last executing test programs: 7.10749485s ago: executing program 3 (id=4499): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x2e90) close(r4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x840, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xd, 0x5}, {0x0, 0x6}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x810, 0x2, [@TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0xd97, 0x2, 0xfffffffb, 0x1, 0x2b, 0x2, 0x9, 0x400, 0x5, 0x400, 0x6, 0x3, 0x7, 0xfffffff8, 0x8e, 0xdf, 0x6, 0x7f, 0x2, 0x0, 0x10, 0xffffffff, 0x8, 0x3, 0x6, 0x4, 0x300, 0x7f26, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x4, 0x40, 0x40, 0x8, 0x7efb, 0x0, 0x3, 0x0, 0x6, 0x0, 0x9, 0x90, 0x9, 0xcd, 0x3, 0x5, 0x401, 0x6, 0x7fff, 0x2, 0x2, 0x2, 0x5, 0x3, 0x7, 0xfffffffd, 0x7, 0xe, 0xc56c, 0x4, 0x4, 0x8, 0x9c, 0xf, 0x80, 0x7f, 0x4, 0x8, 0x8, 0x200, 0x704176dd, 0x8, 0x8, 0x80000000, 0x8d, 0x1, 0x6, 0x3, 0x8, 0x90, 0xf4, 0x35, 0x2, 0x80000000, 0x7, 0x0, 0xc706, 0x7, 0x5, 0x72dd5e7e, 0x1, 0xfffffffa, 0x80000001, 0x6, 0x3, 0x3ff, 0x8, 0x6553, 0x1, 0x6, 0xa, 0x0, 0x7ff, 0x5, 0x0, 0x7, 0x8, 0xd, 0x400, 0xe, 0x7, 0xb, 0x7, 0x2, 0x2, 0x2, 0x1000, 0x4, 0x4, 0x0, 0x7, 0x40, 0x9, 0x3ff, 0xd, 0x400, 0x2, 0xd, 0xc, 0x3, 0x4, 0x1, 0x10000, 0x7a6, 0xd9, 0x8, 0x3, 0x9, 0x5, 0x2, 0x7, 0xc, 0x9, 0x80000000, 0x1, 0x315, 0x0, 0x395e, 0xb9, 0x0, 0x1, 0xb, 0x3, 0x401, 0x5, 0x5, 0x2, 0x40, 0x3, 0x10000000, 0x5, 0x100, 0x1, 0x5, 0xf, 0x1ff, 0x32, 0x8, 0x4, 0x1, 0xfffffff6, 0x40000000, 0x1f1ca3e5, 0x1800, 0x3, 0x4, 0x6, 0x5, 0xa, 0x9, 0x7fff, 0x6b6, 0x6, 0x1bc9, 0x2, 0x1000, 0x3, 0x6, 0x88f, 0x77a4831f, 0x3, 0x6, 0x2, 0x81, 0x1, 0x8, 0x20d, 0x3, 0x3, 0x4, 0x2, 0x200, 0xfffff000, 0x2, 0xc363, 0x1, 0x6, 0x4b7, 0x100, 0xf0e1, 0xffffffff, 0x5, 0x800, 0x0, 0x3, 0x10001, 0x4, 0x80000001, 0x1, 0x5, 0x6, 0x7fff, 0x101, 0x8, 0xfa5, 0x0, 0x1000, 0x398, 0xce6b5779, 0x3, 0x9, 0x5, 0x400, 0x0, 0x2, 0xffffffff, 0x620, 0xffffffc0, 0x400, 0x0, 0x8, 0x401, 0x4, 0x1000, 0x8, 0x0, 0x5, 0x2, 0x7fff, 0x0, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0xaffd, 0x3, 0x3, 0x1, 0x2, 0x6327, 0x8, 0x0, 0x40, 0x1, 0x3, 0x8, 0x7, 0xfffffff9, 0xffffffff, 0x80000000, 0x1, 0xc3, 0x10, 0x5, 0x200, 0x7, 0x7, 0x7d, 0x0, 0x80, 0x6, 0xfffffffd, 0x7f, 0x9, 0x400, 0x0, 0x7, 0x1, 0x2, 0x40, 0xfffffff9, 0xffffffff, 0x1, 0x1, 0x400, 0xfffffffe, 0x3, 0x0, 0x5, 0x4, 0x4, 0xfffff800, 0x4, 0x401, 0x3, 0x7fffffff, 0x1, 0x1, 0x8001, 0xf, 0x2f37, 0x6, 0x9, 0x4, 0x5, 0x101, 0x83, 0x1, 0x4, 0x7, 0x58b, 0x8f, 0x8001, 0x3, 0x5, 0x6, 0x80, 0x5, 0x81, 0x3, 0x7, 0x0, 0x3, 0xd3aa, 0xc690, 0x800, 0x3, 0x1, 0x0, 0x9, 0x0, 0x4, 0x10, 0xac3, 0x9, 0x728, 0x1, 0x0, 0x3, 0x8001, 0x7, 0x1, 0x8000, 0xa1f9, 0x2, 0x8, 0x0, 0x5415, 0xf1, 0x3, 0x7fffffff, 0xbb35, 0x1, 0x4, 0x0, 0x0, 0x5, 0xac, 0x7ff, 0x4, 0x1, 0x4, 0x4, 0x8000, 0x10, 0x7f, 0x8, 0x6, 0x2, 0x8, 0x800, 0x7, 0x9a2e, 0x1398, 0x5, 0xf7b1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x5, 0x1001, 0x0, 0x5, 0xb, 0x0, 0x5, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x6, 0xb03c, 0x7, 0x7ff, 0x80000001, 0x7fff, 0xffffffff, 0x6, 0x9, 0x400009, 0x5, 0x200, 0x7fff, 0x1, 0x5, 0x6, 0x0, 0x80000000, 0x5, 0x80, 0x800, 0x7, 0x8, 0x363, 0x610b, 0xfff, 0x8, 0x4, 0x9, 0x6, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x1, 0x10, 0x2, 0xd9, 0x0, 0xffff2dae, 0x7fff, 0x6, 0x7, 0x6b85, 0x8, 0x5, 0x5, 0xffff, 0x0, 0x80, 0x6, 0x4, 0x11a1, 0x0, 0xf3, 0x1, 0x2, 0xb5, 0x4, 0x7, 0x0, 0x7ff, 0x4, 0x4, 0xc585, 0x10001, 0x5bb7, 0x3, 0x1, 0x5, 0x4, 0x8001, 0x8, 0x9, 0x9, 0x94, 0x3, 0xb, 0x4, 0x63, 0x1, 0x9, 0x1000, 0x1, 0x5, 0x8, 0x6d1, 0x0, 0x9, 0x5, 0x400, 0x81, 0x401, 0x7, 0x5, 0x4d, 0x2, 0x8d46, 0x4, 0x81, 0xff, 0xfd9, 0x7, 0x5ad, 0x7, 0x16b3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) 5.110878507s ago: executing program 0 (id=4518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x9, 0x0, 0x1, 0xc, 0x1}, 0x4, 0x46, [{0x100, 0x2bf640ff, 0x1, 0xc7, 0x1, 0x7}]}, [{0x7, 0x7, 0x40, 0x3, 0x6, 0x1}, {0x3edee688, 0x0, 0xfffffffd, 0x10, 0x5c56b80f, 0x5}, {0x8, 0x4, 0x1, 0x6, 0xf, 0x8001}, {0x4, 0xffffffff, 0x40, 0x8000, 0xffff, 0x9}, {0x0, 0x7, 0xb, 0xffffff81, 0x7fff, 0x4}, {0x1000, 0x81, 0xcec4, 0x1, 0x1, 0x7f}, {0x401, 0x2, 0x8, 0xfffffff7, 0x0, 0x7}, {0x2, 0x1, 0x1000, 0x4, 0x9, 0xa}, {0x8, 0x2, 0xf3320, 0x80000000, 0x9, 0x8}, {0x5, 0x2, 0x5, 0x5, 0x80000001}, {0x3, 0x2, 0x5, 0x3, 0x2, 0x5}, {0xfffffff5, 0x5, 0x6, 0x3, 0x8, 0x200}, {0x0, 0x2, 0x1, 0xc, 0xc61, 0x4}, {0x4, 0x1, 0x2, 0x8, 0xdad, 0xae}, {0x9, 0x4, 0xfff, 0x0, 0x90400000}, {0x7267, 0xe, 0xffffffff, 0x4, 0x3, 0x5}, {0x10000, 0x6, 0x80, 0xfffffff7, 0x20000009, 0x4}, {0x0, 0x7, 0xfa, 0x5, 0x3a00, 0xfffffffe}, {0xa00, 0x9, 0x0, 0x6, 0x7fff, 0x7ff}, {0x42, 0x10, 0x7, 0x10001, 0x2a}, {0x1, 0x2, 0x7fffffff, 0x1, 0x3, 0x7f}, {0x6326e196, 0x200, 0x9, 0x1, 0x6, 0x7}, {0xc8, 0x1, 0x1, 0x8, 0x4, 0x1d}, {0x13f, 0xd, 0x7fff00, 0x7f, 0x7ff, 0xffff}, {0xe, 0x2, 0x2, 0x0, 0x8, 0x8000006}, {0x5, 0x3, 0x53, 0x4, 0x400000, 0x1}, {0x0, 0xfff, 0x40, 0xfffffffc, 0x6, 0xcb03}, {0x6, 0x0, 0x80000000, 0x5, 0x8, 0x101}, {0xffffffff, 0x7fff, 0x20000000, 0x0, 0x1, 0x8}, {0x625321fa, 0x101, 0x0, 0xe0000000, 0x2, 0x1}, {0x5, 0x8001, 0x7000, 0x7, 0x61ae, 0x80000000}, {0x2, 0x6, 0x5, 0x2, 0x7fffffff, 0x2}, {0x5, 0x2, 0x8, 0x1907, 0x2, 0x3}, {0x8, 0x2, 0x1, 0x1, 0xffff, 0x6}, {0x8, 0x7, 0x6, 0x3, 0x8, 0x6}, {0x2, 0x2, 0x1, 0x200, 0x5}, {0x6, 0x7, 0x7, 0x100, 0x4, 0x3}, {0x100, 0x2, 0x80000001, 0x10, 0xfffffffa, 0xf}, {0xa9, 0xd12, 0xffffffff, 0xa, 0x6, 0x1d}, {0x41, 0x6, 0x0, 0x3, 0x1000, 0x5}, {0x6, 0x800, 0x4, 0x7, 0x1, 0x8001}, {0x4, 0x2, 0xfc0, 0xf898, 0x8001, 0x6}, {0x1, 0x3e, 0x98, 0x0, 0x3ff, 0x101}, {0x3ff, 0x2, 0x6, 0xfffffffb, 0x3ff, 0xa}, {0x7, 0x2, 0x3135, 0x1, 0x9, 0xcf}, {0xfffffffd, 0xf, 0x0, 0x8, 0xebb, 0x4}, {0xc, 0x5, 0x1, 0x6, 0x8}, {0x9, 0x3, 0x4, 0x1, 0x1ff, 0x80000000}, {0x6, 0x7, 0x8b, 0xfb, 0x80, 0x6}, {0x9, 0x80000000, 0xffffffff, 0xfffffa84, 0x6, 0x7f}, {0x1, 0xb, 0xbc, 0x5c, 0x6, 0x5}, {0x7, 0xfe, 0x0, 0x8, 0x5, 0x10}, {0x8, 0x4, 0x4, 0xfffffffb, 0x200, 0xcff}, {0x2, 0x8, 0x7, 0x8, 0x9, 0x35}, {0x0, 0x9, 0x0, 0xa, 0x3, 0xfe}, {0x8, 0x3, 0x0, 0x3c86, 0x56a5, 0x5}, {0xe4, 0x47, 0xffff, 0xd0, 0x2, 0x80000001}, {0x0, 0xa, 0x62, 0x10000, 0x6, 0xfffffff8}, {0x3, 0x4, 0x8d47, 0x710, 0x3c70}, {0x40, 0x7f, 0xd0, 0x0, 0xff, 0x8}, {0x2, 0xacd, 0x75ad, 0x7, 0x9, 0xff}, {0x80, 0x6, 0x10001, 0x1ff, 0x81, 0x12}, {0x0, 0x7a53, 0x5, 0x7, 0x8, 0x3}, {0x7, 0x1000000, 0xfffffff8, 0x9, 0x8, 0x40}, {0xfffffffe, 0x0, 0x6, 0x7fff, 0x80000001, 0x40}, {0x588f, 0x5, 0x7, 0x10001, 0xffffffff, 0x1}, {0x8, 0x4, 0x1c, 0x6, 0x3e, 0x9}, {0x2, 0x7, 0x5, 0x3, 0x8, 0x3}, {0xc, 0xc, 0x1be, 0x8, 0x9, 0x3}, {0x0, 0x7, 0xd94, 0x7, 0x9, 0x2}, {0x4, 0x6, 0x4, 0x3, 0x7, 0xffff}, {0x7, 0xc27, 0x2, 0xc614, 0x5, 0x5}, {0x5, 0x9, 0x7, 0x9, 0x0, 0x4}, {0xbc7, 0x4, 0xf08b, 0x6, 0x9, 0x23}, {0x6, 0x2, 0x6f, 0xea78, 0x9925, 0xb6d}, {0x5, 0xc9, 0x4, 0x0, 0x89, 0x14}, {0x8, 0x3, 0x9da, 0x800, 0xfffffffc, 0xe7e8}, {0x10000, 0x40, 0x5, 0xd0, 0xa9, 0x47a8}, {0x8, 0x3ff, 0x4, 0x3, 0x0, 0x9}, {0x48, 0xc, 0x3ff, 0x4, 0x800, 0xe}, {0x4, 0x1, 0x3, 0x4, 0x1000, 0xda30}, {0x1, 0xffff, 0x8001, 0x98, 0xfffffff8, 0x7}, {0x81, 0x1, 0x2, 0x7, 0xbc9, 0x28000000}, {0x7, 0xada, 0x1, 0x6, 0xfffffffe, 0xb030}, {0x9f, 0x761, 0xf95c, 0x2, 0x86, 