last executing test programs: 4m9.76950086s ago: executing program 1 (id=2884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000001600070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001800800014000000002080001400000ffff6d000d"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 4m9.619773018s ago: executing program 1 (id=2886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8, 0xb, 0x8}]}, 0x2c}}, 0x4000011) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x4040004) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0xba01}, 0x810) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r11, 0x29, 0x1e, 0x0, 0x24) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000004c0)={r12, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000000000)={r12, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r14}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 4m7.179849066s ago: executing program 1 (id=2890): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 4m6.800176013s ago: executing program 1 (id=2895): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="3b000000010006", 0x7) (fail_nth: 9) 4m6.440619289s ago: executing program 1 (id=2897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa2}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) (async) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e158de8ec087d5019fa509e1892f2", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000fbdbdf250b00000008000200020000f507000400020008050800020005000000"], 0x2c}}, 0x0) 4m5.811815703s ago: executing program 3 (id=2906): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000540)={@empty, @private}, &(0x7f0000000580)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f00000005c0)=""/32, 0x20, 0x0, &(0x7f0000000600)=""/127, 0x7f}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000700)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000007c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x5, 0x4, 0x94}, 0x10, r2, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x10, 0x101}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000709fe1b8cc41b36b7e4d79541d45fc77ca0e1d09ad18b1bafa8efc57795eb5908ae1cc10af7523de7fafc841ee358d429d670a46396e7a8bde693d7f5904c26318ec758c2da420ab2ddedb4187ae10f2cdc60a5fcecd5994fa2a27b226b7db3007a6c375d24774813cee5c7bcc019f69f969aa1a48043331b89d8a8a4558edb1340ff3eda63acc52d3181e9d7cd07cd261ce8c24ac4266cdacc877e4dda6d0c5875109ba84e8f754ba4270975638d0f482c81098f5e8cf9a79f9d8b88edf848d783c182a7d87a3487c51d5bd6a1443b"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3}, 0x94) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)={0x59, 0x4, 0x9, 0xb, 0x259}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x76, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, 0x0}, 0x20) listen(r0, 0xfffffffe) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]}) ioctl$PPPIOCSDEBUG(r8, 0x40047440, &(0x7f0000000140)=0x5) write$ppp(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 4m3.47025704s ago: executing program 3 (id=2908): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x5, 0x9, 0x38, @empty, @remote, 0x8000, 0x7800, 0xb3, 0x7}}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000001}}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, 0x0, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000980)={&(0x7f0000000640), &(0x7f0000000700)=""/126, &(0x7f0000000a00)="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", &(0x7f0000000900)="c6f775fd91a2e38234ac2acb10c9f4e91e6ff369c63d02213dd43e57ed0adb2850a657a984f4916318f5a3e2fe4f753fa3f9368fb672a8a6c0d7d344de493e96fbb2956f21401e1bc649b912f9253ac1f8fc80e0c6b16fed8fa4a74001ad4595785fb75c4d070134773542bd75d58bc5ab9e", 0x0, r2}, 0x38) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="4c0000005200000025bd7000fcdbdf250208000100", @ANYRES32=r1, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="0800020000000000080002000e00000008000100", @ANYRES32=r9, @ANYBLOB="080007000800050000001e5cb2748a1d32f6670000000000"], 0x4c}}, 0x0) socket$unix(0x1, 0x1, 0x0) 4m3.394315794s ago: executing program 3 (id=2910): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r0], 0x44}}, 0x20008040) 4m3.121828079s ago: executing program 3 (id=2912): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x0, 0x401}, 0xc) (async) r3 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) clock_gettime(0x87f60f7a31614e95, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x8c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1b9}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8c97}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x20000005}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x210}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async, rerun: 64) write$cgroup_devices(r3, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8) (rerun: 64) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="000000802a20776d00"], 0x9) r4 = socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r5, 0x8903, 0x1000000000000) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000440)={0x1, 0x16}, 0x8) (async) socket$rds(0x15, 0x5, 0x0) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async, rerun: 64) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64) close(0x4) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r1}, 0x18) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380)=r9, 0x4) (async, rerun: 64) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) (rerun: 64) 4m2.975998205s ago: executing program 3 (id=2914): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC=r2], 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='ext4_request_inode\x00', r0, 0x0, 0x4}, 0x18) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0xfffffe5e, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0xd9, 'syz1\x00'}) close(0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000380)={0x0, 0xffffffffffffffc3, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x5c}, 0x1, 0x6c}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) 4m2.807712666s ago: executing program 1 (id=2902): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20000010) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a010000000000ffff0000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x40) 4m2.246174591s ago: executing program 32 (id=2902): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20000010) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a010000000000ffff0000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x40) 4m2.22899629s ago: executing program 3 (id=2919): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x5, 0x9, 0x38, @empty, @remote, 0x8000, 0x7800, 0xb3, 0x7}}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000001}}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, 0x0, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000980)={&(0x7f0000000640), &(0x7f0000000700)=""/126, &(0x7f0000000a00)="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", &(0x7f0000000900)="c6f775fd91a2e38234ac2acb10c9f4e91e6ff369c63d02213dd43e57ed0adb2850a657a984f4916318f5a3e2fe4f753fa3f9368fb672a8a6c0d7d344de493e96fbb2956f21401e1bc649b912f9253ac1f8fc80e0c6b16fed8fa4a74001ad4595785fb75c4d070134773542bd75d58bc5ab9e", 0x0, r2}, 0x38) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="4c0000005200000025bd7000fcdbdf250208000100", @ANYRES32=r1, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="0800020000000000080002000e00000008000100", @ANYRES32=r9, @ANYBLOB="080007000800050000001e5cb2748a1d32f6670000000000"], 0x4c}}, 0x0) socket$unix(0x1, 0x1, 0x0) 4m2.138658974s ago: executing program 33 (id=2919): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x5, 0x9, 0x38, @empty, @remote, 0x8000, 0x7800, 0xb3, 0x7}}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000001}}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, 0x0, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000980)={&(0x7f0000000640), &(0x7f0000000700)=""/126, &(0x7f0000000a00)="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", &(0x7f0000000900)="c6f775fd91a2e38234ac2acb10c9f4e91e6ff369c63d02213dd43e57ed0adb2850a657a984f4916318f5a3e2fe4f753fa3f9368fb672a8a6c0d7d344de493e96fbb2956f21401e1bc649b912f9253ac1f8fc80e0c6b16fed8fa4a74001ad4595785fb75c4d070134773542bd75d58bc5ab9e", 0x0, r2}, 0x38) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="4c0000005200000025bd7000fcdbdf250208000100", @ANYRES32=r1, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="0800020000000000080002000e00000008000100", @ANYRES32=r9, @ANYBLOB="080007000800050000001e5cb2748a1d32f6670000000000"], 0x4c}}, 0x0) socket$unix(0x1, 0x1, 0x0) 6.718683142s ago: executing program 6 (id=4945): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x20}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.441218462s ago: executing program 6 (id=4962): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x80000, 0x13) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.972139806s ago: executing program 6 (id=4968): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d9ef0a47a6ad8b14010000", @ANYRES16=r1, @ANYBLOB="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"/270], 0x114}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'dh\x00', 0x1, 0x4, 0x8}, 0x2c) (async) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x640100ff, 0x4e21, 0x3, 'lc\x00', 0x2, 0x323b, 0x55}, {@private=0xa010100, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001214010028bd7000fcdbdf250800150000000000080001000000000008004b0013fffb00080003000400000008004f00"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x311, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8000, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 4.809355993s ago: executing program 6 (id=4970): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r0, @ANYBLOB="00000000000000000000000000000000af44a795fbdb7009edb7970b2ca3e16cb8a30d2d307c4889590595f5b9cd321df8918305b5961d46a2d8b857e816f0f6e95bd38656f8a735f1846d82c212c0d7514f1e5a06e68977e1698e5930e2e856801ba846424f566efe", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES8=r1, @ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delchain={0x5c, 0x65, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x4, 0x5}, {0xa, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_RATE={0x6, 0x5, {0xe, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0xf}}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000) r2 = socket(0xa, 0x2400000001, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf4e) writev(r3, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000200095bb523b6755ad2a8d65455582bc9d2baae95d0a66bb268c11358e8bdb8f90f9518b7c05d4a4a853475131c90714f3015881b595bcb1c00a89c360743382ad"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r7) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x3, 0x20}, &(0x7f00000004c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000540)={0xff, 0x8000, 0x2, 0x10000, r8}, 0x10) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.19618055s ago: executing program 5 (id=4979): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000a40), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000a40), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x14, 0x0, &(0x7f0000000080)) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0xc) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRES64=r1, @ANYRESOCT=r2, @ANYBLOB="3e409354d2e70e8b42d2ef6cda25af67816c35e38a56946a25aeb7dcfa2be37db745a3929d9c1bcc389784e930d51f35d5e88ce3dc5c58fbac3aef368da0d6e4973b4eb5888420c13886d694ef8801d3230e7fabc07fbc6c6c2c79fb9f6050dc836b2d08cecef9ef7eb63f75c70abe98ebc01102152db0a5e6cce706c18424583614964e1c453d070c033601806bf1e0da003a71bdb900f6ec16373da0bae00b19499b6181b94c2cd44125ab3237b6c0ff20967de7f179b2ca9cfcc32a11b7", @ANYRESHEX=0x0, @ANYBLOB="c6f198f2941f5717d01804ef3f7ccdec1ae05eb2b0405ec430a16847eb353996db59a97620c408d86cfc7074577083b8901fa6e7e784f9dfbb9627b3619e75deb90ea8ffa56c586c60fc2c643942e582a1950672372d7e14d39a00b19adfa68557b4", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRES64=r1, @ANYRESOCT=r2, @ANYBLOB="3e409354d2e70e8b42d2ef6cda25af67816c35e38a56946a25aeb7dcfa2be37db745a3929d9c1bcc389784e930d51f35d5e88ce3dc5c58fbac3aef368da0d6e4973b4eb5888420c13886d694ef8801d3230e7fabc07fbc6c6c2c79fb9f6050dc836b2d08cecef9ef7eb63f75c70abe98ebc01102152db0a5e6cce706c18424583614964e1c453d070c033601806bf1e0da003a71bdb900f6ec16373da0bae00b19499b6181b94c2cd44125ab3237b6c0ff20967de7f179b2ca9cfcc32a11b7", @ANYRESHEX=0x0, @ANYBLOB="c6f198f2941f5717d01804ef3f7ccdec1ae05eb2b0405ec430a16847eb353996db59a97620c408d86cfc7074577083b8901fa6e7e784f9dfbb9627b3619e75deb90ea8ffa56c586c60fc2c643942e582a1950672372d7e14d39a00b19adfa68557b4", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.123715833s ago: executing program 5 (id=4980): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1e, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_a, @initial, @random="449a104201dc", {0x4, 0x6}, "", @value={0x2, 0x1, 0x2, 0x1, 0x3}}}}]}, 0x48}}, 0x4800) (async, rerun: 64) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 3.911334723s ago: executing program 5 (id=4983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020000000900010073797a3000000000080005400000000c080003400000000808000640ffffff003c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000001140000001000010000000000000000000084000a866ef983a11a55c7"], 0xd0}}, 0x0) 3.815895269s ago: executing program 6 (id=4985): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$inet(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x0, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'ip_vti0\x00', 0x1000}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) unshare(0x42000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000003c0)={r6, 0x1}, 0x8) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xbcff, 0x0, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f00000002c0)="211e099a918a77b8831927d5f5d7ce65f619b8652895d6c888791f4dfcf5fb2c05efaa593ae99f3a348424eee606664c693f94fba16f0beae2d5332223fb124bc89b01333b4954e13b7450231689bfb859985dab45afc17ee89d39d6f7af25a2753c9ff6b84dc7ec69dd47284a2fc56ea8940294cd9d362a86600c03a78daed83af14c69d4c454be7d7168bf4a64d926741c8846ee7fb26459b7c81c456ce43cf6db1aff671273e9bcf32d3a976cd8d157be5b970710cff0d294f54b4b747cf81e4e414d17ca9892a43355b525f2c6cbabc76d5e10d1e7e6604508453620c8cead8e62f72b7f", 0xe6}, {&(0x7f0000000100)="3bc13ca0855d16ddd7e1ffc27b5606b412b662535719d38b35da2e70ded00bcd23", 0x21}, {&(0x7f0000000400)="45cd625463e0f8383449d4d813e9914e2640aa26ca510873691a7211dfa8128258", 0x21}], 0x3) socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 3.731528195s ago: executing program 5 (id=4986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x110, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0xfff2, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe0, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_CORR={0x10, 0x1, {0xce7, 0x2}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x110e2b6a, 0x2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffffd8, 0x8, 0x3, 0x5, 0x0, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0xfffffff7, 0x2952, 0x7}}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x1, 0x1874, 0x101, 0x4b7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40, 0x4, 0x9, 0xffffffff}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x81, 0x9, 0x4, 0x2, 0x100000000, 0x1}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x110}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) 3.420132962s ago: executing program 0 (id=4992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1d, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 3.334163736s ago: executing program 0 (id=4994): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000200000004000a00"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000400"/19, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet6(0xa, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r3}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r5, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000200)={0xa0000004}) 3.295304657s ago: executing program 4 (id=4996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300040000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000480)=0xfffffffc, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10) connect$pptp(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x93}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x956d18aa151fdde1}, 0x10) 3.151895085s ago: executing program 0 (id=4997): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x86e, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r11 = accept$alg(r3, 0x0, 0x0) (async) r12 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) (async, rerun: 64) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r11, @ANYRES64=r12, @ANYRES8=0x0, @ANYRES16=r5], 0x128}, 0x0) (rerun: 64) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) close(0x4) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 3.12482348s ago: executing program 4 (id=4998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000000000000004000000000000000000000000040000c06b6e0000000000000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0286ddffffffffffff000000000001"], 0xfdef) 1.089451763s ago: executing program 2 (id=4999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000050511030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 980.113032ms ago: executing program 0 (id=5000): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r0, 0x0, 0x0, 0x4000000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0xe204711c830269ea, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x884) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2, 0x47, 0x7, 0xff, "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", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "738b276597b6c58b"}, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x3c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x12, 0x14, 0x0, 0x1, [@typed={0x4, 0xd, 0x0, 0x0, @binary}, @nested={0x4, 0x18}, @generic="2989ec60d7af"]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 977.278506ms ago: executing program 4 (id=5001): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000040) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$rds(r3, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{0x0}], 0x1, 0x0, 0x0, 0x24048040}, 0x48004) socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 905.416479ms ago: executing program 5 (id=5002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0xb20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 904.88211ms ago: executing program 2 (id=5003): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x101, 0x9}, &(0x7f00000000c0)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 790.172244ms ago: executing program 0 (id=5004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1d, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 772.347261ms ago: executing program 5 (id=5005): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@mpls_getnetconf={0x24, 0x52, 0x8, 0x70bd30, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffc}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x24}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x34, r5, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xd}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r5, 0x800, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1e}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x10) 745.128326ms ago: executing program 4 (id=5006): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) syz_emit_ethernet(0xb8, &(0x7f00000003c0)={@local, @random="000200080010", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x82, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "000000050000000026000400"}, {0x26, 0x2, "fe906d26efe39393fe08f73eabc5977b"}]}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r4, r3}, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000fcffffff2a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200e038fa1e45fb02d3517d45a617b1cd0119cd43963c61fcfa7a9bd2ee5456ad5d9feacdb7ca7ad28b36466fd0a6058df48ca1310690e4b413bb879f22847b28a5b16b0fdb6cad535d8c3b", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x4, 