last executing test programs: 2.736673893s ago: executing program 1 (id=4538): socket$caif_seqpacket(0x25, 0x5, 0x3) unshare(0x400) pipe(0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000002000)="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", 0x1000}, {0x0}], 0x2, 0xa) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x20000, @local, 0x13}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x200080c0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@int=0x800, 0x4) 2.314710432s ago: executing program 3 (id=4545): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x24060400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x7fffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r3, 0x0, 0x1) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, &(0x7f0000020e00)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0xfc, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @bcast]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x118}}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r11, @ANYRES64=r2, @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40044) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) 2.166416934s ago: executing program 4 (id=4549): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) (async) writev(r2, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f", 0x9b}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) connect$can_bcm(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010300000000000000000000000005000400000000000900020073797a31000000001400078008000840000000200500140005000000050005000200000005000100060000000c000300686173683a69"], 0x58}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000004000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040003e010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x1, 0x120}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x1, 0x120}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x8000) 2.022275176s ago: executing program 3 (id=4552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (fail_nth: 7) 1.971577334s ago: executing program 2 (id=4553): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340)) (async) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340)) recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) (async) recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r6, @ANYRES32, @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$unix(0x1, 0x1, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r12, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) recvmmsg(r11, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1}, 0x3}], 0x1, 0x0, 0x0) 1.906159907s ago: executing program 3 (id=4554): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.608953179s ago: executing program 2 (id=4555): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) shutdown(r0, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008) 1.566184283s ago: executing program 4 (id=4556): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0xc000000}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) 1.559140809s ago: executing program 3 (id=4557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='signal_generate\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x138, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x95e4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa5b}]}]}, 0x138}, 0x1, 0x0, 0x0, 0xc80}, 0x800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x220, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x20c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "1d2c3d205f905940d2e72021106f605a5ecbbe0adb9e10667f081296ae4852a9f679625476d202c4068e495c5a92939c0abe811fa061e6395f33efbfdb30558e759e86a0abc9ae43f28466f2a0a9a6822b81eb9a72831152686b864eebaf79fc54059302a9fc8cc9ce2a3b21c9370d80929a95542639ada896a3db9e934b70537a45f81a07be7894f560558c658a9f67ea5d69257413aec4e2e746e4ed899926a0e13e123ead030951a610424b52b96b51f0a368f0f08376a7698597ce439beccc19880f078cd21b488cb77adbd22ed77504136dc3dfe3eb12a1f3667c21a444ff2f0a61cf8d59e615c583d634"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0xec, 0x4, "f68e0a23a1b6d36fe57e161063bba35b9b88c7272b658dfc6d757cba0faa36a963cc1a608d39cf62727292d696a81eb5320fb8588cc12bc0e5f924ebd5edbe900e1d2b107e314ad3bbca99388a93772bc86f465ab3985593248cc4c40c8e99be5e6e46553b7025874a8556a04e5448a22357475084109fcf1d5119949a40781022bc26897758f763117e59f18cb3dd4b2263353cfa80a71b55ab74869aea60ff845a67527c2d3d1ac07ead0a85699a83a429cd7ccae26a142ec0112dc442b2cc5e945f443130b6b33f2f34474a06a15cb1bfca8d647488ffe5024b4ea1c62251c071f49a97307a52"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20048040}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r5}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket(0x2, 0x80805, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x10001, 0x9, 0x8000, 0x2, 0xffffff01, 0x8, 0x3, 0x80000001}}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000a40), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0xcc, r13, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21fb065d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a5d80a3}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0xfd36, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x629297c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b5346a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c3eeba8}]}]}]}, 0xcc}}, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.506391833s ago: executing program 1 (id=4559): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4}, 0x20) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000100066000200f8ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.474763507s ago: executing program 2 (id=4560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) 1.449711109s ago: executing program 4 (id=4561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {0x7}, 0x0, 0x5000000}}, [@tmpl={0x84, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) 1.362071184s ago: executing program 1 (id=4562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) unshare(0x6020480) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000084) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000005c0)={'bridge0\x00', 0x400}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000080)=0x2) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, 0x0, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.361697402s ago: executing program 3 (id=4563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x18, &(0x7f0000000180)={&(0x7f00000004c0)="b003846833bdd790c2", 0x9}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0xff, 0x6}, 0x1}, 0x18) sendmsg$sock(r4, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f00000039c0)=[{&(0x7f0000000640)="00000000000000ebff", 0x9}], 0x1, 0x0, 0x0, 0xfeff}, 0x4000040) 1.355817299s ago: executing program 4 (id=4565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x1, 0x7ffffff, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@algo_aead={0x4c, 0x12, {{'gcm_base(xchacha20-generic,streebog256-generic)\x00'}, 0x0, 0x100}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x184}}, 0x0) 1.355178835s ago: executing program 2 (id=4566): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40880}, 0x4004010) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000703f2a959f9f91236ea7f9", @ANYRES16=r7, @ANYBLOB="290a00000000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="2400030000"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x37, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x3f, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'nicvf0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e88a8", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000006340)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="54ae08260000dd8d2e00000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x24, r0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r10, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r11}, 0x99) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x8, 0xe}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000500)={0x1, 0x8, 0x2, 0x780, 0x4, 0x0, 0xb, 0x5, r12}, &(0x7f0000000540)=0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) 1.221948051s ago: executing program 4 (id=4567): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'erspan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x800e}]}}]}, 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) listen(r6, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket(0x23, 0x5, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0xffffffffffffff33, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x80) r9 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x3, 0x6}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x8008, 0x7, 0x7fff, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000180)={r10, 0x9, 0x10, 0x4, 0xffffffffffffffff}, &(0x7f00000001c0)=0x18) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000003400004803c0001800a0001006d617463680000002c00028014000300f4f03b020047fdc6ad000d0442676003dc7a000000000001116b61979e090001006c3274700000000008000240000000000900020073797a3200000050183137aed217713200000000140000001100010000000000000000000000000ade8a1a611088c2eea1fa5271c90452a35fdba931edf8fc3403f5a126ed607db81522187c87d52265f8a376a58c6ce2ac929b7345d627858cbe447c2875bacaaad256ae6ca8d3f480ff9f8f2b04e10fa7093ef1e5eb6de4841007d55804f8841f5b23df03e730f241d652175047216784cab49e30fc909af0981b200b7167"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800218}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r11, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 1.069397666s ago: executing program 0 (id=4568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800000000000000002500", @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r1], 0x44}}, 0x0) 1.068182815s ago: executing program 2 (id=4569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0xfd45}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) write$nci(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1f, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r8], 0x0, 0x10, 0x2000000}, 0x94) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$nfc_llcp(r11, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd60"], 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) listen(r11, 0x0) close(r12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 874.710149ms ago: executing program 0 (id=4570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000001418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 811.535183ms ago: executing program 0 (id=4571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000304000000002a00000006000000", @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000280012800a00010063616e"], 0x48}}, 0x0) 747.649317ms ago: executing program 0 (id=4572): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 566.664039ms ago: executing program 0 (id=4573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800"], 0x88}, 0x1, 0x2f00000000000000}, 0x4008000) 550.03126ms ago: executing program 0 (id=4574): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') unshare(0x6a040000) (async) unshare(0x6a040000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) (async) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000400000000000000000000000079f6c700000000009500000000000000"], &(0x7f0000001200)='GPL\x00', 0x0, 0x967, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000400000000000000000000000079f6c700000000009500000000000000"], &(0x7f0000001200)='GPL\x00', 0x0, 0x967, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x39e) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6, 0x7a6ca697541ff5c9}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x6, 0x7a6ca697541ff5c9}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001500)=@newlink={0xac, 0x10, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x2000, 0x2042}, [@IFLA_VF_PORTS={0x4}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'wg1\x00'}, {0x14, 0x35, 'dvmrp1\x00'}]}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4000804) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000100)=0x365, 0x4) r8 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40088a01, &(0x7f0000002200)=0xc0100100) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040810) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040810) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r9, 0x5, 0x1d, 0x0, &(0x7f0000000000)="259a53f271a76d2608054c658aa8", 0x0, 0x10d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r9, 0x5, 0x1d, 0x0, &(0x7f0000000000)="259a53f271a76d2608054c658aa8", 0x0, 0x10d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 407.816287ms ago: executing program 1 (id=4575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a000018a8880008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) 378.926511ms ago: executing program 1 (id=4576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) 336.616486ms ago: executing program 1 (id=4577): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000cdff6d7070466485da12204c64fa00000000000000000000000000c30000ff000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0xfc}}, 0x14080) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x14d, 0x35, 0x6}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 126.882518ms ago: executing program 4 (id=4578): socket$caif_seqpacket(0x25, 0x5, 0x3) unshare(0x400) pipe(0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000002000)="f838b39ffa3563660f9814b4227413e01fae8c141a89fc121c5f52b430714dbfc5ba621390d85264f9f52ca984710f2881e3212a01c3034108a0c02d4e919f4ee18f640d365b63ac188f41180848d0d665f4579b93862a15f7b4b028f4cde79106a7d282246ac8139032e3c2b4b18924f0edb1a8bd986355a2cbad0104572adf7a986e927e0db561b8f711c7e23bbc1a5623b3704c55b2692a59ccb07d2a2de3321a476d3603ede9dbf268e67a43b491d980dbaa47e4e23c1f84379261076492f0a46598b1c2913db95ece9a9707d220f22aa438f29329ffef4cd6ebfd65ef97015949009f057d45c159173d7cb724e10037930e6674b18b607ef8d9a31fffa75579b4946adda7aaef92c894dea722960f333e0091f1f5119cfa9b4bef09d038545b640136210c93c329ed414e9dd66d3fe95ccca9ad614a1a97ca69c24fbeba68b23b2e00f86112e449979f4c982d2979740ff35eab13b861a6fb82c4cc90cf90275bf3029088558f16ca95d0056f0896131b4d62a85b6e3934bc9cef4824ca26d4a3042eb245243cc85a3c0fd1a477f4d22e55df0552f741d66995b0aac6115b7b9a455cd63d72ccd475eaaffd61bd680c9f3c622ca346afd8d8fc0097b61ad9ab12334f087a67c7db8010f7c096ac58b249dc453e705e6b70b9716f2b25be92b1eb2ea4059a580075ebeb08638351a23d7b00a8c28b989904e77edb5ac8824d97efec33916d5b90b359072a96490a2debe5f1b32fc52376a9168bd5407e6ca04ea62810ed78d584756600c738c189cd84c53ba8c86ba3340486e57e79c5068ca821e5e5622a977810e7536fe2d1bfe4125ffbdd0ad9f9b83266cd64570926612d130929c2112250755a1df6d8adb07d1d3b757cfea3a4b5e1cbfb061ec435c3f827ac25b40c556365dd410eff71a6ad47ffa5c832f44dc5fcf6a8cdae20850759df64b043b16a8782ee71de81812b06b2162dcc87eb34277dfd6ab7978e67653a8ec3a72a403478929a8cad89bba6088b54cfcbb25d1c3274dc8568229f1145c645c7e9fa9f28567d379bad2b467ce245223784576ec5b1cc2568153646b56ceaabb10396ab678b01ea61c28feba102284136d015cd8ce0c745ba0e8e2839ae928396b3446d7f824443ae92a8607196458799bc39ed67215a616366b7cfc2e216846441260d2dfd4c42039ca35bc53e1fb7885996ee8a1570e98a726e8a263898a6c9d885b4c88b81c6457587ed1959a02da5fb1ed3ae1decc14927c610010ce21f7297899167cea2231a99dc8b031e20c4d05987ff27ec2ecf9f90ccbad959e976ff9d2945d8975c9c4241fbd89af9164d3d0fc3fb12108304b33d6f50115362a518be54dd7b4bf213cd6f27a0257b8087f16b03997a68342f8ad5d253e27bab8f838211d79ae58cb0eb560c9994e3731c25cc3bf2e0ffbf13e746733da1f77c8b7f0ec2c93a9a27b7d56577f4aec10c270ddea7dc5b3f64feebf979aac54d155b903e4a7c946860d83d7aa53b80ecf86ec8d524a3d9ef3bb6b3d9b867f32282742b9e5792eddc0d466ac6e90971005d172d27cdbfa731e4cb1e5d6426a85d2d0bea19c7f27e3e6f781420bb79b7111e8959f99ea92b72a10c9c86f4f38e6700c93d9274f4572483ec8982e84fde86d11dc73a032cc66b5488a2945ee317ac4005aa33831e7737d3813e82618b9eecb8e454097622fd0bfd2a00994a223ac70d1f76ff21e64c886ba1fb8cea1fce2f8fd7221762f8925d17ee19eb345c631ea22cada57858fddf46753d894778012a7a5058b5765f9c96db357e9a7791a1edc2d7cd687ea67a63ed30f269c89f44530eaa5707faf6f1b897916e6df4df59e950d0ce371fdb54eedaf1ac74b51fb250a1e527439c67ae0945e5405f1ab6804732bf58c3744df95727d763de1f354a3945b9f8830c1c44ba02755ca10c9f765cab0f1bc3d3344aa91c468ead490629d19e64dcffe653d246832987a348f4284a95b53d9e661d2b6fb6509f45e7658ad3ef9985777fdc16b285e7534051ab31f50b365fee48302a13ae582446ef24213763c85f41210e34e8215ef3ad0d88c4369282bddabe3fae7ed243a08887647cdaf5b21b95d2cf03384ab5c9c19cec2bb04e016faba9c9c735803187f677377b84e3738635a49f452baee5060a4421d1eaa17aee81fa4ff6f9321d777a73128ab73affe7916491b6fd68a16e61b9d9f3a6f92769abe47542e4cb6501960d1a5ada70413cd2d19944891e65c67ec8979b5ee02468391a364d3bba313c4cf9ae99f364578c94b5554cb86a0f1ed71cc12cc6c4c4c8ba4d47b76c71d8dbd495bb608283b8edc2a02e74aea7073f07580e533e2d2fa2277c7bbc321ec1a42ddec9e120b85e8a6141400c6726692a58addb880c481a37dc0a6db923f9efae3c4ac3ab8f0c385d2cadf0620edfccb6896c98814f434ee126339f4ca360357faf27c49ae3bfec7b5b83e9b24f8b6fca947c15cb7ca433448f892af38725d337b2117b73fdce163c72d86f351cbd23c5e6da8fe4bb898da60a541cd719aced686896e20d8acff58365a4f75bf42333b7c29cadd998d7b1ff0977b119219e632d59818809827e1b3ecba476d259d2e55135f37138fd071ee7b42ace788aff5bef0df7cac215af38dadf99b6cd287139ccb4dd9a9c5ccb31c00a3a30b93ae95c78e67761143b711cccc2b13eff4ffee045cfb3efa4b15252f00c9ef41d4e9f537cf4270b5ff42454723f8f2b8501185f21bfe35e1013e01121ffae3a97333e8948498df714cdc6409e44f94e27bb995590badbc01f579e28fc3061f8997f556d7aff8f956a20b31f4ec87906e5d0cde8d8c8a44f0f3099fc8ae279af5968a02bb4b1fa06e9ba1629aac46ba0dc796f7813885d43717e332e0484a30383e374e26ab50afbc64883e8cfc7198904f877a09a75f05b189f0c8dcf42a452762d38c3bc3e261888cf4af346d1d87be963d66724ca46ad395784edc7e7956bac538b5adbc86d6ef51b708d548b5470f927700566332ec8b563909dbad42e90afff46e8b33fc66852d75bb2c3249cf12d21dc57be32c06a070d62dbc8b037f422cbb4ff7753e90eca15f28f24c1a5e37e3bb466d1448cc2693f198c8e8c75dc663f3254ac1a6e7d52756a6da5d755fbf301425c60650ababed9928efbeb8bb1bb9994742926763c43a2108cea9d5fd5a640879574d20ee3d4974f5647ca44353904927215b7918570c88e245ecc2385167fd1ca83618c821331d54d06b43224c3d6681db55d4b09d27db7915bb274051162b02a6cd64e8c4b0996650e0367652d652ef64fc13a8b3ed88c88e9532b56a2019c02583854f1952c028f82cffbcc030f370d193646b9aa076dc05fa057ca8769775140b55751297fa91698a9a82b89a614d96dfc153c52845913025ecc8984d333feaa50eca0002a885abb3ad5b513cc8409b040bac9ed8529a1a76c270a4df5b005356ac4220cd134d9434f901e6e7d96a374c80e4ed81977f36b27424304d879fe0889b50ada1da72a78e0070e35dc5ebb43d7c61ff52ff55e50ad298b00b97ad944dd161aed95f4009889927c24469403899bdd6dd7f8ecc195d6f5c9375164b331f915a29851d9b0230d07bab955091a141059a150d972739100035ae05c2bf9d8911e6b6171a6b4c2bcaa0e8567cf2a29fb6cb8adfe29e42e88094c36fa4e07bef31149bbd7d5166b620385bf422c