0x5}, {0xd3, 0xffff, 0x6, 0xc424, 0x9, 0x4}, {0x5, 0xffffff6e, 0x7fff, 0x3, 0xd, 0x2}, {0x621, 0x2, 0x0, 0x9, 0x3, 0x4854}, {0x3, 0x6, 0x8, 0x1, 0x9, 0xa72}, {0x5, 0x4, 0x6, 0xfffffffa, 0x9, 0x3}, {0x0, 0xfffffff8, 0x8, 0x320, 0x5}, {0x6, 0x3, 0x200, 0x6, 0x1ff, 0x8}, {0x7ff, 0x5, 0x4, 0x4, 0x5, 0x800}, {0xfa4a, 0x5, 0x6, 0xa, 0x5, 0x2}, {0x8, 0x7, 0x5, 0x2, 0x6, 0x80000001}, {0x2, 0xa, 0x2, 0x7, 0x4, 0x5}, {0x9, 0x7, 0x4, 0x9eb, 0xa, 0x8}, {0x2, 0x4, 0x7, 0xffffffff, 0x3, 0x401}, {0x3ff, 0x2, 0x8, 0x3ff, 0xfffffffb, 0x1}, {0x0, 0x0, 0x0, 0xfffff55e, 0x8, 0x8}, {0x1, 0x7fff, 0x8, 0x4, 0x7ff, 0x6}, {0x8, 0x0, 0x0, 0xfffffffd, 0xfff, 0x40}, {0x9, 0x1, 0xa792, 0x5, 0x1ff}, {0xd94b, 0x5, 0x2, 0xff, 0x4f, 0x7ff}, {0xdbc, 0x80000000, 0x5d, 0x3, 0xfffffffc}, {0x8, 0x3, 0x67, 0x8, 0xbdf, 0xf7}, {0x4c0f, 0xfff, 0x0, 0xb, 0x8, 0x100}, {0x400, 0x9, 0x0, 0x4, 0x9, 0x1b}, {0x48fd4449, 0x2, 0x5, 0x4, 0x7f, 0xfffffffc}, {0x7ff, 0x5, 0x3, 0x5c93, 0xc, 0x6}, {0x8, 0x2c2d000, 0x9, 0x2, 0x1, 0x2}, {0xffffffff, 0x8076, 0x7f, 0xffffffc0, 0x7, 0x8001}, {0x0, 0x1, 0x7, 0x200, 0x5}, {0x78, 0x2d, 0x4, 0x4, 0x80000001, 0xe9}, {0x0, 0x6, 0x0, 0x255c, 0x9, 0x1000}, {0x200000, 0x200, 0x6, 0xfffffffd, 0x0, 0x6}, {0x77b, 0x0, 0x2, 0x1e8a, 0x1a, 0x4}, {0x1000, 0x4, 0x0, 0x2, 0x0, 0x1}, {0x7ff, 0x5, 0x5, 0x6, 0x6, 0x2000009}, {0x4, 0x800, 0xea2, 0x8000, 0x0, 0x40}, {0x9, 0x200, 0x539, 0x1, 0xb, 0x7}, {0x2, 0x2, 0x87, 0x7, 0xfffffffe, 0x1}, {0x1e7, 0x2, 0x6, 0x9bb, 0x3, 0x7}, {0x7, 0x3ff, 0xe322, 0x2, 0x4, 0xc}, {0xfffffffa, 0x2, 0x93, 0xfffffffa, 0x10001, 0x40}, {0x7, 0x9bc, 0x800, 0x9, 0x7, 0x3851}, {0xfffffffe, 0x101, 0x3, 0x1, 0x7, 0x4}, {0x5, 0x0, 0xb0, 0xa, 0x5, 0x5}], [{0x4}, {0x3}, {0x2}, {0x3}, {}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x6}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x4}, {}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {}, {0x5}, {0x1}, {}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0xd9d493184d3ac47}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0xc49612a26cceaca7}, {0x0, 0xa5bbafc9e2acde54}, {0x5, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x2}, {0x5}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) 4.478979602s ago: executing program 1 (id=4521): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') write$ppp(0xffffffffffffffff, &(0x7f0000000540)="8f305fecebdbc8cf2bf11c06bf91c89bffb3b327e7671db8e7e2158233e81587c4386bba29b6a5a9df406fa74ee1c6fdc488793d38", 0x35) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) sendmsg$nl_route(r3, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000400), 0x0, 0x40880, 0x0, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='N\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000500000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.864937871s ago: executing program 3 (id=4525): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0x11b, 0x880, 0x0, 0x0) 3.629684974s ago: executing program 1 (id=4526): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x13e}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47e", 0x1ae}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000", 0x4a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.404752699s ago: executing program 3 (id=4528): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc"], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc"], 0xfdef) (async) 1.404019845s ago: executing program 1 (id=4529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) r4 = accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000001c0)=0x10, 0x80000) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000240)={0xaf10419e, 0x5, 0x4, 0x590, 0x1, 0x0, 0x3}) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8840000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071112e00000000009500a5ff00000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.400881198s ago: executing program 0 (id=4530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000304000000002be1000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014003500776c616e3000000000000000000000000a0001"], 0x40}}, 0x200000000000000) 1.347196272s ago: executing program 1 (id=4531): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 1.208253938s ago: executing program 1 (id=4533): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b36aa89aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154be"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) socket$kcm(0x1e, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x60bd2c, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x409, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4, 0x5}}}]}, 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r9, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r7], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001c00070c2ebd7000fedbdf2502000000", @ANYRES32=r10, @ANYBLOB="080010212d31ef3f8ccfe9315fcbaa9b16321400010000000000000000000000ffff00004cab8c45996363b3ee3362a924cc0d2d9a06c046520d4f448af1890251c7e36a166a82cffc729dfda4fdf196f6d36e4399d14c52e198ee9e12c935fa"], 0x3c}}, 0x20024090) r11 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name, &(0x7f0000000000)=0x10, 0x800) ioctl$FS_IOC_GETFSSYSFSPATH(r11, 0x80811501, &(0x7f0000000080)={0x80}) 1.148980066s ago: executing program 3 (id=4534): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x2, 0x0, &(0x7f0000000380)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000002570c1c2dd2d1000010400000007566aac14204037f53b84d46210c468483a2d653152f0a4646aa675edb8716104fb951c8012de032b27ae0a5fa6a29ad678e6a709759ffb78c62958491f55370e26ee5caebeb4754664cd44e2436c00ada3ed82a2ae45215cd582b45adcb35c35be07d51484de", @ANYRES32=0x0, @ANYBLOB="7b130000000000002800128008000100677265001c000280080004000700000005000a0000000000050013000100000008001f0009000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.074418643s ago: executing program 0 (id=4536): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c, 0x0, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 1.023865248s ago: executing program 3 (id=4538): r0 = socket(0x2, 0x4, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}], 0x1}, 0x24004010) getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) (async) getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000001c0), 0x4) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) 895.27756ms ago: executing program 0 (id=4540): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203de", 0x149}, {&(0x7f0000000bc0)="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", 0x1ae}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000", 0x4a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 725.611641ms ago: executing program 1 (id=4542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r0, &(0x7f0000000140)=""/105, 0x69, 0x40000102, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 685.107373ms ago: executing program 3 (id=4544): socket$kcm(0xa, 0x3, 0x87) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a0000000500010002"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000080)={0x53, 0x0, 0xb, 0xa, 0x7ff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffff9, 0x2, 0xc, 0x5, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 