last executing test programs: 3.378161505s ago: executing program 4 (id=9910): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_newaddr={0x18, 0x14, 0x2, 0x70bd29, 0x25dfdbfc, {0xa, 0x40, 0x0, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x33d3948374ee73f4}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1, 0xfff3}, {0x1, 0x1}, {0x10, 0xfff1}}}, 0x24}}, 0x2008c010) r6 = accept4(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000180)=0x80, 0x800) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0xffffffffffffffc9, &(0x7f0000000680)=[{&(0x7f00000001c0)="918f858a10298ce889b2adc878bca1f68f40c1e50db35e5b1baffc227ea584de6d598531aa226525c9567befa7ede86c712b2dafc50364f15a01bca17db73b10035dc863dac809654ef6f558c72c993a6a42c2cf4012062b872c62e77bb0642bf680eb4a2e9d99219a4ae0da9d925eef179ed53c239463d7fb60e8cf5f3da801", 0x80}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000340)="f434893cbc74ea8bb62e61cba61194f5bdfde4a875f940d6eb0b2795de8984d350a6193b4268362a31e6757f65b294beec9966953337ff03853d9537eb998ed4948509e9e19ec70a095e3587034528924e0c97316f2f0c92d112f81baba05fb63e0742365bd2e84dccb22c3bf8698489728a906ade91f8a5fdfc182e0bc82266c422ece58f40d2ebdff995eb948ba13645f4a055e4b1b632d86a7859349b6382e4d6d748d39d5d", 0xa7}, {&(0x7f0000000400)="07cfae02123d5fd617d43228bd808569d53a4339c959219ada888a73ffa7b9f700d4f86c150bb59fced67d9cbc1d893777dcc80cf721ff454d55ea61ca42f3d2351fdf1a35cb69bc2ac1073cd78691bd78fe8f58bec35ac7efc7bc1b2a71fb3c532b05fd33cb3f733469ac3e6db46ad92d9c9b6fa0e6ceffbfb9a1cc65026f7f8709ee704abdeaec5f0c0b83459ebb9a5c10ef5ab5bcd7cb079fa1b05ee605fb3c05e6da8f5b757e9e2d08cc2a9c56e6a8c30bf4de2277a8c7ce8ceb45dc35", 0xbf}, {&(0x7f00000004c0)="a4528e648bec806d5f8d75b5205ea1dc2e8c37a17471fa01c2182e463d08e8eb3ad6a46091d871cd9f2e68471c8c0d62efe842311f6b38a5f42542e834e764360e7048f50d86b21ffc7f0790f627b09af42bc0aefedffcab00671c3cbc2110abd20418e0ea2a21e769cdc56667fefb4631a6bd047ce2ed2e9216f49700b68b6db2c90272f97324b4222343418e859f65ce1ca16a88a31b173101430076521a953ec74d08b37941a6db90998d34219353aa780eee56de659fcb9568868683", 0xbe}, {&(0x7f0000000600)="26264e0b3790fcc2bf9992bc466ce237d6d9599c836c87594638c23d905e56098fd2a1b9df1938c5dbc4c259935dd91d3482848ffebb5aa2f358e1cbb8b24ed5a0e99b205c513cc8cdc230e85cf6f7482925df0ba527c3d696b8a79c95dd078fc34a233adb072d39c21bb484d240", 0x6e}, {&(0x7f0000002300)="aa39e69ac1536c663871a5511410a7187a903eb79ca8d501b714fa2d020fd76e2686fd4fbc0df1e5cdd3432363a90478b432398f4adb3df90c1938d4501b74f56bdc03d60fb0273cb8a560fde98fd1d2dd03f81d38d2e04849cc017810c008164ce648d0bcf851801b690095554e68e05a00409f774e3fef81c9694c8c5ecf08206ea38e02cb1ada38528434f58bbfc084c38d25b5e33c87b2f2bdfd606c0665482593598c7a5e8c028c65f2664cfd6ca14216c64574c331ccca7fb58fedafc8532d68a9a6d654f04cc0feadbe63d650ffc2f7c46867990fa7c3baf8544dbe7586b89be015f3092ed031b06f65e56893e70fcb6ab133461b357341f9a6cc61447f22ef427aa9de98a820afc0d826ae15241fb884c8ca2096038e584d151f05853bf239058629931bddec7414eba76166d2b2737dbd1c9b679bed31e4ff91353c1929a433910df36c404a2220c08af11955fcb475a4aedf9083d4326d5fd9771404fd6e31c32df723317db365ae1f30510b596dfbf0b87758111190b0304979298f59e03d4b78b55c2c3deb79f85f62e7e90a98c4756b98e041a050807b26327cc401a67a5347fa301fb3a9496a123608d74199b80daf9ea1cd9112045835699ed62ae632dd77750732431c9a4bcdb5fcd006a6a9508267ed7d81e1910069dce53e56a15d6333fd02962e475df2c274e4c392ef2bdcd7b2a2c08d781d519cbb42ed839338f20b7a7edd72039f50af5c34e53801087a4084a25a02b30c9af65b319ab31e73df6abd7977ce460a9ceac0ee215b4e8a424ff6564bc5486b0c34d18745dd579b4093b2530e37830eeb8f547f5f5404ab61cbcf0f20c41d62f446539c523b9676c8101517022826467e07f1f2a542b50bd9982eaf372baab675868d57d808a92a09e29e452b5435f35935c12e5cc8e92a188972c27665113b956c54cec3ece1a8759da75186a19d3a0f4cf90f80bc1ede4c349043fc212bb909732882ef201255b15e30b90ace276753c115c39e17c95e801d67f6d09b8fa9f91ad6d56b7394a9756b5d9f3f02b6d61cbf2960a8cb7b5740a0bbb0f4542ba7caf827bd0a57eb7ba63a63b52f257fdf694f085d84034ad8adb63d46485d28938dff77af614ee2a8dece30d16358af727071465af3917786da787a653c31c69a585b6047a7bd3c637d4b7dc687fc34ae5174c7b897114809cf86aee8c7503129db4dd4d3a14f967f543f63772fcf85f689a35c77bc0ac05e40e9a718a55a763b66838d2ce5de483b346cb30b9cac3f965ed6ec5f094c866646a54939335d3934858f71db5700fb7a370bf6b20c9986d2c58685a9ca78618557552d2b25b80efd138761fe0ceeeee10b4457c1c1b086dad93ac434db5c1c020d29b741cb9a7e57b0cdeaa41d7e5415d6357a9334bb1587085b01bfe004380a150e4b9e3f908231fd4f3cee614f46ce9f3ad0da639e9d96ba0001ffffa310f92b44dc3146412ad814d3eddf886b35285022bd6f8965f7736142fc47b608f8322a46bcad5244e9afdb4c5684b194eedbb9d87b1093848fb95ccd3f24d996e8183b30ee3e53001a864a0db6b43b2a4a3a1449058c5acaef81d83782b90ca35811bfd9e2bd79e3dc1fece4d4f62bda7d9fc9fe621fe6ec6513262671ae8833688a8b2ac2ffd1e5174bca305e313d60e7c7f9f9f85871b66c25c4d90ed12f5cac5c46061a167729fc7a181923d8e561ef2a966c6c30544bff8c0405790640c2fac7793af48eed6c67fc6066919d3d848726e4ab6ee396008ed88d72fb466c06a86c9e49f8f1f846f6aaf45c2ac5abc1acaea7bd5fd23fddca917ef75ebcab7f2d93022f7dccfb8e58a70ae382f01f11f8c1585bfde6006da97e9929968cf652c9b546b7198e0b190ef08d371867bb4bb16d9d87e5fcaf081b066f05acff502cec2e7b74887065be2b59b2848a497cc5128e539fe51d63d3df84d5536b3bb78603f7f052904ee9835e7d804fe7e307ee4b37e0f0aa451629564d90323fc888a361581744639f51ad87be6e876d196bc497e6d608f14afc069369c091e8f543866ab74ea8e1bfa8a2df477298adb021c6db019caa7e4ae6fc20851e7591dfe2a5c02f133e85128bca86650f91325ee588fd2e342c46903a2d02c5d34cc69be9c4ebcdcb2ee5a140d0351367fe4d52476881e07894fb048a7e18bc317906f43e0c470403d5e8848a4edade18dff56bab996039d85af13f7d826831e2cf185e4d3b1406ea0f9dc9817ec4594b84ceb30a4b67a0ebc04a4d4921a1174c8ff6f96cf455c77be926248c313a1855abf30e4e96fb8b694b4feb0e0255e65ab38389ec8dbe3ed32fd02b5f8eacf357c332f3a6ecae5319aec11ab3e0f6bfc07d979eecff21767d9c9dfd8a00d83199e7b6f05d767e1b309355f623e067e38caeac47b054ddd216c546454a168ddd76764624208dc07e0153343c8a9823b87ff552b95379d89bda7f67f82dc31c0c6af36bbdba6044892d765d6cfef0dead8c8140bb924d138959f62c17755279cdf5317e03fcd18be5c6c4865658adf5f9ec76d07daff3c4c7e692ab722e86f931d65551ec552d36de7170053cd089dadfe392e6362da560da73cce8dfabe47ec997736c55e3d461f8b259f333ca0f5751cb46ca3bbab3b806e9e3b2429340cc95737655a1bb19a2fc84dbbb650157c3b810b4689e8e7b29febbe6184b7966aa5fcadca4a29be54e1699d116d098080d461dee4f294570a2f40b323ccd33c2d184f6d9e452e99e6dbefe62994d06a507473646e6061c49a5fa90b903bab44f3a196816f7280cc3e33171fbe2aa19299a6331e1b1fdaa2384b1d091a11ebfe915a40867d859a89fb0b88b85c47e218410ac3ea9bbf3601bb95cce9115af1985af4c34fa9aac802934ea914b41281e09bb395fde26c1896689d98da8832ef837f468929a27f1438bf4617164dd926f4e0c17a668343491155d4a1cf682900756efea7116f0cbbf2bd49407b95c220daeaa52165d0f551acea22d2697fa3404ff23bf50199911a33b93309be4e83cc1abfdfd0f7a6b93ae021da6d26d5f45b4dc35db98051f1437efb50158ad2695cde2978c2ee23bf2deafeb3926369a984f5d6158caeba25a75ac108db5558086eed5d91d14edd251473e65e9a72487257f40be5cf32954349d18d40e46dfa411bd0a3694cdeba0e4b5ca01b66142264139c61df22663d458ea58779e5f92ab55feb6a8d6219f05c459c9152d5529824f7efab5a994f59a186adf36eaef2387399081693bfbe0414a015dfb4ab0d8918b3face631b0a502464e4ae58a2dc2e50ec61cef745de4537b6a1b26cfe0d95d0b558b5b770b1225ef95d69f8bc07a628181e5047c6bb1d18219d2b42d8b33d1d274867ba08394610b27a5b469f1aded52e1f9f910362096480568037ac3475716c3baddd4536166c0c0e5e08e17d7a930cf8fbb186d7e3b4db997c929cd408cd17a4cab2f009a381fc640a89d92196a64a7a7af2d9f95275c0d2db2f971679813c6ba6a4d94698e8d6aea3beac4638a897d42f9ce115bc8e2b0c7168ff55f2a1e7767690071728e3bc904e19a877712bf49460d3ae0768d19c88d4c82d09b5fdf18d03b9faf06f2ee63c7881390ee7789f48541ecef7afcb76210d9c6a3f2dd3c88ca9bd152f2094e0de48f6c459282aab5d90f181262a3ad6ad3fcb51bcfe1a4f7dcc0f7db363efc1a1bd4b254a5577e8f65389920c705850b4f336d1cd5297c0630323876065e51ac4dbd4679cc5cf0db2fc0db7eaa56eb72b07f411175dbe68ad6628baa5d12dad4faca74dfa0d9c665d0d2833c8795f8d61e2ffd859967b087bf792c2f5e49fa798e2cd1e32a629a7f249ec18d0ff052ee696dce358d4d6e64cb67004739a7ca97a15e4ede59a459bfc4b87ac8fffc3d8f87900d5724a93e65b21d91d43170ffd166c86e3d1bf4f8000ff498e2ad646deab43e07d1210f621dab9fd82582d002c6d81b02d851214eb4f2ee4f8c8157392dc8b030381814f6c9b2e2351644af99cf361e20a648049b46be5f69bdf2d7bf190f9af0ae6cd4bc71d2cc367be7ba8e05e2715b48c724e05ba0b2e297e1fb98c6304929dcd7f4d678450fcc8fbae0706442392390a30eb9fd706c2d18b8515fafa7976d1e0a589b9cc261708081f1a535573aac04f683a2027a4ac070fed97df6fbc9aa4e3cab2e52c047dd9561772bcf76a9f077e81ae8968b3be5de00e162cd2ebcb705b5fdd721fbc52256ee1b18f7a2d25f7c22e02e685ddb9d21dd82ac339a1c2195366f68149c980bdb2fc0bd237016a7e5015479cd21cb8b0f107f29979b8f96afcaed6f44ac3ef4321acc2bae9352d0213b86b70accd93f6d4ddede2f79d28c697165e8091f4082b81b0ec12369b37593c3a19138c281f491de276060e5c6147fd1667c02b0bed1db4c2ea0c3faa92268c12c1e037e0cacac0801831b526442f7a8a73db0963f61e889d05e5f4e44d9175360e95cba31ff478b7142803e09dd166edf97849942be2021065f443e14dd00a1b50d75abda74d3242f5b78320d567be59b7b7ec27226f6aefaf398caae1e50a6ba3a948a5a68a49be6827a02e3c5c5a1652119c8c3b2ec3d528daf8b74358361a5d807e1d644ccadd98dc877e4e4d457096b05cae985fb33b856a6fd0ffbc26efcd538e620d493702796db526e9c414cb2db38474efae9580af8b8c36d72c112646c94e36ecb03236dba941b61875e6fa9eb8271cd20781517767f8ec7b0e50dcb24acc19a0881b5589e49b4770a9a3d0107435554552501ddf9c62954033074c9678bf648a17e3fb9195502027a44782449caa256322e7d0bc85b36543d9319f65c2f9ee5cbe340c3fe27107f7cf22b492a9b3fef4743f72541789f5eaf251a092656e30200b1f7e01f6ede2fc24ad55e26e041e2565b8db2353de98e551ea0c5f61c30a50a08f246c023e1f38af5447c327fa457e923840b4bc4b3267468d45b639285f6dc6a3d9c023547f99340dcfd419b685256c6bd520fe40323e8da58fa0be54f8a5a83d4b0ae5170a85d376e9d4f9580c4b6350b9bf70c8543e6845c354867742c2dfbcabbd826747a7227bee985675905c5ba1e3b655d667bdeaa3e9e11485d0feefefac24b119cb05de65575dfc145cd753741737b0f5f5c5c0beeb6cf290ee06365a42b749556c004cd1de30e13caeb7bbc4b6b67aca8d224b5ca2f2e16a3e1c47f0d5b3b412ec3beaef802ff7c6f209ee7f102e767da86133f93bd82ed1c3381266b5786273fb3de808c960cd614b5dd4cdf98a41a1801978476f361a5eced8e5f5d11ce87a22b85fdc5dd768d5b928e94d850a60f68bb0bde562ed8edb1a39e7595c68c8acd913ce2486cdffcd44316fe719de0404924f935f5e972ed75dc257bf519cb42f15a9fce76d478ce587681087dc84979ff8ff803f1a932d9f0e869511c8d16faf04a0887e97e4f112a26186a4d586a649aaafed4cd97f1673d9ed27294ac04dc414a4f36b3aaa3dc32e30b21b6516948209772cbe32aaec6e21961e65fd84fce7efb9ea9bdcaee177809cabc709ce33702c98116328a77f28296ef9e2906ff830e3031935fb5b2a0e4c45ad99783dbc909dfa8cb791dafc11678a2533f904b9bdee42050419b00d84172588204641eb07b43e45249f322031eb6341d06f9eea61c934510a8c0bd04fb1f1c0b6a256d05dcdfbf9ff4220d14722775ce57d678b78fe4ae372880c917ddf9e7969bd63f2be97db756ec6ec2c3fed5f40edf910cbf700c6ece931cc9b4cfcc38b32d2a56", 0x1000}], 0x7}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r7, 0x842c2bbf976fcb1d, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') unshare(0x6a040000) r9 = socket(0x8, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000100)) 2.523324702s ago: executing program 4 (id=9926): r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1000000}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 2.366483576s ago: executing program 2 (id=9928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x1015, &(0x7f0000002640)={@local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@x25={0x805, {0x2, 0x7f, 0x9, "d5c2db7ab48d8bc12656be56495468d6a37a28067523831d56e2ce64c24818b591f706f43a2682add76b958fb4cdb179f03f8c244f78725ce4472d882875dafab8204c98d48bfb22d297eab15fc5aaef70dbc1b627be59f79a19d6aebd81b3f9e7641b5a03c368d98f9f0d4749f4abc9176bdadcd9a73b0d4b6ef6b6caa7775297d360b01aad8e78b769914bf054a234f9b1766898d2befd014e5b1ff7905e927aeb1636bdd7fdd85f834080965fd4cf1e52a87446301bd6c47537a1e7d4fe6c194cb972bbc4d4ebafb9226ec369bba96a90b2c0f56361e19ac533f39230bb2c046411e0ff9f1467abb4619469ec5ef11b85c576c5bdc53c39512be7b75f244537717c145eaeec8550224e494f9191fa9c0991af55a323d1991906800f568b0df3041c70cc65ef503bd1aee7794ad239afa895e0157099adf7bf93e5bec8389ed5eb47e14bb500583b3b2f8ac3fc0c9264e7e546a00b41a0765855a424ab4327f261b141393b818280cde8782aed29c3d84beadbc5d35b2b8607ad592cc6116a8b13a0c856a44bd1e1810ab1dbe77621a6d49b4d70e300af4efa8bdeadaba4b7cdc0205008306e76a2748829335f23cfc248768f2906180e1ca3cc473ed25a64e54f7fdcbd64df83c42667025c3fe15530e5d95cc543656583ede3e5533d0017ed89c1439c09fd57a5b308ef3a9cdaf256fe8676849613ae32545baf75c18bbec3391807399456c001cd9591b588382ec45592d8fe91630bec34aa808af822db9a0d0484a46862c77b623d55fbb038951e3bf5991a17bff2e9011ec9e045da2d43435838f8bded8639a084daa2bd538c1cfa39a427b40321deedcbb3722fb1e154406299d42ccd67f735ae9ff98c81e7a21a672664bc58d7644e32abc043a3babbdf3f2402478132971c976126dd3f01a91737f041c8012f180e093326b5e22f41f36c6fd96b05d34638abeaa3579a15938f76470e6127088f792245aae7590a33dda37a5392e0a7ae29eb153ce99c72d0bf2c5983f9712af1badd31aad39179299096f40a53bb1dce1538d33af671fac963f159155a06fea500d2007f982f54de6c35434d826f733172d5f10e4a90a9106bae5e37556b1b35396f7d65b4f4517b7dc74e9cd27c12c50ea36de945a28d6b4ccdf9e8064afc8cae55cf85b6dd3cf9301bf4392f7f6ba74a9587b63f36f6b309ba1df6befa26d865883c3ac6038afe980f9753143a54432d371a4403294eeae6f0b83cf8fd6781fdb5bdf6849974ecbe8b348c530d93a91336acf5937c536350bf54959bf579f12a0255295f7c15ecf1f982a641203d6a4899cd303248471726390d7b1a0b7c2b9cddd096e77f8c7644d0b0828fe4a7d678f14d33d3aa32551eb9684daebd67ae5b8217dc4d542785708782fdcfca53abfc6cb91920f4384dc4dd06d70b02091859f3e67edfad3fbae9b3fa8a84d1a9732e2a065fa268f19d54fc5f4a66908b16feba13c469ae76f88f486bc217d82f419c3bccbd470a253755da8c9102380000a8f4f7aaea5d8f162d8f6903e55defb0949e906c5fa9343b80a6a08b4cddb2bf02f90b4941fdf92fcb11f3b14c7efbf46ef63ec472f5c7df91710d28b61f2688edaec21367dfc35bee6a94219ebf79c9bf52b06e2e19b8b0e158a54b4b46f695c7dd17f1d0c0c096bb89b81283222e197605a4127deb981026962037a963ff2b36fb0bfce1149c877ac00e39498202b1d93bd65d17cf21a7de6b356ddb6749f60823b290d78e66119442bcb0cfe1548345bda9f51c4efe3fbd60c94bffffe362b530926efc50362bba34b772ddde4942c444973e19f440ce3131c25cb18c60239674d4eeb9ac9bcf40cf4ff12b0d3fb50214f6fd60dc7e3525e8cc643442caea1fcee5a04fc033b5cd49e5e04d200615387c2fed1ce426f20886a5c40ae403f083941d299cb487a070c4f422fac00f2594f40855daeb0d65dd2a49481c68b43563ec5bf2b9c47045a6df0de0a5c9e5352b5b9808b5f44b1028e8529a6b9b4c281f8fd8674c6a13e9cbd591d5cab6ed402a4f935628c774c951d97f760ca9fb93a1b2406a1607ea3120bee93572fea72d6350400f2630fe827832fd0637b004006797315bf68cbbe03312f7897a6f105d2cb518450d2af2b6d1e9d758a548d37f859be70871323bef3840060b6c3c6a2cfb8260c5b744675d65c8b0d17d5909e51f94da7ebda66b849fe1b451405962d814e3a7a899eb02ba88a91dfdae92bc9a3719f044528762efbda7e69b2f87edc656d8e80695880ef893d421f0e3573860081ffb0e9a5c9e10a602102995b457311a8af4c0918d52dc9ccf0f5ab385d60edfa8b8720350e49dae48ec60214ca9517130aaa3fddefcc62033711018a5c98d2a23068265440a78a092ec38f85a4ce0c6affc371080a5948f6c61deb37d76f03a3598d45322f63fdb448bccf5089e6989e076b25fdde67ba22ee6a055998695db2563a7eee98beded0c539bc5b07ac35218066074af3c9c39d95e42cf7004d83a43a6e906cdc1ad4089fb5a7ad461498529ad64f40a4261855977b06e6b68a027077f42d953cce11e7302fa54800be321f6f1f24dde4e49efd44e90b98a4f6bfbc7737f37fffc97fc4559ecde03150258e10f0d9251c71f5086f2e59a12e9a3f7e847e457cbb3c92d4a46fece2c9afca4a05d1403db2acf41685fc2b6f6d7eda6ef78ad6d2d5d92abecc03a68f23ad922d6a5184e828509867aad20a3eb36c92057d0f9633093c90f0514be301fba020a591022678c3713ff4557f61cfc4bd075e3d998ec97211658848e5b9ec2a20ae4428a72c06187d469248da734aa3d0255e5d23077d0238d5bb00e8c693aceb2f0732d189c3afab4d640a7bf3711d999532a7f53ca88980872caae29f9bdb02f27cd99ceb07a971287bf000704756803fcc593c36bde3b621f6f8eeaaf1699cbf06816a572d8d644141b7939aa5980727a5351e87f08be815ce75ec8ffc9e77c20140c80aa29b6ce80d49dff34b2829b9d3fea813fce41ff6057915e22043ee42658aefe28be291991dd1cc457d712ba917e1e1aba6e5fcab1f6baa01c19cfecd14e9711986fe7e63cc8e96fcd248d72f2131af8a0b17242b06d15dca891b28ca1085d65817228279e31f5f715697fc3210568ab7f059cdd16106fecaa742e655a69a46a263e73bee568df41e175d181b39cb58ec2a4fe351c5685aef3defbae320088cf0e739643c1ccc0273132c8f9d5f6f6925da6b29a47c278a01984f29f494f6290d3701c2874d3a961a66fadea64bfa2edf0a7ba7257128bf510a3dff1e47378f3a1525ade90060fe38336ab74f05410058ffec5c35168b73fea251cd38a81b3c698bca5f75aba2a2d3804a121bfc7fe124e6bd7f6577c2f18d496fb07c44aa3df8b8230c759d70800ca8aa466eca59a8751f4a0478c93d7704562bb34b083716cf808b84f9eff86732a6c84cbb345cdce119506e42b96b5c872e327e5540220ad4968d0c3c8a353b0ef9134a975e8ecb431353b5671e42fc424af6523647e196b86a9d5de4675d226e28162d454d316119883d11faaa6a248331c4ef35759b5041147ad85b0ca77289a2aa71b0503f9ec00a13da648d58bf146ec34d252e6195d1f94bab1e09eb8959c6554678222e74f28f58675ad032f4724487a912def31624e787b2397e4b9c09f4da535d7b6a3efc3c4e0b58e9f92781d52e89ce81d6cac408ab39c04f827ee51c3be70fe0ad47e4e31c518c208e323eae933c9ee5996af8de57d5eb65884348d3c9af8cd580e0fbec7e45036e7c1b716635595ce034b0d5f2838b46206cd82cac5d53587016cf075b78a1537fdc8863d11e8a5dfbfc677f8c76387b8c895ea7af57ec4253f83607b8a68311a590175b52d755a0123e615735b4ecc338ea9879c3669f7a28299d4dae57487d50015ef3fb26d3322ece5af807f690de894156f6dc18f4107725156b5838a5ef2c6a61fb94cb6482363687b5e29c8dbd73ecca05ac5b055d7bb919862bc72d0c2508b6309cacaafd0268d0d8e9cb46cdd8c4410bdf5c92d2ee37df4064dae987a1c93ad9e9bfcd8356086b1635908a1824fc6c4abe64bbe92deb0ca53f224fb5e7c994073446208bf619ba8ee6b5939eb6b6a899298d49888904787564758d470414e94d76c2e7e6b454cb06118a5755645ca45edc1d746e9de09db0c25ec8a1c1a45b7a7e6985fb63bc704ad1bafe5cf612a018ade33a86cded214e2cfbebb03e7e06a8076fd430fc81f0ee2ab52c108225acc005a9462009cab380a14a3db600bffeee9576a1a7a13ef92dd933512865b743f5bc47d2078efbbf644876395a39d5c885294a6e443271f9bbe86475201457695b0eef62b3010189ab19a7f3ac00602f150c0e914d4f1271742389bb94594766ee56c9e1e83e73825915fbb5e1280d5782c0be92186e4e78f3bb4d25e62f2452dd745b702db2f4c8753a10051770d400db1dfb89ea5ac3bcf5e0da40599171135a5c8abe52aa7b0c39d74e1063d1bb38ed10d290287baf395ffd26af0b92a01ede27ca206350e340f7541ce3315e9bee897d65dc063568a4965c0c2f0824308977b6657976a8bb91635723372eeb28515ebbea82102038d5ffa602e7413871b6ea61b6eca9c1dd7ddd6c7fc88a8cada702f56ef62654caa0b6143c806e12d8ec9b3bf8cf21be704644967a86c104fe2b151436a5de03f67b3bea80f1c5d3987d77dd158cb23c6889a2626b761ac03bb2cc32648f84f17258cf50067b3c8698e9e27bab78b976dc501fdb6c070ba5b83b620529fc00b6896b9a4fa6da3f228f04239bc4cf093d83a9c13c612c5240911fe798e8ddb6543aaabb01b7dd78f44ae9bd36135905936459e8bd1dd6655247b1bff70787c0cb8b43e6051e0be93812b70839b3a58e505affae2ae6ae50c4cd8a089de54d766bcc098697de35083dcae69cee295f09e1320dd3c8abb206d1b847cdbde6e16f80533a7828fac1fdd583c18adbf5631b2498ae4a653359eb5611cf3dbd59ada0fe8ce39f67b3d53ce7310c732079cd9416e27b6304dcde52026e536af4c1f432de3ebb180f94c77ce3a506c9084ebd73bb2534a837c6312043ea3084d7b15679443d56a4678e8c08406cfbc8657884994fa4f30a098dbc7bfc75777f592d4329f86ffa29532c946cc2e9bde7a9d7318b0c65fdb41088f11414fb043d6e0a09018b373f9225a18140b9b9fc2ed70babeeb7edd5c4630563dde9235fe5bbc760981804e88d7268a23fbcc9260889e8ffb6344dd459e1bb0f33f69fa587c6dbdc13ccc94eaaeb50dcdd7527aafe540e02f06b343133969ce5a5ec4e95f4987803a9dd9e27febe08f54387f512a4487c399bea9c9d11c6396e93a91e60e25d7c2deeba6de8ab61143eec8b74ffe6f7ddbcfe844f8437bc5af523c8c5ca79e8fc7002fccb78c76f23e4f2929be609c07e389cee7fa2124b36b3a2a53503b2b38a6eedac9124eaab1f0779a20ad4a24bc45b1856c20ab314200908b5e77ff1375baee953e05b073699ebcf54d900b378284f019a4eb490a3d9fd995aedfec22e4fa545717791d835024ed4bc8262e142eacc457a04d9920d9bbc517c7c763e935680ad6110ad35cade31fa76c315cb913480d7647824b3e9796457f7f82b2b2285f9a63fafd82400cbfa31c2fab3414c95e51997768a7b0c17b32d6e951f43e731b4673b15ff42fb7415e9e0c5fbcc17e18da70e2776e51c947e478b39b519bbc03d05172e82923fd222a6b65026aaa5f2fa7e39aa0c13821f7"}}}}, &(0x7f0000000180)={0x0, 0x4, [0xfa9, 0x9c6, 0x826, 0xa23]}) sendmmsg$inet6(r2, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='P', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x400000000000073, 0x8010) shutdown(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006400602843b0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000016110180000000000d405000010000000fbc5904465ced0d9"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000007000000140600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6b8affdc2522d17a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.879937932s ago: executing program 2 (id=9933): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES8=r0], 0x18, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="53f684a63a4d482e00efa5c3ce8f485d594eed32d8623c83c1d04a16e4fbb319c617a62f360837d2e4c801bbc41f1d0badde948ce802b45bb44d6bc7f52e1531722e8e6535c4be64fa18d6c8b08bd2375ff8376f47aa9696aa342a7d096a8082a3dab61ed466160105ea9d0df7d4ef936c35e87df867b621b5d78894633ca07f169c0f875f1bca2211ea100597f59cc7e44830c6cda8316deeb75a4061c15cb5df51fb6d0a52d64ab724116a21d95fdf432810fa8db6863737e76a5b9108dd5c6bf0a13807", @ANYRES32=r1], 