51b4523e3eacab56ad54ee70d84572874a967779b737de35724502a3daaefc4ce1074bb11e9aad6879deb132ac240047af4e5e572edb5f122955a7b142b7bd96ef3cd069746f4b1dce2c94b6bf19e934a9d4f6edf3207172f1893cd8d35ed94f8ccda3d8ba3e7c5f886598bf8946df83fdd6a391c3b268b631c89ab7f2434bc02d3ecef208e236d06a4f14d1353012341ded0342cd2d580bbd0f88a14c56b4b9f12c2dece02fe02418c23e6d10b7d9ac6648165e47adf1857a4d0bb25c096aa510ce9f77671703bf7f887908fabcfcb26a7f1fca177ae3686e5e1db1bef474d155204ecd610d71fd90512192504f0cfc44fc38de414ffc5571ae72be4351c86d63be507982114afc33e38ee81a05910dafb240d4527082f85c61861233aeae8f3da8e2814c35ef709024ba08b53d5e26b8b855d8fd273012777c4517601252f7977189e9960667e8fb7c81fe544454c0ef2891c2fea071da9f9e2861b9cf50f74edf1baf98fb8e32d291e107603dd52b8f4225f50239e893f7320dc448305bb8f1f9ecdfe4480b7cb99095243cc576496b7d2a6ef2326b908ca525cae402b41ce45da7cc2f5356fab22a3693ef4107b9ee5cf150f8b263ba6868525ddb8e4e7c212f5764366025e5f1a1904eb7348269ae9a83aa5185be2e375f90883ed71bb7f542463ec0477042b91b88a8b1776e4e15333668bbf70271961ae39eb797e30f86dfd9a6b6393bbeeb47a43bf694b57b9e5dd4f312d3ebfa2040ea49a1700eab21c00ce2252ce3f68a5c65e0f390daa867cec74de2bddba3324dcec88d1c0c8850b4240d85fb5115410086924d5b6059b68a82d2a56edb7e535d8006be9771a5744167d06fa9f61e2e8e0e01a72b569b8ec559d2e776300077d535bcb55c89b732daf4438fafa26171a965bae949770a074f511abb445a34d26142d8dcfa5c66863ce79fde3d4f39bd205be5e4ce365ef0db4b9beca1c64784ee020af1c89094879134ab8e7511ec1f0127dca4ba124b53c4c11a169f1757ad8b59829202f4afa77d8c8b8d8755297e4c31c5b8500b39a4f884146b19522e5142bcd5fe6531607a421f17989c1c1b34d587f45690444a589c3d2153a8bfb50cf7fa0045603ac64a3ed43c0b15936b829949e5059e22782b418b245d08945155a80e24d468612fc9b59c285b53ba6cf553df1f189a1951858892655c8151c2c4b3bec9e315c8c418070405e4ef6a0f62e2469a0c4fa42058b516b941f2a25380b5a042b055bb94447046a507d7e6c12432ddeaf91482416f87b2f16bc0c219deb6c0c5cd3b400e7b9039e720232c56b15360961c30ba4b8e18fee5405018efd8e58215b434c6843e0b8be3967bd398d965f56347c7f320d6ac8636e57608091e2dc5700cff7203453fa3a563221bd1e742b09647084c602dd2ec7fbef818e1cea31616c76c6cf0964cc5b467c213045888d5ab16061f1fbd6c9318c9fc56848387326283a50d6579af007481788db0579c46b234c7c9e960cee926c1c944cbca122188bc215618ba717f4c6bcd4b4e6cde50bf9b43b67663001e581f5dc55086d8f197b7fcaa9f305f2f499f97403d0a68efb55e99916721ecfa16d9d0ea8a504c2be80a1afbc6e164973be524e82db0e69694d38afe22620bbd2862e27a180ef3fb6b07069dd3f5939438edbcd5031964490d202e95f799fe63de55fca280b4315a1e2d8dd52e8cf6e86e8f376f477de7e729410bd0544997de7359c77b4a6e0e21abbfd07e25fbcbf015e687d779b283e8aeb98309795296595feabe56ed322a1a8c90a36fd29c1471cabd0e32d6022988fae5fecb5dcbe1e8b2552e0a97f35b92c774a79aa6b1f117218ddbe97686ab63d61d95f160293aca171398cf3b3bb01fd8b529767166ed5a76ad17f3c217fcd8d9d9c85afa113f85eb65befb9c9029b34f24cda431b98217b7f43c79f9250ecd4828fb46023b6e8083f25e4d4c34056834159860dca5f529052c6c3b6c23993231862c9326076d88f4447a753ed5be0a6bfc34bac7d8fe34187b1d4f6f6cee1313052057225c88f9f0ba3e", 0x1000}], 0x1, 0xa) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x20000, @local, 0x13}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x200080c0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@int=0x800, 0x4) 34.53118ms ago: executing program 2 (id=4579): unshare(0x6a040000) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000680)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e23", 0x48}], 0x1}, 0x8001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x3}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20008880}, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x44, 0x2c, 0xf31, 0x70bd28, 0x2000, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="000000000099ff82c3050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=4580): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000210400325285d457c44a220000003ed0b75a885f5aa15afb0437d72d2619459c7e82ec1c41bf16872f32a5c95aa2a076079f33cf32bf55f32cbef533e3f4420890e7089b8c8f8eb31caec993bdefac72956c83819e790298ccc3038cbabe", @ANYRES32=0x0, @ANYBLOB="000100000c0200001800128008000100736974000c0002800500040000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240080c8}, 0x4000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x3, 0x0, 0x2, 0xffff02d1, 0x6}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2, 0x0, 0x24000054}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r8) kernel console output (not intermixed with test programs): 64_after_hwframe+0x77/0x7f [ 352.984852][T16337] RIP: 0033:0x7f301e18eec9 [ 352.984870][T16337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.984885][T16337] RSP: 002b:00007f301f073038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 352.984904][T16337] RAX: ffffffffffffffda RBX: 00007f301e3e5fa0 RCX: 00007f301e18eec9 [ 352.984917][T16337] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 352.984930][T16337] RBP: 00007f301f073090 R08: 0000000000000000 R09: 0000000000000000 [ 352.984941][T16337] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 352.984952][T16337] R13: 00007f301e3e6038 R14: 00007f301e3e5fa0 R15: 00007ffdf6822498 [ 352.984982][T16337] [ 353.223270][T16326] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.417253][T16326] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.450100][T16347] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3163'. [ 353.645251][ T6418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.740328][T11310] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.771569][T16351] block nbd1: server does not support multiple connections per device. [ 353.800306][T16351] block nbd1: shutting down sockets [ 353.805597][ T1312] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.815897][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.824681][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.833298][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.896968][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.905588][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.037118][T11310] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.124375][T16368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'. [ 354.180093][T16368] 8021q: VLANs not supported on gre0 [ 354.241020][ T1312] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.258599][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3294'. [ 354.349239][T16377] bond0: entered promiscuous mode [ 354.354397][T16377] bond_slave_0: entered promiscuous mode [ 354.360465][T16377] bond_slave_1: entered promiscuous mode [ 354.368391][T16377] batadv0: entered promiscuous mode [ 354.374682][T16377] debugfs: 'hsr1' already exists in 'hsr' [ 354.383125][T16377] Cannot create hsr debugfs directory [ 354.391804][T16377] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 354.403205][T16357] lo speed is unknown, defaulting to 1000 [ 354.459117][ T1312] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.488652][T16387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3297'. [ 354.545157][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3298'. [ 354.641071][ T1312] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.672533][T16394] bridge1: port 1(veth0_to_bond) entered blocking state [ 354.686377][T16394] bridge1: port 1(veth0_to_bond) entered disabled state [ 354.693607][T16394] veth0_to_bond: entered allmulticast mode [ 354.702963][T16394] veth0_to_bond: entered promiscuous mode [ 354.745423][T16395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.768134][ T1312] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.827469][T16397] lo speed is unknown, defaulting to 1000 [ 355.019575][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 355.039241][T16418] 8021q: VLANs not supported on gre0 [ 355.143066][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3306'. [ 355.159912][T16357] chnl_net:caif_netlink_parms(): no params data found [ 355.260366][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'. [ 355.273639][ T1312] bridge_slave_1: left allmulticast mode [ 355.280222][ T1312] bridge_slave_1: left promiscuous mode [ 355.286256][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.297438][ T1312] bridge_slave_0: left allmulticast mode [ 355.303218][ T1312] bridge_slave_0: left promiscuous mode [ 355.309104][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.384659][ T1312] veth0_to_bond: left allmulticast mode [ 355.390397][ T1312] veth0_to_bond: left promiscuous mode [ 355.396433][ T1312] bridge5: port 1(veth0_to_bond) entered disabled state [ 355.597951][T16435] netlink: 'syz.1.3311': attribute type 8 has an invalid length. [ 355.735538][ T1312] bond19 (unregistering): (slave geneve0): Releasing active interface [ 356.005839][ T5872] Bluetooth: hci2: command tx timeout [ 356.134617][ T1312] bond0 (unregistering): left promiscuous mode [ 356.141213][ T1312] : left promiscuous mode [ 356.146008][ T1312] bond_slave_1: left promiscuous mode [ 356.151593][ T1312] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 356.160895][ T1312] bond0 (unregistering): (slave 30): Releasing backup interface [ 356.170626][ T1312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.180787][ T1312] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 356.192554][ T1312] bond0 (unregistering): Released all slaves [ 356.291569][ T1312] bond1 (unregistering): left promiscuous mode [ 356.298606][ T1312] team0: Port device bond1 removed [ 356.304733][ T1312] bond1 (unregistering): Released all slaves [ 356.319063][ T1312] bond2 (unregistering): Released all slaves [ 356.331323][ T1312] bond3 (unregistering): Released all slaves [ 356.430290][ T1312] bond4 (unregistering): left promiscuous mode [ 356.437956][ T1312] team0: Port device bond4 removed [ 356.444137][ T1312] bond4 (unregistering): Released all slaves [ 356.538563][ T1312] bond5 (unregistering): left promiscuous mode [ 356.545457][ T1312] team0: Port device bond5 removed [ 356.551766][ T1312] bond5 (unregistering): Released all slaves [ 356.647749][ T1312] bond6 (unregistering): left promiscuous mode [ 356.655491][ T1312] team0: Port device bond6 removed [ 356.661796][ T1312] bond6 (unregistering): Released all slaves [ 356.761016][ T1312] bond7 (unregistering): Released all slaves [ 356.859198][ T1312] bond8 (unregistering): (slave veth15): Releasing active interface [ 356.868137][ T1312] bond8 (unregistering): Released all slaves [ 356.970468][ T1312] bond9 (unregistering): left promiscuous mode [ 356.977656][ T1312] team0: Port device bond9 removed [ 356.983733][ T1312] bond9 (unregistering): Released all slaves [ 357.087701][ T1312] bond10 (unregistering): (slave veth17): Releasing active interface [ 357.096731][ T1312] bond10 (unregistering): Released all slaves [ 357.203952][ T1312] bond11 (unregistering): Released all slaves [ 357.303697][ T1312] bond12 (unregistering): Released all slaves [ 357.404520][ T1312] bond13 (unregistering): left promiscuous mode [ 357.412199][ T1312] team0: Port device bond13 removed [ 357.418522][ T1312] bond13 (unregistering): Released all slaves [ 357.518282][ T1312] bond14 (unregistering): left promiscuous mode [ 357.525365][ T1312] team0: Port device bond14 removed [ 357.531750][ T1312] bond14 (unregistering): Released all slaves [ 357.635241][ T1312] bond15 (unregistering): left promiscuous mode [ 357.642396][ T1312] team0: Port device bond15 removed [ 357.648816][ T1312] bond15 (unregistering): Released all slaves [ 357.743223][ T1312] bond16 (unregistering): left promiscuous mode [ 357.750496][ T1312] team0: Port device bond16 removed [ 357.758061][ T1312] bond16 (unregistering): Released all slaves [ 357.852518][ T1312] bond17 (unregistering): left promiscuous mode [ 357.859688][ T1312] team0: Port device bond17 removed [ 357.866325][ T1312] bond17 (unregistering): Released all slaves [ 357.964611][ T1312] bond18 (unregistering): left promiscuous mode [ 357.971856][ T1312] team0: Port device bond18 removed [ 357.978156][ T1312] bond18 (unregistering): Released all slaves [ 358.076991][ T1312] bond19 (unregistering): Released all slaves [ 358.077443][ T5872] Bluetooth: hci2: command tx timeout [ 358.178297][ T1312] bond20 (unregistering): Released all slaves [ 358.280422][ T1312] bond21 (unregistering): Released all slaves [ 358.378437][ T1312] bond22 (unregistering): (slave wlan0): Releasing active interface [ 358.389872][ T1312] bond22 (unregistering): Released all slaves [ 358.422467][T16431] syz_tun: entered promiscuous mode [ 358.438235][T16431] syz_tun: left promiscuous mode [ 358.500822][T16440] __nla_validate_parse: 3 callbacks suppressed [ 358.500841][T16440] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3312'. [ 358.521870][T16443] tipc: Enabling of bearer rejected, already enabled [ 358.645465][ T1312] tipc: Left network mode [ 358.702816][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3316'. [ 358.751298][T16452] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.3314'. [ 358.772502][T16357] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.780091][T16357] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.787548][T16357] bridge_slave_0: entered allmulticast mode [ 358.796013][T16357] bridge_slave_0: entered promiscuous mode [ 358.804942][T16459] 8021q: VLANs not supported on gre0 [ 358.855595][T16357] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.867847][T16357] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.885294][T16357] bridge_slave_1: entered allmulticast mode [ 358.902899][T16357] bridge_slave_1: entered promiscuous mode [ 358.971968][T16468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'. [ 358.993743][T16460] lo speed is unknown, defaulting to 1000 [ 358.997974][T16357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.038254][T16466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.046300][T16466] team0: Port device bond1 added [ 359.069072][T16357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.167802][T16357] team0: Port device team_slave_0 added [ 359.187425][T16472] veth1_to_bond: entered allmulticast mode [ 359.196752][T16357] team0: Port device team_slave_1 added [ 359.222006][T16472] veth1_to_bond: entered promiscuous mode [ 359.237227][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 359.343589][T16472] veth1_to_bond (unregistering): left allmulticast mode [ 359.351179][T16472] veth1_to_bond (unregistering): left promiscuous mode [ 359.364177][T16357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.371381][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.398627][T16357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.419392][T16479] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.447263][T16357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.464459][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.481672][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3323'. [ 359.493227][T16357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.618276][T16479] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.695052][T16479] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.721086][T16357] hsr_slave_0: entered promiscuous mode [ 359.731245][T16357] hsr_slave_1: entered promiscuous mode [ 359.780405][T16479] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.828820][ T1312] batadv0: left promiscuous mode [ 359.834548][ T1312] !: left promiscuous mode [ 359.844288][ T1312] hsr_slave_0: left promiscuous mode [ 359.852581][ T1312] hsr_slave_1: left promiscuous mode [ 359.858860][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.866986][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.140123][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078191000: rx timeout, send abort [ 360.148723][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078191000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 360.165959][ T5872] Bluetooth: hci2: command tx timeout [ 360.273200][T16495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3328'. [ 360.410949][ T1312] team_slave_1 (unregistering): left promiscuous mode [ 360.419615][ T1312] team0 (unregistering): Port device team_slave_1 removed [ 360.462840][ T1312] team_slave_0 (unregistering): left promiscuous mode [ 360.470543][ T1312] team0 (unregistering): Port device team_slave_0 removed [ 360.551260][T16501] sctp: [Deprecated]: syz.4.3330 (pid 16501) Use of int in max_burst socket option deprecated. [ 360.551260][T16501] Use struct sctp_assoc_value instead [ 360.640201][ T95] block nbd0: Possible stuck request ffff888025995080: control (read@0,1024B). Runtime 270 seconds [ 360.651117][ T95] block nbd0: Possible stuck request ffff888025995240: control (read@1024,1024B). Runtime 270 seconds [ 360.662178][ T95] block nbd0: Possible stuck request ffff888025995400: control (read@2048,1024B). Runtime 270 seconds [ 360.673269][ T95] block nbd0: Possible stuck request ffff8880259955c0: control (read@3072,1024B). Runtime 270 seconds [ 360.919944][T16489] syzkaller0: entered promiscuous mode [ 360.925877][T16489] syzkaller0: entered allmulticast mode [ 361.062806][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'. [ 361.079990][T11304] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.125633][T16503] syz_tun: entered promiscuous mode [ 361.133781][T16503] syz_tun: left promiscuous mode [ 361.154364][T11304] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.214493][T11304] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.237214][T11304] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.378010][T16506] syzkaller1: entered promiscuous mode [ 361.393688][T16506] syzkaller1: entered allmulticast mode [ 361.479342][ T1312] IPVS: stop unused estimator thread 0... [ 361.752349][T16524] lo speed is unknown, defaulting to 1000 [ 361.858987][T16357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.906600][T16357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.950514][T16532] netlink: 'syz.3.3340': attribute type 1 has an invalid length. [ 361.968345][T16357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.023907][T16357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.109415][T16532] vlan2: entered allmulticast mode [ 362.117701][T16532] veth1: entered allmulticast mode [ 362.238538][ T5872] Bluetooth: hci2: command tx timeout [ 362.252573][T16542] netlink: 'syz.3.3342': attribute type 1 has an invalid length. [ 362.260486][ T13] vlan3: left promiscuous mode [ 362.287493][T16542] vlan2: entered allmulticast mode [ 362.305805][T16544] !: renamed from dummy0 (while UP) [ 362.416913][T16545] syzkaller1: entered promiscuous mode [ 362.422425][T16545] syzkaller1: entered allmulticast mode [ 362.473270][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3341'. [ 362.545263][T16548] netlink: 'syz.3.3343': attribute type 1 has an invalid length. [ 362.598136][T16548] vlan2: entered allmulticast mode [ 362.691776][T16357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.738095][T16555] batadv_slave_1: entered promiscuous mode [ 362.783522][T16357] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.934659][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.941942][ T6418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.978039][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.985214][T11304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.160226][T16573] netlink: 'syz.2.3353': attribute type 10 has an invalid length. [ 363.177521][T16573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3353'. [ 363.207325][T16573] team0: Device geneve0 is up. Set it down before adding it as a team port [ 363.227424][T16573] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 363.443736][T16551] batadv_slave_1: left promiscuous mode [ 363.518275][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'. [ 363.544556][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3358'. [ 363.553452][T16357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.678084][T16357] veth0_vlan: entered promiscuous mode [ 363.722793][T16357] veth1_vlan: entered promiscuous mode [ 363.802635][T16357] veth0_macvtap: entered promiscuous mode [ 363.827709][T16357] veth1_macvtap: entered promiscuous mode [ 363.898733][T16357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.929506][T16600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.009066][T16357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.044431][ T3501] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.087247][ T3501] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.109709][ T3501] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.148394][ T3501] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.265664][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.282031][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.319595][T16622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3368'. [ 364.345952][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.354419][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.362076][T16622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3368'. [ 364.435041][T16624] batadv_slave_1: entered promiscuous mode [ 364.607403][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 364.620259][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 364.741509][T16643] lo speed is unknown, defaulting to 1000 [ 364.771549][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 364.900800][T16652] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3380'. [ 365.039999][T16654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.091341][T16617] batadv_slave_1: left promiscuous mode [ 365.208660][T16661] netlink: 'syz.0.3383': attribute type 1 has an invalid length. [ 365.324173][T16661] vlan2: entered allmulticast mode [ 365.326812][T16670] netlink: 'syz.1.3387': attribute type 3 has an invalid length. [ 365.352436][T16661] veth1: entered allmulticast mode [ 365.388165][T16672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3388'. [ 365.402354][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3388'. [ 365.466784][T16672] netlink: 'syz.3.3388': attribute type 3 has an invalid length. [ 365.505897][T16672] netlink: 'syz.3.3388': attribute type 2 has an invalid length. [ 365.538992][T16672] netlink: 'syz.3.3388': attribute type 2 has an invalid length. [ 365.751319][T16698] !: renamed from dummy0 (while UP) [ 365.845896][T16706] netlink: zone id is out of range [ 365.851839][T16706] netlink: zone id is out of range [ 365.858346][T16706] netlink: zone id is out of range [ 365.870816][T16703] batadv_slave_1: entered promiscuous mode [ 365.878323][T16706] netlink: zone id is out of range [ 365.891952][T16706] netlink: zone id is out of range [ 366.007890][T16711] netlink: del zone limit has 4 unknown bytes [ 366.393716][T16725] batadv1: entered promiscuous mode [ 366.415223][T16706] netlink: set zone limit has 4 unknown bytes [ 366.432426][T16725] batadv1: entered allmulticast mode [ 366.510986][T16693] batadv_slave_1: left promiscuous mode [ 367.311285][T16770] batadv_slave_1: entered promiscuous mode [ 367.461684][T16780] sctp: [Deprecated]: syz.0.3419 (pid 16780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.461684][T16780] Use struct sctp_sack_info instead [ 367.535209][T16785] netlink: 'syz.1.3424': attribute type 3 has an invalid length. [ 367.685446][T16794] tipc: Started in network mode [ 367.690620][T16794] tipc: Node identity e64592377862, cluster identity 4711 [ 367.698044][T16794] tipc: Enabled bearer , priority 0 [ 367.705656][T16794] syzkaller0: entered promiscuous mode [ 367.713264][T16794] syzkaller0: entered allmulticast mode [ 367.732401][T16794] tipc: Resetting bearer [ 367.740848][T16793] tipc: Resetting bearer [ 367.757815][T16793] tipc: Disabling bearer [ 367.941251][T16801] bridge1: port 1(veth0_to_bond) entered blocking state [ 367.948692][T16801] bridge1: port 1(veth0_to_bond) entered disabled state [ 367.956443][T16801] veth0_to_bond: entered allmulticast mode [ 367.963677][T16801] veth0_to_bond: entered promiscuous mode [ 368.079570][T16765] batadv_slave_1: left promiscuous mode [ 368.257424][T16816] net_ratelimit: 1 callbacks suppressed [ 368.257436][T16816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.484668][T16821] bond0: entered promiscuous mode [ 368.514753][T16821] bond_slave_0: entered promiscuous mode [ 368.535234][T16821] bond_slave_1: entered promiscuous mode [ 368.557646][T16821] batadv0: entered promiscuous mode [ 368.564542][T16821] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 368.590258][T16829] __nla_validate_parse: 11 callbacks suppressed [ 368.590277][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3440'. [ 368.668597][T16829] syz_tun: entered promiscuous mode [ 368.687453][T16829] syz_tun: left promiscuous mode [ 369.153287][T16849] lo speed is unknown, defaulting to 1000 [ 369.238924][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3451'. [ 369.272433][T16858] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.279370][T16858] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.339817][T16861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3453'. [ 369.641539][T16866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3456'. [ 369.693645][T16872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.704304][T16872] team0: Port device bond1 added [ 369.718964][T16866] 8021q: VLANs not supported on vcan0 [ 369.886161][T16882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3458'. [ 369.973468][T16885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.009340][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3462'. [ 370.139231][T16895] netlink: 'syz.0.3464': attribute type 3 has an invalid length. [ 370.232140][T16893] lo speed is unknown, defaulting to 1000 [ 370.405402][T16910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3469'. [ 370.578631][T16912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3470'. [ 370.784779][T16928] lo speed is unknown, defaulting to 1000 [ 370.903190][T16934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3476'. [ 370.992345][T16934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3476'. [ 371.402230][T16947] block nbd1: server does not support multiple connections per device. [ 371.421192][T16947] block nbd1: shutting down sockets [ 371.521081][T16952] netlink: 'syz.2.3484': attribute type 6 has an invalid length. [ 371.535520][T16952] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.546586][T16950] lo speed is unknown, defaulting to 1000 [ 371.738505][T16962] netlink: 'syz.3.3488': attribute type 1 has an invalid length. [ 371.839028][T16962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.968164][T16967] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 372.018746][T16962] vlan2: entered allmulticast mode [ 372.025023][T16962] veth1: entered promiscuous mode [ 372.030986][T16962] veth1: left promiscuous mode [ 372.059173][T16962] bond1: (slave vlan2): making interface the new active one [ 372.093183][T16962] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 372.131898][T16962] veth1: entered promiscuous mode [ 372.146214][T16962] vlan2: entered promiscuous mode [ 372.159608][T16962] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 372.177022][T16972] tipc: Enabling of bearer rejected, already enabled [ 372.195127][T16978] vlan3: entered promiscuous mode [ 372.410310][T16991] netlink: 'syz.1.3500': attribute type 1 has an invalid length. [ 372.425977][T16991] netlink: 'syz.1.3500': attribute type 2 has an invalid length. [ 372.428607][T16988] syzkaller1: entered promiscuous mode [ 372.442672][T16988] syzkaller1: entered allmulticast mode [ 372.610427][T16995] netlink: 'syz.1.3502': attribute type 1 has an invalid length. [ 372.651994][T16999] lo speed is unknown, defaulting to 1000 [ 372.962037][T17007] vlan3: entered promiscuous mode [ 373.159237][T17014] lo speed is unknown, defaulting to 1000 [ 373.340760][T17021] netlink: 'syz.0.3510': attribute type 3 has an invalid length. [ 373.550736][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055ba2c00: rx timeout, send abort [ 373.559470][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055ba2c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 373.833546][T17048] IPVS: length: 24 != 55320 [ 373.876310][ T30] audit: type=1800 audit(1758627751.544:5): pid=17035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3513" name="memory.events" dev="tmpfs" ino=715 res=0 errno=0 [ 374.003155][T17050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.088943][T17054] __nla_validate_parse: 9 callbacks suppressed [ 374.088961][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3522'. [ 374.111603][T17054] vlan3: entered promiscuous mode [ 374.125809][T17054] bond0: entered promiscuous mode [ 374.130887][T17054] bond_slave_0: entered promiscuous mode [ 374.151283][T17065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3524'. [ 374.161262][T17054] bond_slave_1: entered promiscuous mode [ 374.179442][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3523'. [ 374.234428][T17057] vlan3: entered promiscuous mode [ 374.307772][T17050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.378921][T17069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.439723][T17050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.520666][T17069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.548178][T17076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.592499][T17050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.711553][T17069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.740098][T17081] batadv_slave_1: entered promiscuous mode [ 374.747194][T17087] tipc: Enabled bearer , priority 0 [ 374.790357][T17069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.810820][T17087] tipc: Disabling bearer [ 374.819998][T17089] tipc: Enabled bearer , priority 0 [ 374.828902][T17083] syzkaller0: entered promiscuous mode [ 374.834429][T17083] syzkaller0: entered allmulticast mode [ 374.865501][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.882255][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.898553][T17083] tipc: Resetting bearer [ 374.921823][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 374.935071][T17082] tipc: Resetting bearer [ 374.950606][T17082] tipc: Disabling bearer [ 374.959758][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.973111][T17092] syz_tun: entered promiscuous mode [ 374.980778][T17092] syz_tun: left promiscuous mode [ 375.024101][ T1312] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.055416][T17094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3534'. [ 375.061417][ T1312] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.112368][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.189389][ T1312] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.260433][T11304] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.330006][T17107] lo speed is unknown, defaulting to 1000 [ 375.410432][T17079] batadv_slave_1: left promiscuous mode [ 375.717742][T17126] bond2: entered promiscuous mode [ 375.724075][T17126] bond2: entered allmulticast mode [ 375.732351][T17126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.769520][T17128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.785521][T17128] team0: Port device bond2 added [ 376.199678][T17156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3554'. [ 376.306691][T17157] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3552'. [ 376.343253][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'. [ 376.362085][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3556'. [ 376.419012][T17165] syz_tun: entered promiscuous mode [ 376.445956][T17165] syz_tun: left promiscuous mode [ 376.502723][T17174] batadv_slave_1: entered promiscuous mode [ 376.520386][T17169] batadv_slave_1: left promiscuous mode [ 376.701086][T17187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3563'. [ 376.764531][T17193] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 376.800409][T17193] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 376.833099][T17193] netlink: 'syz.0.3565': attribute type 10 has an invalid length. [ 376.854712][T17193] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 376.941537][T17199] bridge1: port 1(veth0_to_bond) entered blocking state [ 376.964751][T17199] bridge1: port 1(veth0_to_bond) entered disabled state [ 376.983884][T17199] veth0_to_bond: entered allmulticast mode [ 376.995077][T17199] veth0_to_bond: entered promiscuous mode [ 377.063816][T17206] syzkaller1: entered promiscuous mode [ 377.090564][T17206] syzkaller1: entered allmulticast mode [ 377.127412][T17213] netlink: 'syz.1.3575': attribute type 3 has an invalid length. [ 377.319611][T17223] syz_tun: entered promiscuous mode [ 377.338382][T17223] syz_tun: left promiscuous mode [ 377.408035][T17230] vlan4: entered promiscuous mode [ 377.831496][T17266] netlink: 'syz.1.3593': attribute type 3 has an invalid length. [ 377.866482][T17263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.876869][T17263] team0: Port device bond3 added [ 378.100561][T17288] syz_tun: entered promiscuous mode [ 378.117234][T17288] syz_tun: left promiscuous mode [ 378.168118][T17291] netlink: 'syz.2.3603': attribute type 1 has an invalid length. [ 378.203202][T17291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 378.222941][T17291] bond1: (slave wlan0): Releasing active interface [ 378.560520][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.582995][T17316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.597608][T17316] team0: Port device bond2 added [ 379.390898][T17344] vlan3: entered promiscuous mode [ 379.490509][T17342] __nla_validate_parse: 11 callbacks suppressed [ 379.490530][T17342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3622'. [ 379.678479][T17355] bridge0: entered promiscuous mode [ 379.685925][T17355] macsec1: entered promiscuous mode [ 379.698532][T17355] bridge0: port 3(macsec1) entered blocking state [ 379.706982][T17355] bridge0: port 3(macsec1) entered disabled state [ 379.713656][T17355] macsec1: entered allmulticast mode [ 379.719457][T17360] FAULT_INJECTION: forcing a failure. [ 379.719457][T17360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.736931][T17355] bridge0: entered allmulticast mode [ 379.743208][T17360] CPU: 0 UID: 0 PID: 17360 Comm: syz.4.3631 Not tainted syzkaller #0 PREEMPT(full) [ 379.743234][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.743250][T17360] Call Trace: [ 379.743257][T17360] [ 379.743266][T17360] dump_stack_lvl+0x189/0x250 [ 379.743291][T17360] ? __pfx____ratelimit+0x10/0x10 [ 379.743311][T17360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.743330][T17360] ? __pfx__printk+0x10/0x10 [ 379.743366][T17360] should_fail_ex+0x414/0x560 [ 379.743395][T17360] _copy_to_user+0x31/0xb0 [ 379.743419][T17360] simple_read_from_buffer+0xe1/0x170 [ 379.743447][T17360] proc_fail_nth_read+0x1b3/0x220 [ 379.743471][T17360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.743490][T17360] ? rw_verify_area+0x2a6/0x4d0 [ 379.743508][T17360] ? __lock_acquire+0xab9/0xd20 [ 379.743526][T17360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.743544][T17360] vfs_read+0x1fd/0xa30 [ 379.743565][T17360] ? fdget_pos+0x247/0x320 [ 379.743586][T17360] ? __pfx___mutex_lock+0x10/0x10 [ 379.743606][T17360] ? __pfx_vfs_read+0x10/0x10 [ 379.743630][T17360] ? __fget_files+0x2a/0x420 [ 379.743660][T17360] ? __fget_files+0x3a0/0x420 [ 379.743675][T17360] ? __fget_files+0x2a/0x420 [ 379.743701][T17360] ksys_read+0x145/0x250 [ 379.743725][T17360] ? __pfx_ksys_read+0x10/0x10 [ 379.743744][T17360] ? rcu_is_watching+0x15/0xb0 [ 379.743768][T17360] ? do_syscall_64+0xbe/0x3b0 [ 379.743789][T17360] do_syscall_64+0xfa/0x3b0 [ 379.743805][T17360] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.743823][T17360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.743839][T17360] ? clear_bhb_loop+0x60/0xb0 [ 379.743859][T17360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.743881][T17360] RIP: 0033:0x7f301e18d8dc [ 379.743898][T17360] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 379.743914][T17360] RSP: 002b:00007f301f073030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.743934][T17360] RAX: ffffffffffffffda RBX: 00007f301e3e5fa0 RCX: 00007f301e18d8dc [ 379.743948][T17360] RDX: 000000000000000f RSI: 00007f301f0730a0 RDI: 0000000000000006 [ 379.743960][T17360] RBP: 00007f301f073090 R08: 0000000000000000 R09: 0000000000000000 [ 379.743971][T17360] R10: 0000000000000530 R11: 0000000000000246 R12: 0000000000000001 [ 379.743983][T17360] R13: 00007f301e3e6038 R14: 00007f301e3e5fa0 R15: 00007ffdf6822498 [ 379.744014][T17360] [ 379.757864][T17355] macsec1: left allmulticast mode [ 380.044129][T17355] bridge0: left allmulticast mode [ 380.050830][T17355] bridge0: left promiscuous mode [ 380.134759][T17369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.145741][T17369] team0: Port device bond3 added [ 380.164125][T17370] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3629'. [ 380.204488][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 380.231900][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3629'. [ 380.243690][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 380.276993][T17374] netlink: 720 bytes leftover after parsing attributes in process `syz.3.3633'. [ 380.324423][T17374] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 380.361586][T17374] netlink: 'syz.3.3633': attribute type 10 has an invalid length. [ 380.375458][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.383298][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.447158][T17374] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.454380][T17374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.462006][T17374] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.469241][T17374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.518036][T17374] bridge0: entered promiscuous mode [ 380.524112][T17374] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 380.636733][T17388] FAULT_INJECTION: forcing a failure. [ 380.636733][T17388] name failslab, interval 1, probability 0, space 0, times 0 [ 380.651287][T17388] CPU: 1 UID: 0 PID: 17388 Comm: syz.4.3640 Not tainted syzkaller #0 PREEMPT(full) [ 380.651313][T17388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.651324][T17388] Call Trace: [ 380.651331][T17388] [ 380.651339][T17388] dump_stack_lvl+0x189/0x250 [ 380.651364][T17388] ? __pfx____ratelimit+0x10/0x10 [ 380.651383][T17388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.651404][T17388] ? __pfx__printk+0x10/0x10 [ 380.651428][T17388] ? __pfx___might_resched+0x10/0x10 [ 380.651446][T17388] ? fs_reclaim_acquire+0x7d/0x100 [ 380.651468][T17388] should_fail_ex+0x414/0x560 [ 380.651492][T17388] should_failslab+0xa8/0x100 [ 380.651515][T17388] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 380.651535][T17388] ? __alloc_skb+0x112/0x2d0 [ 380.651558][T17388] __alloc_skb+0x112/0x2d0 [ 380.651580][T17388] alloc_skb_with_frags+0xca/0x890 [ 380.651613][T17388] sock_alloc_send_pskb+0x857/0x990 [ 380.651660][T17388] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 380.651680][T17388] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.651708][T17388] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 380.651732][T17388] unix_dgram_sendmsg+0x461/0x1850 [ 380.651756][T17388] ? do_wp_page+0x161d/0x5800 [ 380.651786][T17388] ? __pfx_do_wp_page+0x10/0x10 [ 380.651809][T17388] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 380.651830][T17388] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 380.651848][T17388] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 380.651878][T17388] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 380.651897][T17388] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 380.651918][T17388] __sock_sendmsg+0x21c/0x270 [ 380.651939][T17388] ____sys_sendmsg+0x52d/0x830 [ 380.651964][T17388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.651993][T17388] ? import_iovec+0x74/0xa0 [ 380.652018][T17388] ___sys_sendmsg+0x21f/0x2a0 [ 380.652041][T17388] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.652097][T17388] ? __might_fault+0xb0/0x130 [ 380.652118][T17388] __sys_sendmmsg+0x227/0x430 [ 380.652143][T17388] ? __pfx___sys_sendmmsg+0x10/0x10 [ 380.652161][T17388] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 380.652201][T17388] ? ksys_write+0x22a/0x250 [ 380.652222][T17388] ? __pfx_ksys_write+0x10/0x10 [ 380.652240][T17388] ? rcu_is_watching+0x15/0xb0 [ 380.652260][T17388] __x64_sys_sendmmsg+0xa0/0xc0 [ 380.652282][T17388] do_syscall_64+0xfa/0x3b0 [ 380.652300][T17388] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.652316][T17388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.652332][T17388] ? clear_bhb_loop+0x60/0xb0 [ 380.652350][T17388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.652365][T17388] RIP: 0033:0x7f301e18eec9 [ 380.652380][T17388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.652392][T17388] RSP: 002b:00007f301f073038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 380.652408][T17388] RAX: ffffffffffffffda RBX: 00007f301e3e5fa0 RCX: 00007f301e18eec9 [ 380.652421][T17388] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 380.652432][T17388] RBP: 00007f301f073090 R08: 0000000000000000 R09: 0000000000000000 [ 380.652441][T17388] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 380.652451][T17388] R13: 00007f301e3e6038 R14: 00007f301e3e5fa0 R15: 00007ffdf6822498 [ 380.652477][T17388] [ 380.686523][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3638'. [ 381.015759][T17387] openvswitch: netlink: Flow actions attr not present in new flow. [ 381.062694][T17401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3644'. [ 381.202937][T17407] netlink: 'syz.0.3646': attribute type 1 has an invalid length. [ 381.333364][T17407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.422269][T17413] vlan2: entered allmulticast mode [ 381.498179][T17419] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.601659][T17419] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.629309][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 381.641751][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3652'. [ 381.650963][T17427] netlink: 'syz.2.3652': attribute type 18 has an invalid length. [ 381.716528][T17419] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.845602][T17419] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.935019][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.985462][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.013691][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.056601][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.079912][T17446] IPVS: Scheduler module ip_vs_sip not found [ 382.127276][T17452] IPVS: length: 8 != 5092390896 [ 382.460466][T17474] lo speed is unknown, defaulting to 1000 [ 382.673049][T17486] bridge_slave_1: left allmulticast mode [ 382.687752][T17486] bridge_slave_1: left promiscuous mode [ 382.693816][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.705405][T17486] bridge_slave_0: left allmulticast mode [ 382.717332][T17486] bridge_slave_0: left promiscuous mode [ 382.725457][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.830781][T17490] FAULT_INJECTION: forcing a failure. [ 382.830781][T17490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.844694][T17490] CPU: 0 UID: 0 PID: 17490 Comm: syz.3.3674 Not tainted syzkaller #0 PREEMPT(full) [ 382.844711][T17490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.844718][T17490] Call Trace: [ 382.844722][T17490] [ 382.844727][T17490] dump_stack_lvl+0x189/0x250 [ 382.844744][T17490] ? __pfx____ratelimit+0x10/0x10 [ 382.844755][T17490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.844767][T17490] ? __pfx__printk+0x10/0x10 [ 382.844781][T17490] ? __might_fault+0xb0/0x130 [ 382.844801][T17490] should_fail_ex+0x414/0x560 [ 382.844819][T17490] _copy_from_user+0x2d/0xb0 [ 382.844833][T17490] ___sys_sendmsg+0x158/0x2a0 [ 382.844848][T17490] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.844883][T17490] ? __might_fault+0xb0/0x130 [ 382.844899][T17490] __sys_sendmmsg+0x227/0x430 [ 382.844915][T17490] ? __pfx___sys_sendmmsg+0x10/0x10 [ 382.844926][T17490] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 382.844951][T17490] ? ksys_write+0x22a/0x250 [ 382.844966][T17490] ? __pfx_ksys_write+0x10/0x10 [ 382.844978][T17490] ? rcu_is_watching+0x15/0xb0 [ 382.844992][T17490] __x64_sys_sendmmsg+0xa0/0xc0 [ 382.845005][T17490] do_syscall_64+0xfa/0x3b0 [ 382.845016][T17490] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.845026][T17490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.845036][T17490] ? clear_bhb_loop+0x60/0xb0 [ 382.845048][T17490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.845057][T17490] RIP: 0033:0x7f97a218eec9 [ 382.845067][T17490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.845075][T17490] RSP: 002b:00007f97a03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 382.845087][T17490] RAX: ffffffffffffffda RBX: 00007f97a23e5fa0 RCX: 00007f97a218eec9 [ 382.845094][T17490] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 382.845101][T17490] RBP: 00007f97a03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 382.845107][T17490] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 382.845113][T17490] R13: 00007f97a23e6038 R14: 00007f97a23e5fa0 R15: 00007ffc35cf4738 [ 382.845128][T17490] [ 383.057791][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055eb4800: rx timeout, send abort [ 383.066518][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055eb4800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 383.095364][T17481] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.167179][T17481] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.257548][T17481] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.474058][T17481] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.496608][T17497] lo speed is unknown, defaulting to 1000 [ 383.681850][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.732482][ T6418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.809050][ T3501] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.834064][T17516] vlan3: entered promiscuous mode [ 383.878958][ T3501] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.008620][T17524] veth0_to_bond: left allmulticast mode [ 384.014217][T17524] veth0_to_bond: left promiscuous mode [ 384.030372][T17524] bridge1: port 1(veth0_to_bond) entered disabled state [ 384.043680][T17524] bridge2: port 1(veth0_to_bond) entered blocking state [ 384.067760][T17524] bridge2: port 1(veth0_to_bond) entered disabled state [ 384.081813][T17524] veth0_to_bond: entered allmulticast mode [ 384.092954][T17524] veth0_to_bond: entered promiscuous mode [ 384.176416][ T36] vlan2: left promiscuous mode [ 384.179484][T17539] netlink: 'syz.0.3690': attribute type 1 has an invalid length. [ 384.208437][T17535] lo speed is unknown, defaulting to 1000 [ 384.341344][T17547] ip6gre1: entered allmulticast mode [ 384.361924][T17546] netlink: 'syz.0.3692': attribute type 10 has an invalid length. [ 384.512806][T17558] netlink: 'syz.0.3698': attribute type 3 has an invalid length. [ 384.581411][T17565] __nla_validate_parse: 10 callbacks suppressed [ 384.581430][T17565] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3699'. [ 384.705622][T17571] netlink: 'syz.3.3702': attribute type 1 has an invalid length. [ 384.719231][T17571] bond1: (slave wlan0): Releasing active interface [ 384.745784][T17571] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 384.765543][T17571] vlan2: entered promiscuous mode [ 384.911132][T17582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3707'. [ 385.036984][T17591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3710'. [ 385.121542][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3714'. [ 385.151866][T17599] syz_tun: entered promiscuous mode [ 385.174121][T17599] syz_tun: left promiscuous mode [ 385.205437][T17604] syz_tun: entered allmulticast mode [ 385.222197][T17597] dvmrp8: entered allmulticast mode [ 385.263257][T17597] lo speed is unknown, defaulting to 1000 [ 385.293843][T17604] netlink: 'syz.3.3713': attribute type 23 has an invalid length. [ 385.378442][T17596] syz_tun: left allmulticast mode [ 385.384027][T17596] dvmrp8: left allmulticast mode [ 385.450698][T17613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.511477][T17609] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.620493][T17609] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.653638][T17619] lo speed is unknown, defaulting to 1000 [ 385.751078][T17624] FAULT_INJECTION: forcing a failure. [ 385.751078][T17624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.765922][T17624] CPU: 0 UID: 0 PID: 17624 Comm: syz.1.3722 Not tainted syzkaller #0 PREEMPT(full) [ 385.765947][T17624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.765957][T17624] Call Trace: [ 385.765965][T17624] [ 385.765973][T17624] dump_stack_lvl+0x189/0x250 [ 385.765998][T17624] ? __pfx____ratelimit+0x10/0x10 [ 385.766016][T17624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.766035][T17624] ? __pfx__printk+0x10/0x10 [ 385.766058][T17624] ? __might_fault+0xb0/0x130 [ 385.766087][T17624] should_fail_ex+0x414/0x560 [ 385.766113][T17624] _copy_from_user+0x2d/0xb0 [ 385.766133][T17624] ___sys_sendmsg+0x158/0x2a0 [ 385.766155][T17624] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.766209][T17624] ? __might_fault+0xb0/0x130 [ 385.766232][T17624] __sys_sendmmsg+0x227/0x430 [ 385.766256][T17624] ? __pfx___sys_sendmmsg+0x10/0x10 [ 385.766274][T17624] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 385.766321][T17624] ? ksys_write+0x22a/0x250 [ 385.766344][T17624] ? __pfx_ksys_write+0x10/0x10 [ 385.766362][T17624] ? rcu_is_watching+0x15/0xb0 [ 385.766386][T17624] __x64_sys_sendmmsg+0xa0/0xc0 [ 385.766409][T17624] do_syscall_64+0xfa/0x3b0 [ 385.766426][T17624] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.766443][T17624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.766461][T17624] ? clear_bhb_loop+0x60/0xb0 [ 385.766482][T17624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.766498][T17624] RIP: 0033:0x7f8518d8eec9 [ 385.766519][T17624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.766534][T17624] RSP: 002b:00007f8519cc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 385.766553][T17624] RAX: ffffffffffffffda RBX: 00007f8518fe5fa0 RCX: 00007f8518d8eec9 [ 385.766566][T17624] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 385.766579][T17624] RBP: 00007f8519cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 385.766590][T17624] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 385.766599][T17624] R13: 00007f8518fe6038 R14: 00007f8518fe5fa0 R15: 00007ffe03eca4f8 [ 385.766629][T17624] [ 385.768643][T17609] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.074993][T17609] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.104474][T17629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3724'. [ 386.434774][T17641] lo speed is unknown, defaulting to 1000 [ 386.527485][T17645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.551719][T17651] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3731'. [ 386.648408][T17653] netlink: 'syz.0.3734': attribute type 1 has an invalid length. [ 386.826795][T17668] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 386.956722][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3741'. [ 386.974450][T17680] vlan4: entered promiscuous mode [ 387.034634][T17682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3744'. [ 387.149215][T17688] netlink: 'syz.3.3747': attribute type 1 has an invalid length. [ 387.196129][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3748'. [ 387.208787][T17692] openvswitch: netlink: IPv6 tunnel dst address is zero [ 387.211783][T17690] syz_tun: entered promiscuous mode [ 387.258740][T17690] syz_tun: left promiscuous mode [ 387.335793][T17698] netlink: 'syz.3.3752': attribute type 13 has an invalid length. [ 387.343898][T17698] netlink: 'syz.3.3752': attribute type 17 has an invalid length. [ 387.493520][T17698] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.503690][T17698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.520819][T17702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.604399][T17700] lo speed is unknown, defaulting to 1000 [ 387.672880][ T3501] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.742117][T17710] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.751032][T17710] team0: Port device bond4 added [ 387.772096][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.805976][ T3501] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.861688][ T3501] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.912685][T17723] netlink: 'syz.1.3763': attribute type 1 has an invalid length. [ 387.947426][T17723] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.967541][T17723] macvlan2: entered promiscuous mode [ 387.972876][T17723] macvlan2: entered allmulticast mode [ 387.990538][T17723] bond3: entered promiscuous mode [ 387.996475][T17723] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 388.012218][T17723] bond3: left promiscuous mode [ 388.068756][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'. [ 388.307398][T17749] veth7: entered promiscuous mode [ 388.393372][T17755] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 388.561095][ T5872] Bluetooth: hci2: command tx timeout [ 389.407944][T17815] syz_tun: entered promiscuous mode [ 389.451556][T17815] syz_tun: left promiscuous mode [ 389.662132][T17825] lo speed is unknown, defaulting to 1000 [ 389.675227][T17823] __nla_validate_parse: 4 callbacks suppressed [ 389.675248][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3798'. [ 389.717130][ T30] audit: type=1800 audit(1758627767.384:6): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3794" name="memory.events" dev="tmpfs" ino=769 res=0 errno=0 [ 390.230027][T17841] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 390.246183][T17840] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.3806'. [ 390.406187][T17847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.415146][T17849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3808'. [ 390.522420][T17851] tipc: Enabling of bearer rejected, already enabled [ 390.556497][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3809'. [ 390.716596][ T95] block nbd0: Possible stuck request ffff888025995080: control (read@0,1024B). Runtime 300 seconds [ 390.730227][ T95] block nbd0: Possible stuck request ffff888025995240: control (read@1024,1024B). Runtime 300 seconds [ 390.743510][ T95] block nbd0: Possible stuck request ffff888025995400: control (read@2048,1024B). Runtime 300 seconds [ 390.754676][ T95] block nbd0: Possible stuck request ffff8880259955c0: control (read@3072,1024B). Runtime 300 seconds [ 390.784174][T17864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3814'. [ 390.852979][T17867] sit0: entered promiscuous mode [ 390.867216][T17872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3818'. [ 390.884839][T17867] validate_nla: 1 callbacks suppressed [ 390.884859][T17867] netlink: 'syz.0.3813': attribute type 1 has an invalid length. [ 390.898372][T17867] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3813'. [ 390.995411][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3816'. [ 391.022533][T17881] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3820'. [ 391.035141][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3820'. [ 391.081672][T17879] vlan4: entered promiscuous mode [ 391.424329][T17904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.119836][T17941] FAULT_INJECTION: forcing a failure. [ 392.119836][T17941] name failslab, interval 1, probability 0, space 0, times 0 [ 392.155583][T17941] CPU: 1 UID: 0 PID: 17941 Comm: syz.4.3840 Not tainted syzkaller #0 PREEMPT(full) [ 392.155611][T17941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.155622][T17941] Call Trace: [ 392.155629][T17941] [ 392.155638][T17941] dump_stack_lvl+0x189/0x250 [ 392.155666][T17941] ? __pfx____ratelimit+0x10/0x10 [ 392.155684][T17941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.155703][T17941] ? __pfx__printk+0x10/0x10 [ 392.155728][T17941] ? __pfx___might_resched+0x10/0x10 [ 392.155745][T17941] ? fs_reclaim_acquire+0x7d/0x100 [ 392.155767][T17941] should_fail_ex+0x414/0x560 [ 392.155795][T17941] should_failslab+0xa8/0x100 [ 392.155820][T17941] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 