683.761854ms ago: executing program 0 (id=4545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00002abd7000fbdbdf251a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x3) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r7, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0xfffffffffffffee7, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x44) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014080009800800014000000081140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="110a28bd7000fedbdf250900000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x48814) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r13) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="030026bd9000fcdbdf23feb2572515000000", @ANYRES32=r15, @ANYBLOB="08002c001000000008002a0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000025bd7000ffdbdf251a0000000c000600030000000000000008000300", @ANYRES32=r3, @ANYBLOB="0c000600040000000700000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="000000051432379c393e51bed36a0f83ffbf60add2bfc450760e7f23e7f965eee1fef81401ab06bc629fb290d7a8911716fbe9557707c65ca49f220899d0184ab464f90b416febdff91549db2c68325c407e1703c88dcb043d4c5850d904a1141e51c9450a745ade4bc4762821bb492eda069889c524a2142a343283bd", @ANYRES32=r15, @ANYBLOB="0c0006000200000002000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$WPAN_SECURITY(r11, 0x0, 0x1, &(0x7f0000000440), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140a, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 682.813598ms ago: executing program 4 (id=4546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {0x0, 0x8}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) close(0x3) 480.038754ms ago: executing program 0 (id=4548): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000500000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) 428.036906ms ago: executing program 4 (id=4550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xffffffff) (async) listen(r4, 0xffffffff) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x10, 0x2d, 0x1, 0x70bd26}, 0x10}], 0x1}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) close(r5) (async) close(r5) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r6], 0x158}, 0x1, 0xba01}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004801800018008002100647570000c0002800800014000000015100001800b0001006c6f6f6b75700000090038010073797a30000000000900020073797a3200000000140000001100010000000000000200000000000a0c3ab6e20582da64a8e7"], 0x80}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000400)={r2, &(0x7f00000001c0)='[-{\x00', 0x0, &(0x7f0000000200)={@align=0x8, {0xaa4, 0x6, 0x5, 0x9}}, 0x8001, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x6}) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000000)=0x11c, 0xfffffec5) (async) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000000)=0x11c, 0xfffffec5) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r8, 0x1) (async) shutdown(r8, 0x1) r9 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x6a, 0x2, 0x0, &(0x7f0000000300)) ioctl$FICLONE(r8, 0x40049409, r3) 329.097847ms ago: executing program 2 (id=4551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x7, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf", 0x0, 0x0, 0xffffffff}, 0x50) 323.018554ms ago: executing program 4 (id=4552): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x620, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0xd, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 300.976101ms ago: executing program 2 (id=4553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x0) 196.965628ms ago: executing program 2 (id=4554): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000017000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 193.629088ms ago: executing program 2 (id=4555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x16c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x96b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 178.747592ms ago: executing program 4 (id=4556): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c2209000000000000fb868590f60c57fb606a8184b570e530c70a4e4c536551df7296997957b21e7d6fffb83e931a3575883dc78f1a99f6f3297344b55bd51ecec577bd1fe7a0c1effd5576dd9001c10c5287040c90d4cab10cc31456fcf42993b3d08056e65f16578fe443cc7e2f25c5ccdc56d1e80932bd8e4d294bbf2e863d1c1038cbf6207ad1a75c265d60ab61a796ff095522dc7d85418baf06e06a12fbb442075c35", @ANYRES16=r1, @ANYBLOB="10002abd7000fbdbdf25140000000800170004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004010}, 0x40) 121.009665ms ago: executing program 4 (id=4557): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe0", 0x120, 0x880, 0x0, 0x0) 76.953575ms ago: executing program 2 (id=4558): r0 = socket(0x1e, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x98, 0x2c0, 0x98, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@local, @broadcast, 0xff000000, 0x0, 'ipvlan0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x88, 0x0, 0x40}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffff00, 'batadv_slave_1\x00', 'gretap0\x00', {}, {0xff}, 0xca, 0x0, 0x40}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff, 0xffffff00], 0x4d2, 0x3502, 0x88, 0x1, 0x4, 0x1a}, {@ipv4=@multicast2, [0x0, 0x0, 0x0, 0x7f000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffff00], 0x4d2, 0x0, 0x0, 0x0, 0x10, 0x9}, {@ipv4=@local, [0xff000000, 0xff000000, 0xff, 0xffffffff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x3b, 0x1, 0x7, 0xf}, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0xffffffff, 0xff000000], 0x4d5, 0x3502, 0x8, 0x0, 0x10, 0x2}], 0x4, 0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random='-]wyU+', 0x4, 0xc, [0x14, 0x15, 0x23, 0x20, 0x3b, 0x37, 0x17, 0x33, 0x3d, 0x40, 0x16, 0x7, 0x13, 0xc, 0x26, 0x1f], 0x1, 0x5, 0x8}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000, 0x0, 'wlan0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x2f, 0x3}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3, "0e33ab24d9aa46cfedaa11aaa60ba8322dfb6a95c2d26905db85e1b088bf"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 33.867776ms ago: executing program 2 (id=4559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000e06010100000000000000000500000403b99f4905c7ab7bd88e05000100070000000900"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000e06010100000000000000000500000403b99f4905c7ab7bd88e05000100070000000900"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) (async) 0s ago: executing program 4 (id=4560): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000000)={0x0, 0xc3f, "1500", 0x8a}) (fail_nth: 3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) kernel console output (not intermixed with test programs): ? unwind_next_frame+0xa6/0x2550 [ 360.806552][T14130] ? is_bpf_text_address+0x26/0x2b0 [ 360.806591][T14130] ? is_bpf_text_address+0x26/0x2b0 [ 360.806622][T14130] ? __lock_acquire+0x6b5/0x2cf0 [ 360.806653][T14130] ? kernel_text_address+0xa5/0xe0 [ 360.806677][T14130] ? __kernel_text_address+0xd/0x30 [ 360.806698][T14130] ? unwind_get_return_address+0x4d/0x90 [ 360.806717][T14130] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.806740][T14130] ? arch_stack_walk+0xfb/0x150 [ 