0x700000000000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x10001, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, 0x0, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) 684.194446ms ago: executing program 2 (id=5007): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200003a00002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x8001) 626.295522ms ago: executing program 0 (id=5008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xe0182, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100001044fbc165339bf57bb97f10000", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="6000128008000100687372001400f97f0800111fda1e31401c2204c28fd356c15d6bf962a63ce799cfadb8f25bb54486bf99c800f09eaf24ea47c62812ba021c2301f4e56a46956567c4450cbe21c8e9dd001cb5b3db5ad48760bb0d34f77501f187db2ba2eb400d9bc1d2218e38aabb10b074940db82c78c68661a45d", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) connect$nfc_llcp(r7, &(0x7f0000000100)={0x27, r9, 0xffffffffffffffff, 0x4, 0x53, 0x7, "07cbdd3199047dc26d311f0f244b25ba35ea8f61cd07e107dab26da8d164f15b35c0b7669366c634dd2326e7f6dccdec8306910919e39811abd472ad0eab81", 0xd}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000340)=0x0) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000000c0)=0x0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r18) sendmsg$NFC_CMD_DEV_UP(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x40) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'batadv0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '%'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'kfree\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) 573.531853ms ago: executing program 4 (id=5009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x5, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0xa, 0x3, 0xff) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) connect$inet6(r9, &(0x7f0000000340)={0xa, 0x4e20, 0x4, @empty, 0x2}, 0x1c) connect$inet6(r9, &(0x7f0000000340)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x6, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0x8, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x3ff, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000bb6bcb71002abd700000000000f8610000", @ANYRES32=0x0, @ANYBLOB="80210000000000001400030073797a5f74756e0000000000000000000500210004000000"], 0x3c}}, 0x0) pipe(&(0x7f0000000180)) 531.759482ms ago: executing program 2 (id=5010): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_TOS={0x5, 0x9, 0xb}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r1, &(0x7f0000000180)=""/47, 0x78, 0x10062, 0x0, 0x0) 299.374636ms ago: executing program 2 (id=5011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4000000000000ffffff85850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) 195.073613ms ago: executing program 2 (id=5012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x110, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0xfff2, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe0, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_CORR={0x10, 0x1, {0xce7, 0x2}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x110e2b6a, 0x2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffffd8, 0x8, 0x3, 0x5, 0x0, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0xfffffff7, 0x2952, 0x7}}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x1, 0x1874, 0x101, 0x4b7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x40, 0x4, 0x9, 0xffffffff}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x81, 0x9, 0x4, 0x2, 0x100000000, 0x1}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x110}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) 92.665617ms ago: executing program 4 (id=5013): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, 0x7}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x2}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 18) 0s ago: executing program 6 (id=5014): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000380100000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): T19134] dummy0 speed is unknown, defaulting to 1000 [ 468.149764][T19173] netlink: 'syz.0.3783': attribute type 13 has an invalid length. [ 468.201230][T19173] netlink: 'syz.0.3783': attribute type 17 has an invalid length. [ 468.268312][T19173] bridge0: port 3(team0) entered blocking state [ 468.274800][T19173] bridge0: port 3(team0) entered listening state [ 468.281570][T19173] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.288818][T19173] bridge0: port 1(bridge_slave_0) entered listening state [ 468.309882][T19173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.342610][T19182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3784'. [ 468.565257][T19189] xt_hashlimit: max too large, truncated to 1048576 [ 468.863717][T19196] netlink: 'syz.4.3789': attribute type 10 has an invalid length. [ 468.924292][T19196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3789'. [ 468.999955][T19196] dummy0: entered promiscuous mode [ 469.032733][T19196] bridge0: port 3(dummy0) entered blocking state [ 469.070819][T19196] bridge0: port 3(dummy0) entered disabled state [ 469.092264][T19196] dummy0: entered allmulticast mode [ 469.117616][T19196] bridge0: port 3(dummy0) entered blocking state [ 469.124228][T19196] bridge0: port 3(dummy0) entered listening state [ 469.143925][T19204] syzkaller1: entered promiscuous mode [ 469.150071][T19204] syzkaller1: entered allmulticast mode [ 469.601827][T19221] netlink: 'syz.6.3797': attribute type 13 has an invalid length. [ 469.614331][T19221] netlink: 'syz.6.3797': attribute type 17 has an invalid length. [ 469.692443][T19226] netlink: 'syz.2.3792': attribute type 6 has an invalid length. [ 469.702488][T19226] netlink: 'syz.2.3792': attribute type 4 has an invalid length. [ 470.180911][T19221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.270004][T19226] lo speed is unknown, defaulting to 1000 [ 470.289026][T19226] wg1 speed is unknown, defaulting to 1000 [ 470.322409][T19226] dummy0 speed is unknown, defaulting to 1000 [ 470.804062][T19270] xt_hashlimit: max too large, truncated to 1048576 [ 470.853137][T19266] syzkaller0: entered promiscuous mode [ 470.863212][T19266] syzkaller0: entered allmulticast mode [ 470.874644][T19272] __nla_validate_parse: 2 callbacks suppressed [ 470.874668][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3811'. [ 470.914341][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3809'. [ 471.092966][T19278] netlink: 'syz.0.3813': attribute type 13 has an invalid length. [ 471.114625][T19278] netlink: 'syz.0.3813': attribute type 17 has an invalid length. [ 471.180248][T19278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.602192][T19296] FAULT_INJECTION: forcing a failure. [ 471.602192][T19296] name failslab, interval 1, probability 0, space 0, times 0 [ 471.636586][T19296] CPU: 1 UID: 0 PID: 19296 Comm: syz.5.3820 Not tainted syzkaller #0 PREEMPT(full) [ 471.636618][T19296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.636637][T19296] Call Trace: [ 471.636646][T19296] [ 471.636656][T19296] dump_stack_lvl+0x189/0x250 [ 471.636692][T19296] ? __pfx____ratelimit+0x10/0x10 [ 471.636725][T19296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.636754][T19296] ? __pfx__printk+0x10/0x10 [ 471.636783][T19296] ? __pfx___might_resched+0x10/0x10 [ 471.636813][T19296] should_fail_ex+0x414/0x560 [ 471.636852][T19296] should_failslab+0xa8/0x100 [ 471.636876][T19296] kmem_cache_alloc_node_noprof+0x77/0x710 [ 471.636908][T19296] ? __alloc_skb+0x112/0x2d0 [ 471.636944][T19296] __alloc_skb+0x112/0x2d0 [ 471.636970][T19296] netlink_ack+0x146/0xa50 [ 471.636990][T19296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.637024][T19296] ? __asan_memcpy+0x40/0x70 [ 471.637051][T19296] ? __pfx_ref_tracker_free+0x10/0x10 [ 471.637082][T19296] netlink_rcv_skb+0x28c/0x470 [ 471.637102][T19296] ? __lock_acquire+0xab9/0xd20 [ 471.637125][T19296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.637155][T19296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.637200][T19296] ? down_read+0x1ad/0x2e0 [ 471.637227][T19296] genl_rcv+0x28/0x40 [ 471.637253][T19296] netlink_unicast+0x82f/0x9e0 [ 471.637296][T19296] ? __pfx_netlink_unicast+0x10/0x10 [ 471.637331][T19296] ? netlink_sendmsg+0x642/0xb30 [ 471.637352][T19296] ? skb_put+0x11b/0x210 [ 471.637378][T19296] netlink_sendmsg+0x805/0xb30 [ 471.637412][T19296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.637439][T19296] ? aa_sock_msg_perm+0xf1/0x1d0 [ 471.637473][T19296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.637494][T19296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.637518][T19296] __sock_sendmsg+0x21c/0x270 [ 471.637553][T19296] ____sys_sendmsg+0x505/0x830 [ 471.637584][T19296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.637620][T19296] ? import_iovec+0x74/0xa0 [ 471.637652][T19296] ___sys_sendmsg+0x21f/0x2a0 [ 471.637679][T19296] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.637746][T19296] ? __fget_files+0x2a/0x420 [ 471.637766][T19296] ? __fget_files+0x3a0/0x420 [ 471.637799][T19296] __x64_sys_sendmsg+0x19b/0x260 [ 471.637826][T19296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.637862][T19296] ? __pfx_ksys_write+0x10/0x10 [ 471.637897][T19296] ? do_syscall_64+0xbe/0xfa0 [ 471.637922][T19296] do_syscall_64+0xfa/0xfa0 [ 471.637946][T19296] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.637965][T19296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.637985][T19296] ? clear_bhb_loop+0x60/0xb0 [ 471.638009][T19296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.638036][T19296] RIP: 0033:0x7f16edd8f6c9 [ 471.638057][T19296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.638077][T19296] RSP: 002b:00007f16ebff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.638100][T19296] RAX: ffffffffffffffda RBX: 00007f16edfe5fa0 RCX: 00007f16edd8f6c9 [ 471.638116][T19296] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000016 [ 471.638130][T19296] RBP: 00007f16ebff6090 R08: 0000000000000000 R09: 0000000000000000 [ 471.638144][T19296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.638155][T19296] R13: 00007f16edfe6038 R14: 00007f16edfe5fa0 R15: 00007ffd48f41dc8 [ 471.638189][T19296] [ 472.277945][T19307] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3824'. [ 472.642861][T19326] syzkaller0: entered promiscuous mode [ 472.657341][T19326] syzkaller0: entered allmulticast mode [ 472.697818][T19316] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3825'. [ 472.713570][T19316] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3825'. [ 472.746038][T19316] netlink: 'syz.2.3825': attribute type 6 has an invalid length. [ 472.788841][T19316] netlink: 'syz.2.3825': attribute type 4 has an invalid length. [ 474.402931][T19337] FAULT_INJECTION: forcing a failure. [ 474.402931][T19337] name failslab, interval 1, probability 0, space 0, times 0 [ 474.426693][T19337] CPU: 0 UID: 0 PID: 19337 Comm: syz.0.3832 Not tainted syzkaller #0 PREEMPT(full) [ 474.426722][T19337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.426734][T19337] Call Trace: [ 474.426742][T19337] [ 474.426751][T19337] dump_stack_lvl+0x189/0x250 [ 474.426782][T19337] ? __pfx____ratelimit+0x10/0x10 [ 474.426812][T19337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.426838][T19337] ? __pfx__printk+0x10/0x10 [ 474.426864][T19337] ? __pfx___might_resched+0x10/0x10 [ 474.426890][T19337] should_fail_ex+0x414/0x560 [ 474.426926][T19337] should_failslab+0xa8/0x100 [ 474.426948][T19337] __kmalloc_noprof+0xcb/0x7f0 [ 474.426975][T19337] ? ethnl_default_notify+0x1af/0xb70 [ 474.427005][T19337] ethnl_default_notify+0x1af/0xb70 [ 474.427031][T19337] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 474.427063][T19337] ? __pfx_ethnl_default_notify+0x10/0x10 [ 474.427103][T19337] ? mutex_is_locked+0x17/0x50 [ 474.427124][T19337] ? rtnl_is_locked+0x15/0x20 [ 474.427151][T19337] ethnl_default_set_doit+0x4f8/0x890 [ 474.427183][T19337] genl_family_rcv_msg_doit+0x215/0x300 [ 474.427217][T19337] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 474.427255][T19337] ? bpf_lsm_capable+0x9/0x20 [ 474.427278][T19337] ? security_capable+0x7e/0x2e0 [ 474.427309][T19337] genl_rcv_msg+0x60e/0x790 [ 474.427341][T19337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.427365][T19337] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 474.427391][T19337] ? __asan_memcpy+0x40/0x70 [ 474.427425][T19337] ? __pfx_ref_tracker_free+0x10/0x10 [ 474.427451][T19337] netlink_rcv_skb+0x208/0x470 [ 474.427469][T19337] ? __lock_acquire+0xab9/0xd20 [ 474.427488][T19337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.427514][T19337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.427554][T19337] ? down_read+0x1ad/0x2e0 [ 474.427578][T19337] genl_rcv+0x28/0x40 [ 474.427601][T19337] netlink_unicast+0x82f/0x9e0 [ 474.427638][T19337] ? __pfx_netlink_unicast+0x10/0x10 [ 474.427669][T19337] ? netlink_sendmsg+0x642/0xb30 [ 474.427688][T19337] ? skb_put+0x11b/0x210 [ 474.427712][T19337] netlink_sendmsg+0x805/0xb30 [ 474.427743][T19337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.427767][T19337] ? aa_sock_msg_perm+0xf1/0x1d0 [ 474.427798][T19337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.427816][T19337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.427838][T19337] __sock_sendmsg+0x21c/0x270 [ 474.427869][T19337] ____sys_sendmsg+0x505/0x830 [ 474.427897][T19337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.427929][T19337] ? import_iovec+0x74/0xa0 [ 474.427958][T19337] ___sys_sendmsg+0x21f/0x2a0 [ 474.427983][T19337] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.428048][T19337] ? __fget_files+0x2a/0x420 [ 474.428066][T19337] ? __fget_files+0x3a0/0x420 [ 474.428096][T19337] __x64_sys_sendmsg+0x19b/0x260 [ 474.428121][T19337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.428154][T19337] ? __pfx_ksys_write+0x10/0x10 [ 474.428186][T19337] ? do_syscall_64+0xbe/0xfa0 [ 474.428209][T19337] do_syscall_64+0xfa/0xfa0 [ 474.428226][T19337] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.428245][T19337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.428264][T19337] ? clear_bhb_loop+0x60/0xb0 [ 474.428289][T19337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.428307][T19337] RIP: 0033:0x7f057e58f6c9 [ 474.428326][T19337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.428343][T19337] RSP: 002b:00007f057f481038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.428364][T19337] RAX: ffffffffffffffda RBX: 00007f057e7e5fa0 RCX: 00007f057e58f6c9 [ 474.428379][T19337] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000016 [ 474.428391][T19337] RBP: 00007f057f481090 R08: 0000000000000000 R09: 0000000000000000 [ 474.428439][T19337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.428452][T19337] R13: 00007f057e7e6038 R14: 00007f057e7e5fa0 R15: 00007fff61ca3bd8 [ 474.428488][T19337] [ 474.429817][T19333] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 474.850473][T19333] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 474.860387][T19333] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 474.907761][T19316] lo speed is unknown, defaulting to 1000 [ 474.936124][T19322] lo speed is unknown, defaulting to 1000 [ 474.940311][T19316] wg1 speed is unknown, defaulting to 1000 [ 474.952410][T19316] dummy0 speed is unknown, defaulting to 1000 [ 474.965186][T19322] wg1 speed is unknown, defaulting to 1000 [ 475.060866][T19322] dummy0 speed is unknown, defaulting to 1000 [ 475.113357][T19358] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 475.147580][T19358] netlink: 'syz.4.3838': attribute type 7 has an invalid length. [ 475.172247][T19357] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 475.179752][T19358] netlink: 'syz.4.3838': attribute type 8 has an invalid length. [ 475.188084][T19357] macvtap1: entered allmulticast mode [ 475.193629][T19358] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3838'. [ 475.204199][T19357] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 475.227735][T19357] mac80211_hwsim hwsim32 wlan0: left allmulticast mode [ 475.236635][T19358] NCSI netlink: No device for ifindex 1073545264 [ 475.287540][T19357] mac80211_hwsim hwsim32 wlan0: left promiscuous mode [ 475.551885][T19374] xt_hashlimit: max too large, truncated to 1048576 [ 475.719242][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3850'. [ 475.820658][T19372] syzkaller0: entered promiscuous mode [ 475.838165][T19372] syzkaller0: entered allmulticast mode [ 475.929874][T19387] syzkaller0: entered promiscuous mode [ 475.935901][T19387] syzkaller0: entered allmulticast mode [ 476.096684][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.104200][ C1] bridge0: topology change detected, propagating [ 477.765505][T19399] tipc: Enabling of bearer rejected, failed to enable media [ 477.978003][T19420] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 478.006593][T19420] macvtap1: entered allmulticast mode [ 478.026400][T19420] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 478.068416][T19420] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 478.075531][T19420] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 478.142560][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3860'. [ 478.206709][T19435] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3860'. [ 478.252581][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 478.305570][T19438] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3861'. [ 479.984693][T19435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.999619][T19435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.020742][T19435] bond0 (unregistering): Released all slaves [ 480.162058][T19447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3863'. [ 480.307753][T19451] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 480.338659][T19451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.531424][T19458] syzkaller1: entered promiscuous mode [ 480.551018][T19458] syzkaller1: entered allmulticast mode [ 480.750309][T19470] netlink: 'syz.4.3872': attribute type 13 has an invalid length. [ 480.779544][T19470] netlink: 'syz.4.3872': attribute type 17 has an invalid length. [ 480.828321][T19470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.856881][T19465] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3870'. [ 480.882769][T19465] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3870'. [ 480.916582][T19465] netlink: 'syz.5.3870': attribute type 6 has an invalid length. [ 480.924388][T19465] netlink: 'syz.5.3870': attribute type 4 has an invalid length. [ 480.975567][T19460] lo speed is unknown, defaulting to 1000 [ 481.014964][T19477] lo speed is unknown, defaulting to 1000 [ 481.050810][T19477] wg1 speed is unknown, defaulting to 1000 [ 481.052052][T19467] lo speed is unknown, defaulting to 1000 [ 481.064229][T19477] dummy0 speed is unknown, defaulting to 1000 [ 481.066058][T19467] wg1 speed is unknown, defaulting to 1000 [ 481.097238][T19467] dummy0 speed is unknown, defaulting to 1000 [ 481.200656][T19460] wg1 speed is unknown, defaulting to 1000 [ 481.285312][T19460] dummy0 speed is unknown, defaulting to 1000 [ 481.345695][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'. [ 481.397437][T19489] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3875'. [ 481.981308][T19515] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3886'. [ 482.023551][T19514] xt_hashlimit: size too large, truncated to 1048576 [ 482.415005][T19530] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 482.495509][T19536] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 483.279408][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3899'. [ 483.313085][T19565] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 483.368413][T19563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3898'. [ 484.077586][T19591] raw_sendmsg: syz.6.3902 forgot to set AF_INET. Fix it! [ 484.293735][T19592] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3907'. [ 484.314445][T19592] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3907'. [ 484.406422][T19592] netlink: 'syz.0.3907': attribute type 6 