392.155842][T17941] ? __alloc_skb+0x112/0x2d0 [ 392.155865][T17941] __alloc_skb+0x112/0x2d0 [ 392.155888][T17941] alloc_skb_with_frags+0xca/0x890 [ 392.155921][T17941] sock_alloc_send_pskb+0x857/0x990 [ 392.155962][T17941] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 392.155985][T17941] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.156013][T17941] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 392.156036][T17941] unix_dgram_sendmsg+0x461/0x1850 [ 392.156061][T17941] ? do_wp_page+0x161d/0x5800 [ 392.156090][T17941] ? __pfx_do_wp_page+0x10/0x10 [ 392.156113][T17941] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 392.156133][T17941] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 392.156151][T17941] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 392.156182][T17941] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 392.156201][T17941] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 392.156223][T17941] __sock_sendmsg+0x21c/0x270 [ 392.156243][T17941] ____sys_sendmsg+0x52d/0x830 [ 392.156271][T17941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.156301][T17941] ? import_iovec+0x74/0xa0 [ 392.156326][T17941] ___sys_sendmsg+0x21f/0x2a0 [ 392.156349][T17941] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.156423][T17941] ? __might_fault+0xb0/0x130 [ 392.156450][T17941] __sys_sendmmsg+0x227/0x430 [ 392.156477][T17941] ? __pfx___sys_sendmmsg+0x10/0x10 [ 392.156496][T17941] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 392.156543][T17941] ? ksys_write+0x22a/0x250 [ 392.156567][T17941] ? __pfx_ksys_write+0x10/0x10 [ 392.156586][T17941] ? rcu_is_watching+0x15/0xb0 [ 392.156610][T17941] __x64_sys_sendmmsg+0xa0/0xc0 [ 392.156633][T17941] do_syscall_64+0xfa/0x3b0 [ 392.156651][T17941] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.156668][T17941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.156686][T17941] ? clear_bhb_loop+0x60/0xb0 [ 392.156706][T17941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.156723][T17941] RIP: 0033:0x7f301e18eec9 [ 392.156740][T17941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.156755][T17941] RSP: 002b:00007f301f073038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 392.156775][T17941] RAX: ffffffffffffffda RBX: 00007f301e3e5fa0 RCX: 00007f301e18eec9 [ 392.156788][T17941] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 392.156801][T17941] RBP: 00007f301f073090 R08: 0000000000000000 R09: 0000000000000000 [ 392.156813][T17941] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 392.156824][T17941] R13: 00007f301e3e6038 R14: 00007f301e3e5fa0 R15: 00007ffdf6822498 [ 392.156853][T17941] [ 392.743927][T17958] lo speed is unknown, defaulting to 1000 [ 392.768543][T17953] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.353943][T17973] lo speed is unknown, defaulting to 1000 [ 393.787793][T17992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.797224][T17992] team0: Port device bond3 added [ 394.148592][T18008] vlan4: entered promiscuous mode [ 394.159468][T18008] team0: entered promiscuous mode [ 394.186873][T18008] team_slave_0: entered promiscuous mode [ 394.193955][T18008] team_slave_1: entered promiscuous mode [ 394.195615][T18017] netlink: 'syz.4.3867': attribute type 3 has an invalid length. [ 394.211749][T18008] bond2: entered promiscuous mode [ 394.227486][T18008] bond3: entered promiscuous mode [ 394.248870][T18008] team0: Device vlan4 is already an upper device of the team interface [ 394.833352][T18038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.853284][T18037] __nla_validate_parse: 5 callbacks suppressed [ 394.853303][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 394.869417][T18037] bridge_slave_1: left allmulticast mode [ 394.875272][T18037] bridge_slave_1: left promiscuous mode [ 394.881955][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.892204][T18037] bridge_slave_0: left allmulticast mode [ 394.898510][T18037] bridge_slave_0: left promiscuous mode [ 394.905002][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.930946][T18037] bond0: (slave bridge0): Releasing backup interface [ 394.946523][T18037] bridge0 (unregistering): left promiscuous mode [ 395.105095][T18044] FAULT_INJECTION: forcing a failure. [ 395.105095][T18044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.118611][T18044] CPU: 1 UID: 0 PID: 18044 Comm: syz.3.3876 Not tainted syzkaller #0 PREEMPT(full) [ 395.118636][T18044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.118646][T18044] Call Trace: [ 395.118655][T18044] [ 395.118662][T18044] dump_stack_lvl+0x189/0x250 [ 395.118688][T18044] ? __pfx____ratelimit+0x10/0x10 [ 395.118707][T18044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.118727][T18044] ? __pfx__printk+0x10/0x10 [ 395.118750][T18044] ? __might_fault+0xb0/0x130 [ 395.118782][T18044] should_fail_ex+0x414/0x560 [ 395.118809][T18044] _copy_from_user+0x2d/0xb0 [ 395.118830][T18044] ___sys_sendmsg+0x158/0x2a0 [ 395.118854][T18044] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.118913][T18044] ? __might_fault+0xb0/0x130 [ 395.118939][T18044] __sys_sendmmsg+0x227/0x430 [ 395.118965][T18044] ? __pfx___sys_sendmmsg+0x10/0x10 [ 395.118982][T18044] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 395.119026][T18044] ? ksys_write+0x22a/0x250 [ 395.119060][T18044] ? __pfx_ksys_write+0x10/0x10 [ 395.119079][T18044] ? rcu_is_watching+0x15/0xb0 [ 395.119103][T18044] __x64_sys_sendmmsg+0xa0/0xc0 [ 395.119127][T18044] do_syscall_64+0xfa/0x3b0 [ 395.119144][T18044] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.119162][T18044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.119179][T18044] ? clear_bhb_loop+0x60/0xb0 [ 395.119201][T18044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.119217][T18044] RIP: 0033:0x7f97a218eec9 [ 395.119234][T18044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.119249][T18044] RSP: 002b:00007f97a03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 395.119270][T18044] RAX: ffffffffffffffda RBX: 00007f97a23e5fa0 RCX: 00007f97a218eec9 [ 395.119282][T18044] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 395.119295][T18044] RBP: 00007f97a03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.119307][T18044] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 395.119318][T18044] R13: 00007f97a23e6038 R14: 00007f97a23e5fa0 R15: 00007ffc35cf4738 [ 395.119349][T18044] [ 395.135071][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3877'. [ 395.356345][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3877'. [ 395.548434][T18063] netlink: 'syz.2.3884': attribute type 3 has an invalid length. [ 395.643617][T18065] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.662090][T18065] team0: Port device bond4 added [ 395.699482][T18074] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3882'. [ 395.716684][T18074] openvswitch: netlink: Flow key attr not present in new flow. [ 395.819183][T18073] veth5: entered promiscuous mode [ 396.086469][T18096] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.144116][T18096] team0: Port device bond4 added [ 396.183335][T18089] lo speed is unknown, defaulting to 1000 [ 396.315875][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3896'. [ 396.593899][T18117] batadv_slave_1: entered promiscuous mode [ 396.666306][ T3501] vlan2: left promiscuous mode [ 397.340216][T18143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3906'. [ 397.379601][T18143] veth0_to_bond: left allmulticast mode [ 397.385205][T18143] veth0_to_bond: left promiscuous mode [ 397.391242][T18143] bridge1: port 1(veth0_to_bond) entered disabled state [ 397.432930][T18143] bridge2: port 1(veth0_to_bond) entered blocking state [ 397.463705][T18143] bridge2: port 1(veth0_to_bond) entered disabled state [ 397.471382][T18143] veth0_to_bond: entered allmulticast mode [ 397.481123][T18143] veth0_to_bond: entered promiscuous mode [ 397.489855][T18114] batadv_slave_1: left promiscuous mode [ 397.595195][T18156] vxcan1: entered allmulticast mode [ 397.603947][T18156] vxcan1: left allmulticast mode [ 397.664407][T18163] FAULT_INJECTION: forcing a failure. [ 397.664407][T18163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.722325][T18163] CPU: 0 UID: 0 PID: 18163 Comm: syz.4.3911 Not tainted syzkaller #0 PREEMPT(full) [ 397.722352][T18163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.722364][T18163] Call Trace: [ 397.722377][T18163] [ 397.722386][T18163] dump_stack_lvl+0x189/0x250 [ 397.722411][T18163] ? __pfx____ratelimit+0x10/0x10 [ 397.722432][T18163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.722451][T18163] ? __pfx__printk+0x10/0x10 [ 397.722474][T18163] ? __might_fault+0xb0/0x130 [ 397.722508][T18163] should_fail_ex+0x414/0x560 [ 397.722537][T18163] _copy_from_user+0x2d/0xb0 [ 397.722559][T18163] ___sys_sendmsg+0x158/0x2a0 [ 397.722584][T18163] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.722651][T18163] ? __might_fault+0xb0/0x130 [ 397.722676][T18163] __sys_sendmmsg+0x227/0x430 [ 397.722704][T18163] ? __pfx___sys_sendmmsg+0x10/0x10 [ 397.722723][T18163] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 397.722770][T18163] ? ksys_write+0x22a/0x250 [ 397.722790][T18163] ? __pfx_ksys_write+0x10/0x10 [ 397.722807][T18163] ? rcu_is_watching+0x15/0xb0 [ 397.722832][T18163] __x64_sys_sendmmsg+0xa0/0xc0 [ 397.722856][T18163] do_syscall_64+0xfa/0x3b0 [ 397.722874][T18163] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.722892][T18163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.722909][T18163] ? clear_bhb_loop+0x60/0xb0 [ 397.722931][T18163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.722947][T18163] RIP: 0033:0x7f301e18eec9 [ 397.722964][T18163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.722979][T18163] RSP: 002b:00007f301f073038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 397.722999][T18163] RAX: ffffffffffffffda RBX: 00007f301e3e5fa0 RCX: 00007f301e18eec9 [ 397.723013][T18163] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 397.723032][T18163] RBP: 00007f301f073090 R08: 0000000000000000 R09: 0000000000000000 [ 397.723044][T18163] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 397.723056][T18163] R13: 00007f301e3e6038 R14: 00007f301e3e5fa0 R15: 00007ffdf6822498 [ 397.723086][T18163] [ 397.950109][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3916'. [ 397.967635][T18169] batadv0: entered promiscuous mode [ 397.973978][T18169] debugfs: 'hsr1' already exists in 'hsr' [ 397.980478][T18169] Cannot create hsr debugfs directory [ 397.987085][T18169] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 398.162329][T18179] FAULT_INJECTION: forcing a failure. [ 398.162329][T18179] name failslab, interval 1, probability 0, space 0, times 0 [ 398.192142][T18179] CPU: 1 UID: 0 PID: 18179 Comm: syz.4.3918 Not tainted syzkaller #0 PREEMPT(full) [ 398.192170][T18179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.192181][T18179] Call Trace: [ 398.192190][T18179] [ 398.192198][T18179] dump_stack_lvl+0x189/0x250 [ 398.192223][T18179] ? __pfx____ratelimit+0x10/0x10 [ 398.192243][T18179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.192263][T18179] ? __pfx__printk+0x10/0x10 [ 398.192291][T18179] ? __pfx___might_resched+0x10/0x10 [ 398.192307][T18179] ? fs_reclaim_acquire+0x7d/0x100 [ 398.192329][T18179] should_fail_ex+0x414/0x560 [ 398.192357][T18179] should_failslab+0xa8/0x100 [ 398.192382][T18179] __kmalloc_noprof+0xcb/0x4f0 [ 398.192403][T18179] ? security_sk_alloc+0x52/0x390 [ 398.192428][T18179] security_sk_alloc+0x52/0x390 [ 398.192451][T18179] sk_prot_alloc+0x101/0x220 [ 398.192470][T18179] ? sk_alloc+0x24/0x370 [ 398.192492][T18179] sk_alloc+0x3a/0x370 [ 398.192511][T18179] ? bpf_ctx_init+0x167/0x1d0 [ 398.192533][T18179] bpf_prog_test_run_skb+0x2ed/0x1560 [ 398.192552][T18179] ? __fget_files+0x2a/0x420 [ 398.192581][T18179] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 398.192605][T18179] bpf_prog_test_run+0x2c7/0x340 [ 398.192632][T18179] __sys_bpf+0x581/0x870 [ 398.192655][T18179] ? __pfx___sys_bpf+0x10/0x10 [ 398.192690][T18179] ? ksys_write+0x22a/0x250 [ 398.192720][T18179] ? __pfx_ksys_write+0x10/0x10 [ 398.192739][T18179] ? rcu_is_watching+0x15/0xb0 [ 398.192764][T18179] __x64_sys_bpf+0x7c/0x90 [ 398.192784][T18179] do_syscall_64+0xfa/0x3b0 [ 398.192802][T18179] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.192827][T18179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.192844][T18179] ? clear_bhb_loop+0x60/0xb0 [ 398.192865][T18179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.192882][T18179] RIP: 0033:0x7f301e18eec9 [ 398.192898][T18179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.192914][T18179] RSP: 002b:00007f301f073038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.192934][T18179] RAX: ffffffffffffffda RBX: 00007f301e3e5fa0 RCX: 00007f301e18eec9 [ 398.192946][T18179] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 398.192958][T18179] RBP: 00007f301f073090 R08: 0000000000000000 R09: 0000000000000000 [ 398.192969][T18179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.192980][T18179] R13: 00007f301e3e6038 R14: 00007f301e3e5fa0 R15: 00007ffdf6822498 [ 398.193010][T18179] [ 398.533009][T18188] lo speed is unknown, defaulting to 1000 [ 398.645914][T18195] sctp: [Deprecated]: syz.4.3925 (pid 18195) Use of int in maxseg socket option. [ 398.645914][T18195] Use struct sctp_assoc_value instead [ 398.692864][T18199] ipvlan2: entered promiscuous mode [ 398.721741][T18200] batadv_slave_1: entered promiscuous mode [ 398.740821][T18202] netlink: 'syz.4.3927': attribute type 10 has an invalid length. [ 398.749006][T18202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3927'. [ 398.798102][T18202] team0: Port device geneve0 added [ 398.839301][T18204] tipc: Started in network mode [ 398.844344][T18204] tipc: Node identity 060bc6fa4b6d, cluster identity 4711 [ 398.851817][T18204] tipc: Enabled bearer , priority 0 [ 398.860570][T18204] syzkaller0: entered promiscuous mode [ 398.868510][T18204] syzkaller0: entered allmulticast mode [ 398.904269][T18204] tipc: Resetting bearer [ 398.913156][T18203] tipc: Resetting bearer [ 398.931164][T18203] tipc: Disabling bearer [ 398.939787][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 398.955264][T18208] syz_tun: entered promiscuous mode [ 398.963572][T18208] syz_tun: left promiscuous mode [ 399.051087][T18213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3932'. [ 399.088090][T18214] vlan3: entered promiscuous mode [ 399.093165][T18214] team0: entered promiscuous mode [ 399.102827][T18214] team_slave_0: entered promiscuous mode [ 399.116482][T18214] team_slave_1: entered promiscuous mode [ 399.134206][T18214] bond1: entered promiscuous mode [ 399.149945][T18214] bond2: entered promiscuous mode [ 399.162355][T18214] bond4: entered promiscuous mode [ 399.187340][T18214] team0: Device vlan3 is already an upper device of the team interface [ 399.268928][T18223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.465397][T18196] batadv_slave_1: left promiscuous mode [ 399.959015][T18270] __nla_validate_parse: 1 callbacks suppressed [ 399.959035][T18270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3949'. [ 400.010099][T18270] vlan3: entered promiscuous mode [ 400.023932][T18270] team0: Device vlan3 is already an upper device of the team interface [ 400.109735][T18275] netlink: zone id is out of range [ 400.116553][T18275] netlink: zone id is out of range [ 400.123429][T18275] netlink: zone id is out of range [ 400.129612][T18275] netlink: zone id is out of range [ 400.196748][T18278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3953'. [ 400.242478][T18276] netlink: del zone limit has 4 unknown bytes [ 400.250369][T18275] netlink: set zone limit has 4 unknown bytes [ 400.365040][T18285] batadv_slave_1: entered promiscuous mode [ 400.518576][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3959'. [ 400.535179][T18297] syz_tun: entered promiscuous mode [ 400.544092][T18297] syz_tun: left promiscuous mode [ 400.605599][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3961'. [ 400.624324][T18303] netlink: 'syz.1.3962': attribute type 3 has an invalid length. [ 400.768669][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3963'. [ 400.805172][T18314] vlan4: entered promiscuous mode [ 400.812130][T18314] team0: Device vlan4 is already an upper device of the team interface [ 401.053570][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'. [ 401.142511][T18280] batadv_slave_1: left promiscuous mode [ 401.833221][T18356] ipvlan2: entered promiscuous mode [ 401.910837][T18361] syzkaller1: entered promiscuous mode [ 401.925249][T18361] syzkaller1: entered allmulticast mode [ 402.146342][T18369] batadv_slave_1: entered promiscuous mode [ 402.269215][T18371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3985'. [ 402.352115][T18375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3988'. [ 402.540341][T18387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.902016][T18367] batadv_slave_1: left promiscuous mode [ 403.328631][T18401] syzkaller0: entered promiscuous mode [ 403.334378][T18401] syzkaller0: entered allmulticast mode [ 403.402418][T18403] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 403.426925][T18403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 403.712230][T18421] batadv_slave_1: entered promiscuous mode [ 403.808493][T18425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4006'. [ 403.817573][T18425] tipc: Invalid UDP bearer configuration [ 403.817636][T18425] tipc: Enabling of bearer rejected, failed to enable media [ 404.019840][ C1] vcan0: j1939_tp_rxtimer: 0xffff888063899c00: rx timeout, send abort [ 404.028450][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888063899c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 404.042996][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033835400: rx timeout, send abort [ 404.051724][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033835400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 404.298460][T18449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4016'. [ 404.493580][T18416] batadv_slave_1: left promiscuous mode [ 404.750929][T18471] FAULT_INJECTION: forcing a failure. [ 404.750929][T18471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.814349][T18471] CPU: 1 UID: 0 PID: 18471 Comm: syz.2.4023 Not tainted syzkaller #0 PREEMPT(full) [ 404.814375][T18471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.814387][T18471] Call Trace: [ 404.814394][T18471] [ 404.814403][T18471] dump_stack_lvl+0x189/0x250 [ 404.814428][T18471] ? __pfx____ratelimit+0x10/0x10 [ 404.814447][T18471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.814467][T18471] ? __pfx__printk+0x10/0x10 [ 404.814501][T18471] should_fail_ex+0x414/0x560 [ 