360.806772][T14130] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 360.806816][T14130] ? __pfx_rtnl_newlink+0x10/0x10 [ 360.806842][T14130] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 360.806867][T14130] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 360.806895][T14130] ? netlink_sendmsg+0x5d4/0xb40 [ 360.806926][T14130] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 360.806952][T14130] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 360.806979][T14130] ? __lock_acquire+0x6b5/0x2cf0 [ 360.807020][T14130] netlink_rcv_skb+0x232/0x4b0 [ 360.807050][T14130] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 360.807081][T14130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.807126][T14130] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.807154][T14130] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.807190][T14130] netlink_unicast+0x75c/0x8e0 [ 360.807239][T14130] netlink_sendmsg+0x813/0xb40 [ 360.807281][T14130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.807315][T14130] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.807345][T14130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.807378][T14130] ____sys_sendmsg+0x972/0x9f0 [ 360.807409][T14130] ? __might_fault+0xaf/0x130 [ 360.807446][T14130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.807487][T14130] ? import_iovec+0x73/0xa0 [ 360.807514][T14130] ___sys_sendmsg+0x2a5/0x360 [ 360.807542][T14130] ? __lock_acquire+0x6b5/0x2cf0 [ 360.807573][T14130] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.807644][T14130] ? __fget_files+0x2a/0x420 [ 360.807668][T14130] ? __fget_files+0x3a0/0x420 [ 360.807704][T14130] __x64_sys_sendmsg+0x1bd/0x2a0 [ 360.807738][T14130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.807779][T14130] ? __pfx_ksys_write+0x10/0x10 [ 360.807817][T14130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.807840][T14130] do_syscall_64+0x15f/0xf80 [ 360.807864][T14130] ? trace_irq_disable+0x3b/0x140 [ 360.807886][T14130] ? clear_bhb_loop+0x40/0x90 [ 360.807911][T14130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.807930][T14130] RIP: 0033:0x7f953259cdd9 [ 360.807950][T14130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.807967][T14130] RSP: 002b:00007f95334ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.807989][T14130] RAX: ffffffffffffffda RBX: 00007f9532815fa0 RCX: 00007f953259cdd9 [ 360.808003][T14130] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 360.808016][T14130] RBP: 00007f95334ef090 R08: 0000000000000000 R09: 0000000000000000 [ 360.808028][T14130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.808040][T14130] R13: 00007f9532816038 R14: 00007f9532815fa0 R15: 00007ffca7c29448 [ 360.808074][T14130] [ 360.871321][T14136] syzkaller0: entered promiscuous mode [ 361.273438][T14136] syzkaller0: entered allmulticast mode [ 361.293093][T14147] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 361.484248][T14168] syzkaller0: entered promiscuous mode [ 361.505106][T14168] syzkaller0: entered allmulticast mode [ 361.619519][T14173] FAULT_INJECTION: forcing a failure. [ 361.619519][T14173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.636511][T14173] CPU: 1 UID: 0 PID: 14173 Comm: syz.4.2557 Not tainted syzkaller #0 PREEMPT(full) [ 361.636541][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 361.636553][T14173] Call Trace: [ 361.636561][T14173] [ 361.636569][T14173] dump_stack_lvl+0xe8/0x150 [ 361.636605][T14173] should_fail_ex+0x412/0x560 [ 361.636638][T14173] _copy_to_user+0x31/0xb0 [ 361.636663][T14173] simple_read_from_buffer+0xe1/0x170 [ 361.636695][T14173] proc_fail_nth_read+0x1bb/0x230 [ 361.636726][T14173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.636758][T14173] ? rw_verify_area+0x2a6/0x4d0 [ 361.636785][T14173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.636813][T14173] vfs_read+0x20c/0xa70 [ 361.636847][T14173] ? __pfx___mutex_lock+0x10/0x10 [ 361.636874][T14173] ? __pfx_vfs_read+0x10/0x10 [ 361.636912][T14173] ? __fget_files+0x2a/0x420 [ 361.636941][T14173] ? __fget_files+0x3a0/0x420 [ 361.636964][T14173] ? __fget_files+0x2a/0x420 [ 361.636996][T14173] ksys_read+0x150/0x270 [ 361.637027][T14173] ? __pfx_ksys_read+0x10/0x10 [ 361.637066][T14173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.637089][T14173] do_syscall_64+0x15f/0xf80 [ 361.637113][T14173] ? trace_irq_disable+0x3b/0x140 [ 361.637134][T14173] ? clear_bhb_loop+0x40/0x90 [ 361.637158][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.637178][T14173] RIP: 0033:0x7f1b1c75d60e [ 361.637197][T14173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 361.637215][T14173] RSP: 002b:00007f1b1d5c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.637238][T14173] RAX: ffffffffffffffda RBX: 00007f1b1d5c96c0 RCX: 00007f1b1c75d60e [ 361.637253][T14173] RDX: 000000000000000f RSI: 00007f1b1d5c90a0 RDI: 0000000000000004 [ 361.637267][T14173] RBP: 00007f1b1d5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 361.637280][T14173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.637292][T14173] R13: 00007f1b1ca16038 R14: 00007f1b1ca15fa0 R15: 00007ffc4b95d7d8 [ 361.637328][T14173] [ 361.884585][T14179] FAULT_INJECTION: forcing a failure. [ 361.884585][T14179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.899562][T14179] CPU: 0 UID: 0 PID: 14179 Comm: syz.3.2560 Not tainted syzkaller #0 PREEMPT(full) [ 361.899591][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 361.899603][T14179] Call Trace: [ 361.899611][T14179] [ 361.899619][T14179] dump_stack_lvl+0xe8/0x150 [ 361.899655][T14179] should_fail_ex+0x412/0x560 [ 361.899691][T14179] _copy_to_user+0x31/0xb0 [ 361.899717][T14179] simple_read_from_buffer+0xe1/0x170 [ 361.899750][T14179] proc_fail_nth_read+0x1bb/0x230 [ 361.899781][T14179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.899813][T14179] ? rw_verify_area+0x2a6/0x4d0 [ 361.899840][T14179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.899868][T14179] vfs_read+0x20c/0xa70 [ 361.899904][T14179] ? __pfx___mutex_lock+0x10/0x10 [ 361.899940][T14179] ? __pfx_vfs_read+0x10/0x10 [ 361.899972][T14179] ? __fget_files+0x2a/0x420 [ 361.900003][T14179] ? __fget_files+0x3a0/0x420 [ 361.900026][T14179] ? __fget_files+0x2a/0x420 [ 361.900062][T14179] ksys_read+0x150/0x270 [ 361.900093][T14179] ? __pfx_ksys_read+0x10/0x10 [ 361.900132][T14179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.900154][T14179] do_syscall_64+0x15f/0xf80 [ 361.900178][T14179] ? trace_irq_disable+0x3b/0x140 [ 361.900200][T14179] ? clear_bhb_loop+0x40/0x90 [ 361.900226][T14179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.900246][T14179] RIP: 0033:0x7f953255d60e [ 361.900266][T14179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 361.900283][T14179] RSP: 002b:00007f95334eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.900305][T14179] RAX: ffffffffffffffda RBX: 00007f95334ef6c0 RCX: 00007f953255d60e [ 361.900320][T14179] RDX: 000000000000000f RSI: 00007f95334ef0a0 RDI: 0000000000000004 [ 361.900332][T14179] RBP: 00007f95334ef090 R08: 0000000000000000 R09: 0000000000000000 [ 361.900344][T14179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.900357][T14179] R13: 00007f9532816038 R14: 00007f9532815fa0 R15: 00007ffca7c29448 [ 361.900392][T14179] [ 