has an invalid length. [ 484.414323][T19592] netlink: 'syz.0.3907': attribute type 4 has an invalid length. [ 484.464162][T19597] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3909'. [ 484.611196][T19592] lo speed is unknown, defaulting to 1000 [ 484.619875][T19592] wg1 speed is unknown, defaulting to 1000 [ 484.627815][T19592] dummy0 speed is unknown, defaulting to 1000 [ 484.756819][T19595] lo speed is unknown, defaulting to 1000 [ 484.955862][T19613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3912'. [ 484.970505][T19595] wg1 speed is unknown, defaulting to 1000 [ 485.051083][T19595] dummy0 speed is unknown, defaulting to 1000 [ 485.408288][T19627] netlink: 'syz.2.3915': attribute type 33 has an invalid length. [ 485.430619][T19627] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3915'. [ 485.455539][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3914'. [ 485.795441][T19643] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3920'. [ 485.897047][T19646] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3919'. [ 486.048934][T19652] netlink: 'syz.2.3922': attribute type 39 has an invalid length. [ 486.133520][T19645] bond0: entered promiscuous mode [ 486.178900][T19645] bond0: left promiscuous mode [ 487.464157][T19695] FAULT_INJECTION: forcing a failure. [ 487.464157][T19695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.523293][T19695] CPU: 1 UID: 0 PID: 19695 Comm: syz.4.3933 Not tainted syzkaller #0 PREEMPT(full) [ 487.523334][T19695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.523347][T19695] Call Trace: [ 487.523355][T19695] [ 487.523365][T19695] dump_stack_lvl+0x189/0x250 [ 487.523399][T19695] ? __pfx____ratelimit+0x10/0x10 [ 487.523431][T19695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.523459][T19695] ? __pfx__printk+0x10/0x10 [ 487.523480][T19695] ? __might_fault+0xb0/0x130 [ 487.523522][T19695] should_fail_ex+0x414/0x560 [ 487.523560][T19695] _copy_from_iter+0x1de/0x1790 [ 487.523590][T19695] ? rcu_is_watching+0x15/0xb0 [ 487.523620][T19695] ? kmalloc_reserve+0xbd/0x290 [ 487.523642][T19695] ? __pfx__copy_from_iter+0x10/0x10 [ 487.523668][T19695] ? __build_skb_around+0x262/0x3f0 [ 487.523692][T19695] ? netlink_sendmsg+0x642/0xb30 [ 487.523714][T19695] ? skb_put+0x11b/0x210 [ 487.523738][T19695] netlink_sendmsg+0x6b2/0xb30 [ 487.523771][T19695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.523797][T19695] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.523831][T19695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.523851][T19695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.523875][T19695] __sock_sendmsg+0x21c/0x270 [ 487.523907][T19695] ____sys_sendmsg+0x505/0x830 [ 487.523937][T19695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.523978][T19695] ? import_iovec+0x74/0xa0 [ 487.524008][T19695] ___sys_sendmsg+0x21f/0x2a0 [ 487.524034][T19695] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.524096][T19695] ? __fget_files+0x2a/0x420 [ 487.524115][T19695] ? __fget_files+0x3a0/0x420 [ 487.524144][T19695] __x64_sys_sendmsg+0x19b/0x260 [ 487.524172][T19695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.524206][T19695] ? __pfx_ksys_write+0x10/0x10 [ 487.524240][T19695] ? do_syscall_64+0xbe/0xfa0 [ 487.524264][T19695] do_syscall_64+0xfa/0xfa0 [ 487.524282][T19695] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.524302][T19695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.524323][T19695] ? clear_bhb_loop+0x60/0xb0 [ 487.524348][T19695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.524368][T19695] RIP: 0033:0x7fe8d7f8f6c9 [ 487.524387][T19695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.524405][T19695] RSP: 002b:00007fe8d8e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.524428][T19695] RAX: ffffffffffffffda RBX: 00007fe8d81e5fa0 RCX: 00007fe8d7f8f6c9 [ 487.524444][T19695] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 487.524457][T19695] RBP: 00007fe8d8e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 487.524470][T19695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.524482][T19695] R13: 00007fe8d81e6038 R14: 00007fe8d81e5fa0 R15: 00007ffdc7083998 [ 487.524534][T19695] [ 487.818208][T19699] ip6t_srh: unknown srh invflags 4000 [ 487.825016][T19701] ip6t_srh: unknown srh invflags 4000 [ 487.865399][T19700] xt_hashlimit: max too large, truncated to 1048576 [ 487.977126][T19697] netlink: 'syz.2.3934': attribute type 39 has an invalid length. [ 488.419847][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 488.420845][ T5845] Bluetooth: hci2: command 0x0401 tx timeout [ 488.552426][T19733] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 489.288068][T19746] unsupported nlmsg_type 40 [ 489.605539][T19756] lo speed is unknown, defaulting to 1000 [ 489.612209][T19760] __nla_validate_parse: 4 callbacks suppressed [ 489.612231][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3953'. [ 489.614958][T19756] wg1 speed is unknown, defaulting to 1000 [ 489.643740][T19756] dummy0 speed is unknown, defaulting to 1000 [ 489.758456][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 489.792938][T19767] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 490.028275][T19773] xt_l2tp: missing protocol rule (udp|l2tpip) [ 490.264488][T19779] netlink: 'syz.5.3959': attribute type 1 has an invalid length. [ 490.355072][T19779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.107478][T19808] ipt_REJECT: TCP_RESET invalid for non-tcp [ 491.241201][T19808] lo speed is unknown, defaulting to 1000 [ 491.271935][T19808] wg1 speed is unknown, defaulting to 1000 [ 491.302473][T19808] dummy0 speed is unknown, defaulting to 1000 [ 491.898893][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3977'. [ 492.099987][ T96] block nbd0: Possible stuck request ffff88802506e000: control (read@0,1024B). Runtime 360 seconds [ 492.111249][ T96] block nbd0: Possible stuck request ffff88802506e1c0: control (read@1024,1024B). Runtime 360 seconds [ 492.123266][ T96] block nbd0: Possible stuck request ffff88802506e380: control (read@2048,1024B). Runtime 360 seconds [ 492.136670][ T96] block nbd0: Possible stuck request ffff88802506e540: control (read@3072,1024B). Runtime 360 seconds [ 492.157686][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3969'. [ 492.518732][T19841] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.067214][T19864] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 493.363228][T19868] FAULT_INJECTION: forcing a failure. [ 493.363228][T19868] name failslab, interval 1, probability 0, space 0, times 0 [ 493.382391][ T96] block nbd1: Possible stuck request ffff888025100000: control (read@0,1024B). Runtime 180 seconds [ 493.395993][ T96] block nbd1: Possible stuck request ffff8880251001c0: control (read@1024,1024B). Runtime 180 seconds [ 493.403817][T19868] CPU: 1 UID: 0 PID: 19868 Comm: syz.5.3986 Not tainted syzkaller #0 PREEMPT(full) [ 493.403855][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.403870][T19868] Call Trace: [ 493.403881][T19868] [ 493.403892][T19868] dump_stack_lvl+0x189/0x250 [ 493.403931][T19868] ? __pfx____ratelimit+0x10/0x10 [ 493.403970][T19868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.404003][T19868] ? __pfx__printk+0x10/0x10 [ 493.404036][T19868] ? __pfx___might_resched+0x10/0x10 [ 493.404069][T19868] should_fail_ex+0x414/0x560 [ 493.404112][T19868] should_failslab+0xa8/0x100 [ 493.404139][T19868] kmem_cache_alloc_node_noprof+0x77/0x710 [ 493.404175][T19868] ? __alloc_skb+0x112/0x2d0 [ 493.404207][T19868] __alloc_skb+0x112/0x2d0 [ 493.404236][T19868] netlink_ack+0x146/0xa50 [ 493.404258][T19868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 493.404281][T19868] ? ref_tracker_free+0x63a/0x7d0 [ 493.404305][T19868] ? __asan_memcpy+0x40/0x70 [ 493.404343][T19868] ? __pfx_ref_tracker_free+0x10/0x10 [ 493.404379][T19868] netlink_rcv_skb+0x28c/0x470 [ 493.404405][T19868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 493.404429][T19868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.404470][T19868] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.404507][T19868] netlink_unicast+0x82f/0x9e0 [ 493.404555][T19868] ? __pfx_netlink_unicast+0x10/0x10 [ 493.404594][T19868] ? netlink_sendmsg+0x642/0xb30 [ 493.404617][T19868] ? skb_put+0x11b/0x210 [ 493.404647][T19868] netlink_sendmsg+0x805/0xb30 [ 493.404684][T19868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.404708][T19868] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.404744][T19868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.404768][T19868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.404802][T19868] __sock_sendmsg+0x21c/0x270 [ 493.404840][T19868] ____sys_sendmsg+0x505/0x830 [ 493.404875][T19868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.404913][T19868] ? import_iovec+0x74/0xa0 [ 493.404949][T19868] ___sys_sendmsg+0x21f/0x2a0 [ 493.404979][T19868] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.405050][T19868] ? __fget_files+0x2a/0x420 [ 493.405073][T19868] ? __fget_files+0x3a0/0x420 [ 493.405108][T19868] __x64_sys_sendmsg+0x19b/0x260 [ 493.405139][T19868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.405178][T19868] ? __pfx_ksys_write+0x10/0x10 [ 493.405218][T19868] ? do_syscall_64+0xbe/0xfa0 [ 493.405246][T19868] do_syscall_64+0xfa/0xfa0 [ 493.405267][T19868] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.405291][T19868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.405314][T19868] ? clear_bhb_loop+0x60/0xb0 [ 493.405350][T19868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.405375][T19868] RIP: 0033:0x7f16edd8f6c9 [ 493.405396][T19868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.405418][T19868] RSP: 002b:00007f16ebfd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.405445][T19868] RAX: ffffffffffffffda RBX: 00007f16edfe6090 RCX: 00007f16edd8f6c9 [ 493.405464][T19868] RDX: 0000000004004854 RSI: 0000200000000140 RDI: 0000000000000003 [ 493.405480][T19868] RBP: 00007f16ebfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 493.405495][T19868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.405510][T19868] R13: 00007f16edfe6128 R14: 00007f16edfe6090 R15: 00007ffd48f41dc8 [ 493.405549][T19868] [ 493.748947][ T96] block nbd1: Possible stuck request ffff888025100380: control (read@2048,1024B). Runtime 180 seconds [ 493.762772][ T96] block nbd1: Possible stuck request ffff888025100540: control (read@3072,1024B). Runtime 180 seconds [ 493.905012][T19889] xt_hashlimit: max too large, truncated to 1048576 [ 494.331001][T19876] bridge0: port 3(team0) entered disabled state [ 494.337557][T19876] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.874742][T19876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.944692][T19876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.991319][T19876] vlan2: left promiscuous mode [ 496.004158][T19876] geneve1: left promiscuous mode [ 496.014564][T19876] vlan2: left allmulticast mode [ 496.021899][T19876] geneve1: left allmulticast mode [ 496.028536][T19876] xfrm1: left allmulticast mode [ 496.078746][T19876] batman_adv: batadv0: Interface deactivated: macsec1 [ 496.137352][T19876] ip6erspan0: left promiscuous mode [ 496.221410][T19876] vlan4: left promiscuous mode [ 496.236434][T19876] bond4: left promiscuous mode [ 496.243211][T19914] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 496.245853][T19876] gretap1: left promiscuous mode [ 496.260087][T19876] vlan4: left allmulticast mode [ 496.264978][T19876] bond4: left allmulticast mode [ 496.270452][T19876] gretap1: left allmulticast mode [ 496.353560][T18559] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.376723][T18559] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.407914][T18559] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.418356][ T5199] udevd[5199]: worker [5881] /devices/virtual/block/nbd0 timeout; kill it [ 496.445719][T18559] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.467325][ T5199] udevd[5199]: seq 12737 '/devices/virtual/block/nbd0' killed [ 496.474924][ T5199] udevd[5199]: worker [6625] /devices/virtual/block/nbd1 timeout; kill it [ 496.495858][T18559] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.520729][ T5199] udevd[5199]: seq 24995 '/devices/virtual/block/nbd1' killed [ 496.544040][T18559] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.560204][T19922] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4001'. [ 496.584408][T18559] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.610180][T18559] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.798281][T19934] netlink: 'syz.0.4007': attribute type 21 has an invalid length. [ 496.979183][T19938] syz_tun: entered allmulticast mode [ 497.001598][T19937] syz_tun: left allmulticast mode [ 497.019982][T19940] netlink: 'syz.5.4009': attribute type 10 has an invalid length. [ 497.029312][T19940] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4009'. [ 497.038933][T19940] dummy0: entered promiscuous mode [ 497.065908][T19940] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 497.228036][T19951] xt_hashlimit: max too large, truncated to 1048576 [ 497.285262][T19955] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4015'. [ 497.295683][T19954] team0: No ports can be present during mode change [ 497.466556][T19959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.609593][T19967] lo speed is unknown, defaulting to 1000 [ 497.640892][T19967] wg1 speed is unknown, defaulting to 1000 [ 497.653804][T19967] dummy0 speed is unknown, defaulting to 1000 [ 497.990095][T19988] netlink: 'syz.5.4026': attribute type 5 has an invalid length. [ 497.999927][T19988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4026'. [ 498.091686][T19999] xt_hashlimit: max too large, truncated to 1048576 [ 498.283130][T18582] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 498.545984][T20000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4027'. [ 498.696925][T20018] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 498.718944][T20018] macvtap1: entered allmulticast mode [ 498.728527][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'. [ 498.733549][T20018] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 498.822375][T20018] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 498.839933][T20018] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 498.959730][T20016] lo speed is unknown, defaulting to 1000 [ 498.990031][T20016] wg1 speed is unknown, defaulting to 1000 [ 499.007194][T20016] dummy0 speed is unknown, defaulting to 1000 [ 499.136260][ C0] bridge0: port 3(dummy0) entered learning state [ 499.247828][T20035] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4038'. [ 499.496690][T20050] netlink: 'syz.0.4040': attribute type 5 has an invalid length. [ 499.715757][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4040'. [ 499.848792][T20054] xt_hashlimit: max too large, truncated to 1048576 [ 500.620217][T20058] lo speed is unknown, defaulting to 1000 [ 500.673765][T20058] wg1 speed is unknown, defaulting to 1000 [ 500.742856][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4047'. [ 500.758285][T20058] dummy0 speed is unknown, defaulting to 1000 [ 500.776968][T20061] lo speed is unknown, defaulting to 1000 [ 500.901989][T20061] wg1 speed is unknown, defaulting to 1000 [ 501.009282][T20061] dummy0 speed is unknown, defaulting to 1000 [ 501.024875][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4051'. [ 501.452737][T20110] netlink: 'syz.5.4053': attribute type 5 has an invalid length. [ 501.505094][T20112] netlink: 'syz.6.4054': attribute type 5 has an invalid length. [ 501.819902][T20117] tipc: Started in network mode [ 501.824887][T20117] tipc: Node identity , cluster identity 4711 [ 501.852334][T20117] tipc: Failed to obtain node identity [ 501.887969][T20117] tipc: Enabling of bearer rejected, failed to enable media [ 502.131478][T20120] syzkaller0: entered promiscuous mode [ 502.138191][T20120] syzkaller0: entered allmulticast mode [ 502.335522][T20125] syzkaller0: entered promiscuous mode [ 502.356456][T20125] syzkaller0: entered allmulticast mode [ 502.472286][T20133] __nla_validate_parse: 1 callbacks suppressed [ 502.472313][T20133] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4059'. [ 502.536748][T20133] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 502.724016][T20156] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 503.980172][T18579] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 505.278829][T20170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4064'. [ 505.292004][T20186] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 505.305904][T20186] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 505.317005][T20186] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 507.032581][T20187] vcan0: entered promiscuous mode [ 507.069153][T20210] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.4073'. [ 507.256990][T20223] netlink: 'syz.6.4078': attribute type 13 has an invalid length. [ 507.282769][T20223] netlink: 'syz.6.4078': attribute type 17 has an invalid length. [ 507.383190][T20223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.521515][T20240] sctp: [Deprecated]: syz.4.4085 (pid 20240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.521515][T20240] Use struct sctp_sack_info instead [ 507.739992][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4088'. [ 507.782936][T20248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4087'. [ 508.197810][T20268] lo speed is unknown, defaulting to 1000 [ 508.230359][T20268] wg1 speed is unknown, defaulting to 1000 [ 508.248482][T20268] dummy0 speed is unknown, defaulting to 1000 [ 508.551481][T20294] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 508.559995][T20294] macvtap1: entered allmulticast mode [ 508.565598][T20294] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 508.581160][T20294] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 508.592995][T20294] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 508.907224][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 509.265241][T20307] veth1_macvtap: left promiscuous mode [ 509.270945][T20307] macsec0: entered promiscuous mode [ 509.276303][T20307] macsec0: entered allmulticast mode [ 509.312503][T20307] veth1_macvtap: entered promiscuous mode [ 509.318899][T20307] veth1_macvtap: entered allmulticast mode [ 509.333483][T20307] macsec0: left promiscuous mode [ 509.338897][T20307] macsec0: left allmulticast mode [ 509.343976][T20307] veth1_macvtap: left allmulticast mode [ 509.524764][T20320] syzkaller1: entered promiscuous mode [ 509.547520][T20320] syzkaller1: entered allmulticast mode [ 509.678632][T20324] macsec2: entered promiscuous mode [ 509.683905][T20324] macsec0: entered promiscuous mode [ 509.741445][T20324] macsec0: left promiscuous mode [ 509.773906][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4116'. [ 509.803285][T20335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4117'. [ 509.855231][T20342] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4117'. [ 510.073465][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4124'. [ 510.088624][T20348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4123'. [ 510.119259][T20348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4123'. [ 510.433634][T20375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.633387][T20389] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4132'. [ 510.784044][T20383] lo speed is unknown, defaulting to 1000 [ 510.810285][T20385] lo speed is unknown, defaulting to 1000 [ 510.818889][T20383] wg1 speed is unknown, defaulting to 1000 [ 510.834325][T20383] dummy0 speed is unknown, defaulting to 1000 [ 510.843029][T20385] wg1 speed is unknown, defaulting to 1000 [ 510.871403][T20385] dummy0 speed is unknown, defaulting to 1000 [ 510.926509][T20397] FAULT_INJECTION: forcing a failure. [ 510.926509][T20397] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 510.944453][T20397] CPU: 1 UID: 0 PID: 20397 Comm: syz.2.4135 Not tainted syzkaller #0 PREEMPT(full) [ 510.944483][T20397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.944497][T20397] Call Trace: [ 510.944506][T20397] [ 510.944515][T20397] dump_stack_lvl+0x189/0x250 [ 