bearer [ 512.651598][T21832] openvswitch: netlink: IPv4 tun info is not correct [ 513.185215][T21859] syzkaller1: entered promiscuous mode [ 513.197514][T21859] syzkaller1: entered allmulticast mode [ 513.473069][T21865] dummy0: entered allmulticast mode [ 513.800934][T21885] FAULT_INJECTION: forcing a failure. [ 513.800934][T21885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.842138][T21885] CPU: 1 UID: 0 PID: 21885 Comm: syz.4.4423 Not tainted syzkaller #0 PREEMPT(full) [ 513.842165][T21885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.842177][T21885] Call Trace: [ 513.842185][T21885] [ 513.842193][T21885] dump_stack_lvl+0x189/0x250 [ 513.842223][T21885] ? __pfx____ratelimit+0x10/0x10 [ 513.842243][T21885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.842266][T21885] ? __pfx__printk+0x10/0x10 [ 513.842292][T21885] ? __might_fault+0xb0/0x130 [ 513.842331][T21885] should_fail_ex+0x414/0x560 [ 513.842364][T21885] _copy_from_user+0x2d/0xb0 [ 513.842391][T21885] __sys_sendto+0x25c/0x520 [ 513.842417][T21885] ? __pfx___sys_sendto+0x10/0x10 [ 513.842434][T21885] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 513.842469][T21885] ? __fget_files+0x3a0/0x420 [ 513.842497][T21885] ? ksys_write+0x22a/0x250 [ 513.842524][T21885] ? __pfx_ksys_write+0x10/0x10 [ 513.842546][T21885] ? rcu_is_watching+0x15/0xb0 [ 513.842569][T21885] __x64_sys_sendto+0xde/0x100 [ 513.842596][T21885] do_syscall_64+0xfa/0x3b0 [ 513.842616][T21885] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.842635][T21885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.842654][T21885] ? clear_bhb_loop+0x60/0xb0 [ 513.842676][T21885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.842693][T21885] RIP: 0033:0x7f0f84f8eec9 [ 513.842711][T21885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.842727][T21885] RSP: 002b:00007f0f831f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 513.842749][T21885] RAX: ffffffffffffffda RBX: 00007f0f851e5fa0 RCX: 00007f0f84f8eec9 [ 513.842763][T21885] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 513.842775][T21885] RBP: 00007f0f831f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 513.842788][T21885] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 513.842799][T21885] R13: 00007f0f851e6038 R14: 00007f0f851e5fa0 R15: 00007ffc40f6e7f8 [ 513.842833][T21885] [ 514.566888][ T55] block nbd1: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 210 seconds [ 514.577017][T21923] __nla_validate_parse: 7 callbacks suppressed [ 514.577039][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4433'. [ 514.578067][ T55] block nbd1: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 210 seconds [ 514.600060][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4432'. [ 514.605813][ T55] block nbd1: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 210 seconds [ 514.625190][ T55] block nbd1: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 210 seconds [ 514.659355][T21922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4434'. [ 514.878679][T21929] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 514.912017][T12253] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 514.940293][T12253] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 514.993450][T12253] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.017663][T21944] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4438'. [ 515.022033][T12253] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 515.076024][T21945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4439'. [ 515.141687][T21949] FAULT_INJECTION: forcing a failure. [ 515.141687][T21949] name failslab, interval 1, probability 0, space 0, times 0 [ 515.177471][T21949] CPU: 0 UID: 0 PID: 21949 Comm: syz.2.4440 Not tainted syzkaller #0 PREEMPT(full) [ 515.177500][T21949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.177512][T21949] Call Trace: [ 515.177520][T21949] [ 515.177529][T21949] dump_stack_lvl+0x189/0x250 [ 515.177570][T21949] ? __pfx____ratelimit+0x10/0x10 [ 515.177592][T21949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.177613][T21949] ? __pfx__printk+0x10/0x10 [ 515.177647][T21949] ? __pfx___might_resched+0x10/0x10 [ 515.177673][T21949] should_fail_ex+0x414/0x560 [ 515.177708][T21949] should_failslab+0xa8/0x100 [ 515.177738][T21949] __kmalloc_cache_noprof+0x70/0x3d0 [ 515.177764][T21949] ? sctp_association_new+0x89/0x25f0 [ 515.177795][T21949] sctp_association_new+0x89/0x25f0 [ 515.177823][T21949] ? sctp_has_association+0x1cd/0x1f0 [ 515.177848][T21949] ? sctp_has_association+0x2f/0x1f0 [ 515.177884][T21949] ? __ipv6_addr_type+0x247/0x2f0 [ 515.177910][T21949] sctp_connect_new_asoc+0x2c5/0x690 [ 515.177937][T21949] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 515.177961][T21949] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 515.177983][T21949] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 515.178003][T21949] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 515.178039][T21949] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 515.178062][T21949] ? security_sctp_bind_connect+0x7e/0x2e0 [ 515.178092][T21949] sctp_sendmsg+0x155c/0x2810 [ 515.178130][T21949] ? __pfx_sctp_sendmsg+0x10/0x10 [ 515.178158][T21949] ? aa_sk_perm+0x81e/0x950 [ 515.178193][T21949] ? __pfx_aa_sk_perm+0x10/0x10 [ 515.178226][T21949] ? sock_rps_record_flow+0x19/0x410 [ 515.178258][T21949] ? inet_sendmsg+0x2f4/0x370 [ 515.178283][T21949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.178308][T21949] __sock_sendmsg+0x19c/0x270 [ 515.178342][T21949] __sys_sendto+0x3bd/0x520 [ 515.178367][T21949] ? __pfx___sys_sendto+0x10/0x10 [ 515.178385][T21949] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 515.178423][T21949] ? __fget_files+0x3a0/0x420 [ 515.178455][T21949] ? ksys_write+0x22a/0x250 [ 515.178484][T21949] ? __pfx_ksys_write+0x10/0x10 [ 515.178506][T21949] ? rcu_is_watching+0x15/0xb0 [ 515.178532][T21949] __x64_sys_sendto+0xde/0x100 [ 515.178559][T21949] do_syscall_64+0xfa/0x3b0 [ 515.178578][T21949] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.178598][T21949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.178617][T21949] ? clear_bhb_loop+0x60/0xb0 [ 515.178641][T21949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.178659][T21949] RIP: 0033:0x7f4ddcb8eec9 [ 515.178677][T21949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.178693][T21949] RSP: 002b:00007f4ddd972038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 515.178716][T21949] RAX: ffffffffffffffda RBX: 00007f4ddcde5fa0 RCX: 00007f4ddcb8eec9 [ 515.178730][T21949] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 515.178742][T21949] RBP: 00007f4ddd972090 R08: 000020000005ffe4 R09: 000000000000001c [ 515.178755][T21949] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 515.178767][T21949] R13: 00007f4ddcde6038 R14: 00007f4ddcde5fa0 R15: 00007ffdb72feef8 [ 515.178803][T21949] [ 515.828370][T21953] syzkaller1: entered promiscuous mode [ 515.833931][T21953] syzkaller1: entered allmulticast mode [ 515.870233][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 515.959093][T21965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4444'. [ 516.222368][T21986] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4449'. [ 516.259313][T21989] bridge2: entered promiscuous mode [ 516.275581][T21989] bridge2: entered allmulticast mode [ 516.350551][T21995] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 516.373726][T21995] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 516.412627][T21995] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 516.554283][T22006] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4456'. [ 516.586614][T22006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4456'. [ 516.733267][T22021] netlink: 'syz.3.4459': attribute type 3 has an invalid length. [ 516.795012][T22021] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 516.818932][T22021] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 516.828214][T22021] gretap3: entered promiscuous mode [ 516.844407][T22021] gretap3: entered allmulticast mode [ 517.363984][T22039] xfrm1: entered promiscuous mode [ 517.436143][T22039] xfrm1: entered allmulticast mode [ 517.482534][T22042] tipc: Enabled bearer , priority 0 [ 517.508392][T22042] syzkaller0: entered promiscuous mode [ 517.533945][T22042] syzkaller0: entered allmulticast mode [ 517.630288][T22050] tipc: Resetting bearer [ 517.667841][T22041] tipc: Resetting bearer [ 517.727977][T22052] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 517.808685][T22041] tipc: Disabling bearer [ 517.945335][T22070] netlink: 'syz.4.4474': attribute type 4 has an invalid length. [ 518.670556][T22098] lo: entered allmulticast mode [ 518.681139][T22098] lo: left allmulticast mode [ 519.361695][T22142] FAULT_INJECTION: forcing a failure. [ 519.361695][T22142] name failslab, interval 1, probability 0, space 0, times 0 [ 519.393207][T22142] CPU: 1 UID: 0 PID: 22142 Comm: syz.2.4494 Not tainted syzkaller #0 PREEMPT(full) [ 519.393236][T22142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.393248][T22142] Call Trace: [ 519.393256][T22142] [ 519.393264][T22142] dump_stack_lvl+0x189/0x250 [ 519.393293][T22142] ? __pfx____ratelimit+0x10/0x10 [ 519.393315][T22142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.393337][T22142] ? __pfx__printk+0x10/0x10 [ 519.393371][T22142] ? __pfx___might_resched+0x10/0x10 [ 519.393388][T22142] ? fs_reclaim_acquire+0x7d/0x100 [ 519.393409][T22142] should_fail_ex+0x414/0x560 [ 519.393441][T22142] should_failslab+0xa8/0x100 [ 519.393468][T22142] __kmalloc_cache_noprof+0x70/0x3d0 [ 519.393491][T22142] ? sctp_transport_new+0x7e/0x640 [ 519.393518][T22142] sctp_transport_new+0x7e/0x640 [ 519.393545][T22142] sctp_assoc_add_peer+0x260/0x13b0 [ 519.393568][T22142] ? sctp_bind_addr_copy+0x380/0x3c0 [ 519.393594][T22142] sctp_connect_new_asoc+0x30a/0x690 [ 519.393620][T22142] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 519.393642][T22142] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 519.393663][T22142] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 519.393681][T22142] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 519.393702][T22142] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 519.393722][T22142] ? security_sctp_bind_connect+0x7e/0x2e0 [ 519.393751][T22142] sctp_sendmsg+0x155c/0x2810 [ 519.393786][T22142] ? __pfx_sctp_sendmsg+0x10/0x10 [ 519.393812][T22142] ? aa_sk_perm+0x81e/0x950 [ 519.393846][T22142] ? __pfx_aa_sk_perm+0x10/0x10 [ 519.393889][T22142] ? sock_rps_record_flow+0x19/0x410 [ 519.393920][T22142] ? inet_sendmsg+0x2f4/0x370 [ 519.393942][T22142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.393964][T22142] __sock_sendmsg+0x19c/0x270 [ 519.393997][T22142] __sys_sendto+0x3bd/0x520 [ 519.394019][T22142] ? __pfx___sys_sendto+0x10/0x10 [ 519.394036][T22142] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 519.394072][T22142] ? __fget_files+0x3a0/0x420 [ 519.394101][T22142] ? ksys_write+0x22a/0x250 [ 519.394128][T22142] ? __pfx_ksys_write+0x10/0x10 [ 519.394149][T22142] ? rcu_is_watching+0x15/0xb0 [ 519.394179][T22142] __x64_sys_sendto+0xde/0x100 [ 519.394205][T22142] do_syscall_64+0xfa/0x3b0 [ 519.394223][T22142] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.394242][T22142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.394261][T22142] ? clear_bhb_loop+0x60/0xb0 [ 519.394285][T22142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.394303][T22142] RIP: 0033:0x7f4ddcb8eec9 [ 519.394321][T22142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.394337][T22142] RSP: 002b:00007f4ddd972038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 519.394358][T22142] RAX: ffffffffffffffda RBX: 00007f4ddcde5fa0 RCX: 00007f4ddcb8eec9 [ 519.394372][T22142] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 519.394384][T22142] RBP: 00007f4ddd972090 R08: 000020000005ffe4 R09: 000000000000001c [ 519.394397][T22142] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 519.394408][T22142] R13: 00007f4ddcde6038 R14: 00007f4ddcde5fa0 R15: 00007ffdb72feef8 [ 519.394443][T22142] [ 519.898015][T22156] netlink: 'syz.3.4498': attribute type 1 has an invalid length. [ 519.906700][T22162] __nla_validate_parse: 11 callbacks suppressed [ 519.906717][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4500'. [ 519.912741][T22157] netlink: 'syz.3.4498': attribute type 1 has an invalid length. [ 519.937003][T22162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4500'. [ 520.081731][T22157] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4498'. [ 520.290966][T22180] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 520.397849][T22183] net veth1_virt_wifi .: renamed from virt_wifi0 [ 