0x18, 0x24044891}}], 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000840)={0xa, 0x0, 0x8000, @empty, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070607bd7002fddbdf252d00000008002f00000000000a0001007770616e310000aa16828d000203aaaaaaaaaaaa05002b0001000000"], 0x3c}}, 0x4008400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) pipe(&(0x7f0000002740)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000480)=[{0xa, 0x7, 0x7, 0x7}]}) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) write$ppp(r7, &(0x7f0000000300)="4daf", 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000440)=0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b500000000000100000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000002000001000000100000fa6215e1c90fed90ac00000010a85f001a4b000000000000000580000000aaaaaabd0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff010000140003000002"], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x200088c0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000050500"/20, @ANYRES32=0x0, @ANYBLOB="00000000002000001c0012800b00010062726964676500000c00028006000800a8771d00"], 0x3c}}, 0x0) 1.828330271s ago: executing program 3 (id=9935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0e2df49f6622f87cfedcbdaf40add72a686a5b04435eb41d1688dc20e7941153e5a26f681c"], 0x14}}, 0x800) 1.521359624s ago: executing program 3 (id=9938): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x16efeb12d819e9a, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462", 0x26}, {&(0x7f0000000280)="0499", 0x2}], 0x2}, 0xb00000000000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0x9, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x800007, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 1.464630304s ago: executing program 4 (id=9939): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="549f7ba8d6e402580cce0319f136956ad7762ad86df99201fa344e22486fac6120745b1a1bf5fb0819d9b67197a874ff4b0a83f34bc0afd7ed94b1ec7d34486748c9c6298b5c422b9a78e33bc57b7cf3818db9b8872b25fb1b5176ac02bc51e7612eff8d91d7aa55922c2c0bdd2be0ffc64effecb17f99a3654dd21d63bb103337866ac5df34b44c4fa59d8d62aed89a1b23d53f57d248f0448d0d46f6edc1686a09818dcc5794199d6b2f9ada3667ee2f1e986a8545e8e9f91154b3ba2b03f013d13fb68f", 0xc5}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)="59173874e7e7ee9d19f4b7d6e78884da122fbd3eb8a99b097a92d8acb163e8da54d597628f36f813419001f24fd02f4f2410dfd0f2939be47e5887a92c5d262ce890090ff17639dd19fa2166c0f7ab65df593f79e8cf37b5b748e34acbcfbd06933fc154a9a53873bd83d8ccc1283c50956bfa098f25c5d160", 0x79}, {&(0x7f00000003c0)="1bb7623b3a0d7e4e90b7daa46399968ad7e759462c27e392d8062beb103bb8fbae01de2cd0e2e2612a778c5b70b9baa4be2acd8f3b8b796c2c117e460727e10709ca0c18eba9e2e41a56977e24c19014abb007e31c808c931aaf", 0x5a}, {&(0x7f0000000500)="1df3000f4a6d6f87e0c14db02e70e1db8a57bffcfc088576775c155122f32b4a2d55c8030c3a09cbcb3a7a116702685f182f71e64fb50a34e73a2742c91941dfd233971efc9e566eb5cfd7e441b8d759cdc46d41e582ada971fa5ca275fa388c507eea1e0517096e8d5f26bf95e99e954cd8c6", 0x73}, {&(0x7f0000000640)="9226add5cac1e0a1d070a79be80e97fcf8ae411075720ff660bef17d62b3ff2684cb29a32650931e674dab6c1785899dd416559bff235df00b401667876df46553f9797c7dea33c43f09fc79389cf4b1752e2b63ccb8736dbb0475b9ebb3e068a2b0d3923fc95cda65b0d4cbffda", 0x6e}], 0x4}, 0x4000) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="c239f58ddf00", 0x6}, {&(0x7f0000000800)="9d33d16df4151a3ed1b0756b59f38a9549dc8e89d5a5c7c6d5d526585324a9ca624d58a373959efb0ed3143cc852e4fa68914b40ab79f0de1205eb2f8576b56eaa35e78744", 0x45}], 0x2}}], 0x1, 0x480e0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000700)={0x0, 0x1a32}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000780)={r2, 0x9}, &(0x7f00000007c0)=0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000005c0)="96e8722acf0eef20a01ce806f9c5f5a148", 0x11, 0x44000, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f00000006c0)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.28018025s ago: executing program 0 (id=9941): socket$inet(0x2b, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000007fff00000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.187971204s ago: executing program 3 (id=9942): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x4000000000000, 0x48004}, 0x0) 1.187383334s ago: executing program 1 (id=9943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x20000000}, 0x2c) 1.148789582s ago: executing program 3 (id=9944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="14000000100001000000f5ffffff00000000000a20000000080a01010000000000000000020000000900010073797a30"], 0xcdc}}, 0x0) 1.116997473s ago: executing program 0 (id=9945): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000040)=0xbec0, 0x4) (async) writev(r3, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000054) (async) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) (async) shutdown(r2, 0x1) (async) connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)={0x7, 0x312, 0xe7, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "b395ac5160fbdac3"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0x2, 0x2, 0xa, 0x80, 0xffffffffffffffff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}]}, &(0x7f0000000340)='GPL\x00', 0x4, 0xf3, &(0x7f0000000600)=""/243, 0x41000, 0xa8, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x8, 0xd5, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)=[r0, r0], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r9) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={0x34, r10, 0x531, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040090) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 963.940023ms ago: executing program 3 (id=9946): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@ipv4, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0xffffff80}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'tgr160-generic\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) 963.636722ms ago: executing program 1 (id=9947): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001040000fffffffe000000000000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 945.986462ms ago: executing program 3 (id=9948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000780)=0x3, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000005c0)={{0x0, 0x8, 0xaee, 0xa859, 0xffffffffffffffff, 0x8, 0x7f5a, 0x0, 0xe9, 0x77, 0x7, 0x200, 0x5, 0x8, 0x3}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r6, &(0x7f00000038c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40010163) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900000002000000010000040700000006000000050000000004000000615f61004dcf1f99"], 0x0, 0x39, 0x0, 0x1, 0x1}, 0x28) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000015c0)={r5, 0x9}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES8=r8, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="2ecc3841285ccfc0f1a424465c8136a49e90a810fd5f2dd23dc3187c8985dd5f96bf72", @ANYRES64=r1, @ANYBLOB="f4633d8ca8f69be81fdf4d473b6fd72eb69614fb4ab04b2e4d1d2dac9e6048978c4bf1db7393fa5d8e20df358243d4b8e464154313bef8b185e2881ec91e9e70b36f62711a13e33b658837e58159a258c12d44e8a8a77fa591270f2f8052c75f37f147905d5f3675b12249d00000000000000007ec6786091b7b07d4cd58c55a1a15ca5d9bec7c23fc1ad097c7c1558422b3bec62058b43299a98b121b6e1bef7b12afec5e7c313488d68d7a663db4d01a81a10ec2ee2a5f3800000000000000000000000000000000397353c999efdf49a325f94bf99376616855d379546cb50dc18526"], 0x50}, 0x1, 0x0, 0x0, 0x4000895}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 908.498103ms ago: executing program 0 (id=9949): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8000}]}}]}, 0x44}, 0x1, 0x8100, 0x0, 0x2}, 0x2000400c) 817.345602ms ago: executing program 2 (id=9950): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000feffff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) 691.548881ms ago: executing program 2 (id=9951): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0x2, 0x3}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x62}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYBLOB="9e10"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) r3 = socket(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0x5, 0x800, 0x8) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r8) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0x7, 0x4}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000903170476200636c00000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r9, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) splice(r7, 0x0, r11, 0x0, 0x8, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x601, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfff1, 0xffe0}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 691.016941ms ago: executing program 0 (id=9952): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000001880)=@ethtool_drvinfo={0x3, "5d3b557e85cd6759f156bdb45c82da5abb01c33cf923b687b5bca051cdd737cf", "b005cc8cc932651b1e48d1d41e67e352407c6e1ec7c68f243a61879ce0e69561", "2f38157b1d9a34119d0a81b48cede472b0d6913fbd23d65745e068a94255c639", "2c391b0b0cff0a9069142b76b27ad949b3833b7a05faec47c2974adb78e46d41", "77297e53dd17606fbe9f3a2505c48fcd9415325d32dcc6200543a5328887482c", "fc87cfe7a1d3e857ee77ad63", 0x40, 0x1, 0x5, 0x6, 0x3}}) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) sendmmsg$inet(r4, &(0x7f0000001540)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="995dcaad1ce4cf832c7ea016edcf52", 0xf}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v&U', 0x3}], 0x1}}], 0x2, 0x48000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0x0, 0x50}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r5}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r5, 0x5}, &(0x7f0000000140)=0x8) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$rxrpc(r7, &(0x7f00000005c0)="86fdf9e7c54d765c930ae1e9f182fa5e5a190654769af65fe9cedfa3d8ca31898a7c6dbe6ae248e3eedd32b93f15b764b10e8cefec93208cc751466be362c4634665822af3afcbb27250de4df75a648786ab975f0f77a30984a1c5c30bf2a6ce256389ffe04e531afc864cb1c90aa25ae182b2cffe41b77b99232a11cfa45e56a54cb613fcb91fa6d5ff97548a1c3108ceb682008e76992c14da", 0x9a, 0x20000045, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x138, 0x1170, 0x1170, 0x138, 0x1170, 0x278, 0x1398, 0x1398, 0x278, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xffffff00], 'macsec0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x42}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x5, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x6, "276ffe5afe5447da771c495aa9d200"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [0x0, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xff, 0xff0000ff, 0xff000000], 'veth0_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0x1, 0x5, 0x7, 0x54}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x20, 0x3, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYRESOCT=0x0, @ANYBLOB="f91fed30689f14a1e8ec3b69eed240f5b3d3edb924af11d66e4a2ae89db0e1b68b3f3b088dcf1a9c8847d5e8c78f3e93796c738e9b550580c75034a49c39c72e44055997ac0490e11fdbd47bb1188fa5e557f1a25ffa3a1c60cab0d9209ff2626832e2d941d915687f10f535667dda0ac72384e2c2b56b238128c0e5590a5eced9e8fbc29960c0ed00ac0694e71c75f93452c7cf720a4b469477d60f2e0e952d5dcf613e1124910a9f40a16623146b7414b2ad3bab133315958fd0c0d575fc16c83662705ba88d2e0202de715567c41bdb569d247ca2817391", @ANYRES8=r6, @ANYRES32=r6, @ANYRES16=0x0, @ANYRESDEC=r6], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 642.278211ms ago: executing program 1 (id=9953): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000001401d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000216ff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 600.719717ms ago: executing program 4 (id=9954): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) recvfrom$inet6(r1, &(0x7f0000000240)=""/117, 0x75, 0x20040, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x58428, 0xd214}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 509.117904ms ago: executing program 0 (id=9955): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[], 0x4c}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r4, &(0x7f00000000c0)=""/81, 0x51) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001014040027bd70e95fc74691"], 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x1) setsockopt$inet_tcp_int(r0, 0x29, 0x8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/ipc\x00') r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) unshare(0x6a040000) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x61d9, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) pread64(r8, 0x0, 0x0, 0x2) 451.939908ms ago: executing program 1 (id=9956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32, @ANYBLOB="e6970600000000001800128008000100677265000c000280080007009067408547d968ac141400"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 303.566175ms ago: executing program 2 (id=9957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000030a20000000080a010100000000000000000200000009000100"], 0xcdc}}, 0x0) 267.365177ms ago: executing program 1 (id=9958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a200400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 267.178075ms ago: executing program 4 (id=9959): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'nq\x00', 0xd, 0x400000a, 0x8239}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x4, 0x200, 0x26}, {@loopback, 0x4f22, 0x0, 0xcd}}, 0x44) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x400000000000000) 75.668294ms ago: executing program 2 (id=9960): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfe0f, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000000000000f", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 66.010165ms ago: executing program 1 (id=9961): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)="f98278ed8755ceda9bae1afb77bf26", 0xf}, 0x1, 0x0, 0x0, 0xc0c4}, 0x48010) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x24, r2, 0x11, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x400000008000f28, 0x0) write$6lowpan_enable(r7, &(0x7f0000000040)='0', 0x1) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r4}, 0x18) bpf$ENABLE_STATS(0x20, &(0x7f0000000840)={0x2}, 0x4) 63.985731ms ago: executing program 4 (id=9962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@fallback=r0, r0, 0x2f, 0x14}, 0x20) 0s ago: executing program 0 (id=9963): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000010401020000018000000000000000000800054000000000050001"], 0x24}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd030017000000140000006c07010033d43afffe800000000000000000000000000010ff0200"/53], 0x340a) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.3.8670'. [ 858.956754][ T706] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 858.986178][ T5844] Bluetooth: hci0: command tx timeout [ 859.007087][ T714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8670'. [ 859.092133][ T722] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.8674'. [ 859.439925][ T724] wg1 speed is unknown, defaulting to 1000 [ 859.462571][ T734] wg1 speed is unknown, defaulting to 1000 [ 859.462607][ T724] lo speed is unknown, defaulting to 1000 [ 859.480069][ T724] lo speed is unknown, defaulting to 1000 [ 859.483994][ T734] lo speed is unknown, defaulting to 1000 [ 859.537214][ T734] lo speed is unknown, defaulting to 1000 [ 859.839729][ T747] gretap0: entered promiscuous mode [ 859.851199][ T747] vlan2: entered promiscuous mode [ 859.899077][ T756] netlink: 'syz.4.8687': attribute type 1 has an invalid length. [ 860.086030][ T762] wg1 speed is unknown, defaulting to 1000 [ 860.093660][ T762] lo speed is unknown, defaulting to 1000 [ 860.103163][ T762] lo speed is unknown, defaulting to 1000 [ 860.149759][ T771] netlink: 'syz.2.8692': attribute type 10 has an invalid length. [ 860.239535][ T773] sch_tbf: burst 274 is lower than device lo mtu (65503) ! [ 860.530938][ T778] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 860.542776][ T786] netlink: 7016 bytes leftover after parsing attributes in process `syz.3.8698'. [ 860.582611][ T786] openvswitch: netlink: Message has 8 unknown bytes. [ 860.979051][ T818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8705'. [ 861.228271][ T821] wg1 speed is unknown, defaulting to 1000 [ 861.239626][ T829] netlink: 'syz.1.8707': attribute type 5 has an invalid length. [ 861.266742][ T821] lo speed is unknown, defaulting to 1000 [ 861.274248][ T821] lo speed is unknown, defaulting to 1000 [ 861.289203][ T829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8707'. [ 862.120370][ T848] vlan2: entered promiscuous mode [ 862.196603][ T855] batadv0: entered promiscuous mode [ 862.219969][ T855] vlan2: entered promiscuous mode [ 862.307214][ T858] tipc: Enabled bearer , priority 10 [ 862.660102][ T872] xt_CT: No such helper "snmp" [ 862.738892][ T877] wg1 speed is unknown, defaulting to 1000 [ 862.748151][ T877] lo speed is unknown, defaulting to 1000 [ 862.755858][ T877] lo speed is unknown, defaulting to 1000 [ 863.820706][ T920] netlink: 'syz.1.8742': attribute type 1 has an invalid length. [ 864.428771][ T961] tap0: tun_chr_ioctl cmd 1074025688 [ 864.995637][ T985] netlink: 'syz.2.8759': attribute type 10 has an invalid length. [ 865.004172][ T983] xt_limit: Overflow, try lower: 271964/0 [ 865.032645][ T983] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8758'. [ 865.113228][ T983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8758'. [ 865.302664][ T997] netlink: 'syz.3.8765': attribute type 1 has an invalid length. [ 865.519823][ T1014] netlink: 'syz.3.8771': attribute type 1 has an invalid length. [ 865.528846][ T1014] netlink: 'syz.3.8771': attribute type 3 has an invalid length. [ 865.537162][ T1014] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8771'. [ 865.911233][ T1040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8778'. [ 866.074044][ T1044] netlink: 'syz.2.8780': attribute type 1 has an invalid length. [ 866.135007][ T1048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8781'. [ 866.144192][ T1048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8781'. [ 866.173860][ T1048] bridge0: entered promiscuous mode [ 866.201843][ T1048] syz_tun: entered promiscuous mode [ 866.221031][ T1048] debugfs: 'hsr1' already exists in 'hsr' [ 866.230755][ T1048] Cannot create hsr debugfs directory [ 866.305352][ T1057] netlink: 'syz.2.8783': attribute type 15 has an invalid length. [ 866.313206][ T1057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8783'. [ 866.374104][T13271] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 866.374254][ T1057] netlink: 'syz.2.8783': attribute type 15 has an invalid length. [ 866.402333][T13271] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 866.420867][ T1061] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8785'. [ 866.436711][T13271] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 866.447862][ T1057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8783'. [ 866.475936][T13271] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 866.635440][ T1076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8790'. [ 867.390270][ T1101] netlink: 'syz.2.8799': attribute type 1 has an invalid length. [ 867.407794][ T1101] netlink: 'syz.2.8799': attribute type 3 has an invalid length. [ 868.128833][ T1131] netlink: 'syz.1.8810': attribute type 2 has an invalid length. [ 868.160479][ T1131] netlink: 'syz.1.8810': attribute type 21 has an invalid length. [ 868.338842][ T1146] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 868.348969][ T1146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.426610][ T1146] 8021q: adding VLAN 0 to HW filter on device bond7 [ 868.819616][ T1164] netlink: 'syz.1.8823': attribute type 13 has an invalid length. [ 868.828775][ T1164] netlink: 'syz.1.8823': attribute type 17 has an invalid length. [ 868.946714][ T1169] netlink: 'syz.2.8825': attribute type 8 has an invalid length. [ 869.073244][ T1164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.085619][ T1164] 8021q: adding VLAN 0 to HW filter on device ` [ 869.108839][ T1164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 