404.814531][T18471] _copy_to_user+0x31/0xb0 [ 404.814555][T18471] bpf_test_finish+0x56f/0x700 [ 404.814586][T18471] ? __pfx_bpf_test_finish+0x10/0x10 [ 404.814611][T18471] ? slab_build_skb+0x273/0x3e0 [ 404.814636][T18471] bpf_prog_test_run_skb+0xed5/0x1560 [ 404.814672][T18471] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 404.814692][T18471] bpf_prog_test_run+0x2c7/0x340 [ 404.814723][T18471] __sys_bpf+0x581/0x870 [ 404.814747][T18471] ? __pfx___sys_bpf+0x10/0x10 [ 404.814764][T18471] ? bpf_trace_run2+0x322/0x4b0 [ 404.814807][T18471] ? rcu_is_watching+0x15/0xb0 [ 404.814831][T18471] __x64_sys_bpf+0x7c/0x90 [ 404.814852][T18471] do_syscall_64+0xfa/0x3b0 [ 404.814870][T18471] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.814887][T18471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.814904][T18471] ? clear_bhb_loop+0x60/0xb0 [ 404.814925][T18471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.814942][T18471] RIP: 0033:0x7fd4b658eec9 [ 404.814958][T18471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.814973][T18471] RSP: 002b:00007fd4b73ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.814992][T18471] RAX: ffffffffffffffda RBX: 00007fd4b67e5fa0 RCX: 00007fd4b658eec9 [ 404.815020][T18471] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 404.815032][T18471] RBP: 00007fd4b73ad090 R08: 0000000000000000 R09: 0000000000000000 [ 404.815044][T18471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.815055][T18471] R13: 00007fd4b67e6038 R14: 00007fd4b67e5fa0 R15: 00007ffce58cbba8 [ 404.815084][T18471] [ 405.077727][T18473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.112376][T18480] __nla_validate_parse: 3 callbacks suppressed [ 405.112397][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'. [ 405.150867][T18482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4027'. [ 405.153516][T18480] syz_tun: entered promiscuous mode [ 405.170306][T18480] syz_tun: left promiscuous mode [ 405.222218][T18484] netlink: 'syz.4.4028': attribute type 10 has an invalid length. [ 405.233555][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4028'. [ 405.439244][T18484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.459990][T18494] netlink: 'syz.2.4029': attribute type 1 has an invalid length. [ 405.464437][T18484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.554991][T18484] tipc: Resetting bearer [ 405.574703][T18486] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4029'. [ 405.588621][T18486] ip6gretap0: entered promiscuous mode [ 405.595062][T18497] netlink: 'syz.2.4029': attribute type 2 has an invalid length. [ 405.604670][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.621189][T18496] sit0: left promiscuous mode [ 405.658218][T18496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.688666][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.715313][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.724206][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.837632][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 405.992445][T18516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4040'. [ 406.006120][T18516] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4040'. [ 406.015181][T18516] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4040'. [ 406.069289][T18520] 8021q: adding VLAN 0 to HW filter on device bond5 [ 406.080173][T18520] team0: Port device bond5 added [ 406.093182][T18519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.148244][ T3501] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 406.284233][T18531] syzkaller0: entered promiscuous mode [ 406.291515][T18531] syzkaller0: entered allmulticast mode [ 406.310230][T18533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4047'. [ 406.489729][T18542] Bluetooth: MGMT ver 1.23 [ 406.552043][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056ab9000: rx timeout, send abort [ 406.560514][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056ab9000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 406.574949][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056ab8400: rx timeout, send abort [ 406.584159][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056ab8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 406.651305][T18547] lo speed is unknown, defaulting to 1000 [ 406.702802][T18555] vlan2: entered allmulticast mode [ 406.708470][T18555] veth1: entered allmulticast mode [ 406.947856][T18562] netlink: 'syz.2.4059': attribute type 12 has an invalid length. [ 407.049135][T18570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4060'. [ 407.065415][T18570] 8021q: VLANs not supported on vcan0 [ 407.162244][T18575] FAULT_INJECTION: forcing a failure. [ 407.162244][T18575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.187097][T18575] CPU: 1 UID: 0 PID: 18575 Comm: syz.2.4063 Not tainted syzkaller #0 PREEMPT(full) [ 407.187123][T18575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.187134][T18575] Call Trace: [ 407.187141][T18575] [ 407.187149][T18575] dump_stack_lvl+0x189/0x250 [ 407.187174][T18575] ? __pfx____ratelimit+0x10/0x10 [ 407.187192][T18575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.187211][T18575] ? __pfx__printk+0x10/0x10 [ 407.187233][T18575] ? __might_fault+0xb0/0x130 [ 407.187266][T18575] should_fail_ex+0x414/0x560 [ 407.187295][T18575] _copy_from_user+0x2d/0xb0 [ 407.187317][T18575] ___sys_sendmsg+0x158/0x2a0 [ 407.187343][T18575] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.187406][T18575] ? __might_fault+0xb0/0x130 [ 407.187432][T18575] __sys_sendmmsg+0x227/0x430 [ 407.187460][T18575] ? __pfx___sys_sendmmsg+0x10/0x10 [ 407.187491][T18575] ? bpf_trace_run2+0x322/0x4b0 [ 407.187534][T18575] ? rcu_is_watching+0x15/0xb0 [ 407.187555][T18575] __x64_sys_sendmmsg+0xa0/0xc0 [ 407.187579][T18575] do_syscall_64+0xfa/0x3b0 [ 407.187595][T18575] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.187612][T18575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.187627][T18575] ? clear_bhb_loop+0x60/0xb0 [ 407.187648][T18575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.187665][T18575] RIP: 0033:0x7fd4b658eec9 [ 407.187681][T18575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.187693][T18575] RSP: 002b:00007fd4b73ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 407.187711][T18575] RAX: ffffffffffffffda RBX: 00007fd4b67e5fa0 RCX: 00007fd4b658eec9 [ 407.187724][T18575] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 407.187736][T18575] RBP: 00007fd4b73ad090 R08: 0000000000000000 R09: 0000000000000000 [ 407.187747][T18575] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 407.187758][T18575] R13: 00007fd4b67e6038 R14: 00007fd4b67e5fa0 R15: 00007ffce58cbba8 [ 407.187787][T18575] [ 407.240344][T18577] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.406662][T18577] team0: Port device bond6 added [ 407.424162][T18580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.554333][T18590] netlink: 'syz.4.4067': attribute type 4 has an invalid length. [ 407.721425][T18595] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.769793][T18601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.849830][T18595] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.882998][T18605] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 407.939455][T18595] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.061835][T18595] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.255501][ T6418] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.283015][ T6418] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.316283][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.341284][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.712284][T18653] 8021q: VLANs not supported on vcan0 [ 408.743542][T18655] openvswitch: netlink: Flow key attr not present in new flow. [ 408.743715][T18654] vlan2: entered allmulticast mode [ 409.227582][T18683] bond0: entered promiscuous mode [ 409.232671][T18683] vlan3: entered promiscuous mode [ 409.268089][T18683] bond0: left promiscuous mode [ 409.278293][T18683] vlan3: left promiscuous mode [ 409.305347][T18690] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 409.380980][T18685] veth5: entered promiscuous mode [ 409.495022][T18700] netlink: 'syz.2.4112': attribute type 1 has an invalid length. [ 409.584109][T18688] ipvlan2: entered promiscuous mode [ 409.906818][T18726] batadv_slave_1: entered promiscuous mode [ 410.186576][T18746] __nla_validate_parse: 10 callbacks suppressed [ 410.186596][T18746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4129'. [ 410.260004][T18751] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4131'. [ 410.347209][T18755] tipc: Enabled bearer , priority 0 [ 410.355603][T18755] syzkaller0: entered promiscuous mode [ 410.361337][T18755] syzkaller0: entered allmulticast mode [ 410.376904][T18755] tipc: Resetting bearer [ 410.388771][T18754] tipc: Resetting bearer [ 410.428249][T18754] tipc: Disabling bearer [ 410.529523][T18763] lo speed is unknown, defaulting to 1000 [ 410.586214][T18765] ipvlan2: entered promiscuous mode [ 410.701384][T18718] batadv_slave_1: left promiscuous mode [ 410.776443][T18773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4139'. [ 410.836633][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4139'. [ 411.109809][T18782] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4143'. [ 411.130439][T18780] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4141'. [ 411.356731][ T5872] Bluetooth: hci4: command 0x0401 tx timeout [ 411.534866][T18789] bridge0: port 3(dummy0) entered disabled state [ 411.541475][T18789] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.549196][T18789] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.609735][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4153'. [ 411.736759][T18789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.753069][T18789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.000634][T18805] batadv_slave_1: entered promiscuous mode [ 412.030312][T18816] veth0_to_bond: left allmulticast mode [ 412.042717][T18816] veth0_to_bond: left promiscuous mode [ 412.052293][T18827] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4154'. [ 412.052502][T18816] bridge2: port 1(veth0_to_bond) entered disabled state [ 412.097840][T18816] bridge0: port 1(veth0_to_bond) entered blocking state [ 412.104879][T18816] bridge0: port 1(veth0_to_bond) entered disabled state [ 412.112103][T18816] veth0_to_bond: entered allmulticast mode [ 412.122108][T18816] veth0_to_bond: entered promiscuous mode [ 412.131200][T18803] syzkaller0: entered promiscuous mode [ 412.137397][T18803] syzkaller0: entered allmulticast mode [ 412.144950][ T76] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.157756][ T76] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.175892][ T76] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.223768][T18829] netlink: 'syz.2.4156': attribute type 1 has an invalid length. [ 412.229949][T18831] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4155'. [ 412.233111][T18829] netlink: 'syz.2.4156': attribute type 1 has an invalid length. [ 412.262641][ T76] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.301633][T18799] batadv_slave_1: left promiscuous mode [ 412.648373][T18850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4164'. [ 412.737639][T18855] netlink: 'syz.3.4167': attribute type 2 has an invalid length. [ 413.030619][T18871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.057826][T18871] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.088956][T18871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.251769][T18893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.260504][T18893] bond5: entered promiscuous mode [ 413.266958][T18893] team0: Port device bond5 added [ 413.709522][T18922] wg1: entered promiscuous mode [ 413.715201][T18922] wg1: entered allmulticast mode [ 413.865189][T18932] 8021q: VLANs not supported on gre0 [ 414.070395][T18944] netlink: 'syz.4.4201': attribute type 1 has an invalid length. [ 414.200111][T18941] lo speed is unknown, defaulting to 1000 [ 414.280237][T18943] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 414.291084][T18943] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 414.304361][T18943] bond7: (slave vti0): making interface the new active one [ 414.314743][T18943] bond7: (slave vti0): Enslaving as an active interface with an up link [ 414.587256][T18962] netlink: 'syz.2.4204': attribute type 12 has an invalid length. [ 415.118148][T18980] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.148532][T18995] xt_bpf: check failed: parse error [ 415.177652][T18994] 8021q: adding VLAN 0 to HW filter on device bond8 [ 415.185485][T18994] team0: Port device bond8 added [ 415.193545][T18980] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.252579][T18980] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.325005][T18980] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.432563][ T76] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.458728][ T76] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.488236][ T76] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.525365][ T3501] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.611481][T19024] __nla_validate_parse: 5 callbacks suppressed [ 415.611500][T19024] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4223'. [ 415.674748][T19025] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.746776][T19025] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.849224][T19025] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.916954][T19025] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.982535][T19041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4228'. [ 416.113619][T11304] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.162687][ T76] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.186374][ T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.214984][ T76] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.348290][T19061] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4235'. [ 416.780392][T19085] netlink: 'syz.0.4246': attribute type 21 has an invalid length. [ 416.809118][T19083] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 416.855722][T19085] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4246'. [ 416.881061][T19085] netlink: 'syz.0.4246': attribute type 5 has an invalid length. [ 416.896828][T19085] netlink: 'syz.0.4246': attribute type 6 has an invalid length. [ 416.907910][T19085] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4246'. [ 416.917646][T19091] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4249'. [ 416.948161][T19089] geneve2: entered promiscuous mode [ 416.964517][T19089] geneve2: entered allmulticast mode [ 417.048629][T19083] lo speed is unknown, defaulting to 1000 [ 417.343072][T19112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4256'. [ 417.365913][T19112] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4256'. [ 417.384555][T19112] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4256'. [ 417.396664][T19114] tipc: Enabling of bearer rejected, failed to enable media [ 417.474032][T19126] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4260'. [ 417.694685][T19134] tipc: Enabled bearer , priority 0 [ 417.738864][T19134] syzkaller0: entered promiscuous mode [ 417.744388][T19134] syzkaller0: entered allmulticast mode [ 417.832251][T19134] tipc: Resetting bearer [ 417.850951][T19141] lo speed is unknown, defaulting to 1000 [ 417.880105][T19132] tipc: Resetting bearer [ 417.932521][T19132] tipc: Disabling bearer [ 418.191334][T19150] lo speed is unknown, defaulting to 1000 [ 418.734862][T19165] batadv_slave_1: entered promiscuous mode [ 418.796235][ T5872] Bluetooth: hci0: command 0x0419 tx timeout [ 418.811062][T19169] batadv_slave_1: entered promiscuous mode [ 418.927768][T19179] vlan4: entered promiscuous mode [ 418.969104][T19180] geneve0: entered promiscuous mode [ 419.225528][T19198] netlink: 'syz.0.4280': attribute type 15 has an invalid length. [ 419.324957][T19200] lo speed is unknown, defaulting to 1000 [ 419.332529][T19160] batadv_slave_1: left promiscuous mode [ 419.416515][T19207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.436985][T19210] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 419.494353][T19166] batadv_slave_1: left promiscuous mode [ 419.513309][T19215] bond0: entered promiscuous mode [ 419.533222][T19215] vlan3: entered promiscuous mode [ 419.544225][T19215] bond0: left promiscuous mode [ 419.555848][T19215] vlan3: left promiscuous mode [ 419.910056][T19231] netlink: 'syz.0.4290': attribute type 83 has an invalid length. [ 420.058464][T19239] FAULT_INJECTION: forcing a failure. [ 420.058464][T19239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.071764][T19239] CPU: 0 UID: 0 PID: 19239 Comm: syz.0.4294 Not tainted syzkaller #0 PREEMPT(full) [ 420.071789][T19239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.071799][T19239] Call Trace: [ 420.071804][T19239] [ 420.071809][T19239] dump_stack_lvl+0x189/0x250 [ 420.071826][T19239] ? __pfx____ratelimit+0x10/0x10 [ 420.071838][T19239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.071849][T19239] ? __pfx__printk+0x10/0x10 [ 420.071863][T19239] ? __might_fault+0xb0/0x130 [ 420.071883][T19239] should_fail_ex+0x414/0x560 [ 420.071901][T19239] _copy_from_user+0x2d/0xb0 [ 420.071915][T19239] ___sys_sendmsg+0x158/0x2a0 [ 420.071931][T19239] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.071967][T19239] ? __might_fault+0xb0/0x130 [ 420.071982][T19239] __sys_sendmmsg+0x227/0x430 [ 420.071998][T19239] ? __pfx___sys_sendmmsg+0x10/0x10 [ 420.072009][T19239] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 420.072035][T19239] ? ksys_write+0x22a/0x250 [ 420.072049][T19239] ? __pfx_ksys_write+0x10/0x10 [ 420.072061][T19239] ? rcu_is_watching+0x15/0xb0 [ 420.072075][T19239] __x64_sys_sendmmsg+0xa0/0xc0 [ 420.072089][T19239] do_syscall_64+0xfa/0x3b0 [ 420.072100][T19239] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.072110][T19239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.072119][T19239] ? clear_bhb_loop+0x60/0xb0 [ 420.072131][T19239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.072140][T19239] RIP: 0033:0x7f116af8eec9 [ 420.072151][T19239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.072159][T19239] RSP: 002b:00007f116be8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.072171][T19239] RAX: ffffffffffffffda RBX: 00007f116b1e5fa0 RCX: 00007f116af8eec9 [ 420.072178][T19239] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 420.072185][T19239] RBP: 00007f116be8c090 R08: 0000000000000000 R09: 0000000000000000 [ 420.072192][T19239] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 420.072198][T19239] R13: 00007f116b1e6038 R14: 00007f116b1e5fa0 R15: 