362.303505][T14186] syzkaller0: entered promiscuous mode [ 362.322903][T14186] syzkaller0: entered allmulticast mode [ 362.353696][T14194] __nla_validate_parse: 5 callbacks suppressed [ 362.353717][T14194] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2566'. [ 362.416670][T14192] syzkaller0: entered promiscuous mode [ 362.422418][T14192] syzkaller0: entered allmulticast mode [ 362.559619][T14201] syzkaller0: entered promiscuous mode [ 362.586553][T14201] syzkaller0: entered allmulticast mode [ 362.853068][T14223] netlink: 'syz.4.2576': attribute type 2 has an invalid length. [ 362.862019][T14215] netlink: 'syz.3.2575': attribute type 11 has an invalid length. [ 363.734567][T14247] syzkaller0: entered promiscuous mode [ 363.740290][T14247] syzkaller0: entered allmulticast mode [ 363.778682][ T29] audit: type=1800 audit(1776990299.854:3): pid=14249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2585" name="memory.events" dev="tmpfs" ino=2626 res=0 errno=0 [ 363.805598][ T29] audit: type=1804 audit(1776990299.864:4): pid=14249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2585" name="/newroot/516/memory.events" dev="tmpfs" ino=2626 res=1 errno=0 [ 363.838553][T14252] Cannot find set identified by id 1 to match [ 363.928248][T14255] syzkaller0: entered promiscuous mode [ 363.948164][T14255] syzkaller0: entered allmulticast mode [ 363.999108][T14261] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 364.148997][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 364.156332][T14271] netlink: 'syz.4.2593': attribute type 1 has an invalid length. [ 364.169644][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2591'. [ 364.179440][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2593'. [ 364.193546][T14276] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.200519][T14274] x_tables: duplicate underflow at hook 1 [ 364.296626][T14279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2594'. [ 364.435434][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2598'. [ 364.509404][T14292] Cannot find set identified by id 1 to match [ 364.570698][T14295] syzkaller0: entered promiscuous mode [ 364.584739][T14295] syzkaller0: entered allmulticast mode [ 364.662737][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2604'. [ 364.717254][T14301] bond6: Invalid ad_actor_system MAC address. [ 364.726282][T14301] bond6: option ad_actor_system: invalid value (1) [ 364.737384][T14301] bond6 (unregistering): Released all slaves [ 365.023399][T14323] vlan4: entered promiscuous mode [ 365.179515][T14332] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 365.287937][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2616'. [ 365.290140][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 365.531798][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2621'. [ 365.558568][T14351] syzkaller0: entered promiscuous mode [ 365.574764][T14351] syzkaller0: entered allmulticast mode [ 365.825312][T14372] ip6t_REJECT: ECHOREPLY is not supported [ 365.841331][T14370] netlink: 'syz.1.2627': attribute type 30 has an invalid length. [ 365.877260][T14370] netlink: 'syz.1.2627': attribute type 30 has an invalid length. [ 366.179221][T14390] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 366.248691][T14387] syzkaller0: entered promiscuous mode [ 366.273632][T14387] syzkaller0: entered allmulticast mode [ 366.554946][T14413] netlink: 'syz.0.2646': attribute type 3 has an invalid length. [ 366.610856][T14414] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.618360][T14414] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.621802][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 366.633506][ C1] lec:lec_tx_timeout: lec0 [ 366.687136][T14416] syzkaller0: entered promiscuous mode [ 366.703370][T14416] syzkaller0: entered allmulticast mode [ 368.055546][T14507] lo: entered allmulticast mode [ 368.064546][T14507] lo: left allmulticast mode [ 368.153355][T14513] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 368.189675][T14515] netlink: 'syz.0.2681': attribute type 2 has an invalid length. [ 368.314645][T14524] netlink: 'syz.0.2684': attribute type 25 has an invalid length. [ 368.410576][T14531] Cannot find add_set index 46338 as target [ 368.413404][T14527] syzkaller0: entered promiscuous mode [ 368.423519][T14527] syzkaller0: entered allmulticast mode [ 368.445944][T14531] Cannot find add_set index 46338 as target [ 368.574767][T14538] __nla_validate_parse: 12 callbacks suppressed [ 368.574791][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2689'. [ 368.803904][T14554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2693'. [ 368.823725][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2695'. [ 368.847369][T14557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2696'. [ 369.024000][T14572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.252412][T14580] syzkaller0: entered promiscuous mode [ 369.263753][T14580] syzkaller0: entered allmulticast mode [ 369.413920][T14595] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 369.490499][T14597] syzkaller0: entered promiscuous mode [ 369.497446][T14597] syzkaller0: entered allmulticast mode [ 369.729205][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.758006][ T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.786243][ T35] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.814737][ T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.836982][T14620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2716'. [ 369.875844][T14620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2716'. [ 369.909688][T14627] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2718'. [ 370.023183][T14630] syzkaller0: entered promiscuous mode [ 370.035167][T14630] syzkaller0: entered allmulticast mode [ 370.232886][T14645] syzkaller0: entered promiscuous mode [ 370.246295][T14645] syzkaller0: entered allmulticast mode [ 370.405741][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2733'. [ 370.522487][T14661] pimreg3: entered allmulticast mode [ 370.552176][T14657] netlink: 'syz.2.2732': attribute type 2 has an invalid length. [ 370.640541][T14667] syzkaller0: entered promiscuous mode [ 370.647555][T14667] syzkaller0: entered allmulticast mode [ 370.866735][T14674] syzkaller1: entered promiscuous mode [ 370.875308][T14674] syzkaller1: entered allmulticast mode [ 371.136614][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 371.160364][T14691] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2748'. [ 371.603221][T14713] syzkaller0: entered promiscuous mode [ 371.621236][T14713] syzkaller0: entered allmulticast mode [ 371.740347][T14724] netlink: 'syz.2.2759': attribute type 4 has an invalid length. [ 371.876047][T14733] openvswitch: netlink: Flow actions attr not present in new flow. [ 372.059800][T14747] Cannot find set identified by id 1 to match [ 372.298121][T14761] syzkaller0: entered promiscuous mode [ 372.308735][T14761] syzkaller0: entered allmulticast mode [ 372.433162][T14766] syzkaller0: entered promiscuous mode [ 372.446653][T14766] syzkaller0: entered allmulticast mode [ 372.460376][T14774] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 372.667394][T14789] FAULT_INJECTION: forcing