869.146259][ T583] lo speed is unknown, defaulting to 1000 [ 869.171648][ T583] syz1: Port: 1 Link ACTIVE [ 869.233296][ T152] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 869.251468][ T152] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 869.292273][ T152] bond0: now running without any active interface! [ 869.402362][ T1175] syzkaller0: entered promiscuous mode [ 869.408092][ T1175] syzkaller0: entered allmulticast mode [ 869.445806][ T1183] netlink: 'syz.0.8828': attribute type 12 has an invalid length. [ 869.503596][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 869.518913][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 869.528148][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 869.537172][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 869.545291][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 869.570923][T24744] syz_tun (unregistering): left promiscuous mode [ 871.358375][ T1195] __nla_validate_parse: 12 callbacks suppressed [ 871.358393][ T1195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8833'. [ 871.375895][ T1195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8833'. [ 871.385566][ T1195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8833'. [ 871.506073][ T1184] wg1 speed is unknown, defaulting to 1000 [ 871.546375][ T1184] lo speed is unknown, defaulting to 1000 [ 871.553898][ T1184] lo speed is unknown, defaulting to 1000 [ 871.608578][ T5147] Bluetooth: hci1: command tx timeout [ 871.628501][ T1205] wg1 speed is unknown, defaulting to 1000 [ 871.666915][ T1205] lo speed is unknown, defaulting to 1000 [ 871.728292][ T1205] lo speed is unknown, defaulting to 1000 [ 871.818574][ T1222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8838'. [ 872.630347][ T1184] chnl_net:caif_netlink_parms(): no params data found [ 872.762662][ T1258] wg1 speed is unknown, defaulting to 1000 [ 872.772142][ T1258] lo speed is unknown, defaulting to 1000 [ 872.787048][ T1258] lo speed is unknown, defaulting to 1000 [ 872.874117][ T1259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8849'. [ 872.988849][ T1270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8852'. [ 872.999840][ T1271] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8849'. [ 873.010602][ T1273] netlink: 'syz.0.8853': attribute type 1 has an invalid length. [ 873.089239][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.108909][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.154804][ T1184] bridge_slave_0: entered allmulticast mode [ 873.167072][ T1184] bridge_slave_0: entered promiscuous mode [ 873.325909][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.336391][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.343737][ T1184] bridge_slave_1: entered allmulticast mode [ 873.363404][ T1184] bridge_slave_1: entered promiscuous mode [ 873.491823][ T1184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.520316][ T1284] wg1 speed is unknown, defaulting to 1000 [ 873.524262][ T1184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.554777][ T1284] lo speed is unknown, defaulting to 1000 [ 873.581513][ T1284] lo speed is unknown, defaulting to 1000 [ 873.617990][ T1295] xt_CT: No such helper "snmp" [ 873.640907][ T1184] team0: Port device team_slave_0 added [ 873.686307][ T5147] Bluetooth: hci1: command tx timeout [ 873.711953][ T1184] team0: Port device team_slave_1 added [ 873.726828][ T1298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8861'. [ 873.907150][ T1184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.914129][ T1184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.967678][ T1184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.004096][ T1184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.028356][ T1184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.097567][ T1184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.368380][ T1326] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 874.377288][ T1326] tipc: Enabled bearer , priority 10 [ 874.458546][ T1184] hsr_slave_0: entered promiscuous mode [ 874.473426][ T1329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8869'. [ 874.483953][ T1184] hsr_slave_1: entered promiscuous mode [ 874.486508][ T1184] debugfs: 'hsr0' already exists in 'hsr' [ 874.498247][ T1184] Cannot create hsr debugfs directory [ 874.499976][ T1331] IPv6: addrconf: prefix option has invalid lifetime [ 874.561769][ T1320] syzkaller0: entered promiscuous mode [ 874.568538][ T1320] syzkaller0: entered allmulticast mode [ 874.695773][ T1337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8872'. [ 874.809934][ T1341] vlan3: entered promiscuous mode [ 875.582313][ T1365] wg1 speed is unknown, defaulting to 1000 [ 875.700661][ T1365] lo speed is unknown, defaulting to 1000 [ 875.732344][ T1365] lo speed is unknown, defaulting to 1000 [ 875.777195][ T5147] Bluetooth: hci1: command tx timeout [ 876.338078][ T1184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 876.374735][ T1184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 876.406601][ T1184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 876.419741][ T1184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 876.678664][ T1184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.721674][ T1184] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.752485][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.759725][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.789193][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.796446][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.106056][ T1417] netlink: 'syz.2.8895': attribute type 9 has an invalid length. [ 877.293426][ T1184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.363503][ T1421] __nla_validate_parse: 2 callbacks suppressed [ 877.363545][ T1421] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8897'. [ 877.396920][ T1421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8897'. [ 877.410687][ T1425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8898'. [ 877.420131][ T1425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8898'. [ 877.666409][ T1440] xt_recent: Unsupported userspace flags (000000b1) [ 877.717992][ T1440] xt_recent: Unsupported userspace flags (000000b1) [ 877.804915][ T1448] netlink: 'syz.3.8905': attribute type 1 has an invalid length. [ 877.811372][ T1449] wg1 speed is unknown, defaulting to 1000 [ 877.818898][ T1442] netlink: 'syz.1.8903': attribute type 17 has an invalid length. [ 877.820406][ T1449] lo speed is unknown, defaulting to 1000 [ 877.835535][ T1449] lo speed is unknown, defaulting to 1000 [ 877.850687][ T5147] Bluetooth: hci1: command tx timeout [ 877.918382][ T1455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8906'. [ 878.028026][ T1184] veth0_vlan: entered promiscuous mode [ 878.088276][ T1184] veth1_vlan: entered promiscuous mode [ 878.127728][ T1184] veth0_macvtap: entered promiscuous mode [ 878.147139][ T1184] veth1_macvtap: entered promiscuous mode [ 878.200360][ T1184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.246035][ T1184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.270505][T13278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.288369][T13278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.347142][ T1464] xt_CT: No such helper "snmp" [ 878.587989][ T1479] FAULT_INJECTION: forcing a failure. [ 878.587989][ T1479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.620194][ T1480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8911'. [ 878.648572][ T1479] CPU: 1 UID: 0 PID: 1479 Comm: syz.0.8913 Not tainted syzkaller #0 PREEMPT(full) [ 878.648598][ T1479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.648610][ T1479] Call Trace: [ 878.648617][ T1479] [ 878.648624][ T1479] dump_stack_lvl+0x189/0x250 [ 878.648650][ T1479] ? __pfx____ratelimit+0x10/0x10 [ 878.648666][ T1479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.648685][ T1479] ? __pfx__printk+0x10/0x10 [ 878.648701][ T1479] ? __might_fault+0xb0/0x130 [ 878.648730][ T1479] should_fail_ex+0x414/0x560 [ 878.648758][ T1479] _copy_from_user+0x2d/0xb0 [ 878.648778][ T1479] ___sys_sendmsg+0x158/0x2a0 [ 878.648798][ T1479] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.648844][ T1479] ? __fget_files+0x2a/0x420 [ 878.648857][ T1479] ? __fget_files+0x3a0/0x420 [ 878.648882][ T1479] __x64_sys_sendmsg+0x19b/0x260 [ 878.648905][ T1479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.648932][ T1479] ? __pfx_ksys_write+0x10/0x10 [ 878.648958][ T1479] ? do_syscall_64+0xbe/0xfa0 [ 878.648978][ T1479] do_syscall_64+0xfa/0xfa0 [ 878.648994][ T1479] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.649012][ T1479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.649030][ T1479] ? clear_bhb_loop+0x60/0xb0 [ 878.649050][ T1479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.649064][ T1479] RIP: 0033:0x7f32c9d8f749 [ 878.649080][ T1479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.649094][ T1479] RSP: 002b:00007f32c7ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.649112][ T1479] RAX: ffffffffffffffda RBX: 00007f32c9fe5fa0 RCX: 00007f32c9d8f749 [ 878.649131][ T1479] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 878.649140][ T1479] RBP: 00007f32c7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 878.649155][ T1479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.649163][ T1479] R13: 00007f32c9fe6038 R14: 00007f32c9fe5fa0 R15: 00007ffca9d6c008 [ 878.649190][ T1479] [ 878.659600][T13278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.947007][T13278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.145573][T26452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.162670][T26452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.293469][ T1486] tap0: tun_chr_ioctl cmd 3223385353 [ 879.301175][ T1486] tap0: tun_chr_ioctl cmd 2147774995 [ 879.308966][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.324128][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.508776][ T1494] wg1 speed is unknown, defaulting to 1000 [ 879.558485][ T1494] lo speed is unknown, defaulting to 1000 [ 879.579122][ T1494] lo speed is unknown, defaulting to 1000 [ 879.772784][ T95] block nbd0: Possible stuck request ffff888025090000: control (read@0,1024B). Runtime 750 seconds [ 879.787189][ T95] block nbd0: Possible stuck request ffff8880250901c0: control (read@1024,1024B). Runtime 750 seconds [ 879.799502][ T95] block nbd0: Possible stuck request ffff888025090380: control (read@2048,1024B). Runtime 750 seconds [ 879.811010][ T95] block nbd0: Possible stuck request ffff888025090540: control (read@3072,1024B). Runtime 750 seconds [ 879.846975][ T1503] tap0: tun_chr_ioctl cmd 1074025692 [ 880.256626][ T1518] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8928'. [ 880.553766][ T1526] wg1 speed is unknown, defaulting to 1000 [ 880.587139][ T1526] lo speed is unknown, defaulting to 1000 [ 880.615008][ T1526] lo speed is unknown, defaulting to 1000 [ 881.128441][ T1553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8936'. [ 881.172097][ T1554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8938'. [ 881.246005][ T1554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8938'. [ 881.295500][ T1554] netlink: 'syz.0.8938': attribute type 12 has an invalid length. [ 881.499894][ T1563] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 881.508803][ T1563] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 881.520405][ T1566] netlink: 'syz.1.8943': attribute type 1 has an invalid length. [ 881.608919][ T1566] 8021q: adding VLAN 0 to HW filter on device bond9 [ 881.739499][ T1569] 8021q: adding VLAN 0 to HW filter on device bond9 [ 881.762212][ T1569] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 881.792364][ T1569] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 881.866726][ T1566] veth7: entered promiscuous mode [ 881.878076][ T1566] bond9: (slave veth7): Enslaving as an active interface with a down link [ 882.568489][ T1602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8951'. [ 882.950317][ T1631] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8960'. [ 883.311933][ T1646] FAULT_INJECTION: forcing a failure. [ 883.311933][ T1646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.385522][ T1646] CPU: 1 UID: 0 PID: 1646 Comm: syz.0.8966 Not tainted syzkaller #0 PREEMPT(full) [ 883.385552][ T1646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 883.385564][ T1646] Call Trace: [ 883.385572][ T1646] [ 883.385581][ T1646] dump_stack_lvl+0x189/0x250 [ 883.385622][ T1646] ? __pfx____ratelimit+0x10/0x10 [ 883.385641][ T1646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 883.385667][ T1646] ? __pfx__printk+0x10/0x10 [ 883.385688][ T1646] ? __might_fault+0xb0/0x130 [ 883.385730][ T1646] should_fail_ex+0x414/0x560 [ 883.385765][ T1646] _copy_from_user+0x2d/0xb0 [ 883.385793][ T1646] kstrtouint_from_user+0xc4/0x170 [ 883.385819][ T1646] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 883.385859][ T1646] proc_fail_nth_write+0x88/0x200 [ 883.385885][ T1646] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 883.385917][ T1646] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 883.385944][ T1646] vfs_write+0x27e/0xb30 [ 883.385983][ T1646] ? __pfx_vfs_write+0x10/0x10 [ 883.386012][ T1646] ? __fget_files+0x2a/0x420 [ 883.386037][ T1646] ? __fget_files+0x3a0/0x420 [ 883.386055][ T1646] ? __fget_files+0x2a/0x420 [ 883.386082][ T1646] ksys_write+0x145/0x250 [ 883.386108][ T1646] ? __pfx_ksys_write+0x10/0x10 [ 883.386131][ T1646] ? do_syscall_64+0xbe/0xfa0 [ 883.386150][ T1646] do_syscall_64+0xfa/0xfa0 [ 883.386165][ T1646] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.386182][ T1646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.386196][ T1646] ? clear_bhb_loop+0x60/0xb0 [ 883.386219][ T1646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.386238][ T1646] RIP: 0033:0x7f32c9d8e1ff [ 883.386256][ T1646] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 883.386274][ T1646] RSP: 002b:00007f32c7fd5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 883.386296][ T1646] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f32c9d8e1ff [ 883.386312][ T1646] RDX: 0000000000000001 RSI: 00007f32c7fd50a0 RDI: 0000000000000003 [ 883.386324][ T1646] RBP: 00007f32c7fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 883.386337][ T1646] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 883.386349][ T1646] R13: 00007f32c9fe6128 R14: 00007f32c9fe6090 R15: 00007ffca9d6c008 [ 883.386381][ T1646] [ 884.047926][ T1671] wg1 speed is unknown, defaulting to 1000 [ 884.057521][ T1671] lo speed is unknown, defaulting to 1000 [ 884.069884][ T1671] lo speed is unknown, defaulting to 1000 [ 884.110741][ T1674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8977'. [ 884.147722][ T1674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8977'. [ 884.157281][ T1674] netlink: 'syz.3.8977': attribute type 12 has an invalid length. [ 884.502484][ T1682] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 884.530283][ T1682] bond1 (unregistering): Released all slaves [ 884.989803][ T1708] netlink: 'syz.2.8990': attribute type 10 has an invalid length. [ 885.131017][ T1711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8991'. [ 885.141091][ T1711] 8021q: VLANs not supported on caif0 [ 885.459918][ T1725] wg1 speed is unknown, defaulting to 1000 [ 885.518429][ T1725] lo speed is unknown, defaulting to 1000 [ 885.527894][ T1725] lo speed is unknown, defaulting to 1000 [ 885.577222][ T1729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8994'. [ 885.679584][ T1733] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 885.729474][ T1732] syzkaller0: entered promiscuous mode [ 885.746660][ T1732] syzkaller0: entered allmulticast mode [ 886.110479][ T1754] netlink: 'syz.2.9004': attribute type 3 has an invalid length. [ 886.120604][ T1754] netlink: 'syz.2.9004': attribute type 1 has an invalid length. [ 886.128604][ T1754] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.9004'. [ 886.320927][ T1763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9004'. [ 886.384549][ T1763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9004'. [ 886.469130][ T590] IPVS: starting estimator thread 0... [ 886.594398][ T1770] IPVS: using max 32 ests per chain, 76800 per kthread [ 886.718794][ T1776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9012'. [ 887.090749][ T1796] wg1 speed is unknown, defaulting to 1000 [ 887.100084][ T1796] lo speed is unknown, defaulting to 1000 [ 887.110857][ T1796] lo speed is unknown, defaulting to 1000 [ 887.342507][ T1803] netlink: 'syz.4.9021': attribute type 21 has an invalid length. [ 887.433902][ T1805] xt_CT: No such helper "snmp" [ 887.553215][ T1810] tipc: Started in network mode [ 887.563216][ T1810] tipc: Node identity 9e65161c1606, cluster identity 4711 [ 887.573591][ T1810] tipc: Enabled bearer , priority 0 [ 887.588259][ T1810] syzkaller0: entered promiscuous mode [ 887.594935][ T1810] syzkaller0: entered allmulticast mode [ 887.640472][ T1810] tipc: Resetting bearer [ 887.657866][ T1809] tipc: Resetting bearer [ 887.697506][ T1809] tipc: Disabling bearer [ 887.915243][ T1815] __nla_validate_parse: 1 callbacks suppressed [ 887.915263][ T1815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9025'. [ 888.205875][ T1830] wg1 speed is unknown, defaulting to 1000 [ 888.233575][ T1830] lo speed is unknown, defaulting to 1000 [ 888.280765][ T1830] lo speed is unknown, defaulting to 1000 [ 888.288754][ T1832] netlink: 'syz.1.9031': attribute type 8 has an invalid length. [ 888.312771][ T1834] IPv6: addrconf: prefix option has invalid lifetime [ 888.334410][ T1832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9031'. [ 888.397729][ T1832] bond0: entered promiscuous mode [ 888.402946][ T1832] bond_slave_0: entered promiscuous mode [ 888.409149][ T1832] bond_slave_1: entered promiscuous mode [ 888.416920][ T1832] bond0: left promiscuous mode [ 888.423903][ T1832] bond_slave_0: left promiscuous mode [ 888.436929][ T1832] bond_slave_1: left promiscuous mode [ 888.856491][ T1836] wg1 speed is unknown, defaulting to 1000 [ 889.000240][ T1836] lo speed is unknown, defaulting to 1000 [ 889.034079][ T1836] lo speed is unknown, defaulting to 1000 [ 889.362800][ T1855] tap0: tun_chr_ioctl cmd 3223385353 [ 889.419085][ T1862] netlink: 'syz.2.9043': attribute type 1 has an invalid length. [ 889.936014][ T1892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9054'. [ 889.961996][ T1888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9052'. [ 890.092305][ T1899] syzkaller0: entered promiscuous mode [ 890.109165][ T1899] syzkaller0: entered allmulticast mode [ 890.319861][ T1911] netlink: 'syz.0.9059': attribute type 1 has an invalid length. [ 890.334867][ T1911] netlink: 'syz.0.9059': attribute type 3 has an invalid length. [ 890.345548][ T1911] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9059'. [ 890.497140][ T1917] netlink: 'syz.3.9062': attribute type 1 has an invalid length. [ 890.941839][ T1929] netlink: 'syz.4.9066': attribute type 9 has an invalid length. [ 891.198311][ T1935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9069'. [ 891.222002][ T1935] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9069'. [ 891.298623][ T1935] macvlan3: entered promiscuous mode [ 891.319703][ T1935] macvlan3: entered allmulticast mode [ 891.333479][ T1943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9070'. [ 891.337865][ T1935] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 891.353517][ T1943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9070'. [ 891.391426][ T1935] team0: Port device macvlan3 added [ 891.498393][ T1939] xt_hashlimit: size too large, truncated to 1048576 [ 891.505302][ T1939] xt_hashlimit: max too large, truncated to 1048576 [ 891.562464][ T1939] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 891.943224][ T1955] wg1 speed is unknown, defaulting to 1000 [ 891.988170][ T1955] lo speed is unknown, defaulting to 1000 [ 892.003590][ T1955] lo speed is unknown, defaulting to 1000 [ 892.118104][ T1982] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.9082'. [ 892.384119][ T1990] netlink: 'syz.4.9087': attribute type 1 has an invalid length. [ 892.703684][ T1998] batadv0: entered promiscuous mode [ 