520.457439][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 520.583906][T22198] FAULT_INJECTION: forcing a failure. [ 520.583906][T22198] name failslab, interval 1, probability 0, space 0, times 0 [ 520.618491][T22198] CPU: 1 UID: 0 PID: 22198 Comm: syz.3.4510 Not tainted syzkaller #0 PREEMPT(full) [ 520.618521][T22198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.618534][T22198] Call Trace: [ 520.618542][T22198] [ 520.618551][T22198] dump_stack_lvl+0x189/0x250 [ 520.618590][T22198] ? __pfx____ratelimit+0x10/0x10 [ 520.618612][T22198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.618636][T22198] ? __pfx__printk+0x10/0x10 [ 520.618662][T22198] ? crng_make_state+0x3fc/0x700 [ 520.618691][T22198] ? crng_make_state+0x13a/0x700 [ 520.618730][T22198] should_fail_ex+0x414/0x560 [ 520.618766][T22198] should_failslab+0xa8/0x100 [ 520.618798][T22198] __kmalloc_cache_noprof+0x70/0x3d0 [ 520.618823][T22198] ? sctp_add_bind_addr+0x8c/0x370 [ 520.618849][T22198] sctp_add_bind_addr+0x8c/0x370 [ 520.618875][T22198] sctp_copy_local_addr_list+0x30b/0x4e0 [ 520.618900][T22198] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 520.618919][T22198] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 520.618942][T22198] ? sctp_v6_is_any+0x64/0x80 [ 520.618965][T22198] ? sctp_copy_one_addr+0x93/0x360 [ 520.618990][T22198] sctp_bind_addr_copy+0xb3/0x3c0 [ 520.619011][T22198] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 520.619043][T22198] sctp_connect_new_asoc+0x2e0/0x690 [ 520.619072][T22198] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 520.619094][T22198] ? __local_bh_enable_ip+0x12d/0x1c0 [ 520.619124][T22198] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 520.619147][T22198] ? security_sctp_bind_connect+0x7e/0x2e0 [ 520.619178][T22198] sctp_sendmsg+0x155c/0x2810 [ 520.619218][T22198] ? __pfx_sctp_sendmsg+0x10/0x10 [ 520.619246][T22198] ? aa_sk_perm+0x81e/0x950 [ 520.619283][T22198] ? __pfx_aa_sk_perm+0x10/0x10 [ 520.619317][T22198] ? sock_rps_record_flow+0x19/0x410 [ 520.619349][T22198] ? inet_sendmsg+0x2f4/0x370 [ 520.619383][T22198] __sock_sendmsg+0x19c/0x270 [ 520.619417][T22198] __sys_sendto+0x3bd/0x520 [ 520.619443][T22198] ? __pfx___sys_sendto+0x10/0x10 [ 520.619462][T22198] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 520.619502][T22198] ? __fget_files+0x3a0/0x420 [ 520.619534][T22198] ? ksys_write+0x22a/0x250 [ 520.619563][T22198] ? __pfx_ksys_write+0x10/0x10 [ 520.619597][T22198] ? rcu_is_watching+0x15/0xb0 [ 520.619625][T22198] __x64_sys_sendto+0xde/0x100 [ 520.619652][T22198] do_syscall_64+0xfa/0x3b0 [ 520.619673][T22198] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.619694][T22198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.619713][T22198] ? clear_bhb_loop+0x60/0xb0 [ 520.619738][T22198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.619756][T22198] RIP: 0033:0x7ff77018eec9 [ 520.619775][T22198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.619792][T22198] RSP: 002b:00007ff771011038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 520.619814][T22198] RAX: ffffffffffffffda RBX: 00007ff7703e5fa0 RCX: 00007ff77018eec9 [ 520.619827][T22198] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 520.619840][T22198] RBP: 00007ff771011090 R08: 000020000005ffe4 R09: 000000000000001c [ 520.619852][T22198] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 520.619863][T22198] R13: 00007ff7703e6038 R14: 00007ff7703e5fa0 R15: 00007fff42c9e8d8 [ 520.619899][T22198] [ 520.666964][T22183] syzkaller0: entered promiscuous mode [ 520.969327][T22183] syzkaller0: entered allmulticast mode [ 521.199382][T22221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4514'. [ 523.435418][T22225] syzkaller1: entered promiscuous mode [ 523.441001][T22225] syzkaller1: entered allmulticast mode [ 523.836083][T22253] FAULT_INJECTION: forcing a failure. [ 523.836083][T22253] name failslab, interval 1, probability 0, space 0, times 0 [ 523.880330][T22253] CPU: 0 UID: 0 PID: 22253 Comm: syz.4.4522 Not tainted syzkaller #0 PREEMPT(full) [ 523.880357][T22253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 523.880369][T22253] Call Trace: [ 523.880401][T22253] [ 523.880409][T22253] dump_stack_lvl+0x189/0x250 [ 523.880438][T22253] ? __pfx____ratelimit+0x10/0x10 [ 523.880460][T22253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.880482][T22253] ? __pfx__printk+0x10/0x10 [ 523.880522][T22253] should_fail_ex+0x414/0x560 [ 523.880565][T22253] should_failslab+0xa8/0x100 [ 523.880595][T22253] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 523.880621][T22253] ? __alloc_skb+0x112/0x2d0 [ 523.880649][T22253] __alloc_skb+0x112/0x2d0 [ 523.880676][T22253] _sctp_make_chunk+0x5e/0x430 [ 523.880703][T22253] sctp_make_init+0x58b/0xd30 [ 523.880737][T22253] ? __pfx_sctp_make_init+0x10/0x10 [ 523.880757][T22253] ? arch_stack_walk+0xfc/0x150 [ 523.880794][T22253] ? stack_trace_save+0x9c/0xe0 [ 523.880821][T22253] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 523.880853][T22253] sctp_do_sm+0x1e7/0x5a20 [ 523.880878][T22253] ? __pfx_sctp_pname+0x10/0x10 [ 523.880904][T22253] ? kasan_save_track+0x3e/0x80 [ 523.880927][T22253] ? sctp_stream_init_ext+0x57/0x180 [ 523.880951][T22253] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 523.880971][T22253] ? sctp_sendmsg+0x1941/0x2810 [ 523.880991][T22253] ? __sock_sendmsg+0x19c/0x270 [ 523.881016][T22253] ? __sys_sendto+0x3bd/0x520 [ 523.881036][T22253] ? do_syscall_64+0xfa/0x3b0 [ 523.881055][T22253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.881079][T22253] ? __pfx_sctp_do_sm+0x10/0x10 [ 523.881154][T22253] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 523.881193][T22253] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 523.881223][T22253] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 523.881243][T22253] ? __asan_memcpy+0x40/0x70 [ 523.881275][T22253] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 523.881315][T22253] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 523.881339][T22253] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 523.881364][T22253] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 523.881387][T22253] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 523.881408][T22253] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 523.881431][T22253] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 523.881452][T22253] ? security_sctp_bind_connect+0x7e/0x2e0 [ 523.881483][T22253] sctp_sendmsg+0x1941/0x2810 [ 523.881521][T22253] ? __pfx_sctp_sendmsg+0x10/0x10 [ 523.881589][T22253] ? aa_sk_perm+0x81e/0x950 [ 523.881622][T22253] ? __pfx_aa_sk_perm+0x10/0x10 [ 523.881654][T22253] ? sock_rps_record_flow+0x19/0x410 [ 523.881685][T22253] ? inet_sendmsg+0x2f4/0x370 [ 523.881710][T22253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.881736][T22253] __sock_sendmsg+0x19c/0x270 [ 523.881769][T22253] __sys_sendto+0x3bd/0x520 [ 523.881793][T22253] ? __pfx___sys_sendto+0x10/0x10 [ 523.881810][T22253] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 523.881849][T22253] ? __fget_files+0x3a0/0x420 [ 523.881882][T22253] ? ksys_write+0x22a/0x250 [ 523.881908][T22253] ? __pfx_ksys_write+0x10/0x10 [ 523.881931][T22253] ? rcu_is_watching+0x15/0xb0 [ 523.881958][T22253] __x64_sys_sendto+0xde/0x100 [ 523.881984][T22253] do_syscall_64+0xfa/0x3b0 [ 523.882002][T22253] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.882021][T22253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.882038][T22253] ? clear_bhb_loop+0x60/0xb0 [ 523.882062][T22253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.882081][T22253] RIP: 0033:0x7f0f84f8eec9 [ 523.882100][T22253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.882117][T22253] RSP: 002b:00007f0f831f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 523.882140][T22253] RAX: ffffffffffffffda RBX: 00007f0f851e5fa0 RCX: 00007f0f84f8eec9 [ 523.882154][T22253] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 523.882167][T22253] RBP: 00007f0f831f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 523.882179][T22253] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 523.882191][T22253] R13: 00007f0f851e6038 R14: 00007f0f851e5fa0 R15: 00007ffc40f6e7f8 [ 523.882226][T22253] [ 524.987962][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4535'. [ 525.012065][T22296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4535'. [ 525.066578][T22303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4538'. [ 525.071431][T22296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4535'. [ 525.128434][T22305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4538'. [ 525.190785][T22307] FAULT_INJECTION: forcing a failure. [ 525.190785][T22307] name failslab, interval 1, probability 0, space 0, times 0 [ 525.205829][T22308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4538'. [ 525.246261][T22307] CPU: 1 UID: 0 PID: 22307 Comm: syz.3.4539 Not tainted syzkaller #0 PREEMPT(full) [ 525.246289][T22307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 525.246302][T22307] Call Trace: [ 525.246310][T22307] [ 525.246319][T22307] dump_stack_lvl+0x189/0x250 [ 525.246348][T22307] ? __pfx____ratelimit+0x10/0x10 [ 525.246370][T22307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.246395][T22307] ? __pfx__printk+0x10/0x10 [ 525.246437][T22307] should_fail_ex+0x414/0x560 [ 525.246470][T22307] should_failslab+0xa8/0x100 [ 525.246501][T22307] __kmalloc_cache_noprof+0x70/0x3d0 [ 525.246527][T22307] ? sctp_add_bind_addr+0x8c/0x370 [ 525.246551][T22307] sctp_add_bind_addr+0x8c/0x370 [ 525.246577][T22307] sctp_copy_local_addr_list+0x30b/0x4e0 [ 525.246602][T22307] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 525.246622][T22307] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 525.246643][T22307] ? sctp_v6_is_any+0x64/0x80 [ 525.246666][T22307] ? sctp_copy_one_addr+0x93/0x360 [ 525.246689][T22307] sctp_bind_addr_copy+0xb3/0x3c0 [ 525.246711][T22307] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 525.246743][T22307] sctp_connect_new_asoc+0x2e0/0x690 [ 525.246782][T22307] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 525.246804][T22307] ? __local_bh_enable_ip+0x12d/0x1c0 [ 525.246833][T22307] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 525.246856][T22307] ? security_sctp_bind_connect+0x7e/0x2e0 [ 525.246887][T22307] sctp_sendmsg+0x155c/0x2810 [ 525.246924][T22307] ? __pfx_sctp_sendmsg+0x10/0x10 [ 525.246953][T22307] ? aa_sk_perm+0x81e/0x950 [ 525.246989][T22307] ? __pfx_aa_sk_perm+0x10/0x10 [ 525.247022][T22307] ? sock_rps_record_flow+0x19/0x410 [ 525.247055][T22307] ? inet_sendmsg+0x2f4/0x370 [ 525.247084][T22307] __sock_sendmsg+0x19c/0x270 [ 525.247119][T22307] __sys_sendto+0x3bd/0x520 [ 525.247145][T22307] ? __pfx___sys_sendto+0x10/0x10 [ 525.247163][T22307] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 525.247200][T22307] ? __fget_files+0x3a0/0x420 [ 525.247232][T22307] ? ksys_write+0x22a/0x250 [ 525.247261][T22307] ? __pfx_ksys_write+0x10/0x10 [ 525.247287][T22307] ? rcu_is_watching+0x15/0xb0 [ 525.247312][T22307] __x64_sys_sendto+0xde/0x100 [ 525.247338][T22307] do_syscall_64+0xfa/0x3b0 [ 525.247357][T22307] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.247375][T22307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.247394][T22307] ? clear_bhb_loop+0x60/0xb0 [ 525.247419][T22307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.247435][T22307] RIP: 0033:0x7ff77018eec9 [ 525.247452][T22307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.247468][T22307] RSP: 002b:00007ff771011038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 525.247487][T22307] RAX: ffffffffffffffda RBX: 00007ff7703e5fa0 RCX: 00007ff77018eec9 [ 525.247500][T22307] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 525.247511][T22307] RBP: 00007ff771011090 R08: 000020000005ffe4 R09: 000000000000001c [ 525.247523][T22307] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 525.247534][T22307] R13: 00007ff7703e6038 R14: 00007ff7703e5fa0 R15: 00007fff42c9e8d8 [ 525.247567][T22307] [ 525.834939][T22324] netlink: 'syz.3.4545': attribute type 13 has an invalid length. [ 525.853215][T22325] netlink: 'syz.2.4543': attribute type 12 has an invalid length. [ 525.975631][T22327] netlink: 'syz.3.4545': attribute type 13 has an invalid length. [ 526.647731][T22354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4554'. [ 526.783958][T22360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4555'. [ 526.836407][T22362] FAULT_INJECTION: forcing a failure. [ 526.836407][T22362] name failslab, interval 1, probability 0, space 0, times 0 [ 526.889506][T22362] CPU: 1 UID: 0 PID: 22362 Comm: syz.4.4556 Not tainted syzkaller #0 PREEMPT(full) [ 