510.944549][T20397] ? __pfx____ratelimit+0x10/0x10 [ 510.944582][T20397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.944611][T20397] ? __pfx__printk+0x10/0x10 [ 510.944634][T20397] ? fs_reclaim_acquire+0x7d/0x100 [ 510.944663][T20397] should_fail_ex+0x414/0x560 [ 510.944708][T20397] prepare_alloc_pages+0x213/0x610 [ 510.944737][T20397] __alloc_frozen_pages_noprof+0x123/0x370 [ 510.944764][T20397] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 510.944805][T20397] alloc_pages_bulk_noprof+0x560/0x710 [ 510.944833][T20397] ? alloc_pages_noprof+0xbe/0x190 [ 510.944859][T20397] kasan_populate_vmalloc+0xd1/0x270 [ 510.944889][T20397] ? do_raw_spin_unlock+0x122/0x240 [ 510.944923][T20397] alloc_vmap_area+0xd7a/0x14c0 [ 510.944968][T20397] ? __pfx_alloc_vmap_area+0x10/0x10 [ 510.945002][T20397] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 510.945031][T20397] ? __pfx___might_resched+0x10/0x10 [ 510.945052][T20397] ? __get_vm_area_node+0x13f/0x300 [ 510.945081][T20397] ? bpf_ringbuf_alloc+0x341/0x590 [ 510.945113][T20397] __get_vm_area_node+0x1f8/0x300 [ 510.945143][T20397] ? bpf_ringbuf_alloc+0x341/0x590 [ 510.945175][T20397] vmap+0x162/0x310 [ 510.945202][T20397] ? bpf_ringbuf_alloc+0x341/0x590 [ 510.945238][T20397] bpf_ringbuf_alloc+0x341/0x590 [ 510.945293][T20397] ringbuf_map_alloc+0x1c8/0x2f0 [ 510.945327][T20397] map_create+0xaa6/0x1640 [ 510.945352][T20397] ? security_bpf+0x7e/0x300 [ 510.945383][T20397] __sys_bpf+0x5f0/0x860 [ 510.945406][T20397] ? __pfx___sys_bpf+0x10/0x10 [ 510.945449][T20397] ? rcu_is_watching+0x15/0xb0 [ 510.945484][T20397] __x64_sys_bpf+0x7c/0x90 [ 510.945516][T20397] do_syscall_64+0xfa/0xfa0 [ 510.945536][T20397] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.945557][T20397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.945578][T20397] ? clear_bhb_loop+0x60/0xb0 [ 510.945604][T20397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.945624][T20397] RIP: 0033:0x7fe9cdb8f6c9 [ 510.945645][T20397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.945664][T20397] RSP: 002b:00007fe9cbdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.945695][T20397] RAX: ffffffffffffffda RBX: 00007fe9cdde5fa0 RCX: 00007fe9cdb8f6c9 [ 510.945710][T20397] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 0000000000000000 [ 510.945723][T20397] RBP: 00007fe9cbdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.945735][T20397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.945746][T20397] R13: 00007fe9cdde6038 R14: 00007fe9cdde5fa0 R15: 00007ffe1f7da528 [ 510.945781][T20397] [ 511.713827][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4138'. [ 512.214149][T20437] netlink: 'syz.0.4143': attribute type 12 has an invalid length. [ 512.293662][T20430] lo speed is unknown, defaulting to 1000 [ 512.333786][T20430] wg1 speed is unknown, defaulting to 1000 [ 512.369823][T20430] dummy0 speed is unknown, defaulting to 1000 [ 512.879727][T20465] netlink: 'syz.6.4153': attribute type 1 has an invalid length. [ 512.935558][T20428] delete_channel: no stack [ 512.942247][T20449] lo speed is unknown, defaulting to 1000 [ 513.029279][T20465] bond5: entered promiscuous mode [ 513.035800][T20465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.113793][T20468] 8021q: adding VLAN 0 to HW filter on device bond6 [ 513.134334][T20468] bond5: (slave bond6): making interface the new active one [ 513.147871][T20468] bond6: entered promiscuous mode [ 513.175011][T20468] bond5: (slave bond6): Enslaving as an active interface with an up link [ 513.206948][T20449] wg1 speed is unknown, defaulting to 1000 [ 513.223801][T20468] __nla_validate_parse: 2 callbacks suppressed [ 513.223825][T20468] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4153'. [ 513.243775][T20473] `: Port device team_slave_0 removed [ 513.262986][T20473] `: Port device team_slave_1 removed [ 513.275633][T20473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.286922][T20473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.307357][T20473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.315922][T20473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.330612][T20473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 513.349681][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4159'. [ 513.403859][T20449] dummy0 speed is unknown, defaulting to 1000 [ 513.412904][T20487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4153'. [ 513.492678][T20483] lo speed is unknown, defaulting to 1000 [ 513.513800][T20483] wg1 speed is unknown, defaulting to 1000 [ 513.553711][T20483] dummy0 speed is unknown, defaulting to 1000 [ 513.613164][T20495] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4161'. [ 514.157894][T20486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.215433][T20524] netlink: 'syz.2.4173': attribute type 1 has an invalid length. [ 514.228183][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4172'. [ 514.291945][T20522] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4171'. [ 514.312775][T20522] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4171'. [ 515.463538][T20560] netlink: 'syz.5.4182': attribute type 2 has an invalid length. [ 515.485043][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4182'. [ 515.498873][T20562] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 515.539658][T20564] xt_hashlimit: max too large, truncated to 1048576 [ 515.670890][T20567] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4185'. [ 515.690691][T20570] FAULT_INJECTION: forcing a failure. [ 515.690691][T20570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.724883][T20570] CPU: 1 UID: 0 PID: 20570 Comm: syz.4.4186 Not tainted syzkaller #0 PREEMPT(full) [ 515.724915][T20570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 515.724928][T20570] Call Trace: [ 515.724937][T20570] [ 515.724946][T20570] dump_stack_lvl+0x189/0x250 [ 515.724982][T20570] ? __pfx____ratelimit+0x10/0x10 [ 515.725015][T20570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.725044][T20570] ? __pfx__printk+0x10/0x10 [ 515.725080][T20570] should_fail_ex+0x414/0x560 [ 515.725119][T20570] _copy_to_user+0x31/0xb0 [ 515.725150][T20570] simple_read_from_buffer+0xe1/0x170 [ 515.725188][T20570] proc_fail_nth_read+0x1b3/0x220 [ 515.725229][T20570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.725260][T20570] ? rw_verify_area+0x2a6/0x4d0 [ 515.725289][T20570] ? __lock_acquire+0xab9/0xd20 [ 515.725308][T20570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.725336][T20570] vfs_read+0x200/0xa30 [ 515.725363][T20570] ? fdget_pos+0x247/0x320 [ 515.725389][T20570] ? __pfx___mutex_lock+0x10/0x10 [ 515.725412][T20570] ? __pfx_vfs_read+0x10/0x10 [ 515.725442][T20570] ? __fget_files+0x2a/0x420 [ 515.725467][T20570] ? __fget_files+0x3a0/0x420 [ 515.725486][T20570] ? __fget_files+0x2a/0x420 [ 515.725516][T20570] ksys_read+0x145/0x250 [ 515.725548][T20570] ? __pfx_ksys_read+0x10/0x10 [ 515.725581][T20570] ? do_syscall_64+0xbe/0xfa0 [ 515.725606][T20570] do_syscall_64+0xfa/0xfa0 [ 515.725629][T20570] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.725649][T20570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.725670][T20570] ? clear_bhb_loop+0x60/0xb0 [ 515.725696][T20570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.725717][T20570] RIP: 0033:0x7fe8d7f8e0dc [ 515.725736][T20570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 515.725753][T20570] RSP: 002b:00007fe8d8e0b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.725776][T20570] RAX: ffffffffffffffda RBX: 00007fe8d81e5fa0 RCX: 00007fe8d7f8e0dc [ 515.725792][T20570] RDX: 000000000000000f RSI: 00007fe8d8e0b0a0 RDI: 0000000000000004 [ 515.725805][T20570] RBP: 00007fe8d8e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 515.725818][T20570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.725831][T20570] R13: 00007fe8d81e6038 R14: 00007fe8d81e5fa0 R15: 00007ffdc7083998 [ 515.725866][T20570] [ 516.035643][T20571] lo speed is unknown, defaulting to 1000 [ 516.044847][T20571] wg1 speed is unknown, defaulting to 1000 [ 516.053816][T20571] dummy0 speed is unknown, defaulting to 1000 [ 516.134369][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4187'. [ 516.216659][T20581] netlink: 'syz.0.4189': attribute type 1 has an invalid length. [ 516.244502][T18582] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.280948][T20579] tipc: Invalid UDP bearer configuration [ 516.281015][T20579] tipc: Enabling of bearer rejected, failed to enable media [ 516.322494][T18582] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.357480][T18582] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.379933][T18582] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.799576][T20613] FAULT_INJECTION: forcing a failure. [ 516.799576][T20613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 516.841559][T20613] CPU: 0 UID: 0 PID: 20613 Comm: syz.5.4199 Not tainted syzkaller #0 PREEMPT(full) [ 516.841588][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.841602][T20613] Call Trace: [ 516.841611][T20613] [ 516.841620][T20613] dump_stack_lvl+0x189/0x250 [ 516.841653][T20613] ? __pfx____ratelimit+0x10/0x10 [ 516.841685][T20613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.841712][T20613] ? __pfx__printk+0x10/0x10 [ 516.841735][T20613] ? fs_reclaim_acquire+0x7d/0x100 [ 516.841764][T20613] should_fail_ex+0x414/0x560 [ 516.841802][T20613] prepare_alloc_pages+0x213/0x610 [ 516.841832][T20613] __alloc_frozen_pages_noprof+0x123/0x370 [ 516.841865][T20613] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 516.841907][T20613] alloc_pages_bulk_noprof+0x560/0x710 [ 516.841934][T20613] ? alloc_pages_noprof+0xbe/0x190 [ 516.841960][T20613] kasan_populate_vmalloc+0xd1/0x270 [ 516.841991][T20613] ? do_raw_spin_unlock+0x122/0x240 [ 516.842030][T20613] alloc_vmap_area+0xd7a/0x14c0 [ 516.842072][T20613] ? __pfx_alloc_vmap_area+0x10/0x10 [ 516.842102][T20613] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 516.842131][T20613] ? __pfx___might_resched+0x10/0x10 [ 516.842154][T20613] ? __get_vm_area_node+0x13f/0x300 [ 516.842182][T20613] ? bpf_ringbuf_alloc+0x341/0x590 [ 516.842214][T20613] __get_vm_area_node+0x1f8/0x300 [ 516.842245][T20613] ? bpf_ringbuf_alloc+0x341/0x590 [ 516.842278][T20613] vmap+0x162/0x310 [ 516.842306][T20613] ? bpf_ringbuf_alloc+0x341/0x590 [ 516.842341][T20613] bpf_ringbuf_alloc+0x341/0x590 [ 516.842378][T20613] ringbuf_map_alloc+0x1c8/0x2f0 [ 516.842412][T20613] map_create+0xaa6/0x1640 [ 516.842436][T20613] ? security_bpf+0x7e/0x300 [ 516.842467][T20613] __sys_bpf+0x5f0/0x860 [ 516.842490][T20613] ? __pfx___sys_bpf+0x10/0x10 [ 516.842527][T20613] ? ksys_write+0x22a/0x250 [ 516.842560][T20613] ? __pfx_ksys_write+0x10/0x10 [ 516.842596][T20613] __x64_sys_bpf+0x7c/0x90 [ 516.842627][T20613] do_syscall_64+0xfa/0xfa0 [ 516.842647][T20613] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.842667][T20613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.842688][T20613] ? clear_bhb_loop+0x60/0xb0 [ 516.842712][T20613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.842733][T20613] RIP: 0033:0x7f16edd8f6c9 [ 516.842751][T20613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.842770][T20613] RSP: 002b:00007f16ebff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 516.842792][T20613] RAX: ffffffffffffffda RBX: 00007f16edfe5fa0 RCX: 00007f16edd8f6c9 [ 516.842808][T20613] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 0000000000000000 [ 516.842821][T20613] RBP: 00007f16ebff6090 R08: 0000000000000000 R09: 0000000000000000 [ 516.842834][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.842847][T20613] R13: 00007f16edfe6038 R14: 00007f16edfe5fa0 R15: 00007ffd48f41dc8 [ 516.842889][T20613] [ 517.168367][T20614] macvtap1: entered allmulticast mode [ 517.173819][T20614] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 517.293271][T20614] mac80211_hwsim hwsim32 wlan0: left allmulticast mode [ 517.478349][T20634] netlink: zone id is out of range [ 517.497642][T20634] netlink: zone id is out of range [ 517.523461][T20634] netlink: zone id is out of range [ 517.528857][T20634] netlink: zone id is out of range [ 517.534106][T20634] netlink: get zone limit has 4 unknown bytes [ 517.851374][T20652] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.241118][T20664] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 518.363490][T20668] xt_hashlimit: max too large, truncated to 1048576 [ 518.401898][T20666] __nla_validate_parse: 7 callbacks suppressed [ 518.401923][T20666] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4218'. [ 518.454031][T20666] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4218'. [ 518.467742][T20675] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4222'. [ 518.517766][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4218'. [ 518.553659][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4225'. [ 518.563784][T20680] dummy0: left allmulticast mode [ 518.574748][T20680] dummy0: left promiscuous mode [ 518.584780][T20680] bridge0: port 3(dummy0) entered disabled state [ 518.595135][T20680] bridge_slave_1: left allmulticast mode [ 518.605582][T20680] bridge_slave_1: left promiscuous mode [ 518.611612][T20680] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.633473][T20680] bridge_slave_0: left promiscuous mode [ 518.662021][T20680] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.146311][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 519.172944][T20709] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 519.245200][T20683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4225'. [ 519.606911][T20719] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4236'. [ 519.710957][T20724] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 520.168802][T20745] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 520.183798][T20747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4247'. [ 520.207575][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4248'. [ 521.549044][T20788] 8021q: VLANs not supported on ipvlan1 [ 521.589449][T20788] macsec1: entered promiscuous mode [ 521.594718][T20788] macsec1: entered allmulticast mode [ 521.622515][T20793] FAULT_INJECTION: forcing a failure. [ 521.622515][T20793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.719967][T20793] CPU: 0 UID: 0 PID: 20793 Comm: syz.0.4261 Not tainted syzkaller #0 PREEMPT(full) [ 521.719996][T20793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.720027][T20793] Call Trace: [ 521.720035][T20793] [ 521.720049][T20793] dump_stack_lvl+0x189/0x250 [ 521.720083][T20793] ? __pfx____ratelimit+0x10/0x10 [ 521.720117][T20793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.720146][T20793] ? __pfx__printk+0x10/0x10 [ 521.720169][T20793] ? __might_fault+0xb0/0x130 [ 521.720213][T20793] should_fail_ex+0x414/0x560 [ 521.720251][T20793] _copy_from_user+0x2d/0xb0 [ 521.720279][T20793] kstrtouint_from_user+0xc4/0x170 [ 521.720306][T20793] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 521.720348][T20793] proc_fail_nth_write+0x88/0x200 [ 521.720376][T20793] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 521.720410][T20793] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 521.720440][T20793] vfs_write+0x27e/0xb30 [ 521.720480][T20793] ? __pfx_vfs_write+0x10/0x10 [ 521.720525][T20793] ? __fget_files+0x2a/0x420 [ 521.720550][T20793] ? __fget_files+0x3a0/0x420 [ 521.720574][T20793] ? __fget_files+0x2a/0x420 [ 521.720603][T20793] ksys_write+0x145/0x250 [ 521.720635][T20793] ? __pfx_ksys_write+0x10/0x10 [ 521.720667][T20793] ? do_syscall_64+0xbe/0xfa0 [ 521.720692][T20793] do_syscall_64+0xfa/0xfa0 [ 521.720711][T20793] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.720731][T20793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.720752][T20793] ? clear_bhb_loop+0x60/0xb0 [ 521.720777][T20793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.720796][T20793] RIP: 0033:0x7f057e58e17f [ 521.720815][T20793] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 521.720833][T20793] RSP: 002b:00007f057f481030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 521.720856][T20793] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f057e58e17f [ 521.720871][T20793] RDX: 0000000000000001 RSI: 00007f057f4810a0 RDI: 0000000000000003 [ 521.720884][T20793] RBP: 00007f057f481090 R08: 0000000000000000 R09: 0000000000000000 [ 521.720898][T20793] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 521.720910][T20793] R13: 00007f057e7e6038 R14: 00007f057e7e5fa0 R15: 00007fff61ca3bd8 [ 521.720944][T20793] [ 522.180433][ T96] block nbd0: Possible stuck request ffff88802506e000: control (read@0,1024B). Runtime 390 seconds [ 522.191991][ T96] block nbd0: Possible stuck request ffff88802506e1c0: control (read@1024,1024B). Runtime 390 seconds [ 522.206079][ T96] block nbd0: Possible stuck request ffff88802506e380: control (read@2048,1024B). Runtime 390 seconds [ 522.217998][ T96] block nbd0: Possible stuck request ffff88802506e540: control (read@3072,1024B). Runtime 390 seconds [ 522.367524][T20808] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 523.462075][ T96] block nbd1: Possible stuck request ffff888025100000: control (read@0,1024B). Runtime 210 seconds [ 523.494391][T20869] syzkaller0: entered promiscuous mode [ 523.502477][T20869] syzkaller0: entered allmulticast mode [ 523.732962][T20888] __nla_validate_parse: 9 callbacks suppressed [ 523.732985][T20888] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4284'. [ 523.756806][ T96] block nbd1: Possible stuck request ffff8880251001c0: control (read@1024,1024B). Runtime 210 seconds [ 523.772928][ T96] block nbd1: Possible stuck request ffff888025100380: control (read@2048,1024B). Runtime 210 seconds [ 523.790608][ T96] block nbd1: Possible stuck request ffff888025100540: control (read@3072,1024B). Runtime 210 seconds [ 523.919934][T20897] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4289'. [ 523.992267][T20897] vlan2: entered allmulticast mode [ 524.128734][T20901] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4291'. [ 525.882529][T20905] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 525.891917][T20905] macvtap1: entered allmulticast mode [ 525.900801][T20905] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 525.925001][T20905] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 525.935892][T20905] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 525.995241][T20915] xt_hashlimit: max too large, truncated to 1048576 [ 526.108595][T20917] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4298'. [ 526.831103][T20930] lo speed is unknown, defaulting to 1000 [ 526.854000][T20930] wg1 speed is unknown, defaulting to 1000 [ 526.905380][T20930] dummy0 speed is unknown, defaulting to 1000 [ 526.991538][T20958] FAULT_INJECTION: forcing a failure. [ 526.991538][T20958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.028798][T20958] CPU: 1 UID: 0 PID: 20958 Comm: syz.2.4310 Not tainted syzkaller #0 PREEMPT(full) [ 527.028829][T20958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.028843][T20958] Call Trace: [ 527.028851][T20958] [ 527.028861][T20958] dump_stack_lvl+0x189/0x250 [ 527.028896][T20958] ? __pfx____ratelimit+0x10/0x10 [ 527.028929][T20958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.028959][T20958] ? __pfx__printk+0x10/0x10 [ 527.028981][T20958] ? __might_fault+0xb0/0x130 [ 527.029031][T20958] should_fail_ex+0x414/0x560 [ 527.029064][T20958] _copy_from_user+0x2d/0xb0 [ 527.029089][T20958] ___sys_sendmsg+0x158/0x2a0 [ 527.029121][T20958] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.029191][T20958] ? __fget_files+0x2a/0x420 [ 527.029208][T20958] ? __fget_files+0x3a0/0x420 [ 527.029236][T20958] __x64_sys_sendmsg+0x19b/0x260 [ 527.029259][T20958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.029290][T20958] ? __pfx_ksys_write+0x10/0x10 [ 527.029319][T20958] ? do_syscall_64+0xbe/0xfa0 [ 527.029341][T20958] do_syscall_64+0xfa/0xfa0 [ 527.029357][T20958] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.029375][T20958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.029393][T20958] ? clear_bhb_loop+0x60/0xb0 [ 527.029416][T20958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.029433][T20958] RIP: 0033:0x7fe9cdb8f6c9 [ 