892.719765][ T1998] vlan2: entered promiscuous mode [ 892.957284][ T2012] __nla_validate_parse: 1 callbacks suppressed [ 892.957304][ T2012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9096'. [ 893.011763][ T2014] dvmrp0: entered allmulticast mode [ 893.018506][ T2012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9096'. [ 893.213081][ T2023] netlink: 'syz.0.9100': attribute type 1 has an invalid length. [ 893.320804][ T2029] wg1 speed is unknown, defaulting to 1000 [ 893.346423][ T2029] lo speed is unknown, defaulting to 1000 [ 893.369357][ T2029] lo speed is unknown, defaulting to 1000 [ 893.499283][ T2038] netlink: 'syz.3.9106': attribute type 8 has an invalid length. [ 893.585317][ T2041] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 893.664220][ T2043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9108'. [ 893.705270][ T2043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9108'. [ 893.753868][ T2043] netlink: 'syz.1.9108': attribute type 12 has an invalid length. [ 893.843951][ T2044] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 893.893088][ T2048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9109'. [ 894.339999][ T2060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9114'. [ 894.627900][ T2054] tipc: Resetting bearer [ 894.688116][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 894.710530][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 894.720664][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 894.730820][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 894.740077][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 894.787607][ T2073] netlink: 'syz.4.9115': attribute type 1 has an invalid length. [ 894.810597][ T2060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9114'. [ 894.878589][T25088] syz_tun (unregistering): left promiscuous mode [ 894.963131][ T583] lo speed is unknown, defaulting to 1000 [ 894.976083][ T2067] syzkaller0: entered promiscuous mode [ 894.981675][ T2067] syzkaller0: entered allmulticast mode [ 895.055336][ T2079] wg1 speed is unknown, defaulting to 1000 [ 895.061700][ T2077] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 895.071538][ T2069] wg1 speed is unknown, defaulting to 1000 [ 895.071649][ T2079] lo speed is unknown, defaulting to 1000 [ 895.102421][ T2069] lo speed is unknown, defaulting to 1000 [ 895.105272][ T2079] lo speed is unknown, defaulting to 1000 [ 895.150769][ T2069] lo speed is unknown, defaulting to 1000 [ 895.222396][ T2083] batadv_slave_1: entered promiscuous mode [ 895.230782][ T2083] macsec1: entered promiscuous mode [ 895.237054][ T2083] macsec1: entered allmulticast mode [ 895.242451][ T2083] batadv_slave_1: entered allmulticast mode [ 895.261784][ T2083] batadv_slave_1: left allmulticast mode [ 895.271497][ T2083] batadv_slave_1: left promiscuous mode [ 895.276269][ T2093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9122'. [ 895.373974][ T2095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9123'. [ 895.465131][ T2098] vlan2: entered promiscuous mode [ 895.506820][ T2101] netlink: 'syz.4.9125': attribute type 1 has an invalid length. [ 895.550083][ T2105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9127'. [ 895.641756][ T2103] syzkaller0: entered promiscuous mode [ 895.657579][ T2103] syzkaller0: entered allmulticast mode [ 896.210774][ T2114] wg1 speed is unknown, defaulting to 1000 [ 896.283542][ T2114] lo speed is unknown, defaulting to 1000 [ 896.291518][ T2110] wg1 speed is unknown, defaulting to 1000 [ 896.296371][ T2114] lo speed is unknown, defaulting to 1000 [ 896.338992][ T2110] lo speed is unknown, defaulting to 1000 [ 896.377400][ T2069] chnl_net:caif_netlink_parms(): no params data found [ 896.425665][ T2110] lo speed is unknown, defaulting to 1000 [ 896.791996][ T2069] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.807214][ T5844] Bluetooth: hci4: command tx timeout [ 896.815779][ T2069] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.828419][ T2069] bridge_slave_0: entered allmulticast mode [ 896.843071][ T2069] bridge_slave_0: entered promiscuous mode [ 897.006099][ T2069] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.013262][ T2069] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.041423][ T2069] bridge_slave_1: entered allmulticast mode [ 897.085769][ T2069] bridge_slave_1: entered promiscuous mode [ 897.148683][ T2147] batadv_slave_1: entered promiscuous mode [ 897.184955][ T2069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.199440][ T2069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.426040][ T2069] team0: Port device team_slave_0 added [ 897.443757][ T2146] batadv_slave_1: left promiscuous mode [ 897.464029][ T2069] team0: Port device team_slave_1 added [ 897.587975][ T2160] tipc: Enabled bearer , priority 0 [ 897.596165][ T2162] syzkaller0: entered promiscuous mode [ 897.601662][ T2162] syzkaller0: entered allmulticast mode [ 897.634244][ T2069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.652196][ T2069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.705539][ T2069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.777832][ T2069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.790273][ T2069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.821194][ T2177] netlink: 'syz.4.9148': attribute type 11 has an invalid length. [ 897.829504][ T2069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.857770][ T2162] tipc: Resetting bearer [ 897.870888][ T2157] tipc: Resetting bearer [ 897.917044][ T2157] tipc: Disabling bearer [ 898.081841][ T2179] __nla_validate_parse: 4 callbacks suppressed [ 898.081861][ T2179] netlink: 484 bytes leftover after parsing attributes in process `syz.0.9149'. [ 898.122466][ T2069] hsr_slave_0: entered promiscuous mode [ 898.157779][ T2069] hsr_slave_1: entered promiscuous mode [ 898.166317][ T2069] debugfs: 'hsr0' already exists in 'hsr' [ 898.172105][ T2069] Cannot create hsr debugfs directory [ 898.180579][ T2181] wg1 speed is unknown, defaulting to 1000 [ 898.222800][ T2181] lo speed is unknown, defaulting to 1000 [ 898.293604][ T2181] lo speed is unknown, defaulting to 1000 [ 898.446694][ T2201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.550148][ T2198] wg1 speed is unknown, defaulting to 1000 [ 898.582775][ T2198] lo speed is unknown, defaulting to 1000 [ 898.696109][ T2208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9159'. [ 898.741106][ T2198] lo speed is unknown, defaulting to 1000 [ 898.807907][ T2069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 898.884607][ T5844] Bluetooth: hci4: command tx timeout [ 898.961265][ T2069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 899.068523][ T2069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 899.210857][ T2069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 899.667014][ T2069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 899.691617][ T2069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 899.721008][ T2069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 899.753775][ T2239] wg1 speed is unknown, defaulting to 1000 [ 899.753853][ T2069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 899.767290][ T2238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9168'. [ 899.830129][ T2239] lo speed is unknown, defaulting to 1000 [ 899.851972][ T2239] lo speed is unknown, defaulting to 1000 [ 900.140011][ T2240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9169'. [ 900.199555][ T2240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9169'. [ 900.333758][ T2262] netlink: 'syz.3.9175': attribute type 9 has an invalid length. [ 900.467010][ T2266] xt_CT: No such helper "snmp" [ 900.631717][ T2069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.733017][ T2277] netlink: 'syz.1.9181': attribute type 1 has an invalid length. [ 900.771615][ T2069] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.827221][T26452] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.834455][T26452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.911727][ T2283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 900.928674][ T2281] sch_tbf: burst 274 is lower than device lo mtu (65503) ! [ 900.950056][T13278] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.957255][T13278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.965562][ T5844] Bluetooth: hci4: command tx timeout [ 900.988312][ T2283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 901.286341][ T2285] bond9: option lacp_rate: invalid value (255) [ 901.328134][ T2285] bond9 (unregistering): Released all slaves [ 901.381016][ T2297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9186'. [ 901.650558][ T2069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.820249][ T2069] veth0_vlan: entered promiscuous mode [ 901.840457][ T2069] veth1_vlan: entered promiscuous mode [ 901.909935][ T2069] veth0_macvtap: entered promiscuous mode [ 901.940600][ T2069] veth1_macvtap: entered promiscuous mode [ 901.999287][ T2069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.030102][ T2328] dummy0: entered allmulticast mode [ 902.042063][ T2069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.051488][ T2328] xt_hashlimit: size too large, truncated to 1048576 [ 902.148931][T13275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.169313][ T2339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9201'. [ 902.178552][ T2339] netlink: 'syz.3.9201': attribute type 20 has an invalid length. [ 902.185092][T13275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.208302][ T2339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9201'. [ 902.220046][T13275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.249507][T13275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.572792][ T2345] ipvlan2: entered promiscuous mode [ 902.583267][ T2345] ipvlan2: entered allmulticast mode [ 902.589487][ T2345] geneve1: entered allmulticast mode [ 902.596757][T13275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.620130][T13275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.833404][T13275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.849360][T13275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.051936][ T5844] Bluetooth: hci4: command tx timeout [ 903.202417][ T2374] __nla_validate_parse: 2 callbacks suppressed [ 903.202438][ T2374] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9215'. [ 903.394879][ T2383] wg1 speed is unknown, defaulting to 1000 [ 903.418669][ T2383] lo speed is unknown, defaulting to 1000 [ 903.433609][ T2383] lo speed is unknown, defaulting to 1000 [ 903.486274][ T2390] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9219'. [ 903.676399][ T2403] vlan0: entered promiscuous mode [ 903.698923][ T2403] batadv0: entered promiscuous mode [ 903.983240][ T2414] tipc: Resetting bearer [ 904.089003][ T2416] xt_CT: No such helper "snmp" [ 904.134548][ T5993] lo speed is unknown, defaulting to 1000 [ 904.151515][ T2421] netlink: 'syz.3.9226': attribute type 9 has an invalid length. [ 904.753819][ T2449] wg1 speed is unknown, defaulting to 1000 [ 904.779461][ T2449] lo speed is unknown, defaulting to 1000 [ 904.798066][ T2449] lo speed is unknown, defaulting to 1000 [ 905.035371][ T2473] wg1 speed is unknown, defaulting to 1000 [ 905.043418][ T2473] lo speed is unknown, defaulting to 1000 [ 905.058430][ T2473] lo speed is unknown, defaulting to 1000 [ 905.595223][ T2512] netlink: 'syz.0.9254': attribute type 8 has an invalid length. [ 905.628054][ T2512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9254'. [ 905.639530][ T2505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9251'. [ 905.651273][ T2516] veth1_to_bridge: entered promiscuous mode [ 905.668236][ T2512] bond0: entered promiscuous mode [ 905.673512][ T2512] bond_slave_0: entered promiscuous mode [ 905.680765][ T2512] bond_slave_1: entered promiscuous mode [ 905.693017][ T2512] geneve0: entered promiscuous mode [ 905.718692][ T2512] team_slave_0: entered promiscuous mode [ 905.726162][ T2512] team_slave_0: left promiscuous mode [ 905.739812][ T2512] bond0: left promiscuous mode [ 905.745138][ T2512] bond_slave_0: left promiscuous mode [ 905.757661][ T2512] bond_slave_1: left promiscuous mode [ 905.760901][ T2526] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.9252'. [ 905.782322][ T2512] geneve0: left promiscuous mode [ 905.899617][ T2514] veth1_to_bridge: left promiscuous mode [ 906.017391][ T2531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9257'. [ 906.034486][ T2531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9257'. [ 906.043395][ T2531] netlink: 'syz.2.9257': attribute type 12 has an invalid length. [ 906.072707][ T2529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 906.121949][ T2535] bond_slave_0: entered promiscuous mode [ 906.127770][ T2535] bond_slave_1: entered promiscuous mode [ 906.196714][ T2535] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 906.222535][ T2535] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 906.259342][ T2529] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 906.292933][ T2548] sch_tbf: burst 274 is lower than device lo mtu (1297) ! [ 906.513967][ T2559] netlink: 'syz.2.9264': attribute type 8 has an invalid length. [ 906.712928][ T2576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9269'. [ 906.863776][ T2584] bond1: option min_links: invalid value (18446744073709551612) [ 906.872787][ T2584] bond1: option min_links: allowed values 0 - 2147483647 [ 906.891543][ T2584] bond1 (unregistering): Released all slaves [ 906.970724][ T2580] wg1 speed is unknown, defaulting to 1000 [ 906.988044][ T2581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9269'. [ 907.012477][ T2580] lo speed is unknown, defaulting to 1000 [ 907.040227][ T2581] bridge0: entered promiscuous mode [ 907.061613][ T2581] bridge0: port 3(vlan2) entered blocking state [ 907.094862][ T2581] bridge0: port 3(vlan2) entered disabled state [ 907.116254][ T2581] vlan2: entered allmulticast mode [ 907.121575][ T2581] bridge0: entered allmulticast mode [ 907.135677][ T2581] vlan2: left allmulticast mode [ 907.142000][ T2581] bridge0: left allmulticast mode [ 907.151010][ T2581] bridge0: left promiscuous mode [ 907.199977][ T2580] lo speed is unknown, defaulting to 1000 [ 907.276020][ T587] IPVS: starting estimator thread 0... [ 907.366070][ T2611] IPVS: using max 24 ests per chain, 57600 per kthread [ 907.389887][ T2609] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9278'. [ 907.446332][ T2609] netlink: 'syz.3.9278': attribute type 23 has an invalid length. [ 907.861876][ T2633] xt_CT: No such helper "snmp" [ 908.123179][ T2655] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 908.343930][ T2675] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 908.390254][ T2675] gre2: entered promiscuous mode [ 908.400993][ T2675] gre2: entered allmulticast mode [ 908.409013][ T2678] IPv6: addrconf: prefix option has invalid lifetime [ 908.431619][ T2679] __nla_validate_parse: 3 callbacks suppressed [ 908.431641][ T2679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9298'. [ 908.604882][ T2681] wg1 speed is unknown, defaulting to 1000 [ 908.613541][ T2681] lo speed is unknown, defaulting to 1000 [ 908.621177][ T2688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9300'. [ 908.633511][ T2681] lo speed is unknown, defaulting to 1000 [ 908.740915][ T2688] hsr_slave_1 (unregistering): left promiscuous mode [ 908.771039][ T2695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9304'. [ 908.973238][ T2703] syzkaller0: entered promiscuous mode [ 909.032045][ T2703] syzkaller0: entered allmulticast mode [ 909.527161][ T2729] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 909.542611][ T2729] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 909.968002][ T2744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9321'. [ 910.046263][ T2745] wg1 speed is unknown, defaulting to 1000 [ 910.080728][ T2745] lo speed is unknown, defaulting to 1000 [ 910.101555][ T2745] lo speed is unknown, defaulting to 1000 [ 910.283341][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 910.294228][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 910.317902][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 910.332484][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 910.340208][T25945] syz_tun (unregistering): left promiscuous mode [ 910.346537][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 910.405720][ T95] block nbd0: Possible stuck request ffff888025090000: control (read@0,1024B). Runtime 780 seconds [ 910.420633][ T95] block nbd0: Possible stuck request ffff8880250901c0: control (read@1024,1024B). Runtime 780 seconds [ 910.433296][ T95] block nbd0: Possible stuck request ffff888025090380: control (read@2048,1024B). Runtime 780 seconds [ 910.447350][ T95] block nbd0: Possible stuck request ffff888025090540: control (read@3072,1024B). Runtime 780 seconds [ 910.493650][ T2754] wg1 speed is unknown, defaulting to 1000 [ 910.622803][ T2754] lo speed is unknown, defaulting to 1000 [ 910.646479][ T2766] wg1 speed is unknown, defaulting to 1000 [ 910.646847][ T2754] lo speed is unknown, defaulting to 1000 [ 910.653932][ T2766] lo speed is unknown, defaulting to 1000 [ 910.737449][ T2766] lo speed is unknown, defaulting to 1000 [ 911.082701][ T2773] wg1 speed is unknown, defaulting to 1000 [ 911.121449][ T2773] lo speed is unknown, defaulting to 1000 [ 911.142530][ T2773] lo speed is unknown, defaulting to 1000 [ 911.959000][ T2754] chnl_net:caif_netlink_parms(): no params data found [ 911.982119][ T2813] tipc: Enabling of bearer rejected, failed to enable media [ 912.158242][ T2827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9341'. [ 912.213609][ T2827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9341'. [ 912.235284][ T2838] netlink: 'syz.0.9343': attribute type 10 has an invalid length. [ 912.241149][ T30] audit: type=1800 audit(1763797886.800:9): pid=2834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9344" name="memory.events" dev="tmpfs" ino=129 res=0 errno=0 [ 912.244055][ T2827] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9341'. [ 912.325925][ T2754] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.333307][ T2754] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.340775][ T2754] bridge_slave_0: entered allmulticast mode [ 912.348996][ T2754] bridge_slave_0: entered promiscuous mode [ 912.365172][ T2754] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.375898][ T2754] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.383529][ T2754] bridge_slave_1: entered allmulticast mode [ 912.394051][ T2754] bridge_slave_1: entered promiscuous mode [ 912.405819][ T5147] Bluetooth: hci2: command tx timeout [ 912.543765][ T2855] gretap0: entered promiscuous mode [ 912.554447][ T2855] vlan2: entered promiscuous mode [ 912.608584][ T2754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.765560][ T2754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.041820][ T2754] team0: Port device team_slave_0 added [ 913.192002][ T2876] syzkaller0: entered promiscuous mode [ 913.208842][ T2876] syzkaller0: entered allmulticast mode [ 913.530018][ T2754] team0: Port device team_slave_1 added [ 914.487420][ T5147] Bluetooth: hci2: command tx timeout [ 915.400783][ T2754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.407930][ T2754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.433996][ T2754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.478426][ T2754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.496298][ T2754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.533235][ T2754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.735143][ T2754] hsr_slave_0: entered promiscuous mode [ 915.752651][ T2754] hsr_slave_1: entered promiscuous mode [ 915.766337][ T2754] debugfs: 'hsr0' already exists in 'hsr' [ 915.779426][ T2754] Cannot create hsr debugfs directory [ 916.143815][ T2910] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9364'. [ 916.168498][ T2910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9364'. [ 916.233243][ T2923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9369'. [ 916.252618][ T2754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.402441][ T2754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.522847][ T2754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.564416][ T5147] Bluetooth: hci2: command tx timeout [ 916.646217][ T2944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9375'. [ 916.681592][ T2944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9375'. [ 916.703174][ T2754] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.765225][ T2949] pim6reg1: entered promiscuous mode [ 916.770707][ T2949] pim6reg1: entered allmulticast mode [ 917.378817][ T2948] delete_channel: no stack [ 917.502363][ T2967] netlink: 'syz.2.9382': attribute type 9 has an invalid length. [ 917.639341][ T2977] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.9387'. [ 917.742531][ T2983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9390'. [ 917.754788][ T2983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9390'. [ 917.832488][ T2978] vlan2: entered promiscuous mode [ 917.857069][ T2983] bridge0: entered promiscuous mode [ 917.865563][ T2983] syz_tun: entered promiscuous mode [ 917.872822][ T2983] debugfs: 'hsr1' already exists in 'hsr' [ 917.879523][ T2983] Cannot create hsr debugfs directory [ 917.953053][ T2980] wg1 speed is unknown, defaulting to 1000 [ 917.994067][ T2988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9392'. [ 918.005145][ T2980] lo speed is unknown, defaulting to 1000 [ 918.029079][ T2980] lo speed is unknown, defaulting to 1000 [ 918.032746][ T2754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 918.074872][ T2754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 918.182279][ T2754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 918.200614][ T2986] netlink: 'syz.2.9391': attribute type 13 has an invalid length. [ 918.230532][ T2754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 918.644696][ T5147] Bluetooth: hci2: command tx timeout [ 918.686957][ T3017] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 918.772931][ T2754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.790992][ T3023] sch_tbf: burst 274 is lower than device lo mtu (1299) ! [ 918.851937][ T3024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9402'. [ 918.877190][ T2754] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.921231][T26452] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.928530][T26452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.990885][T13278] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.998091][T13278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.089653][ T3033] wg1 speed is unknown, defaulting to 1000 [ 919.129823][ T3033] lo speed is unknown, defaulting to 1000 [ 919.162879][ T3033] lo speed is unknown, defaulting to 1000 [ 919.216217][ T3042] syzkaller0: entered promiscuous mode [ 919.221832][ T3042] syzkaller0: entered allmulticast mode [ 919.420966][ T3047] syzkaller0: entered promiscuous mode [ 919.456951][ T3047] syzkaller0: entered allmulticast mode [ 919.502093][ T3047] tipc: Enabling of bearer rejected, already enabled [ 919.842613][ T3062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.896469][ T3060] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 919.912715][ T2754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.167668][ T2754] veth0_vlan: entered promiscuous mode [ 920.212213][ T3072] wg1 speed is unknown, defaulting to 1000 [ 920.218250][ T2754] veth1_vlan: entered promiscuous mode [ 920.230885][ T3072] lo speed is unknown, defaulting to 1000 [ 920.240179][ T3072] lo speed is unknown, defaulting to 1000 [ 920.430344][ T2754] veth0_macvtap: entered promiscuous mode [ 920.502897][ T2754] veth1_macvtap: entered promiscuous mode [ 920.607109][ T2754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.637650][ T2754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.659072][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.677813][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.688967][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.748341][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.970376][ T3089] wg1 speed is unknown, defaulting to 1000 [ 920.986982][ T3089] lo speed is unknown, defaulting to 1000 [ 920.995729][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.011451][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.135631][ T3089] lo speed is unknown, defaulting to 1000 [ 921.197458][ T9464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.217678][ T9464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.372623][ T3103] netlink: 'syz.3.9427': attribute type 10 has an invalid length. [ 921.592231][ T3106] wg1 speed is unknown, defaulting to 1000 [ 921.792729][ T3106] lo speed is unknown, defaulting to 1000 [ 921.827368][ T3106] lo speed is unknown, defaulting to 1000 [ 921.993295][ T3123] vlan2: entered promiscuous mode [ 922.127210][ T3132] vlan2: entered promiscuous mode [ 922.606817][ T3146] wg1 speed is unknown, defaulting to 1000 [ 922.621277][ T3146] lo speed is unknown, defaulting to 1000 [ 922.671807][ T3146] lo speed is unknown, defaulting to 1000 [ 923.118897][ T3171] wg1 speed is unknown, defaulting to 1000 [ 923.180025][ T3171] lo speed is unknown, defaulting to 1000 [ 923.238567][ T3171] lo speed is unknown, defaulting to 1000 [ 923.325604][ T3178] __nla_validate_parse: 2 callbacks suppressed [ 923.325623][ T3178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9452'. [ 923.667421][ T3195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9458'. [ 924.043857][ T3203] wg1 speed is unknown, defaulting to 1000 [ 924.096159][ T3203] lo speed is unknown, defaulting to 1000 [ 924.166085][ T3203] lo speed is unknown, defaulting to 1000 [ 924.319365][ T5993] IPVS: starting estimator thread 0... [ 924.411167][ T3212] syzkaller0: entered promiscuous mode [ 924.438829][ T3212] syzkaller0: entered allmulticast mode [ 924.445276][ T3216] IPVS: using max 27 ests per chain, 64800 per kthread [ 924.739217][ T3218] wg1 speed is unknown, defaulting to 1000 [ 924.763855][ T3218] lo speed is unknown, defaulting to 1000 [ 924.849982][ T3218] lo speed is unknown, defaulting to 1000 [ 926.917558][ T3251] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 927.242036][ T3264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9478'. [ 927.252892][ T3264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9478'. [ 927.439098][ T3268] wg1 speed is unknown, defaulting to 1000 [ 927.451527][ T3268] lo speed is unknown, defaulting to 1000 [ 927.476819][ T3268] lo speed is unknown, defaulting to 1000 [ 927.888409][ T3283] syzkaller1: entered promiscuous mode [ 927.893933][ T3283] syzkaller1: entered allmulticast mode [ 928.101396][ T5993] IPVS: starting estimator thread 0... [ 928.122227][ T3288] wg1 speed is unknown, defaulting to 1000 [ 928.130111][ T3288] lo speed is unknown, defaulting to 1000 [ 928.138119][ T3288] lo speed is unknown, defaulting to 1000 [ 928.204710][ T3300] IPVS: using max 30 ests per chain, 72000 per kthread [ 928.286403][ T3309] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 928.426312][ T3316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9494'. [ 928.477904][ T3318] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 928.681258][ T3325] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9499'. [ 928.732470][ T3325] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9499'. [ 929.268297][ T3331] FAULT_INJECTION: forcing a failure. [ 929.268297][ T3331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.305606][ T3359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9510'. [ 929.315252][ T3331] CPU: 0 UID: 0 PID: 3331 Comm: syz.3.9500 Not tainted syzkaller #0 PREEMPT(full) [ 929.315302][ T3331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 929.315326][ T3331] Call Trace: [ 929.315335][ T3331] [ 929.315344][ T3331] dump_stack_lvl+0x189/0x250 [ 929.315377][ T3331] ? __pfx____ratelimit+0x10/0x10 [ 929.315398][ T3331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 929.315426][ T3331] ? __pfx__printk+0x10/0x10 [ 929.315447][ T3331] ? __might_fault+0xb0/0x130 [ 929.315489][ T3331] should_fail_ex+0x414/0x560 [ 929.315523][ T3331] _copy_from_iter+0x1de/0x1790 [ 929.315545][ T3331] ? __lock_acquire+0xab9/0xd20 [ 929.315573][ T3331] ? __pfx__copy_from_iter+0x10/0x10 [ 929.315610][ T3331] tun_get_user+0x488/0x3e90 [ 929.315655][ T3331] ? aa_file_perm+0x44d/0x1550 [ 929.315674][ T3331] ? __pfx_tun_get_user+0x10/0x10 [ 929.315697][ T3331] ? _parse_integer_limit+0x1ae/0x1f0 [ 929.315725][ T3331] ? __lock_acquire+0xab9/0xd20 [ 929.315750][ T3331] ? ref_tracker_alloc+0x318/0x460 [ 929.315767][ T3331] ? __lock_acquire+0xab9/0xd20 [ 929.315788][ T3331] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 929.315813][ T3331] ? tun_get+0x1c/0x2f0 [ 929.315842][ T3331] ? tun_get+0x1c/0x2f0 [ 929.315865][ T3331] ? tun_get+0x1c/0x2f0 [ 929.315893][ T3331] tun_chr_write_iter+0x113/0x200 [ 929.315921][ T3331] vfs_write+0x5c9/0xb30 [ 929.315952][ T3331] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 929.315984][ T3331] ? __pfx_vfs_write+0x10/0x10 [ 929.316022][ T3331] ? __fget_files+0x2a/0x420 [ 929.316050][ T3331] ksys_write+0x145/0x250 [ 929.316079][ T3331] ? __pfx_ksys_write+0x10/0x10 [ 929.316110][ T3331] ? do_syscall_64+0xbe/0xfa0 [ 929.316135][ T3331] do_syscall_64+0xfa/0xfa0 [ 929.316153][ T3331] ? lockdep_hardirqs_on+0x9c/0x150 [ 929.316173][ T3331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.316193][ T3331] ? clear_bhb_loop+0x60/0xb0 [ 929.316216][ T3331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.316235][ T3331] RIP: 0033:0x7fe705d8f749 [ 929.316252][ T3331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.316273][ T3331] RSP: 002b:00007fe706cf8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 929.316294][ T3331] RAX: ffffffffffffffda RBX: 00007fe705fe5fa0 RCX: 00007fe705d8f749 [ 929.316309][ T3331] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 929.316322][ T3331] RBP: 00007fe706cf8090 R08: 0000000000000000 R09: 0000000000000000 [ 929.316334][ T3331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.316347][ T3331] R13: 00007fe705fe6038 R14: 00007fe705fe5fa0 R15: 00007ffd131141a8 [ 929.316379][ T3331] [ 929.439988][ T3364] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9511'. [ 929.893468][ T3376] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9515'. [ 929.997425][ T3376] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9515'. [ 930.030618][ T9464] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.056179][ T9464] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.071080][ T9464] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.102059][ T9464] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.219381][ T3398] sctp: [Deprecated]: syz.3.9523 (pid 3398) Use of int in max_burst socket option. [ 930.219381][ T3398] Use struct sctp_assoc_value instead [ 930.400013][ T3401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.757173][ T3416] FAULT_INJECTION: forcing a failure. [ 930.757173][ T3416] name failslab, interval 1, probability 0, space 0, times 0 [ 930.771110][ T3416] CPU: 0 UID: 0 PID: 3416 Comm: syz.1.9529 Not tainted syzkaller #0 PREEMPT(full) [ 930.771138][ T3416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 930.771151][ T3416] Call Trace: [ 930.771161][ T3416] [ 930.771169][ T3416] dump_stack_lvl+0x189/0x250 [ 930.771201][ T3416] ? __pfx____ratelimit+0x10/0x10 [ 930.771223][ T3416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.771250][ T3416] ? __pfx__printk+0x10/0x10 [ 930.771274][ T3416] ? __pfx___might_resched+0x10/0x10 [ 930.771296][ T3416] ? fs_reclaim_acquire+0x7d/0x100 [ 930.771322][ T3416] should_fail_ex+0x414/0x560 [ 930.771358][ T3416] should_failslab+0xa8/0x100 [ 930.771380][ T3416] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 930.771410][ T3416] ? llcp_sock_bind+0x33a/0x6c0 [ 930.771431][ T3416] ? do_raw_spin_unlock+0x122/0x240 [ 930.771465][ T3416] kmemdup_noprof+0x2b/0x70 [ 930.771490][ T3416] llcp_sock_bind+0x33a/0x6c0 [ 930.771518][ T3416] ? aa_sk_perm+0x81e/0x950 [ 930.771556][ T3416] ? __pfx_llcp_sock_bind+0x10/0x10 [ 930.771592][ T3416] ? apparmor_socket_bind+0xff/0x1e0 [ 930.771621][ T3416] ? bpf_lsm_socket_bind+0x9/0x20 [ 930.771646][ T3416] __sys_bind+0x2c6/0x3e0 [ 930.771669][ T3416] ? __pfx___sys_bind+0x10/0x10 [ 930.771703][ T3416] ? __pfx_ksys_write+0x10/0x10 [ 930.771739][ T3416] __x64_sys_bind+0x7a/0x90 [ 930.771760][ T3416] do_syscall_64+0xfa/0xfa0 [ 930.771780][ T3416] ? lockdep_hardirqs_on+0x9c/0x150 [ 930.771800][ T3416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.771821][ T3416] ? clear_bhb_loop+0x60/0xb0 [ 930.771846][ T3416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.771866][ T3416] RIP: 0033:0x7f454d38f749 [ 930.771884][ T3416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.771903][ T3416] RSP: 002b:00007f454e295038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 930.771925][ T3416] RAX: ffffffffffffffda RBX: 00007f454d5e5fa0 RCX: 00007f454d38f749 [ 930.771941][ T3416] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000008 [ 930.771955][ T3416] RBP: 00007f454e295090 R08: 0000000000000000 R09: 0000000000000000 [ 930.771969][ T3416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.771981][ T3416] R13: 00007f454d5e6038 R14: 00007f454d5e5fa0 R15: 00007ffc9738f438 [ 930.772015][ T3416] [ 931.159336][ T3423] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9531'. [ 931.169629][ T3423] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9531'. [ 931.303894][ T3432] syzkaller1: entered promiscuous mode [ 931.310478][ T3432] syzkaller1: entered allmulticast mode [ 931.334147][ T3434] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 931.491737][ T3445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9541'. [ 931.516696][ T3445] batadv0: entered promiscuous mode [ 931.523528][ T3445] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 931.547794][ T3445] batadv0: left promiscuous mode [ 931.764212][ T3454] wg1 speed is unknown, defaulting to 1000 [ 931.790311][ T3454] lo speed is unknown, defaulting to 1000 [ 931.826223][ T3454] lo speed is unknown, defaulting to 1000 [ 932.721253][ T3492] bond3: entered promiscuous mode [ 932.729749][ T3492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 932.919921][ T3492] bond3 (unregistering): Released all slaves [ 933.172230][ T3514] syzkaller0: entered promiscuous mode [ 933.197748][ T3514] syzkaller0: entered allmulticast mode [ 933.211414][ T3516] netlink: 'syz.3.9562': attribute type 11 has an invalid length. [ 933.251167][ T3519] netlink: 'syz.1.9561': attribute type 1 has an invalid length. [ 933.256578][ T3514] tipc: Started in network mode [ 933.266651][ T3514] tipc: Node identity 7ac119c376f8, cluster identity 4711 [ 933.285204][ T3514] tipc: Enabled bearer , priority 0 [ 933.337501][ T3511] tipc: Resetting bearer [ 933.374203][ T3511] tipc: Disabling bearer [ 933.398068][ T3523] xt_CT: No such helper "snmp" [ 933.570072][ T3532] gretap0: entered promiscuous mode [ 933.588463][ T3532] vlan2: entered promiscuous mode [ 933.741771][ T3540] vlan2: entered promiscuous mode [ 933.824987][ T3538] FAULT_INJECTION: forcing a failure. [ 933.824987][ T3538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.840605][ T3538] CPU: 1 UID: 0 PID: 3538 Comm: syz.1.9569 Not tainted syzkaller #0 PREEMPT(full) [ 933.840632][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 933.840644][ T3538] Call Trace: [ 933.840652][ T3538] [ 933.840660][ T3538] dump_stack_lvl+0x189/0x250 [ 933.840691][ T3538] ? __pfx____ratelimit+0x10/0x10 [ 933.840709][ T3538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.840734][ T3538] ? __pfx__printk+0x10/0x10 [ 933.840766][ T3538] should_fail_ex+0x414/0x560 [ 933.840799][ T3538] _copy_to_user+0x31/0xb0 [ 933.840829][ T3538] __tun_chr_ioctl+0x151d/0x1df0 [ 933.840861][ T3538] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 933.840893][ T3538] ? __fget_files+0x3a0/0x420 [ 933.840911][ T3538] ? __fget_files+0x2a/0x420 [ 933.840932][ T3538] ? bpf_lsm_file_ioctl+0x9/0x20 [ 933.840954][ T3538] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 933.840977][ T3538] __se_sys_ioctl+0xfc/0x170 [ 933.841003][ T3538] do_syscall_64+0xfa/0xfa0 [ 933.841022][ T3538] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.841042][ T3538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.841062][ T3538] ? clear_bhb_loop+0x60/0xb0 [ 933.841084][ T3538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.841102][ T3538] RIP: 0033:0x7f454d38f749 [ 933.841119][ T3538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.841136][ T3538] RSP: 002b:00007f454e274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 933.841157][ T3538] RAX: ffffffffffffffda RBX: 00007f454d5e6090 RCX: 00007f454d38f749 [ 933.841171][ T3538] RDX: 0000200000000080 RSI: 0000000000008927 RDI: 0000000000000005 [ 933.841181][ T3538] RBP: 00007f454e274090 R08: 0000000000000000 R09: 0000000000000000 [ 933.841190][ T3538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.841201][ T3538] R13: 00007f454d5e6128 R14: 00007f454d5e6090 R15: 00007ffc9738f438 [ 933.841232][ T3538] [ 934.047090][ T3530] FAULT_INJECTION: forcing a failure. [ 934.047090][ T3530] name failslab, interval 1, probability 0, space 0, times 0 [ 934.061226][ T3530] CPU: 0 UID: 0 PID: 3530 Comm: syz.0.9567 Not tainted syzkaller #0 PREEMPT(full) [ 934.061254][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 934.061266][ T3530] Call Trace: [ 934.061275][ T3530] [ 934.061283][ T3530] dump_stack_lvl+0x189/0x250 [ 934.061315][ T3530] ? __pfx____ratelimit+0x10/0x10 [ 934.061336][ T3530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.061363][ T3530] ? __pfx__printk+0x10/0x10 [ 934.061387][ T3530] ? __pfx___might_resched+0x10/0x10 [ 934.061409][ T3530] ? fs_reclaim_acquire+0x7d/0x100 [ 934.061433][ T3530] should_fail_ex+0x414/0x560 [ 934.061469][ T3530] should_failslab+0xa8/0x100 [ 934.061499][ T3530] kmem_cache_alloc_node_noprof+0x77/0x710 [ 934.061528][ T3530] ? __alloc_skb+0x255/0x430 [ 934.061549][ T3530] ? napi_skb_cache_get+0x4a5/0x790 [ 934.061568][ T3530] ? napi_skb_cache_get+0x151/0x790 [ 934.061591][ T3530] __alloc_skb+0x255/0x430 [ 934.061612][ T3530] ? __pfx___alloc_skb+0x10/0x10 [ 934.061642][ T3530] alloc_skb_with_frags+0xca/0x890 [ 934.061681][ T3530] sock_alloc_send_pskb+0x84d/0x980 [ 934.061727][ T3530] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 934.061766][ T3530] ? iov_iter_advance+0x8b/0x1c0 [ 934.061793][ T3530] tun_get_user+0xa43/0x3e90 [ 934.061839][ T3530] ? aa_file_perm+0x44d/0x1550 [ 934.061859][ T3530] ? __pfx_tun_get_user+0x10/0x10 [ 934.061882][ T3530] ? _parse_integer_limit+0x1ae/0x1f0 [ 934.061913][ T3530] ? __lock_acquire+0xab9/0xd20 [ 934.061939][ T3530] ? ref_tracker_alloc+0x318/0x460 [ 934.061956][ T3530] ? __lock_acquire+0xab9/0xd20 [ 934.061978][ T3530] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 934.062004][ T3530] ? tun_get+0x1c/0x2f0 [ 934.062032][ T3530] ? tun_get+0x1c/0x2f0 [ 934.062054][ T3530] ? tun_get+0x1c/0x2f0 [ 934.062081][ T3530] tun_chr_write_iter+0x113/0x200 [ 934.062107][ T3530] vfs_write+0x5c9/0xb30 [ 934.062140][ T3530] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 934.062164][ T3530] ? __pfx_vfs_write+0x10/0x10 [ 934.062199][ T3530] ? __fget_files+0x2a/0x420 [ 934.062224][ T3530] ksys_write+0x145/0x250 [ 934.062253][ T3530] ? __pfx_ksys_write+0x10/0x10 [ 934.062282][ T3530] ? do_syscall_64+0xbe/0xfa0 [ 934.062304][ T3530] do_syscall_64+0xfa/0xfa0 [ 934.062322][ T3530] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.062343][ T3530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.062362][ T3530] ? clear_bhb_loop+0x60/0xb0 [ 934.062385][ T3530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.062402][ T3530] RIP: 0033:0x7f32c9d8f749 [ 934.062418][ T3530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.062436][ T3530] RSP: 002b:00007f32c7ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 934.062458][ T3530] RAX: ffffffffffffffda RBX: 00007f32c9fe5fa0 RCX: 00007f32c9d8f749 [ 934.062480][ T3530] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 934.062493][ T3530] RBP: 00007f32c7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 934.062571][ T3530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.062582][ T3530] R13: 00007f32c9fe6038 R14: 00007f32c9fe5fa0 R15: 00007ffca9d6c008 [ 934.062612][ T3530] [ 934.069909][ T3536] wg1 speed is