526.889545][T22362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.889557][T22362] Call Trace: [ 526.889565][T22362] [ 526.889574][T22362] dump_stack_lvl+0x189/0x250 [ 526.889603][T22362] ? __pfx____ratelimit+0x10/0x10 [ 526.889624][T22362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.889646][T22362] ? __pfx__printk+0x10/0x10 [ 526.889673][T22362] ? rcu_is_watching+0x15/0xb0 [ 526.889696][T22362] should_fail_ex+0x414/0x560 [ 526.889729][T22362] should_failslab+0xa8/0x100 [ 526.889758][T22362] kmem_cache_alloc_noprof+0x73/0x3c0 [ 526.889782][T22362] ? _sctp_make_chunk+0x14e/0x430 [ 526.889808][T22362] _sctp_make_chunk+0x14e/0x430 [ 526.889835][T22362] sctp_make_init+0x58b/0xd30 [ 526.889870][T22362] ? __pfx_sctp_make_init+0x10/0x10 [ 526.889890][T22362] ? arch_stack_walk+0xfc/0x150 [ 526.889929][T22362] ? stack_trace_save+0x9c/0xe0 [ 526.889956][T22362] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 526.889985][T22362] sctp_do_sm+0x1e7/0x5a20 [ 526.890009][T22362] ? __pfx_sctp_pname+0x10/0x10 [ 526.890035][T22362] ? kasan_save_track+0x3e/0x80 [ 526.890055][T22362] ? sctp_stream_init_ext+0x57/0x180 [ 526.890077][T22362] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 526.890093][T22362] ? sctp_sendmsg+0x1941/0x2810 [ 526.890109][T22362] ? __sock_sendmsg+0x19c/0x270 [ 526.890133][T22362] ? __sys_sendto+0x3bd/0x520 [ 526.890152][T22362] ? do_syscall_64+0xfa/0x3b0 [ 526.890170][T22362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.890193][T22362] ? __pfx_sctp_do_sm+0x10/0x10 [ 526.890266][T22362] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 526.890305][T22362] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 526.890336][T22362] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 526.890358][T22362] ? __asan_memcpy+0x40/0x70 [ 526.890389][T22362] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 526.890431][T22362] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 526.890454][T22362] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 526.890480][T22362] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 526.890504][T22362] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 526.890534][T22362] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 526.890559][T22362] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 526.890581][T22362] ? security_sctp_bind_connect+0x7e/0x2e0 [ 526.890611][T22362] sctp_sendmsg+0x1941/0x2810 [ 526.890651][T22362] ? __pfx_sctp_sendmsg+0x10/0x10 [ 526.890678][T22362] ? aa_sk_perm+0x81e/0x950 [ 526.890714][T22362] ? __pfx_aa_sk_perm+0x10/0x10 [ 526.890747][T22362] ? sock_rps_record_flow+0x19/0x410 [ 526.890778][T22362] ? inet_sendmsg+0x2f4/0x370 [ 526.890803][T22362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.890828][T22362] __sock_sendmsg+0x19c/0x270 [ 526.890861][T22362] __sys_sendto+0x3bd/0x520 [ 526.890886][T22362] ? __pfx___sys_sendto+0x10/0x10 [ 526.890904][T22362] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 526.890943][T22362] ? __fget_files+0x3a0/0x420 [ 526.890976][T22362] ? ksys_write+0x22a/0x250 [ 526.891004][T22362] ? __pfx_ksys_write+0x10/0x10 [ 526.891026][T22362] ? rcu_is_watching+0x15/0xb0 [ 526.891053][T22362] __x64_sys_sendto+0xde/0x100 [ 526.891079][T22362] do_syscall_64+0xfa/0x3b0 [ 526.891099][T22362] ? lockdep_hardirqs_on+0x9c/0x150 [ 526.891119][T22362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.891137][T22362] ? clear_bhb_loop+0x60/0xb0 [ 526.891161][T22362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.891179][T22362] RIP: 0033:0x7f0f84f8eec9 [ 526.891198][T22362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.891214][T22362] RSP: 002b:00007f0f831f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 526.891237][T22362] RAX: ffffffffffffffda RBX: 00007f0f851e5fa0 RCX: 00007f0f84f8eec9 [ 526.891251][T22362] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 526.891263][T22362] RBP: 00007f0f831f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 526.891276][T22362] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 526.891287][T22362] R13: 00007f0f851e6038 R14: 00007f0f851e5fa0 R15: 00007ffc40f6e7f8 [ 526.891322][T22362] [ 527.313137][T22364] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 527.324095][T12253] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 527.326354][T22360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4555'. [ 527.344535][T22366] netlink: 'syz.2.4558': attribute type 13 has an invalid length. [ 527.352525][T22366] netlink: 'syz.2.4558': attribute type 58 has an invalid length. [ 527.361168][T22366] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4558'. [ 527.382616][T22366] netlink: 'syz.2.4558': attribute type 13 has an invalid length. [ 527.391337][T22366] netlink: 'syz.2.4558': attribute type 58 has an invalid length. [ 527.399623][T22366] netlink: 'syz.2.4558': attribute type 13 has an invalid length. [ 527.413599][T22366] netlink: 'syz.2.4558': attribute type 58 has an invalid length. [ 527.420368][T22369] delete_channel: no stack [ 527.423187][T22366] netlink: 'syz.2.4558': attribute type 13 has an invalid length. [ 527.444108][T12253] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 527.453801][T12253] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 527.462790][T12253] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 527.532800][T22374] netlink: 'syz.0.4560': attribute type 11 has an invalid length. [ 527.541372][T22374] netlink: 'syz.0.4560': attribute type 11 has an invalid length. [ 527.852927][T22378] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 527.854131][T22379] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 528.229593][ T1212] IPVS: starting estimator thread 0... [ 528.233201][T22416] FAULT_INJECTION: forcing a failure. [ 528.233201][T22416] name failslab, interval 1, probability 0, space 0, times 0 [ 528.239096][T22413] IPVS: ip_vs_add_dest(): server weight less than zero [ 528.278213][T22416] CPU: 0 UID: 0 PID: 22416 Comm: syz.0.4571 Not tainted syzkaller #0 PREEMPT(full) [ 528.278241][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.278251][T22416] Call Trace: [ 528.278260][T22416] [ 528.278268][T22416] dump_stack_lvl+0x189/0x250 [ 528.278298][T22416] ? __pfx____ratelimit+0x10/0x10 [ 528.278321][T22416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.278344][T22416] ? __pfx__printk+0x10/0x10 [ 528.278388][T22416] should_fail_ex+0x414/0x560 [ 528.278424][T22416] should_failslab+0xa8/0x100 [ 528.278453][T22416] __kmalloc_cache_noprof+0x70/0x3d0 [ 528.278479][T22416] ? sctp_add_bind_addr+0x8c/0x370 [ 528.278504][T22416] sctp_add_bind_addr+0x8c/0x370 [ 528.278666][T22416] sctp_copy_local_addr_list+0x30b/0x4e0 [ 528.278691][T22416] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 528.278710][T22416] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 528.278732][T22416] ? sctp_v6_is_any+0x64/0x80 [ 528.278754][T22416] ? sctp_copy_one_addr+0x93/0x360 [ 528.278778][T22416] sctp_bind_addr_copy+0xb3/0x3c0 [ 528.278797][T22416] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 528.278827][T22416] sctp_connect_new_asoc+0x2e0/0x690 [ 528.278855][T22416] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 528.278876][T22416] ? __local_bh_enable_ip+0x12d/0x1c0 [ 528.278905][T22416] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 528.278927][T22416] ? security_sctp_bind_connect+0x7e/0x2e0 [ 528.278956][T22416] sctp_sendmsg+0x155c/0x2810 [ 528.278994][T22416] ? __pfx_sctp_sendmsg+0x10/0x10 [ 528.279021][T22416] ? aa_sk_perm+0x81e/0x950 [ 528.279057][T22416] ? __pfx_aa_sk_perm+0x10/0x10 [ 528.279099][T22416] ? sock_rps_record_flow+0x19/0x410 [ 528.279131][T22416] ? inet_sendmsg+0x2f4/0x370 [ 528.279163][T22416] __sock_sendmsg+0x19c/0x270 [ 528.279198][T22416] __sys_sendto+0x3bd/0x520 [ 528.279221][T22416] ? __pfx___sys_sendto+0x10/0x10 [ 528.279238][T22416] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 528.279276][T22416] ? __fget_files+0x3a0/0x420 [ 528.279307][T22416] ? ksys_write+0x22a/0x250 [ 528.279334][T22416] ? __pfx_ksys_write+0x10/0x10 [ 528.279355][T22416] ? rcu_is_watching+0x15/0xb0 [ 528.279380][T22416] __x64_sys_sendto+0xde/0x100 [ 528.279406][T22416] do_syscall_64+0xfa/0x3b0 [ 528.279425][T22416] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.279443][T22416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.279462][T22416] ? clear_bhb_loop+0x60/0xb0 [ 528.279485][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.279502][T22416] RIP: 0033:0x7f07be58eec9 [ 528.279520][T22416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.279546][T22416] RSP: 002b:00007f07bf471038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 528.279568][T22416] RAX: ffffffffffffffda RBX: 00007f07be7e5fa0 RCX: 00007f07be58eec9 [ 528.279582][T22416] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 528.279595][T22416] RBP: 00007f07bf471090 R08: 000020000005ffe4 R09: 000000000000001c [ 528.279607][T22416] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 528.279619][T22416] R13: 00007f07be7e6038 R14: 00007f07be7e5fa0 R15: 00007ffe7db1f318 [ 528.279654][T22416] [ 528.696290][T22415] IPVS: using max 24 ests per chain, 57600 per kthread [ 529.443412][T22457] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 529.867655][T22471] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.890418][T22471] bridge_slave_1: left allmulticast mode [ 529.902213][T22471] bridge_slave_1: left promiscuous mode [ 529.914299][T22471] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.939068][T22471] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 529.979249][T22474] ip6gre1: entered allmulticast mode [ 530.203406][T22489] __nla_validate_parse: 71 callbacks suppressed [ 530.203431][T22489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4596'. [ 530.556455][T22509] pim6reg1: entered promiscuous mode [ 530.582209][T22509] pim6reg1: entered allmulticast mode [ 530.677128][T22516] FAULT_INJECTION: forcing a failure. [ 530.677128][T22516] name failslab, interval 1, probability 0, space 0, times 0 [ 530.732646][T22516] CPU: 1 UID: 0 PID: 22516 Comm: syz.3.4602 Not tainted syzkaller #0 PREEMPT(full) [ 530.732676][T22516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 530.732688][T22516] Call Trace: [ 530.732696][T22516] [ 530.732704][T22516] dump_stack_lvl+0x189/0x250 [ 530.732770][T22516] ? __pfx____ratelimit+0x10/0x10 [ 530.732791][T22516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.732815][T22516] ? __pfx__printk+0x10/0x10 [ 530.732861][T22516] should_fail_ex+0x414/0x560 [ 530.732897][T22516] should_failslab+0xa8/0x100 [ 530.732928][T22516] __kmalloc_cache_noprof+0x70/0x3d0 [ 530.732954][T22516] ? sctp_add_bind_addr+0x8c/0x370 [ 530.732980][T22516] sctp_add_bind_addr+0x8c/0x370 [ 530.733006][T22516] sctp_copy_local_addr_list+0x30b/0x4e0 [ 530.733031][T22516] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 530.733051][T22516] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 530.733074][T22516] ? sctp_v6_is_any+0x64/0x80 [ 530.733097][T22516] ? sctp_copy_one_addr+0x93/0x360 [ 530.733122][T22516] sctp_bind_addr_copy+0xb3/0x3c0 [ 530.733143][T22516] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 530.733176][T22516] sctp_connect_new_asoc+0x2e0/0x690 [ 530.733205][T22516] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 530.733227][T22516] ? __local_bh_enable_ip+0x12d/0x1c0 [ 530.733257][T22516] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 530.733280][T22516] ? security_sctp_bind_connect+0x7e/0x2e0 [ 530.733311][T22516] sctp_sendmsg+0x155c/0x2810 [ 530.733350][T22516] ? __pfx_sctp_sendmsg+0x10/0x10 [ 530.733379][T22516] ? aa_sk_perm+0x81e/0x950 [ 530.733415][T22516] ? __pfx_aa_sk_perm+0x10/0x10 [ 530.733449][T22516] ? sock_rps_record_flow+0x19/0x410 [ 530.733479][T22516] ? inet_sendmsg+0x2f4/0x370 [ 530.733512][T22516] __sock_sendmsg+0x19c/0x270 [ 530.733547][T22516] __sys_sendto+0x3bd/0x520 [ 530.733573][T22516] ? __pfx___sys_sendto+0x10/0x10 [ 530.733592][T22516] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 530.733631][T22516] ? __fget_files+0x3a0/0x420 [ 530.733665][T22516] ? ksys_write+0x22a/0x250 [ 530.733694][T22516] ? __pfx_ksys_write+0x10/0x10 [ 530.733724][T22516] ? rcu_is_watching+0x15/0xb0 [ 530.733751][T22516] __x64_sys_sendto+0xde/0x100 [ 530.733778][T22516] do_syscall_64+0xfa/0x3b0 [ 530.733798][T22516] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.733819][T22516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.733838][T22516] ? clear_bhb_loop+0x60/0xb0 [ 530.733862][T22516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.733881][T22516] RIP: 0033:0x7ff77018eec9 [ 530.733900][T22516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.733917][T22516] RSP: 002b:00007ff771011038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 