a failure. [ 372.667394][T14789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.688225][T14789] CPU: 0 UID: 0 PID: 14789 Comm: syz.4.2781 Not tainted syzkaller #0 PREEMPT(full) [ 372.688257][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.688269][T14789] Call Trace: [ 372.688277][T14789] [ 372.688286][T14789] dump_stack_lvl+0xe8/0x150 [ 372.688322][T14789] should_fail_ex+0x412/0x560 [ 372.688356][T14789] _copy_from_iter+0x1d3/0x1670 [ 372.688390][T14789] ? rcu_is_watching+0x15/0xb0 [ 372.688425][T14789] ? __pfx__copy_from_iter+0x10/0x10 [ 372.688464][T14789] ? netlink_sendmsg+0x650/0xb40 [ 372.688491][T14789] ? skb_put+0x11b/0x210 [ 372.688522][T14789] netlink_sendmsg+0x6c0/0xb40 [ 372.688561][T14789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.688595][T14789] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.688624][T14789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.688658][T14789] ____sys_sendmsg+0x972/0x9f0 [ 372.688690][T14789] ? __might_fault+0xaf/0x130 [ 372.688725][T14789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.688767][T14789] ? import_iovec+0x73/0xa0 [ 372.688792][T14789] ___sys_sendmsg+0x2a5/0x360 [ 372.688820][T14789] ? __lock_acquire+0x6b5/0x2cf0 [ 372.688852][T14789] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.688932][T14789] ? __fget_files+0x2a/0x420 [ 372.688957][T14789] ? __fget_files+0x3a0/0x420 [ 372.688994][T14789] __x64_sys_sendmsg+0x1bd/0x2a0 [ 372.689028][T14789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.689069][T14789] ? __pfx_ksys_write+0x10/0x10 [ 372.689108][T14789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.689131][T14789] do_syscall_64+0x15f/0xf80 [ 372.689155][T14789] ? trace_irq_disable+0x3b/0x140 [ 372.689184][T14789] ? clear_bhb_loop+0x40/0x90 [ 372.689210][T14789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.689230][T14789] RIP: 0033:0x7f1b1c79cdd9 [ 372.689251][T14789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.689269][T14789] RSP: 002b:00007f1b1d5c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.689292][T14789] RAX: ffffffffffffffda RBX: 00007f1b1ca15fa0 RCX: 00007f1b1c79cdd9 [ 372.689307][T14789] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 372.689320][T14789] RBP: 00007f1b1d5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 372.689333][T14789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.689345][T14789] R13: 00007f1b1ca16038 R14: 00007f1b1ca15fa0 R15: 00007ffc4b95d7d8 [ 372.689379][T14789] [ 373.303575][T14810] syzkaller0: entered promiscuous mode [ 373.322586][T14810] syzkaller0: entered allmulticast mode [ 373.631083][T14813] syzkaller0: entered promiscuous mode [ 373.653103][T14813] syzkaller0: entered allmulticast mode [ 375.721146][T14868] IPVS: stopping master sync thread 9604 ... [ 376.485611][T14874] syzkaller0: entered promiscuous mode [ 376.507272][T14874] syzkaller0: entered allmulticast mode [ 376.561994][T14878] __nla_validate_parse: 2 callbacks suppressed [ 376.562025][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'. [ 376.605294][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2809'. [ 376.636613][T14881] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2809'. [ 376.674114][T14886] netlink: 'syz.0.2810': attribute type 25 has an invalid length. [ 376.694437][T14889] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2811'. [ 376.747429][T14892] netlink: 'syz.2.2812': attribute type 1 has an invalid length. [ 376.760128][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2812'. [ 376.769758][T14892] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2812'. [ 376.784038][T14892] netlink: 'syz.2.2812': attribute type 1 has an invalid length. [ 376.813983][T14894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2813'. [ 376.843933][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2812'. [ 376.855270][T14894] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2813'. [ 376.906297][T14892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2812'. [ 376.930253][T14900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.427352][T14928] xt_TCPMSS: Only works on TCP SYN packets [ 377.715147][T14936] netlink: 'syz.0.2829': attribute type 25 has an invalid length. [ 378.010303][T14955] netlink: 'syz.0.2838': attribute type 25 has an invalid length. [ 378.263765][T14970] xt_TCPMSS: Only works on TCP SYN packets [ 378.438202][T14981] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 378.778153][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.790465][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 378.801893][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 379.058914][T15018] vlan3: entered promiscuous mode [ 379.091269][T15021] ieee802154 phy0 wpan0: encryption failed: -90 [ 379.243341][T15025] netlink: 'syz.1.2860': attribute type 2 has an invalid length. [ 379.439590][T15038] tipc: Enabling of bearer rejected, failed to enable media [ 379.609389][T15046] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 379.677358][T15049] vlan3: entered promiscuous mode [ 379.947253][T15062] FAULT_INJECTION: forcing a failure. [ 379.947253][T15062] name failslab, interval 1, probability 0, space 0, times 0 [ 379.982908][T15063] tipc: Enabling of bearer rejected, failed to enable media [ 379.996797][T15062] CPU: 0 UID: 0 PID: 15062 Comm: syz.2.2875 Not tainted syzkaller #0 PREEMPT(full) [ 379.996826][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.996839][T15062] Call Trace: [ 379.996846][T15062] [ 379.996853][T15062] dump_stack_lvl+0xe8/0x150 [ 379.996888][T15062] should_fail_ex+0x412/0x560 [ 379.996921][T15062] should_failslab+0xa8/0x100 [ 379.996943][T15062] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 379.996970][T15062] ? __alloc_skb+0x186/0x7d0 [ 379.996995][T15062] ? __alloc_skb+0x1d0/0x7d0 [ 379.997019][T15062] ? __local_bh_enable_ip+0xd0/0x130 [ 379.997051][T15062] __alloc_skb+0x1d0/0x7d0 [ 379.997093][T15062] netlink_sendmsg+0x5d4/0xb40 [ 379.997134][T15062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.997168][T15062] ? aa_sock_msg_perm+0xf1/0x1b0 [ 379.997199][T15062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.997232][T15062] ____sys_sendmsg+0x972/0x9f0 [ 379.997259][T15062] ? __might_fault+0xaf/0x130 [ 379.997285][T15062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.997317][T15062] ? import_iovec+0x73/0xa0 [ 379.997336][T15062] ___sys_sendmsg+0x2a5/0x360 [ 379.997359][T15062] ? __lock_acquire+0x6b5/0x2cf0 [ 379.997383][T15062] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.997434][T15067] SET target dimension over the limit! [ 379.997440][T15062] ? __fget_files+0x2a/0x420 [ 379.997465][T15062] ? __fget_files+0x3a0/0x420 [ 379.997494][T15062] __x64_sys_sendmsg+0x1bd/0x2a0 [ 379.997524][T15062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.997561][T15062] ? __pfx_ksys_write+0x10/0x10 [ 379.997604][T15062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.997624][T15062] do_syscall_64+0x15f/0xf80 [ 379.997647][T15062] ? trace_irq_disable+0x3b/0x140 [ 379.997667][T15062] ? clear_bhb_loop+0x40/0x90 [ 379.997690][T15062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.997708][T15062] RIP: 0033:0x7f5be299cdd9 [ 