00007fffed20cec8 [ 420.072214][T19239] [ 420.310061][T19242] openvswitch: netlink: Flow key attr not present in new flow. [ 420.480914][T19248] batadv_slave_1: entered promiscuous mode [ 420.721420][T19260] netlink: 'syz.1.4302': attribute type 39 has an invalid length. [ 420.734385][T19258] __nla_validate_parse: 14 callbacks suppressed [ 420.734404][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4301'. [ 420.777552][T19262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4302'. [ 420.779414][T19258] syz_tun: entered promiscuous mode [ 420.795530][T19258] syz_tun: left promiscuous mode [ 420.801101][ T95] block nbd0: Possible stuck request ffff888025995080: control (read@0,1024B). Runtime 330 seconds [ 420.812824][ T95] block nbd0: Possible stuck request ffff888025995240: control (read@1024,1024B). Runtime 330 seconds [ 420.815793][T19262] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4302'. [ 420.824068][ T95] block nbd0: Possible stuck request ffff888025995400: control (read@2048,1024B). Runtime 330 seconds [ 420.844235][ T95] block nbd0: Possible stuck request ffff8880259955c0: control (read@3072,1024B). Runtime 330 seconds [ 420.856437][T19262] netlink: 'syz.1.4302': attribute type 5 has an invalid length. [ 420.864246][T19262] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4302'. [ 421.190283][T19281] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.235858][T19245] batadv_slave_1: left promiscuous mode [ 421.262804][T19281] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.318209][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804b19b000: rx timeout, send abort [ 421.326753][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b19b000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 421.341202][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804b198c00: rx timeout, send abort [ 421.341645][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b198c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 421.392127][T19285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.425134][T19281] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.474871][T19292] lo speed is unknown, defaulting to 1000 [ 421.513118][T19281] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.604703][T19300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4314'. [ 421.685202][T19304] netlink: 'syz.3.4315': attribute type 13 has an invalid length. [ 421.694284][T19304] netlink: 'syz.3.4315': attribute type 17 has an invalid length. [ 421.726157][T19304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.770204][ T3501] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.801246][ T3501] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.832997][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.861232][ T3501] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.872303][T19304] xfrm0: entered promiscuous mode [ 421.877775][T19304] xfrm0: entered allmulticast mode [ 421.958083][T19304] lo speed is unknown, defaulting to 1000 [ 422.119277][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4319'. [ 422.156376][T19318] syz_tun: entered promiscuous mode [ 422.171224][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4322'. [ 422.177571][T19318] syz_tun: left promiscuous mode [ 422.218514][T19324] batadv_slave_1: entered promiscuous mode [ 422.251282][T19330] netlink: 'syz.3.4324': attribute type 3 has an invalid length. [ 422.342769][T19332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4325'. [ 422.474328][T19340] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4329'. [ 422.516480][T19340] ip6gretap0: entered promiscuous mode [ 422.522284][T19340] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4329'. [ 422.761962][T19353] tipc: Enabling of bearer rejected, failed to enable media [ 422.816368][T19361] syzkaller0: entered promiscuous mode [ 422.822801][T19361] syzkaller0: entered allmulticast mode [ 422.921590][T19315] batadv_slave_1: left promiscuous mode [ 423.307644][T19384] bond0: entered promiscuous mode [ 423.312720][T19384] vlan3: entered promiscuous mode [ 423.349177][T19384] bond0: left promiscuous mode [ 423.365857][T19384] vlan3: left promiscuous mode [ 423.475052][T19395] batadv_slave_1: entered promiscuous mode [ 423.525308][T19376] netlink: 'syz.3.4343': attribute type 10 has an invalid length. [ 423.576204][T19376] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 423.661025][T19406] netlink: 'syz.2.4350': attribute type 1 has an invalid length. [ 423.706910][T19406] 8021q: adding VLAN 0 to HW filter on device bond5 [ 423.740322][T19406] bond5: (slave gretap1): making interface the new active one [ 423.753591][T19406] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 424.012296][T19427] vlan4: entered promiscuous mode [ 424.017891][T19427] bridge0: entered promiscuous mode [ 424.032497][T19427] bridge0: port 3(vlan4) entered blocking state [ 424.039294][T19427] bridge0: port 3(vlan4) entered disabled state [ 424.046157][T19427] vlan4: entered allmulticast mode [ 424.051384][T19427] bridge0: entered allmulticast mode [ 424.061203][T19427] vlan4: left allmulticast mode [ 424.068770][T19427] bridge0: left allmulticast mode [ 424.098326][T19431] ip6gretap0: entered promiscuous mode [ 424.251698][T19390] batadv_slave_1: left promiscuous mode [ 424.468934][T19455] tipc: Enabling of bearer rejected, failed to enable media [ 424.489045][T19455] syzkaller0: entered promiscuous mode [ 424.561513][T19455] syzkaller0: entered allmulticast mode [ 424.581357][T19463] ip6gretap0: entered promiscuous mode [ 424.819452][T19480] batadv_slave_1: entered promiscuous mode [ 424.909171][T19487] FAULT_INJECTION: forcing a failure. [ 424.909171][T19487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.924706][T19489] geneve0: left promiscuous mode [ 424.945148][T19487] CPU: 0 UID: 0 PID: 19487 Comm: syz.0.4381 Not tainted syzkaller #0 PREEMPT(full) [ 424.945175][T19487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.945186][T19487] Call Trace: [ 424.945194][T19487] [ 424.945202][T19487] dump_stack_lvl+0x189/0x250 [ 424.945227][T19487] ? __pfx____ratelimit+0x10/0x10 [ 424.945247][T19487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.945267][T19487] ? __pfx__printk+0x10/0x10 [ 424.945289][T19487] ? __might_fault+0xb0/0x130 [ 424.945322][T19487] should_fail_ex+0x414/0x560 [ 424.945350][T19487] _copy_from_user+0x2d/0xb0 [ 424.945372][T19487] ___sys_sendmsg+0x158/0x2a0 [ 424.945396][T19487] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.945461][T19487] ? __might_fault+0xb0/0x130 [ 424.945485][T19487] __sys_sendmmsg+0x227/0x430 [ 424.945512][T19487] ? __pfx___sys_sendmmsg+0x10/0x10 [ 424.945531][T19487] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 424.945576][T19487] ? ksys_write+0x22a/0x250 [ 424.945599][T19487] ? __pfx_ksys_write+0x10/0x10 [ 424.945618][T19487] ? rcu_is_watching+0x15/0xb0 [ 424.945646][T19487] __x64_sys_sendmmsg+0xa0/0xc0 [ 424.945667][T19487] do_syscall_64+0xfa/0x3b0 [ 424.945683][T19487] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.945700][T19487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.945715][T19487] ? clear_bhb_loop+0x60/0xb0 [ 424.945735][T19487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.945752][T19487] RIP: 0033:0x7f116af8eec9 [ 424.945768][T19487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.945784][T19487] RSP: 002b:00007f116be8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 424.945812][T19487] RAX: ffffffffffffffda RBX: 00007f116b1e5fa0 RCX: 00007f116af8eec9 [ 424.945826][T19487] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 424.945838][T19487] RBP: 00007f116be8c090 R08: 0000000000000000 R09: 0000000000000000 [ 424.945850][T19487] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 424.945862][T19487] R13: 00007f116b1e6038 R14: 00007f116b1e5fa0 R15: 00007fffed20cec8 [ 424.945892][T19487] [ 425.360122][ T30] audit: type=1800 audit(1758627803.034:7): pid=19505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4383" name="memory.events" dev="tmpfs" ino=1482 res=0 errno=0 [ 425.470118][T19517] netlink: 'syz.0.4390': attribute type 1 has an invalid length. [ 425.533556][T19521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.568379][T19475] batadv_slave_1: left promiscuous mode [ 425.586606][T19519] lo speed is unknown, defaulting to 1000 [ 425.661137][T19526] netlink: 'syz.3.4393': attribute type 8 has an invalid length. [ 425.689505][T19528] geneve2: entered promiscuous mode [ 425.697639][T19528] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 425.706797][T11304] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.717625][T11304] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.741926][T11304] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.770375][T11304] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.969474][T19547] __nla_validate_parse: 25 callbacks suppressed [ 425.969487][T19547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4403'. [ 426.260444][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4408'. [ 426.303636][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'. [ 426.324823][T19561] netlink: 'syz.0.4409': attribute type 1 has an invalid length. [ 426.333079][T19561] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4409'. [ 426.527694][T19567] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.551020][T19567] bond6: entered promiscuous mode [ 426.562226][T19567] team0: Port device bond6 added [ 426.574551][T19574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4414'. [ 426.652915][T19576] veth9: entered promiscuous mode [ 426.744189][T19582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.854503][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4420'. [ 426.872189][T19590] vlan4: entered promiscuous mode [ 426.888279][T19590] bridge0: entered promiscuous mode [ 426.895329][T19590] bridge0: port 3(vlan4) entered blocking state [ 426.905011][T19590] bridge0: port 3(vlan4) entered disabled state [ 426.960002][T19590] vlan4: entered allmulticast mode [ 426.964184][T19598] sctp: [Deprecated]: syz.4.4424 (pid 19598) Use of int in maxseg socket option. [ 426.964184][T19598] Use struct sctp_assoc_value instead [ 426.975956][T19590] bridge0: entered allmulticast mode [ 426.996929][T19590] vlan4: left allmulticast mode [ 427.001827][T19590] bridge0: left allmulticast mode [ 427.052758][T19603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4425'. [ 427.108647][T19603] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4425'. [ 427.124293][T19603] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4425'. [ 427.145263][T19608] lo speed is unknown, defaulting to 1000 [ 427.231664][T19612] netlink: 'syz.3.4428': attribute type 1 has an invalid length. [ 427.272751][T19617] FAULT_INJECTION: forcing a failure. [ 427.272751][T19617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.315041][T19612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 427.366699][T19612] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 427.366740][T19617] CPU: 0 UID: 0 PID: 19617 Comm: syz.1.4430 Not tainted syzkaller #0 PREEMPT(full) [ 427.366759][T19617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 427.366770][T19617] Call Trace: [ 427.366777][T19617] [ 427.366785][T19617] dump_stack_lvl+0x189/0x250 [ 427.366810][T19617] ? __pfx____ratelimit+0x10/0x10 [ 427.366830][T19617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.366850][T19617] ? __pfx__printk+0x10/0x10 [ 427.366884][T19617] should_fail_ex+0x414/0x560 [ 427.366914][T19617] _copy_to_user+0x31/0xb0 [ 427.366937][T19617] simple_read_from_buffer+0xe1/0x170 [ 427.366966][T19617] proc_fail_nth_read+0x1b3/0x220 [ 427.366989][T19617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.367011][T19617] ? rw_verify_area+0x2a6/0x4d0 [ 427.367029][T19617] ? __lock_acquire+0xab9/0xd20 [ 427.367050][T19617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.367071][T19617] vfs_read+0x1fd/0xa30 [ 427.367091][T19617] ? fdget_pos+0x247/0x320 [ 427.367111][T19617] ? __pfx___mutex_lock+0x10/0x10 [ 427.367130][T19617] ? __pfx_vfs_read+0x10/0x10 [ 427.367153][T19617] ? __fget_files+0x2a/0x420 [ 427.367173][T19617] ? __fget_files+0x3a0/0x420 [ 427.367187][T19617] ? __fget_files+0x2a/0x420 [ 427.367212][T19617] ksys_read+0x145/0x250 [ 427.367234][T19617] ? __pfx_ksys_read+0x10/0x10 [ 427.367253][T19617] ? rcu_is_watching+0x15/0xb0 [ 427.367275][T19617] ? do_syscall_64+0xbe/0x3b0 [ 427.367299][T19617] do_syscall_64+0xfa/0x3b0 [ 427.367315][T19617] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.367332][T19617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.367349][T19617] ? clear_bhb_loop+0x60/0xb0 [ 427.367370][T19617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.367386][T19617] RIP: 0033:0x7f8518d8d8dc [ 427.367402][T19617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 427.367417][T19617] RSP: 002b:00007f8519cc6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.367435][T19617] RAX: ffffffffffffffda RBX: 00007f8518fe5fa0 RCX: 00007f8518d8d8dc [ 427.367448][T19617] RDX: 000000000000000f RSI: 00007f8519cc60a0 RDI: 0000000000000005 [ 427.367459][T19617] RBP: 00007f8519cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.367470][T19617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.367480][T19617] R13: 00007f8518fe6038 R14: 00007f8518fe5fa0 R15: 00007ffe03eca4f8 [ 427.367509][T19617] [ 427.635520][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4428'. [ 427.660404][T19612] bond5: (slave batadv1): making interface the new active one [ 427.679399][T19612] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 427.782062][T19621] lo speed is unknown, defaulting to 1000 [ 428.125519][T19619] bond5 (unregistering): (slave batadv1): Releasing active interface [ 428.144879][T19619] bond5 (unregistering): Released all slaves [ 428.590117][T19656] tipc: Enabling of bearer rejected, failed to enable media [ 428.611271][T19656] syzkaller0: entered promiscuous mode [ 428.618314][T19656] syzkaller0: entered allmulticast mode [ 428.983829][T19675] lo speed is unknown, defaulting to 1000 [ 429.092964][T19684] vlan4: entered promiscuous mode [ 429.135870][T19684] syz_tun: entered promiscuous mode [ 429.180098][T19689] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 429.518759][T19700] veth5: entered promiscuous mode [ 429.787714][T19714] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 429.794914][T19715] syzkaller1: entered promiscuous mode [ 429.805797][T19715] syzkaller1: entered allmulticast mode [ 431.008872][T19730] __nla_validate_parse: 5 callbacks suppressed [ 431.008892][T19730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4468'. [ 431.083155][T19737] ipvlan2: entered promiscuous mode [ 431.348094][T19750] netlink: 'syz.2.4476': attribute type 1 has an invalid length. [ 431.403290][T19750] 8021q: adding VLAN 0 to HW filter on device bond6 [ 431.573619][T19750] macvlan3: entered promiscuous mode [ 431.602119][T19750] macvlan3: entered allmulticast mode [ 431.662420][T19750] bond6: entered promiscuous mode [ 431.669089][T19750] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 431.677071][T19771] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4484'. [ 431.690948][T19750] bond6: left promiscuous mode [ 431.736682][T19764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.863862][T19777] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.4487'. [ 431.911481][T19782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4488'. [ 431.934242][T19784] Bluetooth: MGMT ver 1.23 [ 431.956785][T19783] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4490'. [ 431.979686][T19777] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4487'. [ 431.992090][T19784] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4490'. [ 432.084071][T19787] 8021q: adding VLAN 0 to HW filter on device bond9 [ 432.157811][T19787] bond9: (slave wlan0): Opening slave failed [ 432.172842][T19797] vlan2: entered allmulticast mode [ 432.179619][T19797] bond9: (slave vlan2): Opening slave failed [ 432.537975][T19821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4501'. [ 432.583188][T19822] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4502'. [ 432.824952][T19832] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4507'. [ 433.220781][T19852] : renamed from veth0_to_bond [ 433.239983][T19852] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 433.250627][T19852] gretap1: entered promiscuous mode [ 433.256233][T19852] gretap1: entered allmulticast mode [ 433.456233][T19862] vlan5: entered promiscuous mode [ 433.472317][T19862] bridge0: port 3(vlan5) entered blocking state [ 433.487668][T19862] bridge0: port 3(vlan5) entered disabled state [ 433.504537][T19862] vlan5: entered allmulticast mode [ 433.519977][T19862] bridge0: entered allmulticast mode [ 433.557396][T19862] vlan5: left allmulticast mode [ 433.562499][T19862] bridge0: left allmulticast mode [ 433.601973][T19869] vlan0: entered promiscuous mode [ 433.749700][T19877] batadv_slave_1: entered promiscuous mode [ 434.529986][T19871] batadv_slave_1: left promiscuous mode [ 434.905535][T19893] smc: net device bond0 applied user defined pnetid SYZ [ 434.994273][T19905] netlink: 'syz.4.4533': attribute type 10 has an invalid length. [ 435.088143][T19905] team0: Port device geneve0 removed [ 435.106331][T19905] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 435.413932][T19930] batadv_slave_1: entered promiscuous mode [ 435.877704][T19958] 8021q: adding VLAN 0 to HW filter on device bond10 [ 435.907422][T19964] FAULT_INJECTION: forcing a failure. [ 435.907422][T19964] name failslab, interval 1, probability 0, space 0, times 0 [ 435.911796][T19957] bond10: (slave macsec1): Error -34 calling dev_set_mtu [ 435.920622][T19964] CPU: 1 UID: 0 PID: 19964 Comm: syz.3.4552 Not tainted syzkaller #0 PREEMPT(full) [ 435.920645][T19964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 435.920655][T19964] Call Trace: [ 435.920662][T19964] [ 435.920669][T19964] dump_stack_lvl+0x189/0x250 [ 435.920691][T19964] ? __pfx____ratelimit+0x10/0x10 [ 435.920708][T19964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.920727][T19964] ? __pfx__printk+0x10/0x10 [ 435.920755][T19964] ? __pfx___might_resched+0x10/0x10 [ 435.920771][T19964] ? fs_reclaim_acquire+0x7d/0x100 [ 435.920793][T19964] should_fail_ex+0x414/0x560 [ 435.920820][T19964] should_failslab+0xa8/0x100 [ 435.920844][T19964] __kmalloc_cache_noprof+0x70/0x3d0 [ 435.920865][T19964] ? nfnetlink_rcv+0xeff/0x2520 [ 435.920887][T19964] nfnetlink_rcv+0xeff/0x2520 [ 435.920936][T19964] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 435.920970][T19964] ? ref_tracker_free+0x63a/0x7d0 [ 435.921016][T19964] ? __netlink_deliver_tap+0x807/0x850 [ 435.921035][T19964] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.921072][T19964] netlink_unicast+0x82f/0x9e0 [ 435.921098][T19964] ? __pfx_netlink_unicast+0x10/0x10 [ 435.921118][T19964] ? netlink_sendmsg+0x642/0xb30 [ 435.921135][T19964] ? skb_put+0x11b/0x210 [ 435.921159][T19964] netlink_sendmsg+0x805/0xb30 [ 435.921188][T19964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.921210][T19964] ? aa_sock_msg_perm+0xf1/0x1d0 [ 435.921230][T19964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.921248][T19964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.921268][T19964] __sock_sendmsg+0x21c/0x270 [ 435.921288][T19964] ____sys_sendmsg+0x505/0x830 [ 435.921315][T19964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.921346][T19964] ? import_iovec+0x74/0xa0 [ 435.921370][T19964] ___sys_sendmsg+0x21f/0x2a0 [ 435.921393][T19964] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.921452][T19964] ? __fget_files+0x2a/0x420 [ 435.921466][T19964] ? __fget_files+0x3a0/0x420 [ 435.921492][T19964] __x64_sys_sendmsg+0x19b/0x260 [ 435.921516][T19964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.921577][T19964] ? __pfx_ksys_write+0x10/0x10 [ 435.921596][T19964] ? rcu_is_watching+0x15/0xb0 [ 435.921618][T19964] ? do_syscall_64+0xbe/0x3b0 [ 435.921641][T19964] do_syscall_64+0xfa/0x3b0 [ 435.921658][T19964] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.921675][T19964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.921691][T19964] ? clear_bhb_loop+0x60/0xb0 [ 435.921711][T19964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.921727][T19964] RIP: 0033:0x7f97a218eec9 [ 435.921744][T19964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.921758][T19964] RSP: 002b:00007f97a03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.921777][T19964] RAX: ffffffffffffffda RBX: 00007f97a23e5fa0 RCX: 00007f97a218eec9 [ 435.921789][T19964] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 435.921804][T19964] RBP: 00007f97a03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.921815][T19964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.921825][T19964] R13: 00007f97a23e6038 R14: 00007f97a23e5fa0 R15: 00007ffc35cf4738 [ 435.921855][T19964] [ 435.998669][T19969] netlink: 'syz.2.4553': attribute type 1 has an invalid length. [ 436.089271][T19975] __nla_validate_parse: 17 callbacks suppressed [ 436.089288][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4554'. [ 436.092022][T19969] netlink: 'syz.2.4553': attribute type 1 has an invalid length. [ 436.294391][T19958] bond10: (slave macsec1): Error -34 calling dev_set_mtu [ 436.344890][T19922] batadv_slave_1: left promiscuous mode [ 436.480620][T19986] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4557'. [ 436.491163][T19986] netlink: 'syz.3.4557': attribute type 4 has an invalid length. [ 436.753860][T20001] veth7: entered promiscuous mode [ 436.836328][T20006] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.918401][T20006] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.955986][T19896] Bluetooth: hci5: command 0x0406 tx timeout [ 436.966402][T20013] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.974921][T20013] bond7: entered promiscuous mode [ 436.980996][T20013] team0: Port device bond7 added [ 436.996700][T20006] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.078001][T20006] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.172483][T20033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4571'. [ 437.378938][T20038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4573'. [ 437.379358][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.410702][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.431484][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.460127][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.548775][T20043] lo speed is unknown, defaulting to 1000 [ 437.562186][T20042] lo speed is unknown, defaulting to 1000 [ 437.783604][T20050] lo speed is unknown, defaulting to 1000 [ 437.877569][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805524d400: rx timeout, send abort [ 437.886766][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805524d400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 437.901396][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805524c400: rx timeout, send abort [ 437.910040][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805524c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 438.015080][T20060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4580'. [ 438.020842][T20057] batadv_slave_1: entered promiscuous mode [ 438.078919][ T31] INFO: task udevd:6077 blocked for more than 143 seconds. [ 438.095987][ T31] Not tainted syzkaller #0 [ 438.102695][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.122845][ T31] task:udevd state:D stack:21928 pid:6077 tgid:6077 ppid:1 task_flags:0x400140 flags:0x00004006 [ 438.135019][T20056] lo speed is unknown, defaulting to 1000 [ 438.146092][ T31] Call Trace: [ 438.149859][ T31] [ 438.153286][ T31] __schedule+0x1798/0x4cc0 [ 438.158039][ T31] ? __pfx___schedule+0x10/0x10 [ 438.169821][ T31] ? schedule+0x91/0x360 [ 438.174377][ T31] schedule+0x165/0x360 [ 438.179168][ T31] io_schedule+0x80/0xd0 [ 438.183607][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 438.191010][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 438.197506][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 438.203699][ T31] ? __filemap_get_folio+0x6e0/0xaf0 [ 438.209434][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 438.215423][ T31] do_read_cache_folio+0x1aa/0x590 [ 438.223059][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 438.229560][ T31] read_part_sector+0xb6/0x2b0 [ 438.234613][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 438.240650][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 438.247773][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 438.254327][ T31] bdev_disk_changed+0x75c/0x14b0 [ 438.260176][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 438.267152][ T31] ? wait_on_inode+0xc0/0x230 [ 438.272039][ T31] blkdev_get_whole+0x380/0x510 [ 438.277715][ T31] bdev_open+0x31e/0xd30 [ 438.282208][ T31] blkdev_open+0x457/0x600 [ 438.287141][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 438.292830][ T31] do_dentry_open+0x950/0x13f0 [ 438.299254][ T31] vfs_open+0x3b/0x340 [ 438.304404][ T31] ? path_openat+0x2ecd/0x3830 [ 438.309964][ T31] path_openat+0x2ee5/0x3830 [ 438.315024][ T31] ? arch_stack_walk+0xfc/0x150 [ 438.320505][ T31] ? stack_depot_save_flags+0x40/0x860 [ 438.326537][ T31] ? __pfx_path_openat+0x10/0x10 [ 438.331619][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.338520][ T31] do_filp_open+0x1fa/0x410 [ 438.343287][ T31] ? __lock_acquire+0xab9/0xd20 [ 438.348866][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 438.354101][ T31] ? _raw_spin_unlock+0x28/0x50 [ 438.359791][ T31] ? alloc_fd+0x64c/0x6c0 [ 438.364345][ T31] do_sys_openat2+0x121/0x1c0 [ 438.370022][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 438.375970][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.381909][ T31] ? rcu_is_watching+0x15/0xb0 [ 438.387021][ T31] __x64_sys_openat+0x138/0x170 [ 438.392710][ T31] do_syscall_64+0xfa/0x3b0 [ 438.397775][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.404669][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 438.411977][ T31] ? clear_bhb_loop+0x60/0xb0 [ 438.417645][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.423687][ T31] RIP: 0033:0x7fe2672a7407 [ 438.428696][ T31] RSP: 002b:00007ffdc13b88b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 438.437400][ T31] RAX: ffffffffffffffda RBX: 00007fe267a4a880 RCX: 00007fe2672a7407 [ 438.446112][ T31] RDX: 00000000000a0800 RSI: 0000558a221b9980 RDI: ffffffffffffff9c [ 438.454328][ T31] RBP: 0000558a221ae910 R08: 0000000000000000 R09: 0000000000000000 [ 438.463031][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558a221c8320 [ 438.471326][ T31] R13: 0000558a221bc190 R14: 0000000000000000 R15: 0000558a221c8320 [ 438.480432][ T31] [ 438.484913][ T31] [ 438.484913][ T31] Showing all locks held in the system: [ 438.493812][ T31] 1 lock held by khungtaskd/31: [ 438.499720][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 438.510652][ T31] 2 locks held by getty/5623: [ 438.515582][ T31] #0: ffff88814d8cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 438.526469][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 438.537097][ T31] 1 lock held by udevd/6077: [ 438.541821][ T31] #0: ffff8880258ba358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 438.551770][ T31] 3 locks held by kworker/1:17/6817: [ 438.557566][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 438.569272][ T31] #1: ffffc9001df9fbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 438.582610][ T31] #2: ffff88804b1e6240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 438.582988][T20056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4579'. [ 438.593508][ T31] 3 locks held by kworker/u8:11/11304: [ 438.608057][ T31] #0: ffff88801a489948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 438.620485][ T31] #1: ffffc9000f36fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 438.632137][ T31] #2: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 438.642424][ T31] 2 locks held by syz.0.4574/20042: [ 438.647780][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 438.657735][ T31] #1: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 438.668416][ T31] 2 locks held by syz.1.4577/20049: [ 438.673835][ T31] #0: ffff88805446b808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 438.684735][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 438.696524][ T31] 2 locks held by syz.2.4579/20056: [ 438.702001][ T31] #0: ffffffff8eca9400 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 438.712537][ T31] #1: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 438.723456][ T31] 5 locks held by syz.2.4579/20059: [ 438.729291][ T31] 2 locks held by syz.3.4580/20058: [ 438.740522][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 438.750390][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 438.762067][ T31] [ 438.764559][ T31] ============================================= [ 438.764559][ T31] [ 438.773994][ T31] NMI backtrace for cpu 0 [ 438.774011][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 438.774030][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.774040][ T31] Call Trace: [ 438.774047][ T31] [ 438.774056][ T31] dump_stack_lvl+0x189/0x250 [ 438.774082][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.774102][ T31] ? __pfx__printk+0x10/0x10 [ 438.774137][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 438.774164][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 438.774189][ T31] ? __pfx__printk+0x10/0x10 [ 438.774216][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 438.774242][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 438.774268][ T31] watchdog+0xf93/0xfe0 [ 438.774294][ T31] ? watchdog+0x1de/0xfe0 [ 438.774328][ T31] kthread+0x70e/0x8a0 [ 438.774352][ T31] ? __pfx_watchdog+0x10/0x10 [ 438.774372][ T31] ? __pfx_kthread+0x10/0x10 [ 438.774394][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.774418][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.774434][ T31] ? __pfx_kthread+0x10/0x10 [ 438.774455][ T31] ret_from_fork+0x439/0x7d0 [ 438.774476][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.774500][ T31] ? __switch_to_asm+0x39/0x70 [ 438.774519][ T31] ? __switch_to_asm+0x33/0x70 [ 438.774537][ T31] ? __pfx_kthread+0x10/0x10 [ 438.774558][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.774593][ T31] [ 438.774601][ T31] Sending NMI from CPU 0 to CPUs 1: [ 438.920721][ C1] NMI backtrace for cpu 1 [ 438.920737][ C1] CPU: 1 UID: 0 PID: 20049 Comm: syz.1.4577 Not tainted syzkaller #0 PREEMPT(full) [ 438.920755][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.920765][ C1] RIP: 0010:__lock_acquire+0x6c9/0xd20 [ 438.920791][ C1] Code: 08 00 00 00 e8 88 25 00 00 45 31 ff 85 c0 0f 84 f5 05 00 00 83 3d 36 bb 0e 18 00 75 13 48 63 44 24 20 48 0f a3 05 a7 2b 0b 12 <0f> 83 15 05 00 00 31 ed 48 8b 3c 24 4c 8b bf e0 0a 00 00 48 83 7c [ 438.920804][ C1] RSP: 0018:ffffc9000477ee88 EFLAGS: 00000047 [ 438.920819][ C1] RAX: 0000000000000007 RBX: 0000000000000003 RCX: ffffffff93499888 [ 438.920831][ C1] RDX: 0000000000000008 RSI: ffff88801e778af0 RDI: ffff88801e778000 [ 438.920842][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172c195 [ 438.920852][ C1] R10: ffffc9000477f0d8 R11: ffffffff81ac3b00 R12: ffffffffffffff05 [ 438.920865][ C1] R13: 0000000000000001 R14: ffff88801e778af0 R15: 0000000000000000 [ 438.920875][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 438.920889][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.920900][ C1] CR2: 00007fffed20bff8 CR3: 0000000025f40000 CR4: 00000000003526f0 [ 438.920915][ C1] Call Trace: [ 438.920921][ C1] [ 438.920932][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.920949][ C1] lock_acquire+0x120/0x360 [ 438.920968][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.920987][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.921003][ C1] ? x64_sys_call+0x21f7/0x2200 [ 438.921022][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.921038][ C1] unwind_next_frame+0xc2/0x2390 [ 438.921053][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.921071][ C1] ? unwind_next_frame+0xa5/0x2390 [ 438.921087][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 438.921107][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.921127][ C1] arch_stack_walk+0x11c/0x150 [ 438.921147][ C1] ? x64_sys_call+0x21f7/0x2200 [ 438.921167][ C1] stack_trace_save+0x9c/0xe0 [ 438.921183][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 438.921229][ C1] save_stack+0xf5/0x1f0 [ 438.921248][ C1] ? __pfx_save_stack+0x10/0x10 [ 438.921265][ C1] ? free_unref_folios+0xdbd/0x1520 [ 438.921284][ C1] ? folios_put_refs+0x559/0x640 [ 438.921300][ C1] ? shmem_undo_range+0x49e/0x14b0 [ 438.921316][ C1] ? shmem_evict_inode+0x272/0xa70 [ 438.921330][ C1] ? evict+0x501/0x9c0 [ 438.921346][ C1] ? __dentry_kill+0x209/0x660 [ 438.921359][ C1] ? dput+0x19f/0x2b0 [ 438.921372][ C1] ? __fput+0x68e/0xa70 [ 438.921386][ C1] ? task_work_run+0x1d1/0x260 [ 438.921404][ C1] ? do_exit+0x6b5/0x2300 [ 438.921420][ C1] ? do_group_exit+0x21c/0x2d0 [ 438.921437][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 438.921454][ C1] ? x64_sys_call+0x21f7/0x2200 [ 438.921475][ C1] ? page_ext_put+0x97/0xc0 [ 438.921496][ C1] __reset_page_owner+0x71/0x1f0 [ 438.921514][ C1] free_unref_folios+0xdbd/0x1520 [ 438.921549][ C1] ? folios_put_refs+0x299/0x640 [ 438.921566][ C1] folios_put_refs+0x559/0x640 [ 438.921586][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 438.921604][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 438.921623][ C1] shmem_undo_range+0x49e/0x14b0 [ 438.921646][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 438.921673][ C1] ? __lock_acquire+0xab9/0xd20 [ 438.921708][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 438.921729][ C1] shmem_evict_inode+0x272/0xa70 [ 438.921746][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 438.921762][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 438.921783][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 438.921803][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 438.921822][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 438.921841][ C1] evict+0x501/0x9c0 [ 438.921861][ C1] ? __pfx_evict+0x10/0x10 [ 438.921877][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 438.921895][ C1] ? _raw_spin_unlock+0x28/0x50 [ 438.921915][ C1] ? iput+0x6d8/0x9d0 [ 438.921931][ C1] __dentry_kill+0x209/0x660 [ 438.921945][ C1] ? dput+0x37/0x2b0 [ 438.921959][ C1] dput+0x19f/0x2b0 [ 438.921972][ C1] __fput+0x68e/0xa70 [ 438.921992][ C1] task_work_run+0x1d1/0x260 [ 438.922011][ C1] ? __pfx_task_work_run+0x10/0x10 [ 438.922033][ C1] do_exit+0x6b5/0x2300 [ 438.922053][ C1] ? preempt_schedule_common+0x83/0xd0 [ 438.922068][ C1] ? preempt_schedule+0xae/0xc0 [ 438.922082][ C1] ? __pfx_do_exit+0x10/0x10 [ 438.922102][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 438.922125][ C1] do_group_exit+0x21c/0x2d0 [ 438.922145][ C1] __x64_sys_exit_group+0x3f/0x40 [ 438.922168][ C1] x64_sys_call+0x21f7/0x2200 [ 438.922186][ C1] do_syscall_64+0xfa/0x3b0 [ 438.922202][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.922218][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.922233][ C1] ? clear_bhb_loop+0x60/0xb0 [ 438.922249][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.922264][ C1] RIP: 0033:0x7f8518d8eec9 [ 438.922277][ C1] Code: Unable to access opcode bytes at 0x7f8518d8ee9f. [ 438.922286][ C1] RSP: 002b:00007ffe03eca858 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 438.922302][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8518d8eec9 [ 438.922313][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.922323][ C1] RBP: 00007ffe03eca8bc R08: 0000001e03eca94f R09: 00000000000927c0 [ 438.922335][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000124 [ 438.922346][ C1] R13: 00000000000927c0 R14: 000000000006ad48 R15: 00007ffe03eca910 [ 438.922363][ C1] [ 438.975762][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 438.975783][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 438.975803][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.975815][ T31] Call Trace: [ 438.975824][ T31] [ 438.975832][ T31] dump_stack_lvl+0x99/0x250 [ 438.975858][ T31] ? __asan_memcpy+0x40/0x70 [ 438.975879][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.975899][ T31] ? __pfx__printk+0x10/0x10 [ 438.975934][ T31] vpanic+0x281/0x750 [ 438.975956][ T31] ? __pfx_vpanic+0x10/0x10 [ 438.975974][ T31] ? preempt_schedule+0xae/0xc0 [ 438.975994][ T31] ? preempt_schedule_common+0x83/0xd0 [ 438.976018][ T31] panic+0xb9/0xc0 [ 438.976036][ T31] ? __pfx_panic+0x10/0x10 [ 438.976057][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 438.976085][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 438.976112][ T31] watchdog+0xfd2/0xfe0 [ 438.976139][ T31] ? watchdog+0x1de/0xfe0 [ 438.976167][ T31] kthread+0x70e/0x8a0 [ 438.976191][ T31] ? __pfx_watchdog+0x10/0x10 [ 438.976212][ T31] ? __pfx_kthread+0x10/0x10 [ 438.976234][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.976258][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.976274][ T31] ? __pfx_kthread+0x10/0x10 [ 438.976302][ T31] ret_from_fork+0x439/0x7d0 [ 438.976323][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.976347][ T31] ? __switch_to_asm+0x39/0x70 [ 438.976366][ T31] ? __switch_to_asm+0x33/0x70 [ 438.976384][ T31] ? __pfx_kthread+0x10/0x10 [ 438.976406][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.976442][ T31] [ 439.616929][ T31] Kernel Offset: disabled [ 439.621237][ T31] Rebooting in 86400 seconds..