530.733939][T22516] RAX: ffffffffffffffda RBX: 00007ff7703e5fa0 RCX: 00007ff77018eec9 [ 530.733953][T22516] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 530.733966][T22516] RBP: 00007ff771011090 R08: 000020000005ffe4 R09: 000000000000001c [ 530.733979][T22516] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 530.733991][T22516] R13: 00007ff7703e6038 R14: 00007ff7703e5fa0 R15: 00007fff42c9e8d8 [ 530.734027][T22516] [ 531.190224][T22528] validate_nla: 127 callbacks suppressed [ 531.190248][T22528] netlink: 'syz.3.4605': attribute type 1 has an invalid length. [ 531.417285][T22536] netlink: 'syz.1.4609': attribute type 1 has an invalid length. [ 531.524916][T22536] sctp: [Deprecated]: syz.1.4609 (pid 22536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.524916][T22536] Use struct sctp_sack_info instead [ 531.561331][T22536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4609'. [ 531.612913][ T7351] IPVS: starting estimator thread 0... [ 531.637001][T22535] delete_channel: no stack [ 531.705006][T22554] IPVS: using max 26 ests per chain, 62400 per kthread [ 531.943304][T22570] netlink: 'syz.2.4615': attribute type 1 has an invalid length. [ 531.951684][T22570] netlink: 'syz.2.4615': attribute type 2 has an invalid length. [ 531.975467][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4615'. [ 532.452936][T22579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4618'. [ 532.546749][T22584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4621'. [ 532.777799][T22595] netlink: 'syz.4.4624': attribute type 11 has an invalid length. [ 532.778360][ T5869] block nbd5: Receive control failed (result -32) [ 532.789021][T22598] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4625'. [ 532.815030][T22595] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4624'. [ 533.079169][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4630'. [ 533.301431][T22618] syzkaller1: entered promiscuous mode [ 533.328174][T22618] syzkaller1: entered allmulticast mode [ 533.526158][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4635'. [ 534.032277][T22661] Unsupported ieee802154 address type: 0 [ 534.103991][T22665] netlink: 'syz.2.4645': attribute type 3 has an invalid length. [ 534.319247][T22675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4648'. [ 534.831387][T22709] netlink: 'syz.0.4653': attribute type 2 has an invalid length. [ 535.024050][T22716] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 535.243737][T22718] __nla_validate_parse: 2 callbacks suppressed [ 535.243761][T22718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4656'. [ 535.273044][T22713] geneve2: entered promiscuous mode [ 535.281212][T22713] geneve2: entered allmulticast mode [ 535.315298][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 535.353374][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 535.479956][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 535.526484][T22726] tipc: Enabled bearer , priority 0 [ 535.543972][T22726] syzkaller0: entered promiscuous mode [ 535.564363][T22726] syzkaller0: entered allmulticast mode [ 535.616493][T22726] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 535.669055][T22726] tipc: Resetting bearer [ 535.685212][ T55] block nbd0: Possible stuck request ffff88802511e000: control (read@0,1024B). Runtime 390 seconds [ 535.696986][ T55] block nbd0: Possible stuck request ffff88802511e1c0: control (read@1024,1024B). Runtime 390 seconds [ 535.708209][ T55] block nbd0: Possible stuck request ffff88802511e380: control (read@2048,1024B). Runtime 390 seconds [ 535.719451][ T55] block nbd0: Possible stuck request ffff88802511e540: control (read@3072,1024B). Runtime 390 seconds [ 535.731688][T22725] tipc: Resetting bearer [ 535.777569][T22725] tipc: Disabling bearer [ 535.950387][T22753] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4667'. [ 536.095650][T22753] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4667'. [ 536.177950][T22764] netlink: 'syz.0.4669': attribute type 12 has an invalid length. [ 536.491685][T22780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4674'. [ 536.588755][T22784] netlink: 'syz.4.4675': attribute type 24 has an invalid length. [ 536.642873][T22789] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4674'. [ 536.653846][T22789] wlan1: mtu greater than device maximum [ 536.726202][T22791] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.4677'. [ 536.840492][T22795] FAULT_INJECTION: forcing a failure. [ 536.840492][T22795] name failslab, interval 1, probability 0, space 0, times 0 [ 536.860028][T22795] CPU: 1 UID: 0 PID: 22795 Comm: syz.1.4679 Not tainted syzkaller #0 PREEMPT(full) [ 536.860059][T22795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 536.860070][T22795] Call Trace: [ 536.860079][T22795] [ 536.860088][T22795] dump_stack_lvl+0x189/0x250 [ 536.860117][T22795] ? __pfx____ratelimit+0x10/0x10 [ 536.860139][T22795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.860162][T22795] ? __pfx__printk+0x10/0x10 [ 536.860193][T22795] ? __pfx___might_resched+0x10/0x10 [ 536.860213][T22795] ? fs_reclaim_acquire+0x7d/0x100 [ 536.860236][T22795] should_fail_ex+0x414/0x560 [ 536.860284][T22795] should_failslab+0xa8/0x100 [ 536.860313][T22795] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 536.860339][T22795] ? __alloc_skb+0x112/0x2d0 [ 536.860366][T22795] __alloc_skb+0x112/0x2d0 [ 536.860393][T22795] _sctp_make_chunk+0x5e/0x430 [ 536.860421][T22795] sctp_make_datafrag_empty+0x122/0x230 [ 536.860437][T22795] ? sctp_datamsg_from_user+0x88/0xef0 [ 536.860469][T22795] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 536.860494][T22795] ? sctp_user_addto_chunk+0xa8/0x240 [ 536.860521][T22795] sctp_datamsg_from_user+0x726/0xef0 [ 536.860575][T22795] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 536.860597][T22795] ? __asan_memcpy+0x40/0x70 [ 536.860629][T22795] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 536.860672][T22795] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 536.860703][T22795] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 536.860729][T22795] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 536.860752][T22795] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 536.860773][T22795] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 536.860797][T22795] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 536.860819][T22795] ? security_sctp_bind_connect+0x7e/0x2e0 [ 536.860849][T22795] sctp_sendmsg+0x1941/0x2810 [ 536.860889][T22795] ? __pfx_sctp_sendmsg+0x10/0x10 [ 536.860918][T22795] ? aa_sk_perm+0x81e/0x950 [ 536.860959][T22795] ? __pfx_aa_sk_perm+0x10/0x10 [ 536.860992][T22795] ? sock_rps_record_flow+0x19/0x410 [ 536.861023][T22795] ? inet_sendmsg+0x2f4/0x370 [ 536.861048][T22795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.861072][T22795] __sock_sendmsg+0x19c/0x270 [ 536.861104][T22795] __sys_sendto+0x3bd/0x520 [ 536.861128][T22795] ? __pfx___sys_sendto+0x10/0x10 [ 536.861146][T22795] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 536.861186][T22795] ? __fget_files+0x3a0/0x420 [ 536.861219][T22795] ? ksys_write+0x22a/0x250 [ 536.861247][T22795] ? __pfx_ksys_write+0x10/0x10 [ 536.861269][T22795] ? rcu_is_watching+0x15/0xb0 [ 536.861295][T22795] __x64_sys_sendto+0xde/0x100 [ 536.861322][T22795] do_syscall_64+0xfa/0x3b0 [ 536.861342][T22795] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.861362][T22795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.861381][T22795] ? clear_bhb_loop+0x60/0xb0 [ 536.861405][T22795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.861423][T22795] RIP: 0033:0x7f477d58eec9 [ 536.861441][T22795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.861458][T22795] RSP: 002b:00007f477e4b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 536.861486][T22795] RAX: ffffffffffffffda RBX: 00007f477d7e5fa0 RCX: 00007f477d58eec9 [ 536.861500][T22795] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 536.861512][T22795] RBP: 00007f477e4b1090 R08: 000020000005ffe4 R09: 000000000000001c [ 536.861525][T22795] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 536.861537][T22795] R13: 00007f477d7e6038 R14: 00007f477d7e5fa0 R15: 00007fff8a048198 [ 536.861572][T22795] [ 537.372076][T22715] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 537.393916][T22715] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 537.431200][T22800] geneve2: entered promiscuous mode [ 537.465031][T22800] geneve2: entered allmulticast mode [ 537.501631][T22801] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.521350][T22801] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.547160][ T8323] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 537.572263][T22715] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 537.590970][ T8323] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 537.611671][ T8323] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 537.701415][T22715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 537.932140][ T8323] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 537.980320][T22821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.998037][T12253] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 538.027833][T22826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.045343][T12255] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 538.092793][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 538.218080][T22834] nbd: socks must be embedded in a SOCK_ITEM attr [ 538.231994][T22834] block nbd6: shutting down sockets [ 538.549588][T22850] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4699'. [ 538.676036][T22860] netlink: 'syz.1.4701': attribute type 11 has an invalid length. [ 538.684754][T22860] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4701'. [ 538.739579][T22865] FAULT_INJECTION: forcing a failure. [ 538.739579][T22865] name failslab, interval 1, probability 0, space 0, times 0 [ 538.776679][T22867] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyڇv[DwzR3p(@O>PʡRaGͽ' [ 538.812422][T22865] CPU: 1 UID: 0 PID: 22865 Comm: syz.4.4704 Not tainted syzkaller #0 PREEMPT(full) [ 538.812450][T22865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 538.812461][T22865] Call Trace: [ 538.812469][T22865] [ 538.812477][T22865] dump_stack_lvl+0x189/0x250 [ 538.812504][T22865] ? __pfx____ratelimit+0x10/0x10 [ 538.812525][T22865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.812548][T22865] ? __pfx__printk+0x10/0x10 [ 538.812581][T22865] ? __pfx___might_resched+0x10/0x10 [ 538.812598][T22865] ? fs_reclaim_acquire+0x7d/0x100 [ 538.812622][T22865] should_fail_ex+0x414/0x560 [ 538.812656][T22865] should_failslab+0xa8/0x100 [ 538.812685][T22865] kmem_cache_alloc_noprof+0x73/0x3c0 [ 538.812711][T22865] ? _sctp_make_chunk+0x14e/0x430 [ 538.812737][T22865] _sctp_make_chunk+0x14e/0x430 [ 538.812762][T22865] sctp_make_datafrag_empty+0x122/0x230 [ 538.812786][T22865] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 538.812810][T22865] ? sctp_user_addto_chunk+0xa8/0x240 [ 538.812837][T22865] sctp_datamsg_from_user+0x726/0xef0 [ 538.812890][T22865] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 538.812910][T22865] ? __asan_memcpy+0x40/0x70 [ 538.812941][T22865] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 538.812983][T22865] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 538.813006][T22865] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 538.813033][T22865] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 538.813057][T22865] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 538.813078][T22865] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 538.813103][T22865] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 538.813125][T22865] ? security_sctp_bind_connect+0x7e/0x2e0 [ 538.813155][T22865] sctp_sendmsg+0x1941/0x2810 [ 538.813193][T22865] ? __pfx_sctp_sendmsg+0x10/0x10 [ 538.813220][T22865] ? aa_sk_perm+0x81e/0x950 [ 538.813256][T22865] ? __pfx_aa_sk_perm+0x10/0x10 [ 538.813289][T22865] ? sock_rps_record_flow+0x19/0x410 [ 538.813320][T22865] ? inet_sendmsg+0x2f4/0x370 [ 538.813343][T22865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.813366][T22865] __sock_sendmsg+0x19c/0x270 [ 538.813413][T22865] __sys_sendto+0x3bd/0x520 [ 538.813437][T22865] ? __pfx___sys_sendto+0x10/0x10 [ 538.813461][T22865] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 538.813499][T22865] ? __fget_files+0x3a0/0x420 [ 538.813532][T22865] ? ksys_write+0x22a/0x250 [ 538.813562][T22865] ? __pfx_ksys_write+0x10/0x10 [ 538.813584][T22865] ? rcu_is_watching+0x15/0xb0 [ 538.813611][T22865] __x64_sys_sendto+0xde/0x100 [ 538.813636][T22865] do_syscall_64+0xfa/0x3b0 [ 