527.029451][T20958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.029466][T20958] RSP: 002b:00007fe9cbdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.029487][T20958] RAX: ffffffffffffffda RBX: 00007fe9cdde5fa0 RCX: 00007fe9cdb8f6c9 [ 527.029502][T20958] RDX: 0000000004004854 RSI: 0000200000000140 RDI: 0000000000000003 [ 527.029514][T20958] RBP: 00007fe9cbdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 527.029525][T20958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.029537][T20958] R13: 00007fe9cdde6038 R14: 00007fe9cdde5fa0 R15: 00007ffe1f7da528 [ 527.029568][T20958] [ 527.121009][T20934] lo speed is unknown, defaulting to 1000 [ 527.163217][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4309'. [ 527.267024][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4309'. [ 527.373152][T20934] wg1 speed is unknown, defaulting to 1000 [ 527.380154][T20964] veth0: entered promiscuous mode [ 527.420348][T20934] dummy0 speed is unknown, defaulting to 1000 [ 527.446189][T20966] veth0: left promiscuous mode [ 527.549214][T20966] lo speed is unknown, defaulting to 1000 [ 527.551163][T20968] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4313'. [ 527.558058][T20966] wg1 speed is unknown, defaulting to 1000 [ 527.572389][T20966] dummy0 speed is unknown, defaulting to 1000 [ 528.555649][T20998] lo speed is unknown, defaulting to 1000 [ 528.570498][T20998] wg1 speed is unknown, defaulting to 1000 [ 528.604138][T20998] dummy0 speed is unknown, defaulting to 1000 [ 528.613512][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4322'. [ 528.626649][T21001] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4322'. [ 529.004489][T21016] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4325'. [ 529.372353][T21024] syzkaller0: entered promiscuous mode [ 529.380261][T21024] syzkaller0: entered allmulticast mode [ 529.385206][T21037] FAULT_INJECTION: forcing a failure. [ 529.385206][T21037] name failslab, interval 1, probability 0, space 0, times 0 [ 529.403048][T21037] CPU: 0 UID: 0 PID: 21037 Comm: syz.2.4329 Not tainted syzkaller #0 PREEMPT(full) [ 529.403085][T21037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.403102][T21037] Call Trace: [ 529.403113][T21037] [ 529.403130][T21037] dump_stack_lvl+0x189/0x250 [ 529.403172][T21037] ? __pfx____ratelimit+0x10/0x10 [ 529.403210][T21037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.403243][T21037] ? __pfx__printk+0x10/0x10 [ 529.403287][T21037] should_fail_ex+0x414/0x560 [ 529.403336][T21037] should_failslab+0xa8/0x100 [ 529.403363][T21037] kmem_cache_alloc_noprof+0x74/0x6e0 [ 529.403399][T21037] ? skb_clone+0x212/0x3a0 [ 529.403435][T21037] skb_clone+0x212/0x3a0 [ 529.403469][T21037] __netlink_deliver_tap+0x404/0x850 [ 529.403519][T21037] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.403548][T21037] netlink_deliver_tap+0x19c/0x1b0 [ 529.403576][T21037] __netlink_sendskb+0x47/0x90 [ 529.403614][T21037] netlink_dump+0xa84/0xe90 [ 529.403653][T21037] ? __pfx_netlink_dump+0x10/0x10 [ 529.403698][T21037] ? nla_strdup+0xb8/0x140 [ 529.403733][T21037] __netlink_dump_start+0x5cb/0x7e0 [ 529.403765][T21037] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 529.403802][T21037] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 529.403842][T21037] nf_tables_getrule_reset+0x1ce/0x610 [ 529.403874][T21037] ? __pfx_nf_tables_getrule_reset+0x10/0x10 [ 529.403902][T21037] ? __pfx_nf_tables_dumpreset_rules_start+0x10/0x10 [ 529.403927][T21037] ? __pfx_nf_tables_dumpreset_rules+0x10/0x10 [ 529.403951][T21037] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 529.403980][T21037] ? __nla_parse+0x40/0x60 [ 529.404004][T21037] ? __pfx_nf_tables_getrule_reset+0x10/0x10 [ 529.404037][T21037] nfnetlink_rcv_msg+0x80e/0x1130 [ 529.404070][T21037] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 529.404122][T21037] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 529.404152][T21037] ? kmem_cache_free+0x19b/0x690 [ 529.404252][T21037] netlink_rcv_skb+0x208/0x470 [ 529.404279][T21037] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 529.404320][T21037] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.404360][T21037] ? bpf_lsm_capable+0x9/0x20 [ 529.404390][T21037] ? security_capable+0x7e/0x2e0 [ 529.404433][T21037] nfnetlink_rcv+0x282/0x2590 [ 529.404471][T21037] ? __dev_queue_xmit+0x284/0x3740 [ 529.404510][T21037] ? __dev_queue_xmit+0x1bfb/0x3740 [ 529.404560][T21037] ? __dev_queue_xmit+0x284/0x3740 [ 529.404605][T21037] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 529.404663][T21037] ? ref_tracker_free+0x63a/0x7d0 [ 529.404688][T21037] ? __asan_memcpy+0x40/0x70 [ 529.404718][T21037] ? __pfx_ref_tracker_free+0x10/0x10 [ 529.404761][T21037] ? skb_clone+0x246/0x3a0 [ 529.404793][T21037] ? __netlink_deliver_tap+0x807/0x850 [ 529.404819][T21037] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.404854][T21037] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.404890][T21037] netlink_unicast+0x82f/0x9e0 [ 529.404937][T21037] ? __pfx_netlink_unicast+0x10/0x10 [ 529.404976][T21037] ? netlink_sendmsg+0x642/0xb30 [ 529.405000][T21037] ? skb_put+0x11b/0x210 [ 529.405029][T21037] netlink_sendmsg+0x805/0xb30 [ 529.405068][T21037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.405100][T21037] ? aa_sock_msg_perm+0xf1/0x1d0 [ 529.405139][T21037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.405163][T21037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.405191][T21037] __sock_sendmsg+0x21c/0x270 [ 529.405229][T21037] ____sys_sendmsg+0x505/0x830 [ 529.405265][T21037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.405316][T21037] ? import_iovec+0x74/0xa0 [ 529.405352][T21037] ___sys_sendmsg+0x21f/0x2a0 [ 529.405381][T21037] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.405454][T21037] ? __fget_files+0x2a/0x420 [ 529.405476][T21037] ? __fget_files+0x3a0/0x420 [ 529.405517][T21037] __x64_sys_sendmsg+0x19b/0x260 [ 529.405549][T21037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.405587][T21037] ? __pfx_ksys_write+0x10/0x10 [ 529.405645][T21037] ? do_syscall_64+0xbe/0xfa0 [ 529.405675][T21037] do_syscall_64+0xfa/0xfa0 [ 529.405710][T21037] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.405733][T21037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.405756][T21037] ? clear_bhb_loop+0x60/0xb0 [ 529.405784][T21037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.405807][T21037] RIP: 0033:0x7fe9cdb8f6c9 [ 529.405829][T21037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.405848][T21037] RSP: 002b:00007fe9cbdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.405874][T21037] RAX: ffffffffffffffda RBX: 00007fe9cdde6090 RCX: 00007fe9cdb8f6c9 [ 529.405892][T21037] RDX: 0000000000008004 RSI: 0000200000000240 RDI: 0000000000000003 [ 529.405908][T21037] RBP: 00007fe9cbdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 529.405924][T21037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 529.405937][T21037] R13: 00007fe9cdde6128 R14: 00007fe9cdde6090 R15: 00007ffe1f7da528 [ 529.405978][T21037] [ 530.358306][T21056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4335'. [ 530.432985][T21058] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4335'. [ 532.101403][T21075] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4340'. [ 532.192777][T21081] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 532.209787][T21081] macvtap1: entered allmulticast mode [ 532.223333][T21081] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 532.287496][T21081] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 532.315857][T21081] mac80211_hwsim hwsim45 wlan0: left promiscuous mode [ 532.941033][T21104] syzkaller0: entered promiscuous mode [ 532.969819][T21104] syzkaller0: entered allmulticast mode [ 532.977760][T21122] netlink: 'syz.2.4355': attribute type 39 has an invalid length. [ 532.987533][T21121] netlink: 'syz.2.4355': attribute type 39 has an invalid length. [ 533.293283][T21121] veth0_macvtap: left promiscuous mode [ 533.475210][T21143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4358'. [ 533.497168][T21142] netlink: 'syz.2.4359': attribute type 13 has an invalid length. [ 535.185622][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4361'. [ 535.270518][T21166] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 535.349676][T21142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.412669][T21170] xt_hashlimit: max too large, truncated to 1048576 [ 535.624782][T18578] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.638885][T18578] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.672354][T18578] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 535.691340][T18578] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 33343 - 0 [ 535.729687][T18578] netdevsim netdevsim2 netdevsim0: unset [1, 3] type 2 family 0 port 34366 - 0 [ 535.741580][T18578] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.763354][T18578] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.782942][T18578] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 535.808880][T18578] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 33343 - 0 [ 535.842945][T18578] netdevsim netdevsim2 netdevsim1: unset [1, 3] type 2 family 0 port 34366 - 0 [ 535.915121][T18578] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.930487][T18578] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.942034][T18578] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 535.951541][T18578] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 33343 - 0 [ 535.962083][T18578] netdevsim netdevsim2 netdevsim2: unset [1, 3] type 2 family 0 port 34366 - 0 [ 535.972345][T18578] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.981542][T18578] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.991697][T18578] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 536.001350][T18578] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 33343 - 0 [ 536.011023][T18578] netdevsim netdevsim2 netdevsim3: unset [1, 3] type 2 family 0 port 34366 - 0 [ 536.128216][T21159] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 536.442162][T21208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4370'. [ 536.498055][T21215] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4370'. [ 536.549124][T21198] syzkaller0: entered promiscuous mode [ 536.565463][T21198] syzkaller0: entered allmulticast mode [ 536.694148][T21224] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4375'. [ 536.977104][T21228] tipc: Started in network mode [ 536.982900][T21228] tipc: Node identity , cluster identity 4711 [ 536.990270][T21228] tipc: Failed to obtain node identity [ 537.000507][T21228] tipc: Enabling of bearer rejected, failed to enable media [ 537.053175][T21231] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 537.113413][T21231] syzkaller0: entered promiscuous mode [ 537.131335][T21231] syzkaller0: entered allmulticast mode [ 540.443192][T21250] macvtap1: entered allmulticast mode [ 540.449364][T21250] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 540.464993][T21250] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 540.821219][T21274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4386'. [ 540.831721][T21274] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4386'. [ 541.098844][T21286] lo speed is unknown, defaulting to 1000 [ 541.133930][T21286] wg1 speed is unknown, defaulting to 1000 [ 541.174358][T21286] dummy0 speed is unknown, defaulting to 1000 [ 541.183917][T21296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4392'. [ 541.262971][T21296] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4392'. [ 541.924843][T21325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.227046][T21340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4403'. [ 542.236989][T21340] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4403'. [ 542.458123][T21346] bond7 (unregistering): Released all slaves [ 542.756105][T21350] lo speed is unknown, defaulting to 1000 [ 542.857302][T21350] wg1 speed is unknown, defaulting to 1000 [ 542.866764][T21355] lo speed is unknown, defaulting to 1000 [ 542.885472][T21355] wg1 speed is unknown, defaulting to 1000 [ 542.899176][T21350] dummy0 speed is unknown, defaulting to 1000 [ 542.955552][T21355] dummy0 speed is unknown, defaulting to 1000 [ 542.984295][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4410'. [ 543.007668][T21364] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 543.029766][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4410'. [ 543.052856][T21361] netlink: 'syz.0.4410': attribute type 18 has an invalid length. [ 543.284621][T21374] lo speed is unknown, defaulting to 1000 [ 543.298801][T21374] wg1 speed is unknown, defaulting to 1000 [ 543.313967][T21374] dummy0 speed is unknown, defaulting to 1000 [ 543.536452][T21387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4417'. [ 543.566006][T21387] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4417'. [ 543.674834][T21390] FAULT_INJECTION: forcing a failure. [ 543.674834][T21390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.737104][T21390] CPU: 0 UID: 0 PID: 21390 Comm: syz.0.4415 Not tainted syzkaller #0 PREEMPT(full) [ 543.737134][T21390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.737148][T21390] Call Trace: [ 543.737156][T21390] [ 543.737167][T21390] dump_stack_lvl+0x189/0x250 [ 543.737202][T21390] ? __pfx____ratelimit+0x10/0x10 [ 543.737234][T21390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.737263][T21390] ? __pfx__printk+0x10/0x10 [ 543.737285][T21390] ? __might_fault+0xb0/0x130 [ 543.737327][T21390] should_fail_ex+0x414/0x560 [ 543.737365][T21390] _copy_from_user+0x2d/0xb0 [ 543.737393][T21390] __x64_sys_epoll_ctl+0x126/0x1a0 [ 543.737420][T21390] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 543.737454][T21390] do_syscall_64+0xfa/0xfa0 [ 543.737473][T21390] ? lockdep_hardirqs_on+0x9c/0x150 [ 543.737495][T21390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.737516][T21390] ? clear_bhb_loop+0x60/0xb0 [ 543.737542][T21390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.737563][T21390] RIP: 0033:0x7f057e58f6c9 [ 543.737582][T21390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.737600][T21390] RSP: 002b:00007f057f460038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 543.737623][T21390] RAX: ffffffffffffffda RBX: 00007f057e7e6090 RCX: 00007f057e58f6c9 [ 543.737638][T21390] RDX: 000000000000000c RSI: 0000000000000001 RDI: 0000000000000009 [ 543.737650][T21390] RBP: 00007f057f460090 R08: 0000000000000000 R09: 0000000000000000 [ 543.737663][T21390] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 543.737676][T21390] R13: 00007f057e7e6128 R14: 00007f057e7e6090 R15: 00007fff61ca3bd8 [ 543.737711][T21390] [ 543.991855][T21396] vlan2: entered allmulticast mode [ 544.066974][T21389] lo speed is unknown, defaulting to 1000 [ 544.101351][T21389] wg1 speed is unknown, defaulting to 1000 [ 544.130487][T21389] dummy0 speed is unknown, defaulting to 1000 [ 544.430238][T21401] netlink: 'syz.6.4421': attribute type 3 has an invalid length. [ 544.457001][T21401] netlink: 'syz.6.4421': attribute type 1 has an invalid length. [ 544.800726][T21419] lo speed is unknown, defaulting to 1000 [ 544.831452][T21429] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 544.862637][T21419] wg1 speed is unknown, defaulting to 1000 [ 544.900794][T21419] dummy0 speed is unknown, defaulting to 1000 [ 545.242059][T21443] netlink: 'syz.2.4437': attribute type 1 has an invalid length. [ 545.958594][T21467] x_tables: duplicate underflow at hook 4 [ 546.153553][T21475] __nla_validate_parse: 11 callbacks suppressed [ 546.153575][T21475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4444'. [ 546.188550][T21475] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4444'. [ 546.348580][T21480] FAULT_INJECTION: forcing a failure. [ 546.348580][T21480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.394211][T21480] CPU: 0 UID: 0 PID: 21480 Comm: syz.4.4446 Not tainted syzkaller #0 PREEMPT(full) [ 546.394244][T21480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.394259][T21480] Call Trace: [ 546.394268][T21480] [ 546.394278][T21480] dump_stack_lvl+0x189/0x250 [ 546.394314][T21480] ? __pfx____ratelimit+0x10/0x10 [ 546.394347][T21480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.394376][T21480] ? __pfx__printk+0x10/0x10 [ 546.394411][T21480] should_fail_ex+0x414/0x560 [ 546.394451][T21480] _copy_to_user+0x31/0xb0 [ 546.394482][T21480] simple_read_from_buffer+0xe1/0x170 [ 546.394521][T21480] proc_fail_nth_read+0x1b3/0x220 [ 546.394553][T21480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.394584][T21480] ? rw_verify_area+0x2a6/0x4d0 [ 546.394613][T21480] ? __lock_acquire+0xab9/0xd20 [ 546.394633][T21480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.394663][T21480] vfs_read+0x200/0xa30 [ 546.394691][T21480] ? fdget_pos+0x247/0x320 [ 546.394716][T21480] ? __pfx___mutex_lock+0x10/0x10 [ 546.394739][T21480] ? __pfx_vfs_read+0x10/0x10 [ 546.394770][T21480] ? __fget_files+0x2a/0x420 [ 546.394795][T21480] ? __fget_files+0x3a0/0x420 [ 546.394814][T21480] ? __fget_files+0x2a/0x420 [ 546.394844][T21480] ksys_read+0x145/0x250 [ 546.394876][T21480] ? __pfx_ksys_read+0x10/0x10 [ 546.394924][T21480] do_syscall_64+0xfa/0xfa0 [ 546.394944][T21480] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.394964][T21480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.394985][T21480] ? clear_bhb_loop+0x60/0xb0 [ 546.395012][T21480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.395032][T21480] RIP: 0033:0x7fe8d7f8e0dc [ 546.395051][T21480] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 546.395070][T21480] RSP: 002b:00007fe8d8e0b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.395094][T21480] RAX: ffffffffffffffda RBX: 00007fe8d81e5fa0 RCX: 00007fe8d7f8e0dc [ 546.395110][T21480] RDX: 000000000000000f RSI: 00007fe8d8e0b0a0 RDI: 000000000000000f [ 546.395124][T21480] RBP: 00007fe8d8e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 546.395137][T21480] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 546.395151][T21480] R13: 00007fe8d81e6038 R14: 00007fe8d81e5fa0 R15: 00007ffdc7083998 [ 546.395188][T21480] [ 546.426224][T21476] lo speed is unknown, defaulting to 1000 [ 546.637258][T21492] !: renamed from dummy0 [ 546.660191][T21476] wg1 speed is unknown, defaulting to 1000 [ 546.685148][T21476] dummy0 speed is unknown, defaulting to 1000 [ 546.840969][T21497] xt_hashlimit: max too large, truncated to 1048576 [ 546.872868][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4453'. [ 546.893978][T21499] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4453'. [ 547.000217][T21506] netlink: 'syz.6.4456': attribute type 1 has an invalid length. [ 547.172930][T21506] bond7: (slave gretap1): making interface the new active one [ 547.194093][T21506] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 547.208425][T21516] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4458'. [ 547.467540][T21519] bond1: (slave bond_slave_1): Device is not bonding slave [ 547.491741][T21519] bond1: option active_slave: invalid value (bond_slave_1) [ 547.509957][T21519] bond1 (unregistering): Released all slaves [ 547.754755][T21536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 547.768872][T21536] bond0: (slave bond3): Enslaving as an active interface with an up link [ 547.796369][T21541] xt_hashlimit: max too large, truncated to 1048576 [ 547.824581][T21543] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4468'. [ 547.956671][T21552] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4471'. [ 548.093747][T21552] netlink: 384 bytes leftover after parsing attributes in process `syz.5.4471'. [ 548.640053][T21568] lo speed is unknown, defaulting to 1000 [ 548.669662][T21568] wg1 speed is unknown, defaulting to 1000 [ 548.742733][T21568] dummy0 speed is unknown, defaulting to 1000 [ 549.106605][T21587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4479'. [ 549.135476][T21591] netlink: 'syz.5.4479': attribute type 7 has an invalid length. [ 549.160300][T21590] xt_hashlimit: max too large, truncated to 1048576 [ 549.193332][T21587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4479'. [ 549.404251][T21597] tipc: Enabled bearer , priority 0 [ 549.471238][T21596] syzkaller0: entered promiscuous mode [ 549.496333][T21596] syzkaller0: entered allmulticast mode [ 549.541380][T21596] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 549.562680][T21596] tipc: Resetting bearer [ 549.599333][T21593] tipc: Resetting bearer [ 549.639977][T21593] tipc: Disabling bearer [ 549.815341][T21622] netlink: 'syz.4.4493': attribute type 27 has an invalid length. [ 551.049782][T21624] team0 (unregistering): Port device team_slave_0 removed [ 551.082619][T21624] team0 (unregistering): Port device team_slave_1 removed [ 551.835559][T21694] lo speed is unknown, defaulting to 1000 [ 551.870478][T21694] wg1 speed is unknown, defaulting to 1000 [ 551.885290][T21700] __nla_validate_parse: 3 callbacks suppressed [ 551.885310][T21700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4513'. [ 551.924768][T21701] batadv1: entered promiscuous mode [ 551.931889][T21701] batadv1: entered allmulticast mode [ 551.960030][T21694] dummy0 speed is unknown, defaulting to 1000 [ 552.133134][T21714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4516'. [ 552.159957][T21713] ªªªªªª: renamed from wg2 [ 552.266465][ T96] block nbd0: Possible stuck request ffff88802506e000: control (read@0,1024B). Runtime 420 seconds [ 552.278356][ T96] block nbd0: Possible stuck request ffff88802506e1c0: control (read@1024,1024B). Runtime 420 seconds [ 552.289867][ T96] block nbd0: Possible stuck request ffff88802506e380: control (read@2048,1024B). Runtime 420 seconds [ 552.301073][ T96] block nbd0: Possible stuck request ffff88802506e540: control (read@3072,1024B). Runtime 420 seconds [ 552.468045][T21727] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4523'. [ 552.591971][T21735] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4524'. [ 552.620610][T21727] vlan2: entered allmulticast mode [ 552.648343][T21739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4526'. [ 552.792126][T21729] tipc: Enabled bearer , priority 0 [ 552.881754][T21731] tipc: Resetting bearer [ 552.891643][T21735] lo speed is unknown, defaulting to 1000 [ 552.928821][T21735] wg1 speed is unknown, defaulting to 1000 [ 552.950770][T21735] dummy0 speed is unknown, defaulting to 1000 [ 553.312855][T21766] netlink: 'syz.4.4531': attribute type 1 has an invalid length. [ 553.333921][T21768] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4532'. [ 553.353288][T21764] netlink: 'syz.4.4531': attribute type 1 has an invalid length. [ 553.431297][T21728] tipc: Disabling bearer [ 553.504808][T21777] pim6reg: entered allmulticast mode [ 553.518509][T21777] pim6reg: left allmulticast mode [ 553.537900][ T96] block nbd1: Possible stuck request ffff888025100000: control (read@0,1024B). Runtime 240 seconds [ 553.720340][T21791] xt_hashlimit: max too large, truncated to 1048576 [ 553.777439][ T96] block nbd1: Possible stuck request ffff8880251001c0: control (read@1024,1024B). Runtime 240 seconds [ 553.788943][ T96] block nbd1: Possible stuck request ffff888025100380: control (read@2048,1024B). Runtime 240 seconds [ 553.807198][ T96] block nbd1: Possible stuck request ffff888025100540: control (read@3072,1024B). Runtime 240 seconds [ 553.818116][T21795] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 553.964390][T21800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4542'. [ 554.019101][T21802] netlink: 320 bytes leftover after parsing attributes in process `syz.6.4543'. [ 554.235835][T21812] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 554.252281][T21812] bond8 (unregistering): Released all slaves [ 554.254455][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4546'. [ 554.271371][T21813] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4545'. [ 554.764354][T21841] gre1: entered allmulticast mode [ 555.160800][T18578] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.175249][T18578] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.200674][T18578] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.243566][T21865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 555.253505][T21865] bond0: (slave bond4): Enslaving as an active interface with an up link [ 555.361061][T18578] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.431340][T21876] netlink: 'syz.4.4563': attribute type 4 has an invalid length. [ 555.446787][T21876] netlink: 'syz.4.4563': attribute type 4 has an invalid length. [ 555.866093][T21895] netlink: 'syz.2.4558': attribute type 29 has an invalid length. [ 555.928907][T21898] veth0: entered promiscuous mode [ 556.053495][T21898] veth0 (unregistering): left promiscuous mode [ 556.067273][T21906] netlink: 'syz.0.4570': attribute type 1 has an invalid length. [ 556.267522][T21883] syzkaller1: entered promiscuous mode [ 556.273263][T21883] syzkaller1: entered allmulticast mode [ 556.306502][T21905] bond0: option arp_validate: invalid value (55553) [ 556.462723][T21925] vlan2: entered allmulticast mode [ 556.760949][T21929] xt_hashlimit: max too large, truncated to 1048576 [ 556.990070][T21940] __nla_validate_parse: 11 callbacks suppressed [ 556.990090][T21940] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4578'. [ 557.661126][T18556] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.745415][T18556] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.761988][T18556] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.784181][T18556] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.999700][T21979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4591'. [ 558.059875][T21977] lo speed is unknown, defaulting to 1000 [ 558.070504][T21977] wg1 speed is unknown, defaulting to 1000 [ 558.095662][T21977] dummy0 speed is unknown, defaulting to 1000 [ 558.387017][T21999] x_tables: duplicate underflow at hook 4 [ 558.424900][T21999] syz_tun: entered allmulticast mode [ 558.455272][T21999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4598'. [ 558.545544][T21999] syz_tun (unregistering): left allmulticast mode [ 558.617496][T22007] lo speed is unknown, defaulting to 1000 [ 558.626297][T22007] wg1 speed is unknown, defaulting to 1000 [ 558.634466][T22007] dummy0 speed is unknown, defaulting to 1000 [ 559.439828][T22026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4606'. [ 559.613030][T22037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4609'. [ 559.639451][T22037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.824992][T22049] lo speed is unknown, defaulting to 1000 [ 559.840615][T22049] wg1 speed is unknown, defaulting to 1000 [ 559.849599][T22049] dummy0 speed is unknown, defaulting to 1000 [ 560.068727][T22056] sctp: [Deprecated]: syz.4.4615 (pid 22056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.068727][T22056] Use struct sctp_sack_info instead [ 560.091116][T22056] sctp: [Deprecated]: syz.4.4615 (pid 22056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.091116][T22056] Use struct sctp_sack_info instead [ 560.153439][T22063] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4617'. [ 560.256990][T22060] xt_TCPMSS: Only works on TCP SYN packets [ 560.267451][T22063] vlan2: entered allmulticast mode [ 561.081758][T22086] ¾x9ÿ: renamed from bridge_slave_0 [ 561.128262][T22088] netlink: 'syz.0.4622': attribute type 1 has an invalid length. [ 561.477069][T22096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4622'. [ 561.488637][T22082] lo speed is unknown, defaulting to 1000 [ 561.508095][T22083] lo speed is unknown, defaulting to 1000 [ 561.512562][T22082] wg1 speed is unknown, defaulting to 1000 [ 561.538693][T22082] dummy0 speed is unknown, defaulting to 1000 [ 561.548180][T22083] wg1 speed is unknown, defaulting to 1000 [ 561.713271][T22083] dummy0 speed is unknown, defaulting to 1000 [ 562.050985][T22119] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4629'. [ 562.133498][T22111] syzkaller0: entered promiscuous mode [ 562.139594][T22111] syzkaller0: entered allmulticast mode [ 562.179408][T22110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4625'. [ 562.195088][T22119] nbd: socks must be embedded in a SOCK_ITEM attr [ 562.218804][T22126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.390769][T22134] FAULT_INJECTION: forcing a failure. [ 562.390769][T22134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.427810][T22134] CPU: 1 UID: 0 PID: 22134 Comm: syz.2.4634 Not tainted syzkaller #0 PREEMPT(full) [ 562.427840][T22134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.427854][T22134] Call Trace: [ 562.427863][T22134] [ 562.427873][T22134] dump_stack_lvl+0x189/0x250 [ 562.427908][T22134] ? __pfx____ratelimit+0x10/0x10 [ 562.427941][T22134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.427977][T22134] ? __pfx__printk+0x10/0x10 [ 562.427998][T22134] ? __might_fault+0xb0/0x130 [ 562.428040][T22134] should_fail_ex+0x414/0x560 [ 562.428077][T22134] _copy_from_user+0x2d/0xb0 [ 562.428105][T22134] kstrtouint_from_user+0xc4/0x170 [ 562.428130][T22134] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 562.428171][T22134] proc_fail_nth_write+0x88/0x200 [ 562.428199][T22134] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 562.428232][T22134] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 562.428261][T22134] vfs_write+0x27e/0xb30 [ 562.428301][T22134] ? __pfx_vfs_write+0x10/0x10 [ 562.428330][T22134] ? __fget_files+0x2a/0x420 [ 562.428355][T22134] ? __fget_files+0x3a0/0x420 [ 562.428379][T22134] ? __fget_files+0x2a/0x420 [ 562.428410][T22134] ksys_write+0x145/0x250 [ 562.428442][T22134] ? __pfx_ksys_write+0x10/0x10 [ 562.428474][T22134] ? do_syscall_64+0xbe/0xfa0 [ 562.428498][T22134] do_syscall_64+0xfa/0xfa0 [ 562.428516][T22134] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.428534][T22134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.428554][T22134] ? clear_bhb_loop+0x60/0xb0 [ 562.428579][T22134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.428598][T22134] RIP: 0033:0x7fe9cdb8e17f [ 562.428618][T22134] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 562.428635][T22134] RSP: 002b:00007fe9cbdf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 562.428657][T22134] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe9cdb8e17f [ 562.428672][T22134] RDX: 0000000000000001 RSI: 00007fe9cbdf60a0 RDI: 0000000000000004 [ 562.428684][T22134] RBP: 00007fe9cbdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 562.428697][T22134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 562.428709][T22134] R13: 00007fe9cdde6038 R14: 00007fe9cdde5fa0 R15: 00007ffe1f7da528 [ 562.428743][T22134] [ 562.968048][T22138] netlink: 'syz.0.4635': attribute type 13 has an invalid length. [ 563.056483][T22138] netlink: 'syz.0.4635': attribute type 17 has an invalid length. [ 563.238246][T22161] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 563.334824][T22138] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.374986][T22138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.509192][T22162] bond0 (unregistering): Released all slaves [ 563.563458][T22156] lo speed is unknown, defaulting to 1000 [ 563.579233][T22156] wg1 speed is unknown, defaulting to 1000 [ 563.598954][T22156] dummy0 speed is unknown, defaulting to 1000 [ 563.634823][T22173] bridge0: port 1(batadv1) entered blocking state [ 563.651391][T22173] bridge0: port 1(batadv1) entered disabled state [ 563.675983][T22173] batadv1: entered allmulticast mode [ 563.714570][T22173] batadv1: entered promiscuous mode [ 563.846030][T22171] lo speed is unknown, defaulting to 1000 [ 563.890546][T22171] wg1 speed is unknown, defaulting to 1000 [ 563.948514][T22171] dummy0 speed is unknown, defaulting to 1000 [ 564.137850][T18556] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 564.147239][T18556] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 564.367325][T22195] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4648'. [ 564.992522][T22222] syzkaller0: entered promiscuous mode [ 565.001279][T22222] syzkaller0: entered allmulticast mode [ 565.078010][T22232] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4657'. [ 565.117529][T22232] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4657'. [ 566.882761][T22238] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 567.047502][T22256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4659'. [ 567.131172][T22263] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4663'. [ 567.167997][T22256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4659'. [ 567.687292][T22295] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 567.922541][T22309] lo speed is unknown, defaulting to 1000 [ 567.941454][T22309] wg1 speed is unknown, defaulting to 1000 [ 567.968422][T22309] dummy0 speed is unknown, defaulting to 1000 [ 568.373893][T22325] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4682'. [ 568.591661][T22333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4683'. [ 568.739109][T22341] tipc: Started in network mode [ 568.757101][T22341] tipc: Node identity 1ea9cbfb5dde, cluster identity 4711 [ 568.764508][T22341] tipc: Enabled bearer , priority 0 [ 568.777633][T22341] syzkaller0: entered promiscuous mode [ 568.783160][T22341] syzkaller0: entered allmulticast mode [ 568.831319][T22345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4687'. [ 568.899144][T22341] tipc: Resetting bearer [ 568.945976][T22339] tipc: Resetting bearer [ 569.052924][T22339] tipc: Disabling bearer [ 569.063157][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4690'. [ 569.139764][T22353] netlink: 'syz.6.4692': attribute type 32 has an invalid length. [ 569.168403][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4692'. [ 569.305854][T22353] bond8: option coupled_control: invalid value (12) [ 569.329970][T22353] bond8 (unregistering): Released all slaves [ 569.688870][T22387] tipc: Started in network mode [ 569.693807][T22387] tipc: Node identity 9e76cc69ddee, cluster identity 4711 [ 569.702845][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4698'. [ 569.719804][T22387] tipc: Enabled bearer , priority 0 [ 569.728685][T22387] syzkaller0: entered promiscuous mode [ 569.749336][T22387] syzkaller0: entered allmulticast mode [ 569.828662][T22391] netlink: 1760 bytes leftover after parsing attributes in process `syz.2.4703'. [ 569.881039][T22387] tipc: Resetting bearer [ 569.942636][T22385] tipc: Resetting bearer [ 570.031621][T22385] tipc: Disabling bearer [ 570.203288][T22406] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 570.522108][T22409] xt_ipcomp: unknown flags 1D [ 570.689267][T22415] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4714'. [ 570.855640][T22424] nbd: must specify at least one socket [ 570.996354][T22427] lo speed is unknown, defaulting to 1000 [ 571.005693][T22427] wg1 speed is unknown, defaulting to 1000 [ 571.038212][T22427] dummy0 speed is unknown, defaulting to 1000 [ 571.225974][T22444] xt_HMARK: spi-set and port-set can't be combined [ 571.798268][T22449] lo speed is unknown, defaulting to 1000 [ 571.851135][T22449] wg1 speed is unknown, defaulting to 1000 [ 571.860878][T22465] syzkaller0: entered promiscuous mode [ 571.876590][T22465] syzkaller0: entered allmulticast mode [ 571.975685][T22449] dummy0 speed is unknown, defaulting to 1000 [ 572.130345][T22474] lo speed is unknown, defaulting to 1000 [ 572.139828][T22474] wg1 speed is unknown, defaulting to 1000 [ 572.172314][T22474] dummy0 speed is unknown, defaulting to 1000 [ 572.253162][T22478] Cannot find set identified by id 2 to match [ 572.259947][ T5843] Bluetooth: hci0: command tx timeout [ 573.071784][T22497] bridge0: port 2(erspan0) entered blocking state [ 573.088577][T22497] bridge0: port 2(erspan0) entered disabled state [ 573.103678][T22497] erspan0: entered allmulticast mode [ 573.128115][T22497] erspan0: entered promiscuous mode [ 573.193431][T22508] batadv2: entered promiscuous mode [ 573.199665][T22508] batadv2: entered allmulticast mode [ 573.233074][T22509] lo speed is unknown, defaulting to 1000 [ 573.241183][T22509] wg1 speed is unknown, defaulting to 1000 [ 573.250724][T22509] dummy0 speed is unknown, defaulting to 1000 [ 574.383735][T22531] __nla_validate_parse: 102 callbacks suppressed [ 574.383758][T22531] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4742'. [ 574.388917][T22529] syzkaller1: entered promiscuous mode [ 574.408228][T22529] syzkaller1: entered allmulticast mode [ 574.486859][T22529] macvtap0: entered allmulticast mode [ 574.502249][T22529] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 574.512821][T22529] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 574.539103][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4743'. [ 574.626908][T22534] netlink: 'syz.5.4743': attribute type 3 has an invalid length. [ 574.649183][T22534] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4743'. [ 574.872274][T22541] lo speed is unknown, defaulting to 1000 [ 574.874895][T22543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4745'. [ 574.892620][T22541] wg1 speed is unknown, defaulting to 1000 [ 574.934386][T22545] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4747'. [ 574.949038][T22541] dummy0 speed is unknown, defaulting to 1000 [ 575.852127][T22561] IPVS: fo: FWM 3 0x00000003 - no destination available [ 575.930866][T22546] lo speed is unknown, defaulting to 1000 [ 575.981397][T22546] wg1 speed is unknown, defaulting to 1000 [ 576.020106][T22570] ipvlan0: entered promiscuous mode [ 576.050855][T22546] dummy0 speed is unknown, defaulting to 1000 [ 576.746483][T22564] ipvlan0: left promiscuous mode [ 576.954219][T22583] xt_hashlimit: size too large, truncated to 1048576 [ 577.007991][T22583] syz.4.4754: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 577.058618][T22583] CPU: 1 UID: 0 PID: 22583 Comm: syz.4.4754 Not tainted syzkaller #0 PREEMPT(full) [ 577.058650][T22583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.058664][T22583] Call Trace: [ 577.058673][T22583] [ 577.058683][T22583] dump_stack_lvl+0x189/0x250 [ 577.058720][T22583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.058750][T22583] ? __pfx__printk+0x10/0x10 [ 577.058773][T22583] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 577.058803][T22583] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 577.058839][T22583] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 577.058871][T22583] warn_alloc+0x214/0x310 [ 577.058911][T22583] ? __pfx_warn_alloc+0x10/0x10 [ 577.058953][T22583] ? __get_vm_area_node+0x28f/0x300 [ 577.058982][T22583] ? htable_create+0x101/0x7a0 [ 577.059018][T22583] __vmalloc_node_range_noprof+0x690/0x12d0 [ 577.059075][T22583] ? alloc_pages_mpol+0x3cd/0x4a0 [ 577.059099][T22583] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 577.059135][T22583] ? rcu_is_watching+0x15/0xb0 [ 577.059160][T22583] ? htable_create+0x101/0x7a0 [ 577.059190][T22583] __kvmalloc_node_noprof+0x674/0x910 [ 577.059223][T22583] ? htable_create+0x101/0x7a0 [ 577.059250][T22583] ? hashlimit_pernet+0x23/0x240 [ 577.059277][T22583] ? hashlimit_pernet+0x23/0x240 [ 577.059303][T22583] ? hashlimit_pernet+0x23/0x240 [ 577.059332][T22583] htable_create+0x101/0x7a0 [ 577.059365][T22583] hashlimit_mt_check_common+0x719/0xa10 [ 577.059402][T22583] xt_check_match+0x3d1/0xab0 [ 577.059437][T22583] ? __pfx_xt_check_match+0x10/0x10 [ 577.059481][T22583] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 577.059523][T22583] ? xt_find_match+0x1f7/0x250 [ 577.059557][T22583] translate_table+0x1553/0x2040 [ 577.059602][T22583] ? __pfx_translate_table+0x10/0x10 [ 577.059642][T22583] ? __might_fault+0xb0/0x130 [ 577.059690][T22583] ? _copy_from_user+0x94/0xb0 [ 577.059718][T22583] do_ip6t_set_ctl+0x970/0xce0 [ 577.059743][T22583] ? rcu_is_watching+0x15/0xb0 [ 577.059768][T22583] ? trace_contention_end+0x39/0x120 [ 577.059794][T22583] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 577.059841][T22583] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 577.059869][T22583] ? file_init_path+0x3b/0x590 [ 577.059898][T22583] ? __lock_acquire+0xab9/0xd20 [ 577.059923][T22583] nf_setsockopt+0x26f/0x290 [ 577.059960][T22583] rawv6_setsockopt+0x23b/0x5b0 [ 577.059988][T22583] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 577.060011][T22583] ? aa_sock_opt_perm+0xff/0x1b0 [ 