unknown, defaulting to 1000 [ 934.215228][ T3554] tipc: Started in network mode [ 934.443431][ T3554] tipc: Node identity ac14140f, cluster identity 4711 [ 934.450716][ T3554] tipc: New replicast peer: 255.255.255.255 [ 934.458941][ T3554] tipc: Enabled bearer , priority 10 [ 934.465557][ T3536] lo speed is unknown, defaulting to 1000 [ 934.501384][ T3536] lo speed is unknown, defaulting to 1000 [ 934.617233][ T3565] netlink: 'syz.4.9575': attribute type 1 has an invalid length. [ 934.941766][ T3574] __nla_validate_parse: 4 callbacks suppressed [ 934.941785][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9577'. [ 934.963032][ T3570] syzkaller0: entered promiscuous mode [ 934.969119][ T3570] syzkaller0: entered allmulticast mode [ 934.992967][ T3570] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 935.002144][ T3570] tipc: Enabled bearer , priority 10 [ 935.113579][ T3574] netlink: 'syz.0.9577': attribute type 2 has an invalid length. [ 935.140784][ T3574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9577'. [ 935.322899][ T3584] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9582'. [ 935.339576][ T3584] netlink: 336 bytes leftover after parsing attributes in process `syz.3.9582'. [ 935.403804][ T3584] wg1 speed is unknown, defaulting to 1000 [ 935.460624][ T3584] lo speed is unknown, defaulting to 1000 [ 935.499968][ T3584] lo speed is unknown, defaulting to 1000 [ 935.631173][ T587] tipc: Node number set to 2886997007 [ 935.659739][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9586'. [ 935.990363][ T3606] netlink: 'syz.0.9588': attribute type 1 has an invalid length. [ 936.163993][ T5993] tipc: Node number set to 205068739 [ 936.205622][ T3613] netlink: 'syz.2.9591': attribute type 39 has an invalid length. [ 936.433907][ T3624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9596'. [ 936.711098][ T3633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9595'. [ 936.790993][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 936.811249][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 936.820950][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 936.830134][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 936.840124][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 936.858319][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.886365][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.899630][ T3637] wg1 speed is unknown, defaulting to 1000 [ 936.908434][ T3637] lo speed is unknown, defaulting to 1000 [ 936.920326][ T3637] lo speed is unknown, defaulting to 1000 [ 937.275092][ T3637] chnl_net:caif_netlink_parms(): no params data found [ 937.390274][ T3656] syzkaller0: mtu greater than device maximum [ 937.430962][ T3660] netlink: 'syz.4.9605': attribute type 1 has an invalid length. [ 937.626866][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.652367][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.681194][ T3637] bridge_slave_0: entered allmulticast mode [ 937.690531][ T3664] netlink: 'syz.2.9607': attribute type 10 has an invalid length. [ 937.716925][ T3637] bridge_slave_0: entered promiscuous mode [ 937.762217][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.770351][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.790894][ T3637] bridge_slave_1: entered allmulticast mode [ 937.808802][ T3637] bridge_slave_1: entered promiscuous mode [ 937.881281][ T3672] veth0_macvtap: Caught tx_queue_len zero misconfig [ 937.881919][ T3670] FAULT_INJECTION: forcing a failure. [ 937.881919][ T3670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.904667][ T3670] CPU: 1 UID: 0 PID: 3670 Comm: syz.0.9609 Not tainted syzkaller #0 PREEMPT(full) [ 937.904697][ T3670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 937.904710][ T3670] Call Trace: [ 937.904718][ T3670] [ 937.904727][ T3670] dump_stack_lvl+0x189/0x250 [ 937.904757][ T3670] ? __pfx____ratelimit+0x10/0x10 [ 937.904785][ T3670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.904810][ T3670] ? __pfx__printk+0x10/0x10 [ 937.904829][ T3670] ? __might_fault+0xb0/0x130 [ 937.904869][ T3670] should_fail_ex+0x414/0x560 [ 937.904902][ T3670] _copy_from_user+0x2d/0xb0 [ 937.904928][ T3670] ___sys_sendmsg+0x158/0x2a0 [ 937.904954][ T3670] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.905012][ T3670] ? __fget_files+0x2a/0x420 [ 937.905030][ T3670] ? __fget_files+0x3a0/0x420 [ 937.905058][ T3670] __x64_sys_sendmsg+0x19b/0x260 [ 937.905084][ T3670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 937.905117][ T3670] ? __pfx_ksys_write+0x10/0x10 [ 937.905147][ T3670] ? do_syscall_64+0xbe/0xfa0 [ 937.905168][ T3670] do_syscall_64+0xfa/0xfa0 [ 937.905185][ T3670] ? lockdep_hardirqs_on+0x9c/0x150 [ 937.905204][ T3670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.905221][ T3670] ? clear_bhb_loop+0x60/0xb0 [ 937.905242][ T3670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.905258][ T3670] RIP: 0033:0x7f32c9d8f749 [ 937.905275][ T3670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.905291][ T3670] RSP: 002b:00007f32c7ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.905310][ T3670] RAX: ffffffffffffffda RBX: 00007f32c9fe5fa0 RCX: 00007f32c9d8f749 [ 937.905324][ T3670] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 937.905337][ T3670] RBP: 00007f32c7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 937.905349][ T3670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.905362][ T3670] R13: 00007f32c9fe6038 R14: 00007f32c9fe5fa0 R15: 00007ffca9d6c008 [ 937.905397][ T3670] [ 938.134967][ T3637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.158535][ T3637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.236870][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9610'. [ 938.246782][ T3672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9610'. [ 938.301541][ T3637] team0: Port device team_slave_0 added [ 938.313951][ T3687] vlan2: entered promiscuous mode [ 938.350785][ T3637] team0: Port device team_slave_1 added [ 938.400396][ T3689] mac80211_hwsim hwsim225 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 938.424104][ T3637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.442162][ T3637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.507271][ T3693] netlink: 'syz.0.9617': attribute type 1 has an invalid length. [ 938.518940][ T3637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.525787][ T3696] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9618'. [ 938.593022][ T3637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.610412][ T3637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.637632][ T3637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.762420][ T3637] hsr_slave_0: entered promiscuous mode [ 938.780573][ T3637] hsr_slave_1: entered promiscuous mode [ 938.795227][ T3637] debugfs: 'hsr0' already exists in 'hsr' [ 938.801082][ T3637] Cannot create hsr debugfs directory [ 938.885351][ T5844] Bluetooth: hci5: command tx timeout [ 938.952589][ T3691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.232742][ T3637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.243777][ T3637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.340720][ T3637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.366971][ T3637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.460643][ T3637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.473763][ T3637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.618901][ T3728] netlink: 'syz.0.9629': attribute type 1 has an invalid length. [ 939.679785][ T3637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.701620][ T3733] x_tables: ip_tables: osf match: only valid for protocol 6 [ 939.704990][ T3637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.087913][ T3637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 940.134120][ T3637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 940.150758][ T3637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 940.167985][ T3637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 940.340394][ T3637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.389846][ T3637] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.416936][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.424186][ T9464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.442778][ T9464] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.449978][ T9464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.488584][ T95] block nbd0: Possible stuck request ffff888025090000: control (read@0,1024B). Runtime 810 seconds [ 940.499782][ T95] block nbd0: Possible stuck request ffff8880250901c0: control (read@1024,1024B). Runtime 810 seconds [ 940.513196][ T95] block nbd0: Possible stuck request ffff888025090380: control (read@2048,1024B). Runtime 810 seconds [ 940.526509][ T95] block nbd0: Possible stuck request ffff888025090540: control (read@3072,1024B). Runtime 810 seconds [ 940.740026][ T3780] wg1 speed is unknown, defaulting to 1000 [ 940.759227][ T3780] lo speed is unknown, defaulting to 1000 [ 940.777651][ T3780] lo speed is unknown, defaulting to 1000 [ 940.787343][ T3785] netlink: 'syz.2.9643': attribute type 1 has an invalid length. [ 940.913953][ T3637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.965120][ T5844] Bluetooth: hci5: command tx timeout [ 940.972203][ T3637] veth0_vlan: entered promiscuous mode [ 940.990688][ T3637] veth1_vlan: entered promiscuous mode [ 941.103195][ T3637] veth0_macvtap: entered promiscuous mode [ 941.129676][ T3637] veth1_macvtap: entered promiscuous mode [ 941.271790][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.329844][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.455622][T13271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.517587][ T3801] __nla_validate_parse: 1 callbacks suppressed [ 941.517608][ T3801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9649'. [ 941.598434][T13271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.627125][T13271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.760922][T13271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.218407][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.226588][ T3814] FAULT_INJECTION: forcing a failure. [ 942.226588][ T3814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.226654][ T3814] CPU: 0 UID: 0 PID: 3814 Comm: syz.4.9651 Not tainted syzkaller #0 PREEMPT(full) [ 942.226676][ T3814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 942.226689][ T3814] Call Trace: [ 942.226698][ T3814] [ 942.226707][ T3814] dump_stack_lvl+0x189/0x250 [ 942.226737][ T3814] ? __pfx____ratelimit+0x10/0x10 [ 942.226757][ T3814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 942.226785][ T3814] ? __pfx__printk+0x10/0x10 [ 942.226806][ T3814] ? __might_fault+0xb0/0x130 [ 942.226848][ T3814] should_fail_ex+0x414/0x560 [ 942.226882][ T3814] _copy_from_user+0x2d/0xb0 [ 942.226910][ T3814] ___sys_sendmsg+0x158/0x2a0 [ 942.226938][ T3814] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.227003][ T3814] ? __fget_files+0x2a/0x420 [ 942.227023][ T3814] ? __fget_files+0x3a0/0x420 [ 942.227055][ T3814] __x64_sys_sendmsg+0x19b/0x260 [ 942.227087][ T3814] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 942.227122][ T3814] ? __pfx_ksys_write+0x10/0x10 [ 942.227155][ T3814] ? do_syscall_64+0xbe/0xfa0 [ 942.227181][ T3814] do_syscall_64+0xfa/0xfa0 [ 942.227201][ T3814] ? lockdep_hardirqs_on+0x9c/0x150 [ 942.227222][ T3814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.227243][ T3814] ? clear_bhb_loop+0x60/0xb0 [ 942.227268][ T3814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.227288][ T3814] RIP: 0033:0x7fd971f8f749 [ 942.227306][ T3814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.227324][ T3814] RSP: 002b:00007fd972ead038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.227346][ T3814] RAX: ffffffffffffffda RBX: 00007fd9721e5fa0 RCX: 00007fd971f8f749 [ 942.227361][ T3814] RDX: 0000000024000010 RSI: 0000200000000580 RDI: 0000000000000006 [ 942.227375][ T3814] RBP: 00007fd972ead090 R08: 0000000000000000 R09: 0000000000000000 [ 942.227388][ T3814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.227399][ T3814] R13: 00007fd9721e6038 R14: 00007fd9721e5fa0 R15: 00007ffca0056548 [ 942.227431][ T3814] [ 942.573206][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.844171][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.866659][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.009485][ T3824] syz_tun: entered allmulticast mode [ 943.045645][ T5844] Bluetooth: hci5: command tx timeout [ 943.052481][ T3824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9654'. [ 943.153329][ T3824] syz_tun: left allmulticast mode [ 943.273198][ T3832] sctp: [Deprecated]: syz.1.9656 (pid 3832) Use of int in max_burst socket option deprecated. [ 943.273198][ T3832] Use struct sctp_assoc_value instead [ 943.312503][ T3832] netlink: 292 bytes leftover after parsing attributes in process `syz.1.9656'. [ 944.088388][ T3865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9669'. [ 944.186325][ T3867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9670'. [ 944.212795][ T3861] wg1: entered promiscuous mode [ 944.218402][ T3861] wg1: entered allmulticast mode [ 944.840827][ T3886] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 945.128442][ T5147] Bluetooth: hci5: command tx timeout [ 945.178278][ T3896] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9678'. [ 946.152266][ T3926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9690'. [ 946.232065][ T3931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9690'. [ 946.298736][ T3931] veth0_to_bridge: entered promiscuous mode [ 946.305586][ T3931] veth0_to_bridge: left promiscuous mode [ 946.310777][ T3937] FAULT_INJECTION: forcing a failure. [ 946.310777][ T3937] name failslab, interval 1, probability 0, space 0, times 0 [ 946.382750][ T3937] CPU: 0 UID: 0 PID: 3937 Comm: syz.3.9692 Not tainted syzkaller #0 PREEMPT(full) [ 946.382780][ T3937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 946.382794][ T3937] Call Trace: [ 946.382803][ T3937] [ 946.382814][ T3937] dump_stack_lvl+0x189/0x250 [ 946.382846][ T3937] ? __pfx____ratelimit+0x10/0x10 [ 946.382868][ T3937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 946.382896][ T3937] ? __pfx__printk+0x10/0x10 [ 946.382931][ T3937] ? __pfx___might_resched+0x10/0x10 [ 946.382959][ T3937] should_fail_ex+0x414/0x560 [ 946.382996][ T3937] should_failslab+0xa8/0x100 [ 946.383020][ T3937] __kmalloc_noprof+0xcb/0x7f0 [ 946.383047][ T3937] ? kfree+0x4d/0x6d0 [ 946.383068][ T3937] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 946.383107][ T3937] tomoyo_realpath_from_path+0xe3/0x5d0 [ 946.383141][ T3937] ? tomoyo_domain+0xd9/0x130 [ 946.383166][ T3937] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 946.383193][ T3937] tomoyo_path_number_perm+0x1e8/0x5a0 [ 946.383223][ T3937] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 946.383288][ T3937] ? __fget_files+0x2a/0x420 [ 946.383312][ T3937] ? __fget_files+0x3a0/0x420 [ 946.383330][ T3937] ? __fget_files+0x2a/0x420 [ 946.383354][ T3937] security_file_ioctl+0xcb/0x2d0 [ 946.383382][ T3937] __se_sys_ioctl+0x47/0x170 [ 946.383412][ T3937] do_syscall_64+0xfa/0xfa0 [ 946.383433][ T3937] ? lockdep_hardirqs_on+0x9c/0x150 [ 946.383455][ T3937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.383476][ T3937] ? clear_bhb_loop+0x60/0xb0 [ 946.383501][ T3937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.383519][ T3937] RIP: 0033:0x7f51a7d8f749 [ 946.383537][ T3937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.383554][ T3937] RSP: 002b:00007f51a8c32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.383575][ T3937] RAX: ffffffffffffffda RBX: 00007f51a7fe6180 RCX: 00007f51a7d8f749 [ 946.383591][ T3937] RDX: 0000200000000080 RSI: 000000000000894b RDI: 0000000000000003 [ 946.383605][ T3937] RBP: 00007f51a8c32090 R08: 0000000000000000 R09: 0000000000000000 [ 946.383618][ T3937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.383631][ T3937] R13: 00007f51a7fe6218 R14: 00007f51a7fe6180 R15: 00007fff3efc27c8 [ 946.383664][ T3937] [ 946.383673][ T3937] ERROR: Out of memory at tomoyo_realpath_from_path. [ 946.529871][ T3942] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.9696'. [ 946.729881][ T3946] netlink: 'syz.1.9697': attribute type 3 has an invalid length. [ 946.762497][ T3951] ip6tnl0: Caught tx_queue_len zero misconfig [ 947.301487][ T3983] syzkaller0: entered promiscuous mode [ 947.332680][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9710'. [ 947.334037][ T3983] syzkaller0: entered allmulticast mode [ 947.361307][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9710'. [ 947.391080][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9710'. [ 947.410988][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9710'. [ 947.412269][ T3991] syzkaller0: entered promiscuous mode [ 947.424127][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9710'. [ 947.438156][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9710'. [ 947.442257][ T3991] syzkaller0: entered allmulticast mode [ 948.318882][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9723'. [ 948.330363][ T4025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9724'. [ 948.589049][ T4035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9728'. [ 948.626730][ T4032] xt_CT: No such helper "snmp" [ 948.654071][ T4029] wg1 speed is unknown, defaulting to 1000 [ 948.697547][ T4029] lo speed is unknown, defaulting to 1000 [ 948.753462][ T4029] lo speed is unknown, defaulting to 1000 [ 949.452637][ T4052] tipc: Enabled bearer , priority 0 [ 949.462704][ T4056] syzkaller0: entered promiscuous mode [ 949.471302][ T4056] syzkaller0: entered allmulticast mode [ 949.522692][ T4052] tipc: Resetting bearer [ 949.566683][ T4051] tipc: Resetting bearer [ 949.628952][ T4051] tipc: Disabling bearer [ 949.866118][ T4074] pim6reg1: entered promiscuous mode [ 949.893035][ T4074] pim6reg1: entered allmulticast mode [ 950.322486][ T4090] wg1 speed is unknown, defaulting to 1000 [ 950.329529][ T4093] FAULT_INJECTION: forcing a failure. [ 950.329529][ T4093] name failslab, interval 1, probability 0, space 0, times 0 [ 950.329571][ T4093] CPU: 1 UID: 0 PID: 4093 Comm: syz.0.9745 Not tainted syzkaller #0 PREEMPT(full) [ 950.329594][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 950.329606][ T4093] Call Trace: [ 950.329614][ T4093] [ 950.329623][ T4093] dump_stack_lvl+0x189/0x250 [ 950.329656][ T4093] ? __pfx____ratelimit+0x10/0x10 [ 950.329676][ T4093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.329703][ T4093] ? __pfx__printk+0x10/0x10 [ 950.329731][ T4093] ? __pfx___might_resched+0x10/0x10 [ 950.329751][ T4093] ? fs_reclaim_acquire+0x7d/0x100 [ 950.329775][ T4093] should_fail_ex+0x414/0x560 [ 950.329807][ T4093] should_failslab+0xa8/0x100 [ 950.329827][ T4093] __kmalloc_noprof+0xcb/0x7f0 [ 950.329850][ T4093] ? tomoyo_encode+0x28b/0x550 [ 950.329884][ T4093] tomoyo_encode+0x28b/0x550 [ 950.329920][ T4093] tomoyo_realpath_from_path+0x58d/0x5d0 [ 950.329951][ T4093] ? tomoyo_domain+0xd9/0x130 [ 950.329975][ T4093] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 950.330000][ T4093] tomoyo_path_number_perm+0x1e8/0x5a0 [ 950.330028][ T4093] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 950.330094][ T4093] ? __fget_files+0x2a/0x420 [ 950.330118][ T4093] ? __fget_files+0x3a0/0x420 [ 950.330135][ T4093] ? __fget_files+0x2a/0x420 [ 950.330158][ T4093] security_file_ioctl+0xcb/0x2d0 [ 950.330184][ T4093] __se_sys_ioctl+0x47/0x170 [ 950.330212][ T4093] do_syscall_64+0xfa/0xfa0 [ 950.330231][ T4093] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.330252][ T4093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.330271][ T4093] ? clear_bhb_loop+0x60/0xb0 [ 950.330294][ T4093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.330313][ T4093] RIP: 0033:0x7f32c9d8f749 [ 950.330330][ T4093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.330348][ T4093] RSP: 002b:00007f32c7fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 950.330368][ T4093] RAX: ffffffffffffffda RBX: 00007f32c9fe6090 RCX: 00007f32c9d8f749 [ 950.330382][ T4093] RDX: 0000200000000080 RSI: 000000000000894b RDI: 0000000000000003 [ 950.330396][ T4093] RBP: 00007f32c7fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 