538.813656][T22865] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.813676][T22865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.813694][T22865] ? clear_bhb_loop+0x60/0xb0 [ 538.813719][T22865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.813738][T22865] RIP: 0033:0x7f0f84f8eec9 [ 538.813756][T22865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.813772][T22865] RSP: 002b:00007f0f831f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 538.813794][T22865] RAX: ffffffffffffffda RBX: 00007f0f851e5fa0 RCX: 00007f0f84f8eec9 [ 538.813808][T22865] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 538.813821][T22865] RBP: 00007f0f831f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 538.813833][T22865] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 538.813845][T22865] R13: 00007f0f851e6038 R14: 00007f0f851e5fa0 R15: 00007ffc40f6e7f8 [ 538.813879][T22865] [ 539.167985][T22867] CPU: 0 UID: 0 PID: 22867 Comm: syz.2.4703 Not tainted syzkaller #0 PREEMPT(full) [ 539.168014][T22867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.168026][T22867] Call Trace: [ 539.168034][T22867] [ 539.168043][T22867] dump_stack_lvl+0x189/0x250 [ 539.168077][T22867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.168100][T22867] ? __pfx__printk+0x10/0x10 [ 539.168134][T22867] ? kernfs_path_from_node+0x2f/0x290 [ 539.168155][T22867] ? kernfs_path_from_node+0x250/0x290 [ 539.168175][T22867] ? kernfs_path_from_node+0x2f/0x290 [ 539.168201][T22867] sysfs_warn_dup+0x8e/0xa0 [ 539.168222][T22867] sysfs_do_create_link_sd+0xc0/0x110 [ 539.168245][T22867] device_add_class_symlinks+0x1cf/0x240 [ 539.168275][T22867] device_add+0x475/0xb50 [ 539.168304][T22867] wiphy_register+0x1ba6/0x28d0 [ 539.168347][T22867] ? __pfx_wiphy_register+0x10/0x10 [ 539.168366][T22867] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 539.168402][T22867] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 539.168432][T22867] ieee80211_register_hw+0x3484/0x4100 [ 539.168477][T22867] ? ieee80211_register_hw+0x1421/0x4100 [ 539.168513][T22867] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 539.168545][T22867] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 539.168584][T22867] ? __hrtimer_setup+0x187/0x210 [ 539.168600][T22867] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 539.168623][T22867] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 539.168689][T22867] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 539.168713][T22867] ? trace_kmalloc+0x1f/0xd0 [ 539.168745][T22867] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 539.168800][T22867] ? kstrndup+0xbf/0x160 [ 539.168834][T22867] hwsim_new_radio_nl+0xea4/0x1b10 [ 539.168866][T22867] ? __pfx___nla_validate_parse+0x10/0x10 [ 539.168906][T22867] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 539.168952][T22867] ? __nla_parse+0x40/0x60 [ 539.168976][T22867] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 539.169015][T22867] genl_family_rcv_msg_doit+0x212/0x300 [ 539.169050][T22867] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 539.169093][T22867] ? bpf_lsm_capable+0x9/0x20 [ 539.169117][T22867] ? security_capable+0x7e/0x2e0 [ 539.169163][T22867] genl_rcv_msg+0x60e/0x790 [ 539.169195][T22867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.169221][T22867] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 539.169268][T22867] netlink_rcv_skb+0x208/0x470 [ 539.169285][T22867] ? __lock_acquire+0xab9/0xd20 [ 539.169313][T22867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.169340][T22867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.169387][T22867] ? down_read+0x1ad/0x2e0 [ 539.169413][T22867] genl_rcv+0x28/0x40 [ 539.169437][T22867] netlink_unicast+0x82f/0x9e0 [ 539.169478][T22867] ? __pfx_netlink_unicast+0x10/0x10 [ 539.169509][T22867] ? netlink_sendmsg+0x642/0xb30 [ 539.169528][T22867] ? skb_put+0x11b/0x210 [ 539.169556][T22867] netlink_sendmsg+0x805/0xb30 [ 539.169590][T22867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.169616][T22867] ? aa_sock_msg_perm+0xf1/0x1d0 [ 539.169640][T22867] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.169659][T22867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.169682][T22867] __sock_sendmsg+0x219/0x270 [ 539.169717][T22867] ____sys_sendmsg+0x505/0x830 [ 539.169760][T22867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.169797][T22867] ? import_iovec+0x74/0xa0 [ 539.169829][T22867] ___sys_sendmsg+0x21f/0x2a0 [ 539.169855][T22867] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.169930][T22867] ? __fget_files+0x2a/0x420 [ 539.169947][T22867] ? __fget_files+0x3a0/0x420 [ 539.169980][T22867] __x64_sys_sendmsg+0x19b/0x260 [ 539.170008][T22867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.170046][T22867] ? rcu_is_watching+0x15/0xb0 [ 539.170074][T22867] ? do_syscall_64+0xbe/0x3b0 [ 539.170102][T22867] do_syscall_64+0xfa/0x3b0 [ 539.170122][T22867] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.170142][T22867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.170161][T22867] ? clear_bhb_loop+0x60/0xb0 [ 539.170185][T22867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.170204][T22867] RIP: 0033:0x7f4ddcb8eec9 [ 539.170222][T22867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.170239][T22867] RSP: 002b:00007f4ddd972038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.170261][T22867] RAX: ffffffffffffffda RBX: 00007f4ddcde5fa0 RCX: 00007f4ddcb8eec9 [ 539.170275][T22867] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 539.170287][T22867] RBP: 00007f4ddcc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 539.170299][T22867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.170310][T22867] R13: 00007f4ddcde6038 R14: 00007f4ddcde5fa0 R15: 00007ffdb72feef8 [ 539.170347][T22867] [ 539.712904][T22871] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyڇv[DwzR3p(@O>PʡRaGͽ' [ 539.742377][T22871] CPU: 0 UID: 0 PID: 22871 Comm: syz.2.4703 Not tainted syzkaller #0 PREEMPT(full) [ 539.742407][T22871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.742419][T22871] Call Trace: [ 539.742427][T22871] [ 539.742436][T22871] dump_stack_lvl+0x189/0x250 [ 539.742481][T22871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.742505][T22871] ? __pfx__printk+0x10/0x10 [ 539.742539][T22871] ? kernfs_path_from_node+0x2f/0x290 [ 539.742561][T22871] ? kernfs_path_from_node+0x250/0x290 [ 539.742579][T22871] ? kernfs_path_from_node+0x2f/0x290 [ 539.742606][T22871] sysfs_warn_dup+0x8e/0xa0 [ 539.742627][T22871] sysfs_do_create_link_sd+0xc0/0x110 [ 539.742652][T22871] device_add_class_symlinks+0x1cf/0x240 [ 539.742682][T22871] device_add+0x475/0xb50 [ 539.742709][T22871] wiphy_register+0x1ba6/0x28d0 [ 539.742753][T22871] ? __pfx_wiphy_register+0x10/0x10 [ 539.742772][T22871] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 539.742808][T22871] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 539.742839][T22871] ieee80211_register_hw+0x3484/0x4100 [ 539.742886][T22871] ? ieee80211_register_hw+0x1421/0x4100 [ 539.742922][T22871] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 539.742950][T22871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 539.742987][T22871] ? __hrtimer_setup+0x187/0x210 [ 539.743004][T22871] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 539.743028][T22871] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 539.743093][T22871] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 539.743118][T22871] ? trace_kmalloc+0x1f/0xd0 [ 539.743139][T22871] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 539.743163][T22871] ? kstrndup+0xbf/0x160 [ 539.743198][T22871] hwsim_new_radio_nl+0xea4/0x1b10 [ 539.743229][T22871] ? __pfx___nla_validate_parse+0x10/0x10 [ 539.743268][T22871] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 539.743312][T22871] ? __nla_parse+0x40/0x60 [ 539.743335][T22871] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 539.743371][T22871] genl_family_rcv_msg_doit+0x212/0x300 [ 539.743406][T22871] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 539.743457][T22871] ? bpf_lsm_capable+0x9/0x20 [ 539.743482][T22871] ? security_capable+0x7e/0x2e0 [ 539.743520][T22871] genl_rcv_msg+0x60e/0x790 [ 539.743555][T22871] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.743579][T22871] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 539.743626][T22871] netlink_rcv_skb+0x208/0x470 [ 539.743644][T22871] ? __lock_acquire+0xab9/0xd20 [ 539.743671][T22871] ? __pfx_genl_rcv_msg+0x10/0x10 [ 539.743698][T22871] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.743743][T22871] ? down_read+0x1ad/0x2e0 [ 539.743770][T22871] genl_rcv+0x28/0x40 [ 539.743793][T22871] netlink_unicast+0x82f/0x9e0 [ 539.743833][T22871] ? __pfx_netlink_unicast+0x10/0x10 [ 539.743865][T22871] ? netlink_sendmsg+0x642/0xb30 [ 539.743883][T22871] ? skb_put+0x11b/0x210 [ 539.743911][T22871] netlink_sendmsg+0x805/0xb30 [ 539.743946][T22871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.743973][T22871] ? aa_sock_msg_perm+0xf1/0x1d0 [ 539.743996][T22871] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.744017][T22871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.744039][T22871] __sock_sendmsg+0x219/0x270 [ 539.744074][T22871] ____sys_sendmsg+0x505/0x830 [ 539.744107][T22871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.744149][T22871] ? import_iovec+0x74/0xa0 [ 539.744177][T22871] ___sys_sendmsg+0x21f/0x2a0 [ 539.744204][T22871] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.744277][T22871] ? __fget_files+0x2a/0x420 [ 539.744294][T22871] ? __fget_files+0x3a0/0x420 [ 539.744325][T22871] __x64_sys_sendmsg+0x19b/0x260 [ 539.744351][T22871] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.744389][T22871] ? do_user_addr_fault+0xc8a/0x1390 [ 539.744424][T22871] ? do_syscall_64+0xbe/0x3b0 [ 539.744458][T22871] do_syscall_64+0xfa/0x3b0 [ 539.744477][T22871] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.744496][T22871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.744515][T22871] ? clear_bhb_loop+0x60/0xb0 [ 539.744537][T22871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.744554][T22871] RIP: 0033:0x7f4ddcb8eec9 [ 539.744571][T22871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.744584][T22871] RSP: 002b:00007f4ddd951038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.744604][T22871] RAX: ffffffffffffffda RBX: 00007f4ddcde6090 RCX: 00007f4ddcb8eec9 [ 539.744617][T22871] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 539.744628][T22871] RBP: 00007f4ddcc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 539.744639][T22871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.744649][T22871] R13: 00007f4ddcde6128 R14: 00007f4ddcde6090 R15: 00007ffdb72feef8 [ 539.744684][T22871] [ 540.528883][T22891] netlink: 'syz.4.4710': attribute type 1 has an invalid length. [ 540.577064][T22891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.589353][T22801] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.608489][T22801] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.638688][T22801] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 540.687658][T22895] bond3: (slave gretap1): making interface the new active one [ 540.702405][T22895] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 540.730186][T22801] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.752937][T22801] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.765851][T22801] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 540.792797][T22902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 540.803010][T22902] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 540.819714][T22902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.868516][T22801] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.898266][T22801] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.912474][T22801] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 540.941471][T22907] FAULT_INJECTION: forcing a failure. [ 540.941471][T22907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.960747][T22902] netlink: 'syz.4.4713': attribute type 29 has an invalid length. [ 540.961968][T22907] CPU: 0 UID: 0 PID: 22907 Comm: syz.1.4715 Not tainted syzkaller #0 PREEMPT(full) [ 540.961992][T22907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 540.962002][T22907] Call Trace: [ 540.962009][T22907] [ 540.962017][T22907] dump_stack_lvl+0x189/0x250 [ 540.962043][T22907] ? __pfx____ratelimit+0x10/0x10 [ 540.962064][T22907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.962084][T22907] ? __pfx__printk+0x10/0x10 [ 540.962107][T22907] ? __might_fault+0xb0/0x130 [ 540.962142][T22907] should_fail_ex+0x414/0x560 [ 540.962173][T22907] _copy_from_iter+0x1de/0x1790 [ 540.962197][T22907] ? rcu_is_watching+0x15/0xb0 [ 540.962216][T22907] ? sctp_addto_chunk+0xf2/0x230 [ 540.962240][T22907] ? __pfx__copy_from_iter+0x10/0x10 [ 540.962260][T22907] ? __asan_memcpy+0x40/0x70 [ 540.962281][T22907] ? sctp_make_datafrag_empty+0x17c/0x230 [ 540.962297][T22907] ? sctp_datamsg_from_user+0x88/0xef0 [ 540.962322][T22907] ? skb_put+0x11b/0x210 [ 540.962346][T22907] sctp_user_addto_chunk+0x87/0x240 [ 540.962370][T22907] sctp_datamsg_from_user+0x748/0xef0 [ 540.962417][T22907] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 540.962436][T22907] ? __asan_memcpy+0x40/0x70 [ 540.962463][T22907] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 540.962500][T22907] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 540.962521][T22907] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 540.962543][T22907] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 540.962564][T22907] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 540.962582][T22907] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 540.962603][T22907] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 540.962623][T22907] ? security_sctp_bind_connect+0x7e/0x2e0 [ 540.962648][T22907] sctp_sendmsg+0x1941/0x2810 [ 540.962690][T22907] ? __pfx_sctp_sendmsg+0x10/0x10 [ 540.962714][T22907] ? aa_sk_perm+0x81e/0x950 [ 540.962744][T22907] ? __pfx_aa_sk_perm+0x10/0x10 [ 540.962772][T22907] ? sock_rps_record_flow+0x19/0x410 [ 540.962799][T22907] ? inet_sendmsg+0x2f4/0x370 [ 540.962820][T22907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.962842][T22907] __sock_sendmsg+0x19c/0x270 [ 540.962870][T22907] __sys_sendto+0x3bd/0x520 [ 540.962891][T22907] ? __pfx___sys_sendto+0x10/0x10 [ 540.962907][T22907] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 540.962940][T22907] ? __fget_files+0x3a0/0x420 [ 540.962968][T22907] ? ksys_write+0x22a/0x250 [ 540.962993][T22907] ? __pfx_ksys_write+0x10/0x10 [ 540.963011][T22907] ? rcu_is_watching+0x15/0xb0 [ 540.963034][T22907] __x64_sys_sendto+0xde/0x100 [ 540.963057][T22907] do_syscall_64+0xfa/0x3b0 [ 540.963074][T22907] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.963091][T22907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.963108][T22907] ? clear_bhb_loop+0x60/0xb0 [ 540.963129][T22907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.963145][T22907] RIP: 0033:0x7f477d58eec9 [ 540.963161][T22907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.963175][T22907] RSP: 002b:00007f477e4b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 540.963194][T22907] RAX: ffffffffffffffda RBX: 00007f477d7e5fa0 RCX: 00007f477d58eec9 [ 540.963206][T22907] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 540.963217][T22907] RBP: 00007f477e4b1090 R08: 000020000005ffe4 R09: 000000000000001c [ 540.963228][T22907] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 540.963238][T22907] R13: 00007f477d7e6038 R14: 00007f477d7e5fa0 R15: 00007fff8a048198 [ 540.963269][T22907] [ 541.180742][T22912] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4716'. [ 541.183222][T22902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 541.348751][T22908] netlink: 'syz.4.4713': attribute type 29 has an invalid length. [ 541.370355][T22908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 541.550195][T12253] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.559608][T12253] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.572252][T12253] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 541.623381][T12253] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.642025][T12253] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.655664][T12253] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 541.670176][T22927] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.4719'. [ 541.727722][T12253] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.740030][T12253] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.769079][T12253] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 541.818269][T12253] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.837000][T12253] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.865588][T12253] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 542.427856][T22966] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4730'. [ 542.691575][T22981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4735'. [ 543.052078][T23000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4738'. [ 543.077325][T23002] netlink: 'syz.4.4739': attribute type 12 has an invalid length. [ 543.087129][T23002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4739'. [ 543.111730][T23002] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4739'. [ 544.515038][T23057] veth0_macvtap: left promiscuous mode [ 544.645969][ T55] block nbd1: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 240 seconds [ 544.662686][ T55] block nbd1: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 240 seconds [ 544.675227][ T55] block nbd1: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 240 seconds [ 544.687435][ T55] block nbd1: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 240 seconds [ 545.038245][T23087] FAULT_INJECTION: forcing a failure. [ 545.038245][T23087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.094496][T23087] CPU: 1 UID: 0 PID: 23087 Comm: syz.4.4767 Not tainted syzkaller #0 PREEMPT(full) [ 545.094533][T23087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 545.094544][T23087] Call Trace: [ 545.094552][T23087] [ 545.094560][T23087] dump_stack_lvl+0x189/0x250 [ 545.094588][T23087] ? __pfx____ratelimit+0x10/0x10 [ 545.094609][T23087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.094632][T23087] ? __pfx__printk+0x10/0x10 [ 545.094667][T23087] ? __might_fault+0xb0/0x130 [ 545.094706][T23087] should_fail_ex+0x414/0x560 [ 545.094740][T23087] _copy_from_iter+0x1de/0x1790 [ 545.094765][T23087] ? rcu_is_watching+0x15/0xb0 [ 545.094785][T23087] ? sctp_addto_chunk+0xf2/0x230 [ 545.094812][T23087] ? __pfx__copy_from_iter+0x10/0x10 [ 545.094833][T23087] ? __asan_memcpy+0x40/0x70 [ 545.094856][T23087] ? sctp_make_datafrag_empty+0x17c/0x230 [ 545.094877][T23087] ? skb_put+0x11b/0x210 [ 545.094901][T23087] sctp_user_addto_chunk+0x87/0x240 [ 545.094928][T23087] sctp_datamsg_from_user+0x748/0xef0 [ 545.094979][T23087] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 545.095000][T23087] ? __asan_memcpy+0x40/0x70 [ 545.095035][T23087] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 545.095073][T23087] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 545.095095][T23087] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 545.095119][T23087] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 545.095143][T23087] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 545.095164][T23087] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 545.095186][T23087] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 545.095206][T23087] ? security_sctp_bind_connect+0x7e/0x2e0 [ 545.095236][T23087] sctp_sendmsg+0x1941/0x2810 [ 545.095271][T23087] ? __pfx_sctp_sendmsg+0x10/0x10 [ 545.095298][T23087] ? aa_sk_perm+0x81e/0x950 [ 545.095331][T23087] ? __pfx_aa_sk_perm+0x10/0x10 [ 545.095363][T23087] ? sock_rps_record_flow+0x19/0x410 [ 545.095391][T23087] ? inet_sendmsg+0x2f4/0x370 [ 545.095414][T23087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.095440][T23087] __sock_sendmsg+0x19c/0x270 [ 545.095470][T23087] __sys_sendto+0x3bd/0x520 [ 545.095493][T23087] ? __pfx___sys_sendto+0x10/0x10 [ 545.095511][T23087] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 545.095549][T23087] ? __fget_files+0x3a0/0x420 [ 545.095582][T23087] ? ksys_write+0x22a/0x250 [ 545.095609][T23087] ? __pfx_ksys_write+0x10/0x10 [ 545.095631][T23087] ? rcu_is_watching+0x15/0xb0 [ 545.095667][T23087] __x64_sys_sendto+0xde/0x100 [ 545.095693][T23087] do_syscall_64+0xfa/0x3b0 [ 545.095713][T23087] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.095733][T23087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.095753][T23087] ? clear_bhb_loop+0x60/0xb0 [ 545.095778][T23087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.095795][T23087] RIP: 0033:0x7f0f84f8eec9 [ 545.095813][T23087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.095831][T23087] RSP: 002b:00007f0f831f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 545.095852][T23087] RAX: ffffffffffffffda RBX: 00007f0f851e5fa0 RCX: 00007f0f84f8eec9 [ 545.095866][T23087] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 545.095879][T23087] RBP: 00007f0f831f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 545.095892][T23087] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 545.095904][T23087] R13: 00007f0f851e6038 R14: 00007f0f851e5fa0 R15: 00007ffc40f6e7f8 [ 545.095939][T23087] [ 545.896540][T23105] __nla_validate_parse: 5 callbacks suppressed [ 545.896561][T23105] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4773'. [ 545.953856][T23105] tipc: Enabled bearer , priority 0 [ 545.973149][T23105] syzkaller0: entered promiscuous mode [ 545.991475][T23110] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4772'. [ 546.001387][T23105] syzkaller0: entered allmulticast mode [ 546.043677][T23110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4772'. [ 546.045383][T23108] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4774'. [ 546.097693][T23105] tipc: Resetting bearer [ 546.107349][T23104] tipc: Resetting bearer [ 546.141275][T23104] tipc: Disabling bearer [ 546.175334][T23118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4776'. [ 546.455568][T23121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4777'. [ 546.507812][T23130] FAULT_INJECTION: forcing a failure. [ 546.507812][T23130] name failslab, interval 1, probability 0, space 0, times 0 [ 546.552148][T23130] CPU: 0 UID: 0 PID: 23130 Comm: syz.4.4781 Not tainted syzkaller #0 PREEMPT(full) [ 546.552177][T23130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 546.552189][T23130] Call Trace: [ 546.552197][T23130] [ 546.552206][T23130] dump_stack_lvl+0x189/0x250 [ 546.552235][T23130] ? __pfx____ratelimit+0x10/0x10 [ 546.552257][T23130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.552281][T23130] ? __pfx__printk+0x10/0x10 [ 546.552311][T23130] ? __pfx___might_resched+0x10/0x10 [ 546.552331][T23130] ? fs_reclaim_acquire+0x7d/0x100 [ 546.552354][T23130] should_fail_ex+0x414/0x560 [ 546.552387][T23130] should_failslab+0xa8/0x100 [ 546.552416][T23130] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 546.552442][T23130] ? __alloc_skb+0x112/0x2d0 [ 546.552468][T23130] __alloc_skb+0x112/0x2d0 [ 546.552491][T23130] _sctp_make_chunk+0x5e/0x430 [ 546.552518][T23130] sctp_make_datafrag_empty+0x122/0x230 [ 546.552542][T23130] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 546.552565][T23130] ? sctp_user_addto_chunk+0xa8/0x240 [ 546.552592][T23130] sctp_datamsg_from_user+0x726/0xef0 [ 546.552646][T23130] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 546.552677][T23130] ? __asan_memcpy+0x40/0x70 [ 546.552710][T23130] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 546.552752][T23130] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 546.552776][T23130] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 546.552801][T23130] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 546.552825][T23130] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 546.552846][T23130] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 546.552870][T23130] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 546.552892][T23130] ? security_sctp_bind_connect+0x7e/0x2e0 [ 546.552923][T23130] sctp_sendmsg+0x1941/0x2810 [ 546.552962][T23130] ? __pfx_sctp_sendmsg+0x10/0x10 [ 546.552990][T23130] ? aa_sk_perm+0x81e/0x950 [ 546.553026][T23130] ? __pfx_aa_sk_perm+0x10/0x10 [ 546.553059][T23130] ? sock_rps_record_flow+0x19/0x410 [ 546.553091][T23130] ? inet_sendmsg+0x2f4/0x370 [ 546.553117][T23130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.553148][T23130] __sock_sendmsg+0x19c/0x270 [ 546.553206][T23130] __sys_sendto+0x3bd/0x520 [ 546.553232][T23130] ? __pfx___sys_sendto+0x10/0x10 [ 546.553252][T23130] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 546.553291][T23130] ? __fget_files+0x3a0/0x420 [ 546.553324][T23130] ? ksys_write+0x22a/0x250 [ 546.553352][T23130] ? __pfx_ksys_write+0x10/0x10 [ 546.553375][T23130] ? rcu_is_watching+0x15/0xb0 [ 546.553401][T23130] __x64_sys_sendto+0xde/0x100 [ 546.553426][T23130] do_syscall_64+0xfa/0x3b0 [ 546.553446][T23130] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.553465][T23130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.553484][T23130] ? clear_bhb_loop+0x60/0xb0 [ 546.553507][T23130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.553524][T23130] RIP: 0033:0x7f0f84f8eec9 [ 546.553540][T23130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.553554][T23130] RSP: 002b:00007f0f831f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 546.553576][T23130] RAX: ffffffffffffffda RBX: 00007f0f851e5fa0 RCX: 00007f0f84f8eec9 [ 546.553590][T23130] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 546.553601][T23130] RBP: 00007f0f831f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 546.553613][T23130] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 546.553625][T23130] R13: 00007f0f851e6038 R14: 00007f0f851e5fa0 R15: 00007ffc40f6e7f8 [ 546.553656][T23130] [ 547.392385][T23144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4787'. [ 547.599568][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4789'. [ 548.163034][T23185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.199446][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 548.225900][T23181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4799'. [ 548.281452][T12251] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.300926][T23188] tipc: Invalid UDP bearer configuration [ 548.300991][T23188] tipc: Enabling of bearer rejected, failed to enable media [ 548.339009][T12251] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.371235][T12251] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.390493][T12251] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.764615][T23201] tipc: Enabled bearer , priority 0 [ 548.790210][T23201] syzkaller0: entered promiscuous mode [ 548.824713][T23201] syzkaller0: entered allmulticast mode [ 548.939563][T23207] netlink: 'syz.4.4805': attribute type 21 has an invalid length. [ 548.960742][T23201] tipc: Resetting bearer [ 548.977484][T23207] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 549.071154][T23194] tipc: Resetting bearer [ 549.103469][T23194] tipc: Disabling bearer [ 549.556434][T23232] netlink: 'syz.3.4808': attribute type 22 has an invalid length. [ 549.571361][T23232] netlink: 'syz.3.4808': attribute type 22 has an invalid length. [ 550.183339][T23263] macvtap1: entered promiscuous mode [ 550.189846][T23263] vlan0: entered promiscuous mode [ 550.197259][T23263] macvtap1: entered allmulticast mode [ 550.203803][T23263] vlan0: entered allmulticast mode [ 550.210817][T23263] veth0_vlan: entered allmulticast mode [ 550.239851][T23264] macvtap2: entered promiscuous mode [ 550.251586][T23264] macvtap2: entered allmulticast mode [ 550.663156][T23280] tipc: Enabled bearer , priority 0 [ 550.684549][T23280] syzkaller0: entered promiscuous mode [ 550.694453][T23280] syzkaller0: entered allmulticast mode [ 550.791232][T23293] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 550.839734][T23281] tipc: Resetting bearer [ 550.881435][T23281] tipc: Disabling bearer [ 550.936334][T23299] __nla_validate_parse: 13 callbacks suppressed [ 550.936366][T23299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4833'. [ 551.033758][T23302] netlink: 'syz.4.4834': attribute type 1 has an invalid length. [ 551.096276][T23302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.148893][T23305] netlink: 'syz.2.4835': attribute type 1 has an invalid length. [ 551.161693][T23307] bond4: (slave veth7): Enslaving as an active interface with a down link [ 551.219692][T23302] veth9: entered promiscuous mode [ 551.674873][T23336] syzkaller0: entered promiscuous mode [ 551.680408][T23336] syzkaller0: entered allmulticast mode [ 551.733779][T23341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4844'. [ 551.780440][T23341] tipc: Enabling of bearer rejected, failed to enable media [ 551.786464][T23345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4846'. [ 551.890883][T23346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4844'. [ 551.900422][T23346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4844'. [ 551.981559][T23354] netlink: 808 bytes leftover after parsing attributes in process `syz.1.4847'. [ 552.215951][T23367] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4851'. [ 552.545094][T23380] pim6reg1: entered promiscuous mode [ 552.558912][T23380] pim6reg1: entered allmulticast mode [ 552.981911][T23408] netlink: 'syz.3.4862': attribute type 1 has an invalid length. [ 553.075964][T23408] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 553.089508][T23408] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 553.233540][T23415] gretap4: entered promiscuous mode [ 553.293182][T23415] bond4: (slave gretap4): making interface the new active one [ 553.296456][T23423] netlink: 'syz.0.4868': attribute type 1 has an invalid length. [ 553.320043][T23415] bond4: (slave gretap4): Enslaving as an active interface with an up link [ 553.344498][T23423] netlink: 'syz.0.4868': attribute type 2 has an invalid length. [ 553.393097][T23405] macvlan2: entered promiscuous mode [ 553.440619][T23405] macvlan2: entered allmulticast mode [ 553.452581][T23405] bond4: entered promiscuous mode [ 553.464617][T23405] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.481964][T23405] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap4 [ 553.602717][T23405] bond4: left promiscuous mode [ 553.701272][T23437] netlink: 'syz.4.4871': attribute type 29 has an invalid length. [ 553.735254][T23439] netlink: 'syz.4.4871': attribute type 29 has an invalid length. [ 553.887430][T23443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.895130][T23443] IPv6: NLM_F_CREATE should be set when creating new route [ 553.907129][T23449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4875'. [ 554.787937][T23497] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4884'. [ 554.798076][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4884'. [ 554.868635][T23499] netlink: 'syz.4.4885': attribute type 1 has an invalid length. [ 555.051422][T23510] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 555.182645][T23514] netlink: 'syz.4.4891': attribute type 1 has an invalid length. [ 555.263760][T23520] tipc: Enabling of bearer rejected, failed to enable media [ 555.678516][T23549] netlink: 'syz.1.4903': attribute type 3 has an invalid length. [ 555.707391][T23548] lo speed is unknown, defaulting to 1000 [ 555.745818][T23548] lo speed is unknown, defaulting to 1000 [ 555.769856][T23555] netlink: zone id is out of range [ 555.781662][T23555] netlink: zone id is out of range [ 555.785196][T23548] lo speed is unknown, defaulting to 1000 [ 555.787329][T23555] netlink: zone id is out of range [ 555.819231][T23555] netlink: zone id is out of range [ 555.829357][T23555] netlink: zone id is out of range [ 555.837983][T23555] netlink: get zone limit has 8 unknown bytes [ 555.851587][T23548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 556.057856][T23548] lo speed is unknown, defaulting to 1000 [ 556.081212][T23548] lo speed is unknown, defaulting to 1000 [ 556.112638][T23548] lo speed is unknown, defaulting to 1000 [ 556.129244][T23548] lo speed is unknown, defaulting to 1000 [ 556.145434][T23548] lo speed is unknown, defaulting to 1000 [ 556.155444][T23574] __nla_validate_parse: 3 callbacks suppressed [ 556.155464][T23574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4911'. [ 556.173169][T23548] lo speed is unknown, defaulting to 1000 [ 556.182746][T23548] lo speed is unknown, defaulting to 1000 [ 556.211472][T23548] lo speed is unknown, defaulting to 1000 [ 556.379526][T23582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4913'. [ 556.436208][T23589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4916'. [ 556.694102][T23595] netlink: 'syz.0.4917': attribute type 2 has an invalid length. [ 556.732459][T23595] netlink: 'syz.0.4917': attribute type 8 has an invalid length. [ 556.742036][T23604] netlink: 'syz.3.4919': attribute type 9 has an invalid length. [ 556.764855][T23595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4917'. [ 556.793526][T23606] netlink: 'syz.3.4919': attribute type 9 has an invalid length. [ 557.000588][T23615] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 557.019769][T23615] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 557.816833][T23614] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 557.840379][T23614] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 558.911023][T23680] block nbd3: NBD_DISCONNECT [ 558.926466][T23680] block nbd3: Send disconnect failed -32 [ 558.932598][T23680] block nbd3: shutting down sockets [ 559.095742][T23690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4938'. [ 559.223679][T23701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4942'. [ 559.519552][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'. [ 559.571072][T23723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4945'. [ 559.653177][T23722] tipc: Enabled bearer , priority 0 [ 559.683820][T23722] syzkaller0: entered promiscuous mode [ 559.710059][T23722] syzkaller0: entered allmulticast mode [ 559.799174][T23715] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4945'. [ 560.029787][T23743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4952'. [ 560.771054][T22571] tipc: Node number set to 2440671105 [ 562.030684][T23720] tipc: Resetting bearer [ 562.089630][T23720] tipc: Disabling bearer [ 562.098994][T23750] netlink: 'syz.4.4954': attribute type 1 has an invalid length. [ 562.108717][T23750] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4954'. [ 562.386803][T23761] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 562.408706][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4957'. [ 562.466610][T23761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4957'. [ 562.473628][T23764] sit3: entered promiscuous mode [ 562.491770][T23764] sit3: entered allmulticast mode [ 562.715515][T23774] xfrm1: entered allmulticast mode [ 562.732123][T23779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4963'. [ 562.780283][T23779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4963'. [ 562.873091][T23786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4965'. [ 563.087613][T23795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4969'. [ 563.159900][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4970'. [ 563.546872][T23819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4977'. [ 563.573015][T23821] atomic_op ffff888052fb1998 conn xmit_atomic 0000000000000000 [ 563.599415][T23819] veth1_macvtap: left promiscuous mode [ 564.658782][T23861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 564.949515][T23869] bridge0: Device is already in use. [ 565.149994][T23885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.236556][T23889] 8021q: VLANs not supported on gre0 [ 565.400798][T23817] lo speed is unknown, defaulting to 1000 [ 565.571699][T23904] openvswitch: netlink: IP tunnel dst address not specified [ 565.765219][ T55] block nbd0: Possible stuck request ffff88802511e000: control (read@0,1024B). Runtime 420 seconds [ 565.777292][ T55] block nbd0: Possible stuck request ffff88802511e1c0: control (read@1024,1024B). Runtime 420 seconds [ 565.787242][T23919] netlink: 'syz.2.5003': attribute type 1 has an invalid length. [ 565.788772][ T55] block nbd0: Possible stuck request ffff88802511e380: control (read@2048,1024B). Runtime 420 seconds [ 565.808599][ T55] block nbd0: Possible stuck request ffff88802511e540: control (read@3072,1024B). Runtime 420 seconds [ 566.027158][T23923] 8021q: adding VLAN 0 to HW filter on device bond7 [ 566.037149][T23923] bond6: (slave bond7): making interface the new active one [ 566.147788][T23923] bond6: (slave bond7): Enslaving as an active interface with an up link [ 566.157790][T23929] bridge0: Device is already in use. [ 569.574398][T23997] __nla_validate_parse: 6 callbacks suppressed [ 569.574420][T23997] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5020'. [ 569.849496][T24013] netlink: 'syz.1.5025': attribute type 10 has an invalid length. [ 569.893814][T24016] netlink: 'syz.2.5024': attribute type 4 has an invalid length. [ 569.897024][T24011] geneve3: entered promiscuous mode [ 569.933911][T24011] geneve3: entered allmulticast mode [ 569.943080][T24013] team0: Device ipvlan1 failed to enter team mode [ 569.980916][T24013] team0: Device ipvlan1 failed to enter team mode [ 569.995714][ T7820] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 570.014947][ T7820] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 570.062456][ T7820] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 570.102596][ T7820] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 570.135549][T24023] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5027'. [ 570.211611][T24030] netlink: 'syz.1.5029': attribute type 3 has an invalid length. [ 570.231691][T24030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5029'. [ 