577.060046][T22583] ? sock_common_setsockopt+0x36/0xc0 [ 577.060078][T22583] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 577.060112][T22583] do_sock_setsockopt+0x17c/0x1b0 [ 577.060141][T22583] __x64_sys_setsockopt+0x13f/0x1b0 [ 577.060171][T22583] do_syscall_64+0xfa/0xfa0 [ 577.060191][T22583] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.060211][T22583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.060232][T22583] ? clear_bhb_loop+0x60/0xb0 [ 577.060258][T22583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.060279][T22583] RIP: 0033:0x7fe8d7f8f6c9 [ 577.060298][T22583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.060316][T22583] RSP: 002b:00007fe8d8dea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 577.060339][T22583] RAX: ffffffffffffffda RBX: 00007fe8d81e6090 RCX: 00007fe8d7f8f6c9 [ 577.060355][T22583] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 577.060367][T22583] RBP: 00007fe8d8011f91 R08: 0000000000000588 R09: 0000000000000000 [ 577.060381][T22583] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 577.060394][T22583] R13: 00007fe8d81e6128 R14: 00007fe8d81e6090 R15: 00007ffdc7083998 [ 577.060430][T22583] [ 577.062687][T22583] Mem-Info: [ 577.446380][T22583] active_anon:18750 inactive_anon:0 isolated_anon:0 [ 577.446380][T22583] active_file:3726 inactive_file:40112 isolated_file:0 [ 577.446380][T22583] unevictable:768 dirty:188 writeback:0 [ 577.446380][T22583] slab_reclaimable:12596 slab_unreclaimable:226014 [ 577.446380][T22583] mapped:29922 shmem:4245 pagetables:1066 [ 577.446380][T22583] sec_pagetables:0 bounce:0 [ 577.446380][T22583] kernel_misc_reclaimable:0 [ 577.446380][T22583] free:1176682 free_pcp:17682 free_cma:0 [ 577.574550][T22583] Node 0 active_anon:74500kB inactive_anon:0kB active_file:14904kB inactive_file:160244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119688kB dirty:748kB writeback:0kB shmem:14244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16964kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 577.609688][T22583] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 577.644167][T22583] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.681734][T22583] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 577.688021][T22583] Node 0 DMA32 free:790180kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72500kB inactive_anon:0kB active_file:14904kB inactive_file:160244kB unevictable:1536kB writepending:748kB zspages:0kB present:3129332kB managed:2565112kB mlocked:0kB bounce:0kB free_pcp:62828kB local_pcp:20308kB free_cma:0kB [ 577.724449][T22583] lowmem_reserve[]: 0 0 0 0 0 [ 577.729801][T22583] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.765429][T22583] lowmem_reserve[]: 0 0 0 0 0 [ 577.770741][T22583] Node 1 Normal free:3903088kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8672kB local_pcp:2304kB free_cma:0kB [ 577.826170][T22583] lowmem_reserve[]: 0 0 0 0 0 [ 577.830981][T22583] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 577.856766][T22583] Node 0 DMA32: 253*4kB (UME) 415*8kB (UME) 180*16kB (UME) 1033*32kB (UME) 284*64kB (UME) 121*128kB (UME) 71*256kB (UM) 27*512kB (UME) 41*1024kB (UME) 14*2048kB (UM) 151*4096kB (UM) = 795084kB [ 577.940044][T22583] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.976366][T22583] Node 1 Normal: 176*4kB (UME) 54*8kB (UME) 42*16kB (UME) 219*32kB (UME) 56*64kB (UME) 18*128kB (UME) 3*256kB (ME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3903088kB [ 577.996516][T22583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.040921][T22583] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.099434][T22583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.148671][T22583] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.190619][T22583] 45202 total pagecache pages [ 578.217611][T22583] 0 pages in swap cache [ 578.221947][T22583] Free swap = 124996kB [ 578.236634][T22583] Total swap = 124996kB [ 578.251739][T22583] 2097051 pages RAM [ 578.260759][T22583] 0 pages HighMem/MovableOnly [ 578.279204][T22583] 424131 pages reserved [ 578.290201][T22583] 0 pages cma reserved [ 578.496432][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.649233][T22634] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4764'. [ 579.703100][T22634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.139670][T22653] netlink: 'syz.6.4772': attribute type 33 has an invalid length. [ 580.166338][T22653] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4772'. [ 580.199205][T22658] ipt_REJECT: TCP_RESET invalid for non-tcp [ 580.341590][T22652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4771'. [ 580.389680][T22658] lo speed is unknown, defaulting to 1000 [ 580.448279][T22659] lo speed is unknown, defaulting to 1000 [ 580.449985][T22658] wg1 speed is unknown, defaulting to 1000 [ 580.550722][T22659] wg1 speed is unknown, defaulting to 1000 [ 580.556754][T22658] dummy0 speed is unknown, defaulting to 1000 [ 580.608312][T22659] dummy0 speed is unknown, defaulting to 1000 [ 580.712700][T22668] syzkaller0: entered promiscuous mode [ 580.719847][T22668] syzkaller0: entered allmulticast mode [ 580.774733][T22669] tap0: tun_chr_ioctl cmd 1074025676 [ 580.780403][T22669] tap0: owner set to 0 [ 581.879724][T22697] tipc: Failed to remove unknown binding: 66,1,1/0:923765234/923765236 [ 581.890688][T22697] tipc: Failed to remove unknown binding: 66,1,1/0:923765234/923765236 [ 581.899316][T22697] tipc: Failed to remove unknown binding: 66,1,1/0:923765234/923765236 [ 582.141311][T22699] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4778'. [ 582.152535][T22699] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4778'. [ 582.161616][T22699] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4778'. [ 582.336726][ T96] block nbd0: Possible stuck request ffff88802506e000: control (read@0,1024B). Runtime 450 seconds [ 582.348238][ T96] block nbd0: Possible stuck request ffff88802506e1c0: control (read@1024,1024B). Runtime 450 seconds [ 582.360018][ T96] block nbd0: Possible stuck request ffff88802506e380: control (read@2048,1024B). Runtime 450 seconds [ 582.371362][ T96] block nbd0: Possible stuck request ffff88802506e540: control (read@3072,1024B). Runtime 450 seconds [ 583.243314][T22665] lo speed is unknown, defaulting to 1000 [ 583.311007][T22665] wg1 speed is unknown, defaulting to 1000 [ 583.380994][T22665] dummy0 speed is unknown, defaulting to 1000 [ 583.628341][ T96] block nbd1: Possible stuck request ffff888025100000: control (read@0,1024B). Runtime 270 seconds [ 583.796442][ T96] block nbd1: Possible stuck request ffff8880251001c0: control (read@1024,1024B). Runtime 270 seconds [ 583.809656][ T96] block nbd1: Possible stuck request ffff888025100380: control (read@2048,1024B). Runtime 270 seconds [ 583.826488][ T96] block nbd1: Possible stuck request ffff888025100540: control (read@3072,1024B). Runtime 270 seconds [ 584.010562][T22728] netlink: 'syz.4.4785': attribute type 33 has an invalid length. [ 584.038448][T22728] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4785'. [ 584.343693][T22738] syzkaller0: entered promiscuous mode [ 584.356235][T22738] syzkaller0: entered allmulticast mode [ 584.701412][T22755] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4796'. [ 584.743391][T22744] lo speed is unknown, defaulting to 1000 [ 586.919505][T22744] wg1 speed is unknown, defaulting to 1000 [ 586.932661][T22744] dummy0 speed is unknown, defaulting to 1000 [ 587.054996][T22789] netlink: 'syz.4.4803': attribute type 21 has an invalid length. [ 587.199901][T22799] netlink: 'syz.0.4804': attribute type 21 has an invalid length. [ 587.262392][T22805] netlink: 'syz.5.4807': attribute type 33 has an invalid length. [ 587.271301][T22805] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4807'. [ 587.313790][T22799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4804'. [ 587.494464][T22814] syz_tun: entered promiscuous mode [ 587.500554][T22814] macvtap1: entered promiscuous mode [ 587.510406][T22814] syz_tun: left promiscuous mode [ 587.557318][T22819] bridge: RTM_NEWNEIGH with invalid ether address [ 587.884153][T22837] netlink: 'syz.0.4817': attribute type 1 has an invalid length. [ 587.928824][T22846] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 587.967200][T22837] bond7: entered promiscuous mode [ 587.972309][T22837] bond7: entered allmulticast mode [ 588.035937][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4817'. [ 588.094092][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4817'. [ 588.117126][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4817'. [ 588.149618][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4817'. [ 588.180391][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4817'. [ 588.210616][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4817'. [ 588.241038][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4817'. [ 588.383650][T22837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.425494][T22853] vlan2: entered allmulticast mode [ 588.680517][T22868] lo speed is unknown, defaulting to 1000 [ 588.812720][T22868] wg1 speed is unknown, defaulting to 1000 [ 588.877018][T22868] dummy0 speed is unknown, defaulting to 1000 [ 588.894207][T22892] netlink: 'syz.2.4828': attribute type 33 has an invalid length. [ 588.979719][T22888] lo speed is unknown, defaulting to 1000 [ 589.017957][T22888] wg1 speed is unknown, defaulting to 1000 [ 589.025809][T22888] dummy0 speed is unknown, defaulting to 1000 [ 589.523370][T22909] netlink: 'syz.2.4834': attribute type 33 has an invalid length. [ 589.868364][T22921] syz.0.4838 uses old SIOCAX25GETINFO [ 590.007721][T22930] __nla_validate_parse: 15 callbacks suppressed [ 590.007743][T22930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4838'. [ 590.030749][T22930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4838'. [ 590.143673][T22933] "syz.6.4840" (22933) uses obsolete ecb(arc4) skcipher [ 590.453688][T22950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4845'. [ 590.534608][T22954] netlink: 'syz.2.4846': attribute type 10 has an invalid length. [ 590.551637][T22954] team0: Port device dummy0 added [ 590.564891][T22954] netlink: 'syz.2.4846': attribute type 10 has an invalid length. [ 590.597341][T22954] team0: Port device dummy0 removed [ 591.336999][T22980] lo speed is unknown, defaulting to 1000 [ 591.348305][T22980] wg1 speed is unknown, defaulting to 1000 [ 591.389625][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4847'. [ 591.399132][T22980] dummy0 speed is unknown, defaulting to 1000 [ 591.499794][T22998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4857'. [ 591.750585][T23001] lo speed is unknown, defaulting to 1000 [ 591.768788][T23008] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4859'. [ 591.812689][T23001] wg1 speed is unknown, defaulting to 1000 [ 591.873185][T23010] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4859'. [ 592.000830][T23001] dummy0 speed is unknown, defaulting to 1000 [ 592.382190][T23032] macsec1: entered promiscuous mode [ 592.398521][T23032] macsec1: entered allmulticast mode [ 593.042732][T23060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4874'. [ 593.061146][T23061] veth1_to_bridge: entered promiscuous mode [ 593.068971][T23061] veth1_to_bridge: entered allmulticast mode [ 593.149740][T23060] team1: entered promiscuous mode [ 593.173901][T23060] team1: entered allmulticast mode [ 593.180122][T23060] 8021q: adding VLAN 0 to HW filter on device team1 [ 593.264959][T23069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4876'. [ 593.533569][T23078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4878'. [ 594.045116][T23100] lo speed is unknown, defaulting to 1000 [ 594.052993][T23100] wg1 speed is unknown, defaulting to 1000 [ 594.068645][T23100] dummy0 speed is unknown, defaulting to 1000 [ 594.177647][T23105] netlink: 'syz.4.4886': attribute type 13 has an invalid length. [ 594.185766][T23105] netlink: 'syz.4.4886': attribute type 17 has an invalid length. [ 594.229282][T23105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.344271][T23107] vlan2: entered allmulticast mode [ 594.558738][T23120] xt_TCPMSS: Only works on TCP SYN packets [ 594.995685][T23142] lo speed is unknown, defaulting to 1000 [ 595.020307][T23142] wg1 speed is unknown, defaulting to 1000 [ 595.038763][T23142] dummy0 speed is unknown, defaulting to 1000 [ 595.074286][T23143] lo speed is unknown, defaulting to 1000 [ 595.082761][T23143] wg1 speed is unknown, defaulting to 1000 [ 595.091404][T23143] dummy0 speed is unknown, defaulting to 1000 [ 595.870028][T23163] __nla_validate_parse: 4 callbacks suppressed [ 595.870049][T23163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4904'. [ 596.233524][T23187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4909'. [ 596.402945][T23194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4910'. [ 596.464124][T23196] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4910'. [ 596.504991][T23194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4910'. [ 596.561419][T23196] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4910'. [ 596.968804][T23211] netlink: 'syz.6.4914': attribute type 10 has an invalid length. [ 596.977326][T23211] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4914'. [ 596.998863][T23211] team0: Port device geneve0 added [ 597.004568][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'. [ 597.047257][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4916'. [ 597.069281][T23218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4916'. [ 597.429520][T23238] lo: entered promiscuous mode [ 597.445810][T23238] tunl0: entered promiscuous mode [ 597.480163][T23238] gre0: entered promiscuous mode [ 597.497973][T23238] gretap0: entered promiscuous mode [ 597.503827][T23238] erspan0: entered promiscuous mode [ 597.524793][T23238] ip_vti0: entered promiscuous mode [ 597.590073][T23238] ip6_vti0: entered promiscuous mode [ 597.618893][T23238] sit0: entered promiscuous mode [ 597.625085][T23238] ip6tnl0: entered promiscuous mode [ 597.640642][T23238] ip6gre0: entered promiscuous mode [ 597.661885][T23238] syz_tun: entered promiscuous mode [ 597.670761][T23238] ip6gretap0: entered promiscuous mode [ 597.678868][T23238] bridge0: entered promiscuous mode [ 597.688077][T23238] !: entered promiscuous mode [ 597.694044][T23238] nlmon0: entered promiscuous mode [ 597.704205][T23238] caif0: entered promiscuous mode [ 597.710896][T23238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.795717][T23252] tipc: Enabling of bearer rejected, failed to enable media [ 598.023601][T18578] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.066512][T18578] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.107856][T18578] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.131892][T18578] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.255837][T23267] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 598.268957][T23269] netlink: 'syz.6.4930': attribute type 39 has an invalid length. [ 598.320751][T23270] netlink: 'syz.6.4930': attribute type 5 has an invalid length. [ 598.407976][T23270] vlan2: entered allmulticast mode [ 598.439300][ T5843] block nbd2: Receive control failed (result -32) [ 598.882718][T23293] vlan2: entered allmulticast mode [ 600.446540][T23357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.500373][T23357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.516058][T23371] netlink: 'syz.6.4962': attribute type 1 has an invalid length. [ 600.648641][T23371] bond8: entered promiscuous mode [ 600.654330][T23371] 8021q: adding VLAN 0 to HW filter on device bond8 [ 600.682572][T23357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.703368][T23357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.742905][T23371] bond8: (slave bridge2): making interface the new active one [ 600.750933][T23371] bridge2: entered promiscuous mode [ 600.758570][T23371] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 600.888706][T23357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.900649][T23357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.904758][T23389] IPVS: rr: FWM 3 0x00000003 - no destination available [ 600.921768][T23383] __nla_validate_parse: 15 callbacks suppressed [ 600.921838][T23383] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4966'. [ 600.941944][ C0] IPVS: rr: FWM 3 0x00000003 - no destination available [ 601.041965][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4969'. [ 601.058315][T23357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.115101][T23357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.170695][T23396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4971'. [ 601.322476][T18578] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.331145][T18578] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.349096][T18578] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.357995][T18578] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.399794][T18578] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.416572][T18578] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.452531][T18578] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.463287][T18578] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.476746][T23402] lo speed is unknown, defaulting to 1000 [ 601.488206][T23402] wg1 speed is unknown, defaulting to 1000 [ 601.495912][T23402] dummy0 speed is unknown, defaulting to 1000 [ 601.631154][T23416] siw: device registration error -23 [ 601.659417][T23416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4978'. [ 601.789810][T23423] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 601.888610][T23431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4982'. [ 602.022034][T23435] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4983'. [ 602.037296][T23434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4984'. [ 602.098022][T23437] lo speed is unknown, defaulting to 1000 [ 602.105757][T23437] wg1 speed is unknown, defaulting to 1000 [ 602.139788][T23437] dummy0 speed is unknown, defaulting to 1000 [ 602.368957][T23445] syzkaller0: entered promiscuous mode [ 602.374493][T23445] syzkaller0: entered allmulticast mode [ 602.673702][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'. [ 604.744288][T23479] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4997'. [ 604.800630][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4999'. [ 604.968892][T23494] lo speed is unknown, defaulting to 1000 [ 604.969853][T23501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.984449][T23494] wg1 speed is unknown, defaulting to 1000 [ 605.001958][T23503] netlink: 'syz.4.5001': attribute type 33 has an invalid length. [ 605.002862][T23494] dummy0 speed is unknown, defaulting to 1000 [ 605.853286][T23540] syzkaller0: entered promiscuous mode [ 605.861166][T23543] FAULT_INJECTION: forcing a failure. [ 605.861166][T23543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.861199][T23540] syzkaller0: entered allmulticast mode [ 605.862943][T23543] [ 605.862956][T23543] ====================================================== [ 605.862967][T23543] WARNING: possible circular locking dependency detected [ 605.862984][T23543] syzkaller #0 Not tainted [ 605.862996][T23543] ------------------------------------------------------ [ 605.863007][T23543] syz.4.5013/23543 is trying to acquire lock: [ 605.863021][T23543] ffffffff8df315e0 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x2ee/0x590 [ 605.863086][T23543] [ 605.863086][T23543] but task is already holding lock: [ 605.863094][T23543] ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 605.863144][T23543] [ 605.863144][T23543] which lock already depends on the new lock. [ 605.863144][T23543] [ 605.863153][T23543] [ 605.863153][T23543] the existing dependency chain (in reverse order) is: [ 605.863162][T23543] [ 605.863162][T23543] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 605.863193][T23543] lock_acquire+0x120/0x360 [ 605.863213][T23543] _raw_spin_lock_nested+0x32/0x50 [ 605.863234][T23543] raw_spin_rq_lock_nested+0x2a/0x140 [ 605.863257][T23543] task_rq_lock+0xbc/0x470 [ 605.863277][T23543] cgroup_move_task+0x92/0x2a0 [ 605.863304][T23543] css_set_move_task+0x658/0x9e0 [ 605.863332][T23543] cgroup_post_fork+0x1ef/0x790 [ 605.863369][T23543] copy_process+0x3862/0x3c00 [ 605.863393][T23543] kernel_clone+0x21e/0x840 [ 605.863416][T23543] user_mode_thread+0xdd/0x140 [ 605.863442][T23543] rest_init+0x23/0x300 [ 605.863467][T23543] start_kernel+0x3ae/0x410 [ 605.863491][T23543] x86_64_start_reservations+0x24/0x30 [ 605.863511][T23543] x86_64_start_kernel+0x143/0x1c0 [ 605.863530][T23543] common_startup_64+0x13e/0x147 [ 605.863561][T23543] [ 605.863561][T23543] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 605.863590][T23543] lock_acquire+0x120/0x360 [ 605.863610][T23543] _raw_spin_lock_irqsave+0xa7/0xf0 [ 605.863641][T23543] try_to_wake_up+0x67/0x12b0 [ 605.863669][T23543] create_worker+0x503/0x720 [ 605.863701][T23543] workqueue_init+0x3f0/0x6a0 [ 605.863721][T23543] kernel_init_freeable+0x302/0x4b0 [ 605.863749][T23543] kernel_init+0x1d/0x1d0 [ 605.863774][T23543] ret_from_fork+0x4bc/0x870 [ 605.863794][T23543] ret_from_fork_asm+0x1a/0x30 [ 605.863814][T23543] [ 605.863814][T23543] -> #3 (&pool->lock){-.