950.330408][ T4093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.330420][ T4093] R13: 00007f32c9fe6128 R14: 00007f32c9fe6090 R15: 00007ffca9d6c008 [ 950.330455][ T4093] [ 950.330477][ T4093] ERROR: Out of memory at tomoyo_realpath_from_path. [ 950.397332][ T4095] netlink: 'syz.2.9747': attribute type 10 has an invalid length. [ 950.423551][ T4095] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.617688][ T4095] bond0: (slave team0): Enslaving as an active interface with an up link [ 950.627027][ T4090] lo speed is unknown, defaulting to 1000 [ 950.643469][ T4102] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 950.665042][ T4090] lo speed is unknown, defaulting to 1000 [ 950.667655][ T4102] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 951.345468][ T4123] FAULT_INJECTION: forcing a failure. [ 951.345468][ T4123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.360231][ T4123] CPU: 0 UID: 0 PID: 4123 Comm: syz.0.9758 Not tainted syzkaller #0 PREEMPT(full) [ 951.360261][ T4123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 951.360274][ T4123] Call Trace: [ 951.360283][ T4123] [ 951.360293][ T4123] dump_stack_lvl+0x189/0x250 [ 951.360325][ T4123] ? __pfx____ratelimit+0x10/0x10 [ 951.360346][ T4123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.360374][ T4123] ? __pfx__printk+0x10/0x10 [ 951.360396][ T4123] ? __might_fault+0xb0/0x130 [ 951.360436][ T4123] should_fail_ex+0x414/0x560 [ 951.360473][ T4123] _copy_from_user+0x2d/0xb0 [ 951.360500][ T4123] __sys_bpf+0x1e3/0x860 [ 951.360523][ T4123] ? __pfx___sys_bpf+0x10/0x10 [ 951.360561][ T4123] ? ksys_write+0x1e1/0x250 [ 951.360593][ T4123] ? __pfx_ksys_write+0x10/0x10 [ 951.360628][ T4123] __x64_sys_bpf+0x7c/0x90 [ 951.360689][ T4123] do_syscall_64+0xfa/0xfa0 [ 951.360709][ T4123] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.360731][ T4123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.360752][ T4123] ? clear_bhb_loop+0x60/0xb0 [ 951.360777][ T4123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.360797][ T4123] RIP: 0033:0x7f32c9d8f749 [ 951.360815][ T4123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.360838][ T4123] RSP: 002b:00007f32c7ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 951.360860][ T4123] RAX: ffffffffffffffda RBX: 00007f32c9fe5fa0 RCX: 00007f32c9d8f749 [ 951.360876][ T4123] RDX: 0000000000000010 RSI: 0000200000000780 RDI: 0000000000000008 [ 951.360890][ T4123] RBP: 00007f32c7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 951.360903][ T4123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.360916][ T4123] R13: 00007f32c9fe6038 R14: 00007f32c9fe5fa0 R15: 00007ffca9d6c008 [ 951.360952][ T4123] [ 951.566737][ T4125] FAULT_INJECTION: forcing a failure. [ 951.566737][ T4125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.630855][ T4127] __nla_validate_parse: 13 callbacks suppressed [ 951.630875][ T4127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9759'. [ 951.632012][ T4125] CPU: 1 UID: 0 PID: 4125 Comm: syz.1.9757 Not tainted syzkaller #0 PREEMPT(full) [ 951.632036][ T4125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 951.632048][ T4125] Call Trace: [ 951.632057][ T4125] [ 951.632065][ T4125] dump_stack_lvl+0x189/0x250 [ 951.632097][ T4125] ? __pfx____ratelimit+0x10/0x10 [ 951.632116][ T4125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.632142][ T4125] ? __pfx__printk+0x10/0x10 [ 951.632163][ T4125] ? __might_fault+0xb0/0x130 [ 951.632201][ T4125] should_fail_ex+0x414/0x560 [ 951.632235][ T4125] _copy_from_iter+0x1de/0x1790 [ 951.632256][ T4125] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 951.632283][ T4125] ? kmalloc_reserve+0xbd/0x290 [ 951.632317][ T4125] ? __pfx__copy_from_iter+0x10/0x10 [ 951.632336][ T4125] ? __alloc_skb+0x2f1/0x430 [ 951.632358][ T4125] ? __pfx___alloc_skb+0x10/0x10 [ 951.632381][ T4125] ? netlink_sendmsg+0x642/0xb30 [ 951.632402][ T4125] ? skb_put+0x11b/0x210 [ 951.632426][ T4125] netlink_sendmsg+0x6b2/0xb30 [ 951.632458][ T4125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.632484][ T4125] ? aa_sock_msg_perm+0xf1/0x1d0 [ 951.632515][ T4125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 951.632534][ T4125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.632558][ T4125] __sock_sendmsg+0x21c/0x270 [ 951.632590][ T4125] ____sys_sendmsg+0x52d/0x830 [ 951.632619][ T4125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.632651][ T4125] ? import_iovec+0x74/0xa0 [ 951.632687][ T4125] ___sys_sendmsg+0x21f/0x2a0 [ 951.632712][ T4125] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.632772][ T4125] ? __fget_files+0x2a/0x420 [ 951.632790][ T4125] ? __fget_files+0x3a0/0x420 [ 951.632819][ T4125] __sys_sendmmsg+0x227/0x430 [ 951.632848][ T4125] ? __pfx___sys_sendmmsg+0x10/0x10 [ 951.632881][ T4125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 951.632921][ T4125] ? ksys_write+0x22a/0x250 [ 951.632951][ T4125] ? __pfx_ksys_write+0x10/0x10 [ 951.632984][ T4125] __x64_sys_sendmmsg+0xa0/0xc0 [ 951.633010][ T4125] do_syscall_64+0xfa/0xfa0 [ 951.633028][ T4125] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.633052][ T4125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.633071][ T4125] ? clear_bhb_loop+0x60/0xb0 [ 951.633094][ T4125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.633112][ T4125] RIP: 0033:0x7f454d38f749 [ 951.633129][ T4125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.633147][ T4125] RSP: 002b:00007f454e295038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 951.633168][ T4125] RAX: ffffffffffffffda RBX: 00007f454d5e5fa0 RCX: 00007f454d38f749 [ 951.633183][ T4125] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 951.633196][ T4125] RBP: 00007f454e295090 R08: 0000000000000000 R09: 0000000000000000 [ 951.633209][ T4125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.633221][ T4125] R13: 00007f454d5e6038 R14: 00007f454d5e5fa0 R15: 00007ffc9738f438 [ 951.633253][ T4125] [ 952.069028][ T4138] tipc: Started in network mode [ 952.074703][ T4138] tipc: Node identity 8a9114297ad4, cluster identity 4711 [ 952.095954][ T4138] tipc: Enabled bearer , priority 0 [ 952.143413][ T4148] syzkaller0: entered promiscuous mode [ 952.150240][ T4148] syzkaller0: entered allmulticast mode [ 952.284759][ T4138] tipc: Resetting bearer [ 952.369817][ T4159] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9768'. [ 952.379768][ T4158] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 952.401912][ T4138] tipc: Disabling bearer [ 952.412623][ T4159] netlink: 116 bytes leftover after parsing attributes in process `syz.1.9768'. [ 952.421980][ T4159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9768'. [ 952.510561][ T4154] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 952.519553][ T4154] tipc: Enabled bearer , priority 10 [ 952.684217][ T4166] syzkaller0: entered promiscuous mode [ 952.721136][ T4166] syzkaller0: entered allmulticast mode [ 952.765847][ T4177] batadv0: entered promiscuous mode [ 952.771240][ T4177] vlan2: entered promiscuous mode [ 952.859021][ T4179] batadv_slave_1: entered promiscuous mode [ 952.868853][ T4183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9775'. [ 952.879196][ T4178] batadv_slave_1: left promiscuous mode [ 952.962656][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9776'. [ 953.110597][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9780'. [ 953.203971][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9780'. [ 953.234171][ T4200] FAULT_INJECTION: forcing a failure. [ 953.234171][ T4200] name failslab, interval 1, probability 0, space 0, times 0 [ 953.314823][ T4200] CPU: 0 UID: 0 PID: 4200 Comm: syz.2.9782 Not tainted syzkaller #0 PREEMPT(full) [ 953.314852][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 953.314863][ T4200] Call Trace: [ 953.314871][ T4200] [ 953.314879][ T4200] dump_stack_lvl+0x189/0x250 [ 953.314912][ T4200] ? __pfx____ratelimit+0x10/0x10 [ 953.314933][ T4200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 953.314960][ T4200] ? __pfx__printk+0x10/0x10 [ 953.314978][ T4200] ? kmalloc_reserve+0xbd/0x290 [ 953.315006][ T4200] ? __lock_acquire+0xab9/0xd20 [ 953.315034][ T4200] should_fail_ex+0x414/0x560 [ 953.315086][ T4200] should_failslab+0xa8/0x100 [ 953.315110][ T4200] kmem_cache_alloc_noprof+0x74/0x6e0 [ 953.315138][ T4200] ? skb_clone+0x212/0x3a0 [ 953.315173][ T4200] skb_clone+0x212/0x3a0 [ 953.315200][ T4200] __netlink_deliver_tap+0x404/0x850 [ 953.315237][ T4200] ? netlink_deliver_tap+0x2e/0x1b0 [ 953.315262][ T4200] netlink_deliver_tap+0x19c/0x1b0 [ 953.315287][ T4200] netlink_unicast+0x7fa/0x9e0 [ 953.315317][ T4200] ? __pfx_netlink_unicast+0x10/0x10 [ 953.315340][ T4200] ? netlink_sendmsg+0x642/0xb30 [ 953.315361][ T4200] ? skb_put+0x11b/0x210 [ 953.315386][ T4200] netlink_sendmsg+0x805/0xb30 [ 953.315421][ T4200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.315454][ T4200] ? aa_sock_msg_perm+0xf1/0x1d0 [ 953.315487][ T4200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 953.315507][ T4200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.315530][ T4200] __sock_sendmsg+0x21c/0x270 [ 953.315562][ T4200] ____sys_sendmsg+0x505/0x830 [ 953.315592][ T4200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 953.315627][ T4200] ? import_iovec+0x74/0xa0 [ 953.315658][ T4200] ___sys_sendmsg+0x21f/0x2a0 [ 953.315685][ T4200] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.315751][ T4200] ? __fget_files+0x2a/0x420 [ 953.315770][ T4200] ? __fget_files+0x3a0/0x420 [ 953.315802][ T4200] __x64_sys_sendmsg+0x19b/0x260 [ 953.315830][ T4200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 953.315866][ T4200] ? __pfx_ksys_write+0x10/0x10 [ 953.315900][ T4200] ? do_syscall_64+0xbe/0xfa0 [ 953.315926][ T4200] do_syscall_64+0xfa/0xfa0 [ 953.315946][ T4200] ? lockdep_hardirqs_on+0x9c/0x150 [ 953.315971][ T4200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.315992][ T4200] ? clear_bhb_loop+0x60/0xb0 [ 953.316017][ T4200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.316037][ T4200] RIP: 0033:0x7f136878f749 [ 953.316055][ T4200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.316074][ T4200] RSP: 002b:00007f1369604038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.316096][ T4200] RAX: ffffffffffffffda RBX: 00007f13689e5fa0 RCX: 00007f136878f749 [ 953.316112][ T4200] RDX: 0000000024000010 RSI: 0000200000000580 RDI: 0000000000000006 [ 953.316127][ T4200] RBP: 00007f1369604090 R08: 0000000000000000 R09: 0000000000000000 [ 953.316141][ T4200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.316154][ T4200] R13: 00007f13689e6038 R14: 00007f13689e5fa0 R15: 00007ffc2d7ff7c8 [ 953.316189][ T4200] [ 953.919907][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9791'. [ 953.974196][ T4212] wg1 speed is unknown, defaulting to 1000 [ 953.986806][ T4212] lo speed is unknown, defaulting to 1000 [ 953.994693][ T4212] lo speed is unknown, defaulting to 1000 [ 954.251585][ T4234] netlink: 'syz.3.9795': attribute type 9 has an invalid length. [ 954.263005][ T4236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.553880][ T4248] FAULT_INJECTION: forcing a failure. [ 954.553880][ T4248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.656264][ T4248] CPU: 0 UID: 0 PID: 4248 Comm: syz.0.9797 Not tainted syzkaller #0 PREEMPT(full) [ 954.656293][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 954.656305][ T4248] Call Trace: [ 954.656314][ T4248] [ 954.656323][ T4248] dump_stack_lvl+0x189/0x250 [ 954.656355][ T4248] ? __pfx____ratelimit+0x10/0x10 [ 954.656376][ T4248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.656410][ T4248] ? __pfx__printk+0x10/0x10 [ 954.656445][ T4248] should_fail_ex+0x414/0x560 [ 954.656481][ T4248] _copy_to_user+0x31/0xb0 [ 954.656510][ T4248] simple_read_from_buffer+0xe1/0x170 [ 954.656546][ T4248] proc_fail_nth_read+0x1b3/0x220 [ 954.656577][ T4248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.656606][ T4248] ? rw_verify_area+0x2a6/0x4d0 [ 954.656631][ T4248] ? __lock_acquire+0xab9/0xd20 [ 954.656650][ T4248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.656677][ T4248] vfs_read+0x200/0xa30 [ 954.656704][ T4248] ? fdget_pos+0x247/0x320 [ 954.656729][ T4248] ? __pfx___mutex_lock+0x10/0x10 [ 954.656753][ T4248] ? __pfx_vfs_read+0x10/0x10 [ 954.656783][ T4248] ? __fget_files+0x2a/0x420 [ 954.656807][ T4248] ? __fget_files+0x3a0/0x420 [ 954.656825][ T4248] ? __fget_files+0x2a/0x420 [ 954.656855][ T4248] ksys_read+0x145/0x250 [ 954.656884][ T4248] ? __pfx_ksys_read+0x10/0x10 [ 954.656916][ T4248] ? do_syscall_64+0xbe/0xfa0 [ 954.656942][ T4248] do_syscall_64+0xfa/0xfa0 [ 954.656960][ T4248] ? lockdep_hardirqs_on+0x9c/0x150 [ 954.656981][ T4248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.657001][ T4248] ? clear_bhb_loop+0x60/0xb0 [ 954.657026][ T4248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.657046][ T4248] RIP: 0033:0x7f32c9d8e15c [ 954.657063][ T4248] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 954.657082][ T4248] RSP: 002b:00007f32c7fb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 954.657104][ T4248] RAX: ffffffffffffffda RBX: 00007f32c9fe6180 RCX: 00007f32c9d8e15c [ 954.657119][ T4248] RDX: 000000000000000f RSI: 00007f32c7fb40a0 RDI: 0000000000000004 [ 954.657131][ T4248] RBP: 00007f32c7fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 954.657144][ T4248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.657157][ T4248] R13: 00007f32c9fe6218 R14: 00007f32c9fe6180 R15: 00007ffca9d6c008 [ 954.657192][ T4248] [ 954.921964][ T4253] FAULT_INJECTION: forcing a failure. [ 954.921964][ T4253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.936453][ T4253] CPU: 1 UID: 0 PID: 4253 Comm: syz.3.9801 Not tainted syzkaller #0 PREEMPT(full) [ 954.936480][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 954.936492][ T4253] Call Trace: [ 954.936500][ T4253] [ 954.936509][ T4253] dump_stack_lvl+0x189/0x250 [ 954.936539][ T4253] ? __pfx____ratelimit+0x10/0x10 [ 954.936558][ T4253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.936582][ T4253] ? __pfx__printk+0x10/0x10 [ 954.936612][ T4253] should_fail_ex+0x414/0x560 [ 954.936645][ T4253] _copy_to_user+0x31/0xb0 [ 954.936671][ T4253] simple_read_from_buffer+0xe1/0x170 [ 954.936705][ T4253] proc_fail_nth_read+0x1b3/0x220 [ 954.936734][ T4253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.936761][ T4253] ? rw_verify_area+0x2a6/0x4d0 [ 954.936786][ T4253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 954.936812][ T4253] vfs_read+0x200/0xa30 [ 954.936841][ T4253] ? bpf_lsm_bpf+0x9/0x20 [ 954.936866][ T4253] ? __pfx_vfs_read+0x10/0x10 [ 954.936888][ T4253] ? __sys_bpf+0x358/0x860 [ 954.936910][ T4253] ? __pfx___sys_bpf+0x10/0x10 [ 954.936944][ T4253] ksys_read+0x145/0x250 [ 954.936973][ T4253] ? __pfx_ksys_read+0x10/0x10 [ 954.937003][ T4253] ? do_syscall_64+0xbe/0xfa0 [ 954.937025][ T4253] do_syscall_64+0xfa/0xfa0 [ 954.937044][ T4253] ? lockdep_hardirqs_on+0x9c/0x150 [ 954.937065][ T4253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.937085][ T4253] ? clear_bhb_loop+0x60/0xb0 [ 954.937117][ T4253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.937136][ T4253] RIP: 0033:0x7f51a7d8e15c [ 954.937153][ T4253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 954.937171][ T4253] RSP: 002b:00007f51a8c74030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 954.937190][ T4253] RAX: ffffffffffffffda RBX: 00007f51a7fe5fa0 RCX: 00007f51a7d8e15c [ 954.937202][ T4253] RDX: 000000000000000f RSI: 00007f51a8c740a0 RDI: 0000000000000005 [ 954.937215][ T4253] RBP: 00007f51a8c74090 R08: 0000000000000000 R09: 0000000000000000 [ 954.937227][ T4253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.937239][ T4253] R13: 00007f51a7fe6038 R14: 00007f51a7fe5fa0 R15: 00007fff3efc27c8 [ 954.937270][ T4253] [ 955.279691][ T4263] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 955.290589][ T4263] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 955.468845][ T4264] wg1 speed is unknown, defaulting to 1000 [ 955.487760][ T4264] lo speed is unknown, defaulting to 1000 [ 955.488753][ T4267] wg1 speed is unknown, defaulting to 1000 [ 955.535654][ T4264] lo speed is unknown, defaulting to 1000 [ 955.536468][ T4267] lo speed is unknown, defaulting to 1000 [ 955.644661][ T4267] lo speed is unknown, defaulting to 1000 [ 955.670209][ T4272] xt_CT: No such helper "snmp" [ 955.840959][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9810'. [ 955.856238][ T4279] netlink: 'syz.4.9810': attribute type 12 has an invalid length. [ 955.885826][ T4281] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 956.059394][ T4285] vlan2: entered promiscuous mode [ 956.341000][ T4293] wg1 speed is unknown, defaulting to 1000 [ 956.429650][ T4298] batadv0: entered promiscuous mode [ 956.442652][ T4298] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 956.459084][ T4298] batadv0: left promiscuous mode [ 956.528919][ T4293] lo speed is unknown, defaulting to 1000 [ 956.577552][ T4310] wg1 speed is unknown, defaulting to 1000 [ 956.589393][ T4293] lo speed is unknown, defaulting to 1000 [ 956.600401][ T4310] lo speed is unknown, defaulting to 1000 [ 956.622468][ T4310] lo speed is unknown, defaulting to 1000 [ 956.977371][ T4307] wg1 speed is unknown, defaulting to 1000 [ 957.002315][ T4307] lo speed is unknown, defaulting to 1000 [ 957.015402][ T4307] lo speed is unknown, defaulting to 1000 [ 958.047031][ T4363] __nla_validate_parse: 5 callbacks suppressed [ 958.047050][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9833'. [ 958.102638][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9833'. [ 958.802889][ T4392] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 958.828743][ T4395] FAULT_INJECTION: forcing a failure. [ 958.828743][ T4395] name failslab, interval 1, probability 0, space 0, times 0 [ 958.862234][ T4392] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 958.891542][ T4395] CPU: 0 UID: 0 PID: 4395 Comm: syz.4.9846 Not tainted syzkaller #0 PREEMPT(full) [ 958.891571][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.891584][ T4395] Call Trace: [ 958.891592][ T4395] [ 958.891602][ T4395] dump_stack_lvl+0x189/0x250 [ 958.891634][ T4395] ? __pfx____ratelimit+0x10/0x10 [ 958.891655][ T4395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.891690][ T4395] ? __pfx__printk+0x10/0x10 [ 958.891706][ T4395] ? kmalloc_reserve+0xbd/0x290 [ 958.891733][ T4395] ? __lock_acquire+0xab9/0xd20 [ 958.891760][ T4395] should_fail_ex+0x414/0x560 [ 958.891796][ T4395] should_failslab+0xa8/0x100 [ 958.891819][ T4395] kmem_cache_alloc_noprof+0x74/0x6e0 [ 958.891846][ T4395] ? skb_clone+0x212/0x3a0 [ 958.891877][ T4395] skb_clone+0x212/0x3a0 [ 958.891906][ T4395] __netlink_deliver_tap+0x404/0x850 [ 958.891943][ T4395] ? netlink_deliver_tap+0x2e/0x1b0 [ 958.891968][ T4395] netlink_deliver_tap+0x19c/0x1b0 [ 958.891993][ T4395] netlink_unicast+0x7fa/0x9e0 [ 958.892023][ T4395] ? __pfx_netlink_unicast+0x10/0x10 [ 958.892046][ T4395] ? netlink_sendmsg+0x642/0xb30 [ 958.892067][ T4395] ? skb_put+0x11b/0x210 [ 958.892092][ T4395] netlink_sendmsg+0x805/0xb30 [ 958.892127][ T4395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.892154][ T4395] ? aa_sock_msg_perm+0xf1/0x1d0 [ 958.892187][ T4395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 958.892206][ T4395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.892231][ T4395] __sock_sendmsg+0x21c/0x270 [ 958.892263][ T4395] ____sys_sendmsg+0x52d/0x830 [ 958.892292][ T4395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.892324][ T4395] ? import_iovec+0x74/0xa0 [ 958.892352][ T4395] ___sys_sendmsg+0x21f/0x2a0 [ 958.892378][ T4395] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.892442][ T4395] ? __fget_files+0x2a/0x420 [ 958.892460][ T4395] ? __fget_files+0x3a0/0x420 [ 958.892488][ T4395] __sys_sendmmsg+0x227/0x430 [ 958.892513][ T4395] ? __pfx___sys_sendmmsg+0x10/0x10 [ 958.892547][ T4395] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 958.892592][ T4395] ? ksys_write+0x22a/0x250 [ 958.892622][ T4395] ? __pfx_ksys_write+0x10/0x10 [ 958.892653][ T4395] __x64_sys_sendmmsg+0xa0/0xc0 [ 958.892685][ T4395] do_syscall_64+0xfa/0xfa0 [ 958.892704][ T4395] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.892723][ T4395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.892742][ T4395] ? clear_bhb_loop+0x60/0xb0 [ 958.892765][ T4395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.892784][ T4395] RIP: 0033:0x7fd971f8f749 [ 958.892801][ T4395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.892818][ T4395] RSP: 002b:00007fd972ead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 958.892840][ T4395] RAX: ffffffffffffffda RBX: 00007fd9721e5fa0 RCX: 00007fd971f8f749 [ 958.892855][ T4395] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 958.892870][ T4395] RBP: 00007fd972ead090 R08: 0000000000000000 R09: 0000000000000000 [ 958.892883][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.892895][ T4395] R13: 00007fd9721e6038 R14: 00007fd9721e5fa0 R15: 00007ffca0056548 [ 958.892930][ T4395] [ 958.893226][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9846'. [ 959.227539][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9846'. [ 959.456823][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9850'. [ 959.797670][ T4413] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9856'. [ 959.994635][ T4419] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 960.139943][ T4424] wg1 speed is unknown, defaulting to 1000 [ 960.160387][ T4434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9861'. [ 960.167832][ T4424] lo speed is unknown, defaulting to 1000 [ 960.198169][ T4424] lo speed is unknown, defaulting to 1000 [ 960.474160][ T4440] tipc: Started in network mode [ 960.479841][ T4440] tipc: Node identity ac14140f, cluster identity 4711 [ 960.492978][ T4440] tipc: New replicast peer: 255.255.255.255 [ 960.500678][ T4440] tipc: Enabled bearer , priority 10 [ 960.662963][ T4453] netlink: 'syz.1.9869': attribute type 2 has an invalid length. [ 960.693290][ T4444] syzkaller0: entered promiscuous mode [ 960.708633][ T4444] syzkaller0: entered allmulticast mode [ 960.892260][ T4461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.092294][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9874'. [ 961.102812][ T4456] wg1 speed is unknown, defaulting to 1000 [ 961.104589][ T4467] netlink: 'syz.0.9874': attribute type 11 has an invalid length. [ 961.115731][ T4465] netlink: 'syz.2.9873': attribute type 10 has an invalid length. [ 962.908783][ T4465] veth0_vlan: entered allmulticast mode [ 962.923928][ T4465] veth0_vlan: left promiscuous mode [ 962.931251][ T4465] veth0_vlan: entered promiscuous mode [ 962.940631][ T4465] team0: Device veth0_vlan failed to register rx_handler [ 962.966298][ T4456] lo speed is unknown, defaulting to 1000 [ 962.975115][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9874'. [ 962.984104][ T4467] netlink: 'syz.0.9874': attribute type 11 has an invalid length. [ 963.007440][ T577] tipc: Node number set to 2886997007 [ 963.023030][ T4478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9877'. [ 963.047767][ T4456] lo speed is unknown, defaulting to 1000 [ 963.397450][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9881'. [ 963.436637][ T4496] xt_CT: No such helper "snmp" [ 963.456662][ T4487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.712019][ T4505] wg1 speed is unknown, defaulting to 1000 [ 963.752838][ T4505] lo speed is unknown, defaulting to 1000 [ 963.776447][ T4505] lo speed is unknown, defaulting to 1000 [ 963.966660][ T4525] netlink: 'syz.3.9895': attribute type 1 has an invalid length. [ 963.988968][ T4525] netlink: 'syz.3.9895': attribute type 2 has an invalid length. [ 964.196673][ T4539] netlink: 'syz.3.9899': attribute type 1 has an invalid length. [ 964.249684][ T4539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.335326][ T4539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.362060][ T4539] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 964.396438][ T4539] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 964.434159][ T4552] mac80211_hwsim hwsim227 wlan0: entered promiscuous mode [ 964.447696][ T4552] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 964.607512][ T4563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9904'. [ 964.793129][ T4572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9908'. [ 964.843882][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9907'. [ 964.873003][ T4572] netlink: 'syz.3.9908': attribute type 10 has an invalid length. [ 964.882712][ T4572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9908'. [ 964.898740][ T4572] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 964.906325][ T4572] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 964.918487][ T4572] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 965.046945][ T4577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9909'. [ 965.143260][ T4579] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 965.175915][ T4579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.549549][ T4579] wg1 speed is unknown, defaulting to 1000 [ 965.571661][ T4579] lo speed is unknown, defaulting to 1000 [ 965.579747][ T4579] lo speed is unknown, defaulting to 1000 [ 965.739054][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9918'. [ 965.750694][ T4602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9920'. [ 965.760222][ T4607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.798899][ T4597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9918'. [ 965.811577][ T4597] netlink: 'syz.2.9918': attribute type 12 has an invalid length. [ 965.830176][ T4610] IPVS: ip_vs_edit_dest(): server weight less than zero [ 965.850837][ T585] IPVS: starting estimator thread 0... [ 965.857124][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9918'. [ 965.876102][ T4597] netlink: 'syz.2.9918': attribute type 12 has an invalid length. [ 965.964853][ T4612] IPVS: using max 26 ests per chain, 62400 per kthread [ 966.205115][ T4624] xt_CT: No such helper "snmp" [ 966.299026][ T4631] netlink: 'syz.2.9928': attribute type 2 has an invalid length. [ 966.430473][ T4631] @„;: entered promiscuous mode [ 966.438164][ T4637] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 966.449162][ T4637] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 966.643640][ T4648] wg1 speed is unknown, defaulting to 1000 [ 966.652740][ T4648] lo speed is unknown, defaulting to 1000 [ 966.661148][ T4648] lo speed is unknown, defaulting to 1000 [ 967.002217][ T4658] syzkaller0: entered promiscuous mode [ 967.007956][ T4658] syzkaller0: entered allmulticast mode [ 967.025824][ T4658] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 967.037955][ T4658] tipc: Enabled bearer , priority 10 [ 967.503407][ T4683] netlink: 'syz.1.9947': attribute type 8 has an invalid length. [ 967.527195][ T4683] bond0: entered promiscuous mode [ 967.532284][ T4683] bond_slave_0: entered promiscuous mode [ 967.538706][ T4683] bond_slave_1: entered promiscuous mode [ 967.547172][ T4683] geneve0: entered promiscuous mode [ 967.555065][ T4683] team_slave_0: entered promiscuous mode [ 967.561063][ T4683] team_slave_0: left promiscuous mode [ 967.579196][ T4683] bond0: left promiscuous mode [ 967.593158][ T4683] bond_slave_0: left promiscuous mode [ 967.605541][ T4683] bond_slave_1: left promiscuous mode [ 967.618967][ T4683] geneve0: left promiscuous mode [ 967.858863][ T4693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 967.936394][ T4700] bridge0: port 3(hsr0) entered blocking state [ 967.962459][ T4700] bridge0: port 3(hsr0) entered disabled state [ 967.984729][ T4700] hsr0: entered allmulticast mode [ 967.989806][ T4700] hsr_slave_0: entered allmulticast mode [ 968.017328][ T4700] hsr0: entered promiscuous mode [ 968.029927][ T4700] bridge0: port 3(hsr0) entered blocking state [ 968.036573][ T4700] bridge0: port 3(hsr0) entered forwarding state [ 968.088749][ T4705] netlink: 'syz.0.9955': attribute type 33 has an invalid length. [ 968.165114][ T590] tipc: Node number set to 4031058985 [ 968.182885][ T4705] wg1 speed is unknown, defaulting to 1000 [ 968.190749][ T4705] lo speed is unknown, defaulting to 1000 [ 968.198567][ T4705] lo speed is unknown, defaulting to 1000 [ 968.404431][ C0] [ 968.406815][ C0] ============================================ [ 968.413063][ C0] WARNING: possible recursive locking detected [ 968.419233][ C0] syzkaller #0 Not tainted [ 968.423647][ C0] -------------------------------------------- [ 968.429796][ C0] kworker/u8:5/152 is trying to acquire lock: [ 968.435863][ C0] ffff8880949dcf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 968.444918][ C0] [ 968.444918][ C0] but task is already holding lock: [ 968.452265][ C0] ffff888094dc4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 968.462531][ C0] [ 968.462531][ C0] other info that might help us debug this: [ 968.470582][ C0] Possible unsafe locking scenario: [ 968.470582][ C0] [ 968.478020][ C0] CPU0 [ 968.481285][ C0] ---- [ 968.484549][ C0] lock(&hsr->seqnr_lock); [ 968.489040][ C0] lock(&hsr->seqnr_lock); [ 968.493529][ C0] [ 968.493529][ C0] *** DEADLOCK *** [ 968.493529][ C0] [ 968.501652][ C0] May be due to missing lock nesting notation [ 968.501652][ C0] [ 968.509959][ C0] 14 locks held by kworker/u8:5/152: [ 968.515231][ C0] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 968.526137][ C0] #1: ffffc90002f17ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 968.536689][ C0] #2: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 968.546002][ C0] #3: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 968.555050][ C0] #4: ffff88801c6b0188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 968.565765][ C0] #5: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 968.574852][ C0] #6: ffffc90000007be0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 968.584872][ C0] #7: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x83/0x360 [ 968.594009][ C0] #8: ffff888094dc4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 968.605022][ C0] #9: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 968.614515][ C0] #10: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x284/0x3740 [ 968.624554][ C0] #11: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 968.633872][ C0] #12: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x284/0x3740 [ 968.643894][ C0] #13: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 968.653123][ C0] [ 968.653123][ C0] stack backtrace: [ 968.659005][ C0] CPU: 0 UID: 0 PID: 152 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 968.659027][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 968.659040][ C0] Workqueue: netns cleanup_net [ 968.659059][ C0] Call Trace: [ 968.659068][ C0] [ 968.659075][ C0] dump_stack_lvl+0x189/0x250 [ 968.659099][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 968.659120][ C0] ? __pfx__printk+0x10/0x10 [ 968.659141][ C0] print_deadlock_bug+0x28b/0x2a0 [ 968.659162][ C0] validate_chain+0x1a3f/0x2140 [ 968.659184][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 968.659204][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 968.659227][ C0] __lock_acquire+0xab9/0xd20 [ 968.659244][ C0] ? hsr_dev_xmit+0x237/0x360 [ 968.659265][ C0] lock_acquire+0x120/0x360 [ 968.659280][ C0] ? hsr_dev_xmit+0x237/0x360 [ 968.659302][ C0] ? arch_stack_walk+0xfc/0x150 [ 968.659323][ C0] ? hsr_dev_xmit+0x237/0x360 [ 968.659343][ C0] _raw_spin_lock_bh+0x36/0x50 [ 968.659367][ C0] ? hsr_dev_xmit+0x237/0x360 [ 968.659387][ C0] hsr_dev_xmit+0x237/0x360 [ 968.659408][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 968.659428][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 968.659454][ C0] __dev_queue_xmit+0x172a/0x3740 [ 968.659481][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 968.659504][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 968.659521][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.659538][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 968.659557][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 968.659573][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 968.659593][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 968.659614][ C0] ? ebt_do_table+0x265b/0x2820 [ 968.659632][ C0] ? __lock_acquire+0xab9/0xd20 [ 968.659659][ C0] br_dev_queue_push_xmit+0x6c5/0x890 [ 968.659686][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 968.659709][ C0] ? NF_HOOK+0x9e/0x3c0 [ 968.659730][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 968.659752][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 968.659774][ C0] NF_HOOK+0x320/0x3c0 [ 968.659796][ C0] ? NF_HOOK+0x9e/0x3c0 [ 968.659816][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 968.659837][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 968.659863][ C0] br_forward_finish+0xd3/0x130 [ 968.659884][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 968.659905][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 968.659926][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 968.659953][ C0] NF_HOOK+0x320/0x3c0 [ 968.659973][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 968.659989][ C0] ? NF_HOOK+0x9e/0x3c0 [ 968.660008][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 968.660029][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 968.660054][ C0] __br_forward+0x41e/0x600 [ 968.660074][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 968.660098][ C0] ? __pfx___br_forward+0x10/0x10 [ 968.660121][ C0] ? skb_clone+0x246/0x3a0 [ 968.660142][ C0] maybe_deliver+0xb5/0x160 [ 968.660165][ C0] br_flood+0x31a/0x6a0 [ 968.660189][ C0] ? br_dev_xmit+0x185/0x1840 [ 968.660204][ C0] br_dev_xmit+0x11b3/0x1840 [ 968.660222][ C0] ? br_dev_xmit+0x185/0x1840 [ 968.660240][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 968.660256][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 968.660273][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 968.660294][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 968.660310][ C0] ? validate_xmit_skb+0xd78/0x1500 [ 968.660333][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 968.660358][ C0] __dev_queue_xmit+0x172a/0x3740 [ 968.660380][ C0] ? kasan_save_track+0x3e/0x80 [ 968.660406][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 968.660424][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 968.660443][ C0] ? kernfs_drain+0x122/0x5e0 [ 968.660465][ C0] ? __kernfs_remove+0x33b/0x570 [ 968.660487][ C0] ? sysfs_remove_group+0xfc/0x2c0 [ 968.660507][ C0] ? sysfs_remove_groups+0x54/0xb0 [ 968.660526][ C0] ? device_remove_attrs+0x208/0x260 [ 968.660544][ C0] ? device_del+0x509/0x8e0 [ 968.660562][ C0] ? unregister_netdevice_many_notify+0x1df2/0x2390 [ 968.660585][ C0] ? ops_undo_list+0x3dc/0x990 [ 968.660600][ C0] ? cleanup_net+0x4d8/0x820 [ 968.660615][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 968.660633][ C0] ? worker_thread+0x8a0/0xda0 [ 968.660650][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 968.660677][ C0] ? __copy_skb_header+0xa7/0x550 [ 968.660696][ C0] ? __asan_memcpy+0x40/0x70 [ 968.660721][ C0] ? hsr_addr_subst_dest+0x307/0xac0 [ 968.660742][ C0] ? skb_clone+0x246/0x3a0 [ 968.660763][ C0] hsr_forward_skb+0x158b/0x2860 [ 968.660781][ C0] ? hsr_forward_skb+0x9e/0x2860 [ 968.660796][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 968.660810][ C0] ? do_raw_spin_lock+0x121/0x290 [ 968.660832][ C0] ? __asan_memset+0x22/0x50 [ 968.660852][ C0] ? __skb_pad+0x405/0x610 [ 968.660874][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 968.660902][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 968.660925][ C0] hsr_announce+0x1d5/0x360 [ 968.660950][ C0] ? hsr_announce+0x83/0x360 [ 968.660970][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 968.660995][ C0] call_timer_fn+0x17e/0x5f0 [ 968.661011][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 968.661031][ C0] ? call_timer_fn+0xbe/0x5f0 [ 968.661045][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 968.661064][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.661087][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.661102][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 968.661123][ C0] __run_timer_base+0x61a/0x860 [ 968.661150][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 968.661171][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 968.661198][ C0] run_timer_softirq+0xb7/0x180 [ 968.661222][ C0] handle_softirqs+0x286/0x870 [ 968.661239][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 968.661258][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 968.661279][ C0] __irq_exit_rcu+0xca/0x1f0 [ 968.661295][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 968.661315][ C0] irq_exit_rcu+0x9/0x30 [ 968.661330][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 968.661346][ C0] [ 968.661351][ C0] [ 968.661358][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 968.661374][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x2a/0x40 [ 968.661392][ C0] Code: f3 0f 1e fa 31 c0 83 3d a7 bc 35 04 00 74 1e 83 3d aa eb 35 04 00 74 15 65 48 8b 0c 25 08 b0 6e 92 31 c0 83 b9 2c 0b 00 00 00 <0f> 94 c0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 968.661407][ C0] RSP: 0018:ffffc90002f17348 EFLAGS: 00000246 [ 968.661421][ C0] RAX: 0000000000000000 RBX: ffffffff82607f5c RCX: ffff888020b19e40 [ 968.661433][ C0] RDX: 0000000000000000 RSI: ffffffff8d8f8695 RDI: ffffffff8bbf08e0 [ 968.661444][ C0] RBP: ffffc90002f17498 R08: 0000000000000000 R09: ffffffff82607f5c [ 968.661455][ C0] R10: dffffc0000000000 R11: ffffed100fed0497 R12: 1ffffffff1efa692 [ 968.661468][ C0] R13: dffffc0000000000 R14: ffff88807f6824b0 R15: 0000000000000001 [ 968.661481][ C0] ? kernfs_root+0x1c/0x230 [ 968.661500][ C0] ? kernfs_root+0x1c/0x230 [ 968.661522][ C0] ? kernfs_root+0x38/0x230 [ 968.661540][ C0] kernfs_root+0x41/0x230 [ 968.661559][ C0] kernfs_drain+0x122/0x5e0 [ 968.661581][ C0] ? kernfs_root+0x1c/0x230 [ 968.661601][ C0] ? __pfx_kernfs_drain+0x10/0x10 [ 968.661629][ C0] __kernfs_remove+0x33b/0x570 [ 968.661653][ C0] kernfs_remove_by_name_ns+0xaf/0x130 [ 968.661677][ C0] sysfs_remove_group+0xfc/0x2c0 [ 968.661699][ C0] sysfs_remove_groups+0x54/0xb0 [ 968.661719][ C0] device_remove_attrs+0x208/0x260 [ 968.661740][ C0] ? __pfx_device_remove_attrs+0x10/0x10 [ 968.661757][ C0] ? up_write+0x1c4/0x420 [ 968.661780][ C0] device_del+0x509/0x8e0 [ 968.661801][ C0] ? __pfx_device_del+0x10/0x10 [ 968.661820][ C0] ? netdev_unregister_kobject+0x344/0x450 [ 968.661845][ C0] unregister_netdevice_many_notify+0x1df2/0x2390 [ 968.661873][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 968.661897][ C0] ? net_generic+0x1e/0x240 [ 968.661915][ C0] ? net_generic+0x1e/0x240 [ 968.661936][ C0] ops_undo_list+0x3dc/0x990 [ 968.661959][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 968.661977][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 968.661999][ C0] cleanup_net+0x4d8/0x820 [ 968.662017][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 968.662034][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.662056][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 968.662072][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 968.662090][ C0] process_scheduled_works+0xae1/0x17b0 [ 968.662117][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 968.662141][ C0] worker_thread+0x8a0/0xda0 [ 968.662160][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 968.662188][ C0] ? __kthread_parkme+0x7b/0x200 [ 968.662210][ C0] kthread+0x711/0x8a0 [ 968.662232][ C0] ? __pfx_worker_thread+0x10/0x10 [ 968.662249][ C0] ? __pfx_kthread+0x10/0x10 [ 968.662269][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.662293][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.662308][ C0] ? __pfx_kthread+0x10/0x10 [ 968.662327][ C0] ret_from_fork+0x4bc/0x870 [ 968.662345][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 968.662364][ C0] ? __switch_to_asm+0x39/0x70 [ 968.662377][ C0] ? __switch_to_asm+0x33/0x70 [ 968.662390][ C0] ? __pfx_kthread+0x10/0x10 [ 968.662410][ C0] ret_from_fork_asm+0x1a/0x30 [ 968.662431][ C0] [ 969.587232][ T4717] vlan2: entered promiscuous mode [ 970.568919][ T95] block nbd0: Possible stuck request ffff888025090000: control (read@0,1024B). Runtime 840 seconds [ 970.579841][ T95] block nbd0: Possible stuck request ffff8880250901c0: control (read@1024,1024B). Runtime 840 seconds [ 970.591067][ T95] block nbd0: Possible stuck request ffff888025090380: control (read@2048,1024B). Runtime 840 seconds [ 970.602194][ T95] block nbd0: Possible stuck request ffff888025090540: control (read@3072,1024B). Runtime 840 seconds