570.430955][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5031'. [ 570.453068][T24036] macvlan0: entered promiscuous mode [ 570.469793][T24036] batadv_slave_0: entered promiscuous mode [ 570.481854][T24036] batadv_slave_0: left promiscuous mode [ 570.504385][T24036] macvlan0: left promiscuous mode [ 570.530687][T24038] tipc: Enabling of bearer rejected, failed to enable media [ 570.756887][T24059] netlink: 'syz.1.5039': attribute type 10 has an invalid length. [ 570.814084][T24059] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 571.342905][T24092] openvswitch: netlink: Flow key attr not present in new flow. [ 574.725046][ T55] block nbd1: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 270 seconds [ 574.736502][ T55] block nbd1: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 270 seconds [ 574.748226][ T55] block nbd1: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 270 seconds [ 574.760118][ T55] block nbd1: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 270 seconds [ 576.005042][ T31] INFO: task udevd:5867 blocked for more than 143 seconds. [ 576.012331][ T31] Not tainted syzkaller #0 [ 576.019916][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.029114][ T31] task:udevd state:D stack:20232 pid:5867 tgid:5867 ppid:5234 task_flags:0x400140 flags:0x00004006 [ 576.041400][ T31] Call Trace: [ 576.045301][ T31] [ 576.048275][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 576.052832][ T31] ? __pfx___schedule+0x10/0x10 [ 576.059262][ T31] ? schedule+0x91/0x360 [ 576.063591][ T31] schedule+0x165/0x360 [ 576.068739][ T31] io_schedule+0x80/0xd0 [ 576.073117][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 576.079909][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 576.086246][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 576.094320][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 576.104946][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 576.110408][ T31] do_read_cache_folio+0x1aa/0x590 [ 576.184317][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 576.189965][ T31] read_part_sector+0xb6/0x2b0 [ 576.254686][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 576.260238][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 576.304330][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 576.310522][ T31] bdev_disk_changed+0x75f/0x14b0 [ 576.344793][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 576.350719][ T31] ? wait_on_inode+0xc0/0x230 [ 576.374917][ T31] blkdev_get_whole+0x380/0x510 [ 576.380915][ T31] bdev_open+0x31e/0xd30 [ 576.405798][ T31] blkdev_open+0x457/0x600 [ 576.410579][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 576.424770][ T31] do_dentry_open+0x950/0x13f0 [ 576.429642][ T31] vfs_open+0x3b/0x340 [ 576.433916][ T31] ? path_openat+0x2ecd/0x3830 [ 576.474240][ T31] path_openat+0x2ee5/0x3830 [ 576.479149][ T31] ? arch_stack_walk+0xfc/0x150 [ 576.514249][ T31] ? stack_depot_save_flags+0x40/0x860 [ 576.519809][ T31] ? __pfx_path_openat+0x10/0x10 [ 576.544376][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.550545][ T31] do_filp_open+0x1fa/0x410 [ 576.594226][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.599175][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 576.634441][ T31] ? _raw_spin_unlock+0x28/0x50 [ 576.639471][ T31] ? alloc_fd+0x64c/0x6c0 [ 576.643949][ T31] do_sys_openat2+0x121/0x1c0 [ 576.724375][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 576.730012][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 576.774250][ T31] ? rcu_is_watching+0x15/0xb0 [ 576.779100][ T31] __x64_sys_openat+0x138/0x170 [ 576.814316][ T31] do_syscall_64+0xfa/0x3b0 [ 576.819067][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.844263][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.850500][ T31] ? clear_bhb_loop+0x60/0xb0 [ 576.874289][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.880351][ T31] RIP: 0033:0x7f7243ea7407 [ 576.914699][ T31] RSP: 002b:00007ffda8f4e650 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 576.923358][ T31] RAX: ffffffffffffffda RBX: 00007f724453d880 RCX: 00007f7243ea7407 [ 576.964547][ T31] RDX: 00000000000a0800 RSI: 00005560442c35c0 RDI: ffffffffffffff9c [ 576.972701][ T31] RBP: 00005560442c2910 R08: 0000000000000000 R09: 0000000000000000 [ 577.035350][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005560442e9150 [ 577.043492][ T31] R13: 00005560442d0190 R14: 0000000000000000 R15: 00005560442e9150 [ 577.074454][ T31] [ 577.084535][ T31] [ 577.084535][ T31] Showing all locks held in the system: [ 577.092380][ T31] 1 lock held by khungtaskd/31: [ 577.126235][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 577.142439][ T31] 3 locks held by kworker/1:2/1212: [ 577.148324][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 577.160328][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 577.171459][ T31] #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 577.181535][ T31] 2 locks held by getty/5628: [ 577.187380][ T31] #0: ffff8880339970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 577.197497][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 577.208330][ T31] 1 lock held by udevd/5867: [ 577.212942][ T31] #0: ffff888143363358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 577.223407][ T31] 1 lock held by udevd/5884: [ 577.228265][ T31] #0: ffff888024f94358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 577.238056][ T31] 3 locks held by kworker/u8:9/8323: [ 577.243453][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 577.254110][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 577.263436][ T31] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 577.273390][ T31] 1 lock held by syz-executor/17731: [ 577.279211][ T31] #0: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 577.291910][ T31] [ 577.327405][ T31] ============================================= [ 577.327405][ T31] [ 577.379898][ T31] NMI backtrace for cpu 1 [ 577.379941][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.379962][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.379972][ T31] Call Trace: [ 577.379981][ T31] [ 577.379989][ T31] dump_stack_lvl+0x189/0x250 [ 577.380018][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.380038][ T31] ? __pfx__printk+0x10/0x10 [ 577.380075][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 577.380103][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 577.380129][ T31] ? __pfx__printk+0x10/0x10 [ 577.380156][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 577.380183][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 577.380210][ T31] watchdog+0xf93/0xfe0 [ 577.380239][ T31] ? watchdog+0x1de/0xfe0 [ 577.380267][ T31] kthread+0x70e/0x8a0 [ 577.380291][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.380312][ T31] ? __pfx_kthread+0x10/0x10 [ 577.380334][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.380360][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.380375][ T31] ? __pfx_kthread+0x10/0x10 [ 577.380396][ T31] ret_from_fork+0x439/0x7d0 [ 577.380417][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.380441][ T31] ? __switch_to_asm+0x39/0x70 [ 577.380461][ T31] ? __switch_to_asm+0x33/0x70 [ 577.380479][ T31] ? __pfx_kthread+0x10/0x10 [ 577.380500][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.380538][ T31] [ 577.380544][ T31] Sending NMI from CPU 1 to CPUs 0: [ 577.533821][ C0] NMI backtrace for cpu 0 [ 577.533839][ C0] CPU: 0 UID: 0 PID: 16874 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 577.533858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.533867][ C0] RIP: 0010:unwind_next_frame+0xaf2/0x2390 [ 577.533891][ C0] Code: b8 00 00 00 00 00 fc ff df 80 7c 05 00 00 74 08 4c 89 ff e8 30 5f b0 00 4c 89 7c 24 60 48 89 5c 24 78 4d 8b 7e 08 49 8d 5e 10 <49> 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 [ 577.533904][ C0] RSP: 0018:ffffc9001a49f778 EFLAGS: 00000246 [ 577.533919][ C0] RAX: dffffc0000000000 RBX: ffffc9001a49f858 RCX: ffffffff8fb7f21c [ 577.533930][ C0] RDX: ffffffff90342d9e RSI: 0000000000000002 RDI: ffffffff8be33ea0 [ 577.533941][ C0] RBP: 1ffff92003493f0a R08: 0000000000000001 R09: ffffffff8172c195 [ 577.533951][ C0] R10: ffffc9001a49f898 R11: ffffffff81ac3b00 R12: ffffc9001a49fe88 [ 577.533962][ C0] R13: ffffc9001a49f898 R14: ffffc9001a49f848 R15: ffffc9001a498000 [ 577.533973][ C0] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 577.533986][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.533996][ C0] CR2: 00007ff770f17d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 577.534012][ C0] Call Trace: [ 577.534018][ C0] [ 577.534027][ C0] ? unwind_next_frame+0xa5/0x2390 [ 577.534044][ C0] ? do_exit+0x6b5/0x2300 [ 577.534064][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 577.534082][ C0] arch_stack_walk+0x11c/0x150 [ 577.534109][ C0] ? do_exit+0x6b5/0x2300 [ 577.534133][ C0] stack_trace_save+0x9c/0xe0 [ 577.534149][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 577.534172][ C0] save_stack+0xf5/0x1f0 [ 577.534193][ C0] ? __pfx_save_stack+0x10/0x10 [ 577.534209][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 577.534229][ C0] ? vfree+0x25a/0x400 [ 577.534247][ C0] ? kcov_close+0x28/0x50 [ 577.534264][ C0] ? __fput+0x44c/0xa70 [ 577.534279][ C0] ? task_work_run+0x1d1/0x260 [ 577.534296][ C0] ? do_exit+0x6b5/0x2300 [ 577.534321][ C0] __reset_page_owner+0x71/0x1f0 [ 577.534340][ C0] __free_frozen_pages+0xbc4/0xd30 [ 577.534363][ C0] vfree+0x25a/0x400 [ 577.534383][ C0] ? __pfx_kcov_close+0x10/0x10 [ 577.534401][ C0] kcov_close+0x28/0x50 [ 577.534418][ C0] __fput+0x44c/0xa70 [ 577.534438][ C0] task_work_run+0x1d1/0x260 [ 577.534457][ C0] ? __pfx_task_work_run+0x10/0x10 [ 577.534477][ C0] ? kmem_cache_free+0x18f/0x400 [ 577.534498][ C0] do_exit+0x6b5/0x2300 [ 577.534518][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 577.534538][ C0] ? __pfx_do_exit+0x10/0x10 [ 577.534559][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.534573][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.534590][ C0] do_group_exit+0x21c/0x2d0 [ 577.534610][ C0] __x64_sys_exit_group+0x3f/0x40 [ 577.534628][ C0] x64_sys_call+0x21f7/0x2200 [ 577.534646][ C0] do_syscall_64+0xfa/0x3b0 [ 577.534662][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.534676][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.534690][ C0] ? clear_bhb_loop+0x60/0xb0 [ 577.534707][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.534721][ C0] RIP: 0033:0x7f4ddcb8eec9 [ 577.534733][ C0] Code: Unable to access opcode bytes at 0x7f4ddcb8ee9f. [ 577.534741][ C0] RSP: 002b:00007ffdb72ff168 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 577.534756][ C0] RAX: ffffffffffffffda RBX: 00007f4ddcc137cb RCX: 00007f4ddcb8eec9 [ 577.534766][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 577.534775][ C0] RBP: 00007f4ddcc137dd R08: 00007ffdb72fcf07 R09: 00000000000927c0 [ 577.534786][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 577.534794][ C0] R13: 00000000000927c0 R14: 000000000008ba68 R15: 00007ffdb72ff310 [ 577.534813][ C0] [ 577.541588][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 577.541607][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.541627][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.541638][ T31] Call Trace: [ 577.541646][ T31] [ 577.541654][ T31] dump_stack_lvl+0x99/0x250 [ 577.541679][ T31] ? __asan_memcpy+0x40/0x70 [ 577.541701][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.541721][ T31] ? __pfx__printk+0x10/0x10 [ 577.541756][ T31] vpanic+0x281/0x750 [ 577.541780][ T31] ? __pfx_vpanic+0x10/0x10 [ 577.541799][ T31] ? preempt_schedule+0xae/0xc0 [ 577.541819][ T31] ? preempt_schedule_common+0x83/0xd0 [ 577.541843][ T31] panic+0xb9/0xc0 [ 577.541863][ T31] ? __pfx_panic+0x10/0x10 [ 577.541885][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 577.541915][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 577.541942][ T31] watchdog+0xfd2/0xfe0 [ 577.541971][ T31] ? watchdog+0x1de/0xfe0 [ 577.542000][ T31] kthread+0x70e/0x8a0 [ 577.542024][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.542046][ T31] ? __pfx_kthread+0x10/0x10 [ 577.542069][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.542086][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.542103][ T31] ? __pfx_kthread+0x10/0x10 [ 577.542125][ T31] ret_from_fork+0x439/0x7d0 [ 577.542147][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.542170][ T31] ? __switch_to_asm+0x39/0x70 [ 577.542191][ T31] ? __switch_to_asm+0x33/0x70 [ 577.542211][ T31] ? __pfx_kthread+0x10/0x10 [ 577.542232][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.542269][ T31] [ 578.065930][ T31] Kernel Offset: disabled [ 578.070426][ T31] Rebooting in 86400 seconds..