-.}-{2:2}: [ 605.863843][T23543] lock_acquire+0x120/0x360 [ 605.863864][T23543] _raw_spin_lock+0x2e/0x40 [ 605.863892][T23543] __queue_work+0x809/0xfb0 [ 605.863916][T23543] queue_work_on+0x181/0x270 [ 605.863938][T23543] rpm_suspend+0xe54/0x1720 [ 605.863964][T23543] __pm_runtime_idle+0x12f/0x1a0 [ 605.863993][T23543] __device_attach+0x342/0x400 [ 605.864019][T23543] bus_probe_device+0x185/0x260 [ 605.864038][T23543] device_add+0x7b6/0xb50 [ 605.864060][T23543] serial_base_port_add+0x2e3/0x410 [ 605.864084][T23543] serial_core_register_port+0x369/0x2800 [ 605.864114][T23543] serial8250_register_8250_port+0x16db/0x2080 [ 605.864143][T23543] serial_pnp_probe+0x527/0x790 [ 605.864171][T23543] pnp_device_probe+0x30b/0x4c0 [ 605.864199][T23543] really_probe+0x26d/0x9e0 [ 605.864227][T23543] __driver_probe_device+0x18c/0x2f0 [ 605.864255][T23543] driver_probe_device+0x4f/0x430 [ 605.864282][T23543] __driver_attach+0x452/0x700 [ 605.864308][T23543] bus_for_each_dev+0x233/0x2b0 [ 605.864327][T23543] bus_add_driver+0x345/0x640 [ 605.864347][T23543] driver_register+0x23a/0x320 [ 605.864383][T23543] serial8250_init+0x8f/0x160 [ 605.864404][T23543] do_one_initcall+0x236/0x820 [ 605.864436][T23543] do_initcall_level+0x104/0x190 [ 605.864464][T23543] do_initcalls+0x59/0xa0 [ 605.864490][T23543] kernel_init_freeable+0x334/0x4b0 [ 605.864517][T23543] kernel_init+0x1d/0x1d0 [ 605.864542][T23543] ret_from_fork+0x4bc/0x870 [ 605.864566][T23543] ret_from_fork_asm+0x1a/0x30 [ 605.864584][T23543] [ 605.864584][T23543] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 605.864614][T23543] lock_acquire+0x120/0x360 [ 605.864632][T23543] _raw_spin_lock_irqsave+0xa7/0xf0 [ 605.864663][T23543] __pm_runtime_resume+0x10f/0x180 [ 605.864689][T23543] __uart_start+0x171/0x460 [ 605.864717][T23543] uart_write+0xdc/0x130 [ 605.864744][T23543] n_tty_write+0xd27/0x1200 [ 605.864765][T23543] file_tty_write+0x559/0xa20 [ 605.864792][T23543] vfs_write+0x5c9/0xb30 [ 605.864822][T23543] ksys_write+0x145/0x250 [ 605.864851][T23543] do_syscall_64+0xfa/0xfa0 [ 605.864871][T23543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.864892][T23543] [ 605.864892][T23543] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 605.864921][T23543] lock_acquire+0x120/0x360 [ 605.864941][T23543] _raw_spin_lock_irqsave+0xa7/0xf0 [ 605.864972][T23543] serial8250_console_write+0x17e/0x1ba0 [ 605.865004][T23543] console_flush_all+0x6f3/0xb10 [ 605.865034][T23543] console_unlock+0xbb/0x190 [ 605.865057][T23543] vprintk_emit+0x4c5/0x590 [ 605.865082][T23543] _printk+0xcf/0x120 [ 605.865102][T23543] register_console+0xa8b/0xf90 [ 605.865132][T23543] univ8250_console_init+0x3a/0x70 [ 605.865151][T23543] console_init+0x10e/0x430 [ 605.865182][T23543] start_kernel+0x254/0x410 [ 605.865207][T23543] x86_64_start_reservations+0x24/0x30 [ 605.865227][T23543] x86_64_start_kernel+0x143/0x1c0 [ 605.865247][T23543] common_startup_64+0x13e/0x147 [ 605.865276][T23543] [ 605.865276][T23543] -> #0 (console_owner){-.-.}-{0:0}: [ 605.865314][T23543] validate_chain+0xb9b/0x2140 [ 605.865338][T23543] __lock_acquire+0xab9/0xd20 [ 605.865364][T23543] lock_acquire+0x120/0x360 [ 605.865384][T23543] vprintk_emit+0x30a/0x590 [ 605.865409][T23543] _printk+0xcf/0x120 [ 605.865427][T23543] should_fail_ex+0x3f5/0x560 [ 605.865458][T23543] strncpy_from_user+0x36/0x290 [ 605.865487][T23543] strncpy_from_user_nofault+0x72/0x150 [ 605.865519][T23543] bpf_probe_read_compat_str+0xe2/0x180 [ 605.865546][T23543] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 605.865566][T23543] bpf_trace_run2+0x284/0x4b0 [ 605.865599][T23543] __bpf_trace_tlb_flush+0xf5/0x150 [ 605.865628][T23543] trace_tlb_flush+0x115/0x140 [ 605.865659][T23543] switch_mm_irqs_off+0x54a/0x7b0 [ 605.865689][T23543] __schedule+0x110e/0x4cc0 [ 605.865719][T23543] preempt_schedule_common+0x83/0xd0 [ 605.865752][T23543] preempt_schedule+0xae/0xc0 [ 605.865784][T23543] preempt_schedule_thunk+0x16/0x30 [ 605.865806][T23543] _raw_spin_unlock+0x3f/0x50 [ 605.865836][T23543] __text_poke+0x7b1/0xa10 [ 605.865863][T23543] smp_text_poke_batch_finish+0x90a/0x1130 [ 605.865894][T23543] __static_call_transform+0x4eb/0x750 [ 605.865922][T23543] arch_static_call_transform+0x98/0xc0 [ 605.865943][T23543] __static_call_update+0x3c3/0x5d0 [ 605.865966][T23543] bpf_dispatcher_change_prog+0xacd/0xc90 [ 605.865998][T23543] bpf_prog_test_run_xdp+0x754/0x10e0 [ 605.866021][T23543] bpf_prog_test_run+0x2c7/0x340 [ 605.866044][T23543] __sys_bpf+0x562/0x860 [ 605.866062][T23543] __x64_sys_bpf+0x7c/0x90 [ 605.866092][T23543] do_syscall_64+0xfa/0xfa0 [ 605.866112][T23543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.866133][T23543] [ 605.866133][T23543] other info that might help us debug this: [ 605.866133][T23543] [ 605.866142][T23543] Chain exists of: [ 605.866142][T23543] console_owner --> &p->pi_lock --> &rq->__lock [ 605.866142][T23543] [ 605.866178][T23543] Possible unsafe locking scenario: [ 605.866178][T23543] [ 605.866186][T23543] CPU0 CPU1 [ 605.866194][T23543] ---- ---- [ 605.866202][T23543] lock(&rq->__lock); [ 605.866217][T23543] lock(&p->pi_lock); [ 605.866233][T23543] lock(&rq->__lock); [ 605.866249][T23543] lock(console_owner); [ 605.866266][T23543] [ 605.866266][T23543] *** DEADLOCK *** [ 605.866266][T23543] [ 605.866273][T23543] 7 locks held by syz.4.5013/23543: [ 605.866286][T23543] #0: ffffffff8f2cf368 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 605.866349][T23543] #1: ffffffff8ddd5530 (cpu_hotplug_lock){++++}-{0:0}, at: __static_call_update+0x8d/0x5d0 [ 605.866414][T23543] #2: ffffffff8dff06e8 (static_call_mutex){+.+.}-{4:4}, at: __static_call_update+0x9b/0x5d0 [ 605.866466][T23543] #3: ffffffff8dde8928 (text_mutex){+.+.}-{4:4}, at: arch_static_call_transform+0x2d/0xc0 [ 605.866519][T23543] #4: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x250 [ 605.866580][T23543] #5: ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 605.866631][T23543] #6: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 605.866694][T23543] [ 605.866694][T23543] stack backtrace: [ 605.866708][T23543] CPU: 0 UID: 0 PID: 23543 Comm: syz.4.5013 Not tainted syzkaller #0 PREEMPT(full) [ 605.866734][T23543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.866749][T23543] Call Trace: [ 605.866760][T23543] [ 605.866769][T23543] dump_stack_lvl+0x189/0x250 [ 605.866802][T23543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.866834][T23543] ? __pfx__printk+0x10/0x10 [ 605.866858][T23543] ? print_lock_name+0xde/0x100 [ 605.866883][T23543] print_circular_bug+0x2ee/0x310 [ 605.866915][T23543] check_noncircular+0x134/0x160 [ 605.866948][T23543] validate_chain+0xb9b/0x2140 [ 605.866992][T23543] __lock_acquire+0xab9/0xd20 [ 605.867018][T23543] ? vprintk_emit+0x2ee/0x590 [ 605.867044][T23543] lock_acquire+0x120/0x360 [ 605.867065][T23543] ? vprintk_emit+0x2ee/0x590 [ 605.867098][T23543] ? do_raw_spin_unlock+0x122/0x240 [ 605.867128][T23543] ? vprintk_emit+0x2ee/0x590 [ 605.867157][T23543] vprintk_emit+0x30a/0x590 [ 605.867182][T23543] ? vprintk_emit+0x2ee/0x590 [ 605.867212][T23543] ? __pfx_vprintk_emit+0x10/0x10 [ 605.867240][T23543] ? trace_event_buffer_commit+0x264/0x7b0 [ 605.867279][T23543] _printk+0xcf/0x120 [ 605.867302][T23543] ? __pfx____ratelimit+0x10/0x10 [ 605.867338][T23543] ? __pfx__printk+0x10/0x10 [ 605.867393][T23543] ? rcu_is_watching+0x15/0xb0 [ 605.867420][T23543] ? trace_bpf_trace_printk+0x7a/0x1d0 [ 605.867445][T23543] ? bpf_bprintf_cleanup+0x7a/0xa0 [ 605.867469][T23543] should_fail_ex+0x3f5/0x560 [ 605.867505][T23543] strncpy_from_user+0x36/0x290 [ 605.867540][T23543] strncpy_from_user_nofault+0x72/0x150 [ 605.867568][T23543] bpf_probe_read_compat_str+0xe2/0x180 [ 605.867601][T23543] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 605.867622][T23543] ? bpf_trace_run2+0x186/0x4b0 [ 605.867655][T23543] ? __pfx___cant_migrate+0x10/0x10 [ 605.867690][T23543] bpf_trace_run2+0x284/0x4b0 [ 605.867724][T23543] ? bpf_trace_run2+0x186/0x4b0 [ 605.867759][T23543] ? __pfx_bpf_trace_run2+0x10/0x10 [ 605.867794][T23543] ? __pfx_css_rstat_updated+0x10/0x10 [ 605.867821][T23543] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 605.867856][T23543] __bpf_trace_tlb_flush+0xf5/0x150 [ 605.867890][T23543] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 605.867928][T23543] ? psi_group_change+0xab8/0x1050 [ 605.867956][T23543] trace_tlb_flush+0x115/0x140 [ 605.867989][T23543] switch_mm_irqs_off+0x54a/0x7b0 [ 605.868025][T23543] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 605.868057][T23543] ? psi_task_switch+0x4e3/0x880 [ 605.868089][T23543] __schedule+0x110e/0x4cc0 [ 605.868130][T23543] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 605.868167][T23543] ? __pfx_switch_ldt+0x10/0x10 [ 605.868194][T23543] ? __pfx___schedule+0x10/0x10 [ 605.868231][T23543] ? switch_mm_irqs_off+0x5c2/0x7b0 [ 605.868266][T23543] ? get_flush_tlb_info+0x171/0x260 [ 605.868300][T23543] ? preempt_schedule+0xae/0xc0 [ 605.868337][T23543] preempt_schedule_common+0x83/0xd0 [ 605.868380][T23543] ? bpf_dispatcher_xdp_func+0x26/0x30 [ 605.868406][T23543] preempt_schedule+0xae/0xc0 [ 605.868439][T23543] ? __pfx_preempt_schedule+0x10/0x10 [ 605.868475][T23543] ? bpf_dispatcher_xdp_func+0x26/0x30 [ 605.868502][T23543] preempt_schedule_thunk+0x16/0x30 [ 605.868532][T23543] _raw_spin_unlock+0x3f/0x50 [ 605.868563][T23543] __text_poke+0x7b1/0xa10 [ 605.868597][T23543] ? __pfx_text_poke_memcpy+0x10/0x10 [ 605.868627][T23543] ? bpf_dispatcher_xdp_func+0x26/0x30 [ 605.868653][T23543] ? __pfx___text_poke+0x10/0x10 [ 605.868691][T23543] smp_text_poke_batch_finish+0x90a/0x1130 [ 605.868730][T23543] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 605.868767][T23543] ? arch_static_call_transform+0x2d/0xc0 [ 605.868791][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 605.868819][T23543] __static_call_transform+0x4eb/0x750 [ 605.868849][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 605.868874][T23543] ? __pfx___static_call_transform+0x10/0x10 [ 605.868908][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 605.868933][T23543] ? __static_call_validate+0x148/0x240 [ 605.868955][T23543] ? 0xffffffffa02052c0 [ 605.868973][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 605.868997][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 605.869023][T23543] arch_static_call_transform+0x98/0xc0 [ 605.869046][T23543] __static_call_update+0x3c3/0x5d0 [ 605.869072][T23543] ? 0xffffffffa02052c0 [ 605.869089][T23543] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 605.869118][T23543] ? __pfx___static_call_update+0x10/0x10 [ 605.869147][T23543] ? 0xffffffffa02052c0 [ 605.869165][T23543] ? 0xffffffffa02052c0 [ 605.869183][T23543] bpf_dispatcher_change_prog+0xacd/0xc90 [ 605.869218][T23543] ? 0xffffffffa02052c0 [ 605.869236][T23543] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 605.869270][T23543] ? 0xffffffffa0201898 [ 605.869311][T23543] ? _copy_from_user+0x94/0xb0 [ 605.869340][T23543] ? bpf_test_init+0x113/0x150 [ 605.869368][T23543] ? xdp_convert_md_to_buff+0x5b/0x330 [ 605.869394][T23543] bpf_prog_test_run_xdp+0x754/0x10e0 [ 605.869427][T23543] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 605.869455][T23543] ? __fget_files+0x2a/0x420 [ 605.869480][T23543] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 605.869505][T23543] bpf_prog_test_run+0x2c7/0x340 [ 605.869531][T23543] __sys_bpf+0x562/0x860 [ 605.869553][T23543] ? __pfx___sys_bpf+0x10/0x10 [ 605.869583][T23543] ? ksys_write+0x22a/0x250 [ 605.869617][T23543] ? __pfx_ksys_write+0x10/0x10 [ 605.869651][T23543] __x64_sys_bpf+0x7c/0x90 [ 605.869686][T23543] do_syscall_64+0xfa/0xfa0 [ 605.869707][T23543] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.869730][T23543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.869754][T23543] ? clear_bhb_loop+0x60/0xb0 [ 605.869781][T23543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.869805][T23543] RIP: 0033:0x7fe8d7f8f6c9 [ 605.869825][T23543] Code: Unable to access opcode bytes at 0x7fe8d7f8f69f. [ 605.869836][T23543] RSP: 002b:00007fe8d8e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.869861][T23543] RAX: ffffffffffffffda RBX: 00007fe8d81e5fa0 RCX: 00007fe8d7f8f6c9 [ 605.869878][T23543] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 605.869893][T23543] RBP: 00007fe8d8e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 605.869909][T23543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 605.869924][T23543] R13: 00007fe8d81e6038 R14: 00007fe8d81e5fa0 R15: 00007ffdc7083998 [ 605.869952][T23543] [ 607.337026][T23543] CPU: 0 UID: 0 PID: 23543 Comm: syz.4.5013 Not tainted syzkaller #0 PREEMPT(full) [ 607.337047][T23543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.337057][T23543] Call Trace: [ 607.337066][T23543] [ 607.337074][T23543] dump_stack_lvl+0x189/0x250 [ 607.337100][T23543] ? __pfx____ratelimit+0x10/0x10 [ 607.337123][T23543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.337144][T23543] ? __pfx__printk+0x10/0x10 [ 607.337160][T23543] ? rcu_is_watching+0x15/0xb0 [ 607.337177][T23543] ? trace_bpf_trace_printk+0x7a/0x1d0 [ 607.337194][T23543] ? bpf_bprintf_cleanup+0x7a/0xa0 [ 607.337218][T23543] should_fail_ex+0x414/0x560 [ 607.337243][T23543] strncpy_from_user+0x36/0x290 [ 607.337266][T23543] strncpy_from_user_nofault+0x72/0x150 [ 607.337285][T23543] bpf_probe_read_compat_str+0xe2/0x180 [ 607.337305][T23543] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 607.337320][T23543] ? bpf_trace_run2+0x186/0x4b0 [ 607.337342][T23543] ? __pfx___cant_migrate+0x10/0x10 [ 607.337364][T23543] bpf_trace_run2+0x284/0x4b0 [ 607.337386][T23543] ? bpf_trace_run2+0x186/0x4b0 [ 607.337408][T23543] ? __pfx_bpf_trace_run2+0x10/0x10 [ 607.337431][T23543] ? __pfx_css_rstat_updated+0x10/0x10 [ 607.337449][T23543] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 607.337472][T23543] __bpf_trace_tlb_flush+0xf5/0x150 [ 607.337494][T23543] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 607.337518][T23543] ? psi_group_change+0xab8/0x1050 [ 607.337536][T23543] trace_tlb_flush+0x115/0x140 [ 607.337557][T23543] switch_mm_irqs_off+0x54a/0x7b0 [ 607.337581][T23543] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 607.337600][T23543] ? psi_task_switch+0x4e3/0x880 [ 607.337620][T23543] __schedule+0x110e/0x4cc0 [ 607.337647][T23543] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 607.337670][T23543] ? __pfx_switch_ldt+0x10/0x10 [ 607.337688][T23543] ? __pfx___schedule+0x10/0x10 [ 607.337712][T23543] ? switch_mm_irqs_off+0x5c2/0x7b0 [ 607.337734][T23543] ? get_flush_tlb_info+0x171/0x260 [ 607.337755][T23543] ? preempt_schedule+0xae/0xc0 [ 607.337778][T23543] preempt_schedule_common+0x83/0xd0 [ 607.337800][T23543] ? bpf_dispatcher_xdp_func+0x26/0x30 [ 607.337816][T23543] preempt_schedule+0xae/0xc0 [ 607.337837][T23543] ? __pfx_preempt_schedule+0x10/0x10 [ 607.337860][T23543] ? bpf_dispatcher_xdp_func+0x26/0x30 [ 607.337877][T23543] preempt_schedule_thunk+0x16/0x30 [ 607.337896][T23543] _raw_spin_unlock+0x3f/0x50 [ 607.337917][T23543] __text_poke+0x7b1/0xa10 [ 607.337939][T23543] ? __pfx_text_poke_memcpy+0x10/0x10 [ 607.337958][T23543] ? bpf_dispatcher_xdp_func+0x26/0x30 [ 607.337974][T23543] ? __pfx___text_poke+0x10/0x10 [ 607.337999][T23543] smp_text_poke_batch_finish+0x90a/0x1130 [ 607.338024][T23543] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 607.338047][T23543] ? arch_static_call_transform+0x2d/0xc0 [ 607.338062][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 607.338080][T23543] __static_call_transform+0x4eb/0x750 [ 607.338098][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 607.338115][T23543] ? __pfx___static_call_transform+0x10/0x10 [ 607.338135][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 607.338151][T23543] ? __static_call_validate+0x148/0x240 [ 607.338165][T23543] ? 0xffffffffa02052c0 [ 607.338176][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 607.338191][T23543] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 607.338223][T23543] arch_static_call_transform+0x98/0xc0 [ 607.338239][T23543] __static_call_update+0x3c3/0x5d0 [ 607.338256][T23543] ? 0xffffffffa02052c0 [ 607.338266][T23543] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 607.338286][T23543] ? __pfx___static_call_update+0x10/0x10 [ 607.338304][T23543] ? 0xffffffffa02052c0 [ 607.338315][T23543] ? 0xffffffffa02052c0 [ 607.338326][T23543] bpf_dispatcher_change_prog+0xacd/0xc90 [ 607.338351][T23543] ? 0xffffffffa02052c0 [ 607.338362][T23543] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 607.338384][T23543] ? 0xffffffffa0201898 [ 607.338412][T23543] ? _copy_from_user+0x94/0xb0 [ 607.338431][T23543] ? bpf_test_init+0x113/0x150 [ 607.338445][T23543] ? xdp_convert_md_to_buff+0x5b/0x330 [ 607.338461][T23543] bpf_prog_test_run_xdp+0x754/0x10e0 [ 607.338483][T23543] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 607.338501][T23543] ? __fget_files+0x2a/0x420 [ 607.338517][T23543] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 607.338533][T23543] bpf_prog_test_run+0x2c7/0x340 [ 607.338550][T23543] __sys_bpf+0x562/0x860 [ 607.338565][T23543] ? __pfx___sys_bpf+0x10/0x10 [ 607.338585][T23543] ? ksys_write+0x22a/0x250 [ 607.338606][T23543] ? __pfx_ksys_write+0x10/0x10 [ 607.338628][T23543] __x64_sys_bpf+0x7c/0x90 [ 607.338650][T23543] do_syscall_64+0xfa/0xfa0 [ 607.338663][T23543] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.338677][T23543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.338692][T23543] ? clear_bhb_loop+0x60/0xb0 [ 607.338708][T23543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.338723][T23543] RIP: 0033:0x7fe8d7f8f6c9 [ 607.338735][T23543] Code: Unable to access opcode bytes at 0x7fe8d7f8f69f. [ 607.338743][T23543] RSP: 002b:00007fe8d8e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 607.338759][T23543] RAX: ffffffffffffffda RBX: 00007fe8d81e5fa0 RCX: 00007fe8d7f8f6c9 [ 607.338771][T23543] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 607.338781][T23543] RBP: 00007fe8d8e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 607.338791][T23543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.338800][T23543] R13: 00007fe8d81e6038 R14: 00007fe8d81e5fa0 R15: 00007ffdc7083998 [ 607.338817][T23543] [ 612.416902][ T96] block nbd0: Possible stuck request ffff88802506e000: control (read@0,1024B). Runtime 480 seconds [ 612.427807][ T96] block nbd0: Possible stuck request ffff88802506e1c0: control (read@1024,1024B). Runtime 480 seconds [ 612.439025][ T96] block nbd0: Possible stuck request ffff88802506e380: control (read@2048,1024B). Runtime 480 seconds [ 612.450556][ T96] block nbd0: Possible stuck request ffff88802506e540: control (read@3072,1024B). Runtime 480 seconds [ 613.697029][ T96] block nbd1: Possible stuck request ffff888025100000: control (read@0,1024B). Runtime 300 seconds [ 613.816775][ T96] block nbd1: Possible stuck request ffff8880251001c0: control (read@1024,1024B). Runtime 300 seconds [ 613.827818][ T96] block nbd1: Possible stuck request ffff888025100380: control (read@2048,1024B). Runtime 300 seconds [ 613.866246][ T96] block nbd1: Possible stuck request ffff888025100540: control (read@3072,1024B). Runtime 300 seconds