379.997726][T15062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.997742][T15062] RSP: 002b:00007f5be37f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.997763][T15062] RAX: ffffffffffffffda RBX: 00007f5be2c15fa0 RCX: 00007f5be299cdd9 [ 379.997777][T15062] RDX: 0000000000044840 RSI: 00002000000001c0 RDI: 0000000000000003 [ 379.997789][T15062] RBP: 00007f5be37f5090 R08: 0000000000000000 R09: 0000000000000000 [ 379.997801][T15062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.997811][T15062] R13: 00007f5be2c16038 R14: 00007f5be2c15fa0 R15: 00007ffc3fe68608 [ 379.997841][T15062] [ 380.049625][T15069] netlink: 'syz.0.2877': attribute type 1 has an invalid length. [ 380.371894][T15069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.549992][T15094] Cannot find add_set index 0 as target [ 380.654606][T15101] netlink: 'syz.0.2888': attribute type 25 has an invalid length. [ 380.806331][T15110] netlink: 'syz.3.2892': attribute type 1 has an invalid length. [ 380.880898][T15110] 8021q: adding VLAN 0 to HW filter on device bond4 [ 380.941571][T15115] bond4: (slave geneve2): making interface the new active one [ 380.970707][T15115] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 381.022417][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.059460][T15128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.081837][T15128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.108667][T15128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.286518][T15135] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 381.607416][T15150] syzkaller0: entered promiscuous mode [ 381.613404][T15150] syzkaller0: entered allmulticast mode [ 382.104777][T15175] __nla_validate_parse: 14 callbacks suppressed [ 382.104799][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2914'. [ 382.364439][T15191] netlink: 'syz.4.2922': attribute type 11 has an invalid length. [ 382.380952][T15191] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2922'. [ 382.550473][T15200] ieee802154 phy0 wpan0: encryption failed: -90 [ 382.857010][T15215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2929'. [ 382.907432][T15216] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.2932'. [ 383.236826][T15236] ieee802154 phy0 wpan0: encryption failed: -90 [ 383.610308][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2948'. [ 384.051719][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 384.059878][ C1] lec:lec_tx_timeout: lec0 [ 384.183007][T15302] netlink: 'syz.4.2962': attribute type 10 has an invalid length. [ 384.208967][T15304] netlink: 'syz.3.2963': attribute type 1 has an invalid length. [ 384.315454][T15304] bond5: entered promiscuous mode [ 384.332580][T15304] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.357501][T15310] lo: entered allmulticast mode [ 384.383125][T15320] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 384.438104][T15304] bond5: (slave bridge5): making interface the new active one [ 384.454230][T15304] bridge5: entered promiscuous mode [ 384.467757][T15304] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 384.657588][T15332] tipc: Enabling of bearer rejected, failed to enable media [ 385.114523][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'. [ 385.153667][T15361] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.953228][T15406] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2998'. [ 385.962026][T15408] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2998'. [ 386.400203][T15429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3003'. [ 386.810279][T15451] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3010'. [ 386.819214][T15453] syzkaller0: entered promiscuous mode [ 386.825628][T15453] syzkaller0: entered allmulticast mode [ 386.921284][T15457] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 387.085773][T15461] syzkaller0: entered promiscuous mode [ 387.106772][T15461] syzkaller0: entered allmulticast mode [ 387.133028][T15459] __nla_validate_parse: 1 callbacks suppressed [ 387.133051][T15459] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3016'. [ 387.153970][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3016'. [ 387.375803][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3021'. [ 387.710471][T15490] nbd: illegal input index 2958377 [ 387.751223][T15493] syzkaller0: entered promiscuous mode [ 387.751379][T15496] netlink: 'syz.3.3026': attribute type 2 has an invalid length. [ 387.760767][T15493] syzkaller0: entered allmulticast mode [ 387.984328][T15509] syzkaller0: entered promiscuous mode [ 387.989956][T15509] syzkaller0: entered allmulticast mode [ 388.186697][T15517] vlan2: entered promiscuous mode [ 388.194023][T15517] bridge0: entered promiscuous mode [ 388.375956][T15522] tipc: Enabled bearer , priority 0 [ 388.461615][T15522] syzkaller0: entered promiscuous mode [ 388.467013][T15525] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 388.468455][T15522] syzkaller0: entered allmulticast mode [ 388.482489][T15522] tipc: Resetting bearer [ 388.490034][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 388.509533][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3038'. [ 388.566072][T10708] tipc: Resetting bearer [ 388.573295][T15521] tipc: Resetting bearer [ 389.019858][ T5205] block nbd1: Possible stuck request ffff88802742e000: control (read@0,1024B). Runtime 180 seconds [ 389.031021][ T5205] block nbd1: Possible stuck request ffff88802742e1c0: control (read@1024,1024B). Runtime 180 seconds [ 389.042518][ T5205] block nbd1: Possible stuck request ffff88802742e380: control (read@2048,1024B). Runtime 180 seconds [ 389.055215][ T5205] block nbd1: Possible stuck request ffff88802742e540: control (read@3072,1024B). Runtime 180 seconds [ 390.120847][ T5193] udevd[5193]: worker [5841] /devices/virtual/block/nbd1 timeout; kill it [ 390.141036][ T5193] udevd[5193]: seq 14547 '/devices/virtual/block/nbd1' killed [ 390.390530][T15521] tipc: Disabling bearer [ 390.509294][ T5916] tipc: Node number set to 705468783 [ 390.539282][T15551] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3044'. [ 391.172197][T15593] netlink: 'syz.0.3056': attribute type 29 has an invalid length. [ 391.181096][T15593] netlink: 'syz.0.3056': attribute type 29 has an invalid length. [ 391.190694][T15593] netlink: 'syz.0.3056': attribute type 32 has an invalid length. [ 391.198679][T15593] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3056'. [ 391.351059][T15599] bond4: entered promiscuous mode [ 391.356199][T15599] bond4: entered allmulticast mode [ 391.727187][T15616] tipc: Enabling of bearer rejected, failed to enable media [ 392.030899][T15618] gretap0: left allmulticast mode [ 392.065483][T15618] gretap0: left promiscuous mode [ 392.106493][T15618] bridge0: port 3(gretap0) entered disabled state [ 392.178791][T15618] x9: left allmulticast mode [ 392.201474][T15618] x9: left promiscuous mode [ 392.234642][T15618] bridge0: port 1(1x9) entered disabled state [ 392.262724][T15618] bridge_slave_1: left promiscuous mode [ 392.276284][T15618] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.304880][T15618] bond0: (slave bond_slave_0): Releasing backup interface [ 392.320967][T15618] bond0: (slave bond_slave_1): Releasing backup interface [ 392.353961][T15618] team0: Port device team_slave_0 removed [ 392.360652][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3077'. [ 392.376931][T15618] team0: Port device team_slave_1 removed [ 392.387484][T15618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.395702][T15618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.406282][T15618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 392.436047][T15652] batadv_slave_0: entered promiscuous mode [ 392.564503][T15649] batadv_slave_0: left promiscuous mode [ 392.674068][T15671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3080'. [ 392.925539][T15684] x_tables: duplicate underflow at hook 1 [ 392.960350][T15688] IPVS: Unknown mcast interface: vcan0 [ 393.144168][T15696] syzkaller0: entered promiscuous mode [ 393.150436][T15696] syzkaller0: entered allmulticast mode [ 393.571925][ T29] audit: type=1107 audit(1776990329.644:5): pid=15719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨁' [ 393.859901][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 393.890400][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 393.945822][T15748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3110'. [ 393.961103][T15749] xt_TCPMSS: Only works on TCP SYN packets [ 393.975235][T15748] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 393.992613][T15748] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 393.999196][T15748] syzkaller1: linktype set to 823 [ 394.006068][T15748] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3110'. [ 394.020861][T15749] xt_TCPMSS: Only works on TCP SYN packets [ 394.035545][T15748] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3110'. [ 394.041427][T15753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3111'. [ 394.551500][T15781] netlink: 'syz.3.3123': attribute type 2 has an invalid length. [ 394.656807][T15786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3124'. [ 395.326610][T15818] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3136'. [ 395.874755][T15851] IPv6: sit1: Disabled Multicast RS [ 396.163613][T15870] xt_hashlimit: size too large, truncated to 1048576 [ 396.191182][T15868] xt_hashlimit: size too large, truncated to 1048576 [ 396.352843][T15884] ieee802154 phy0 wpan0: encryption failed: -90 [ 396.629330][T15895] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 397.001461][T15921] syzkaller0: entered promiscuous mode [ 397.007237][T15921] syzkaller0: entered allmulticast mode [ 397.134363][T15933] ieee802154 phy0 wpan0: encryption failed: -90 [ 398.995465][ T7392] lec:lec_start_xmit: lec0:No lecd attached [ 399.866944][T15914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.072704][T15952] __nla_validate_parse: 3 callbacks suppressed [ 400.072733][T15952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3177'. [ 400.126126][T15954] netlink: 'syz.1.3179': attribute type 2 has an invalid length. [ 400.249627][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'. [ 400.313368][T15967] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 400.344959][T15972] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.3186'. [ 400.465292][T15982] ieee802154 phy0 wpan0: encryption failed: -90 [ 400.573401][T15994] sch_fq: defrate 0 ignored. [ 400.628615][T15996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3193'. [ 400.646388][T15998] netlink: 'syz.1.3194': attribute type 1 has an invalid length. [ 400.926354][T16005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.939795][T16016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3198'. [ 401.199835][T16028] ieee802154 phy0 wpan0: encryption failed: -90 [ 401.229637][T16032] FAULT_INJECTION: forcing a failure. [ 401.229637][T16032] name failslab, interval 1, probability 0, space 0, times 0 [ 401.256560][T16032] CPU: 1 UID: 0 PID: 16032 Comm: syz.0.3203 Not tainted syzkaller #0 PREEMPT(full) [ 401.256590][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.256601][T16032] Call Trace: [ 401.256609][T16032] [ 401.256618][T16032] dump_stack_lvl+0xe8/0x150 [ 401.256653][T16032] should_fail_ex+0x412/0x560 [ 401.256687][T16032] should_failslab+0xa8/0x100 [ 401.256708][T16032] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 401.256737][T16032] ? __alloc_skb+0x186/0x7d0 [ 401.256762][T16032] ? __alloc_skb+0x1d0/0x7d0 [ 401.256786][T16032] ? __local_bh_enable_ip+0xd0/0x130 [ 401.256818][T16032] __alloc_skb+0x1d0/0x7d0 [ 401.256852][T16032] netlink_sendmsg+0x5d4/0xb40 [ 401.256893][T16032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.256926][T16032] ? aa_sock_msg_perm+0xf1/0x1b0 [ 401.256964][T16032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.256997][T16032] ____sys_sendmsg+0x972/0x9f0 [ 401.257027][T16032] ? __might_fault+0xaf/0x130 [ 401.257060][T16032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.257100][T16032] ? import_iovec+0x73/0xa0 [ 401.257125][T16032] ___sys_sendmsg+0x2a5/0x360 [ 401.257153][T16032] ? __lock_acquire+0x6b5/0x2cf0 [ 401.257185][T16032] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.257252][T16032] ? __fget_files+0x2a/0x420 [ 401.257277][T16032] ? __fget_files+0x3a0/0x420 [ 401.257313][T16032] __x64_sys_sendmsg+0x1bd/0x2a0 [ 401.257347][T16032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.257388][T16032] ? __pfx_ksys_write+0x10/0x10 [ 401.257432][T16032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.257456][T16032] do_syscall_64+0x15f/0xf80 [ 401.257481][T16032] ? trace_irq_disable+0x3b/0x140 [ 401.257502][T16032] ? clear_bhb_loop+0x40/0x90 [ 401.257528][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.257548][T16032] RIP: 0033:0x7fb33dd9cdd9 [ 401.257567][T16032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.257584][T16032] RSP: 002b:00007fb33ebfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.257605][T16032] RAX: ffffffffffffffda RBX: 00007fb33e015fa0 RCX: 00007fb33dd9cdd9 [ 401.257620][T16032] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 401.257633][T16032] RBP: 00007fb33ebfa090 R08: 0000000000000000 R09: 0000000000000000 [ 401.257645][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.257657][T16032] R13: 00007fb33e016038 R14: 00007fb33e015fa0 R15: 00007ffd6d3451d8 [ 401.257692][T16032] [ 401.516706][T16035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3205'. [ 401.551806][T16038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3204'. [ 401.767703][T16048] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3207'. [ 402.149681][T16069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3216'. [ 402.512036][T16093] netlink: 'syz.4.3221': attribute type 64 has an invalid length. [ 402.552757][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3221'. [ 402.754361][T16098] netlink: 'syz.4.3224': attribute type 1 has an invalid length. [ 403.289425][T16120] tipc: Enabled bearer , priority 0 [ 403.402524][T16124] syzkaller0: entered promiscuous mode [ 403.417187][T16124] syzkaller0: entered allmulticast mode [ 403.433391][T16124] tipc: Resetting bearer [ 403.479656][T16124] tipc: Resetting bearer [ 403.491414][T16131] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 404.056560][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 404.064684][ C1] lec:lec_tx_timeout: lec0 [ 405.574221][T16124] tipc: Disabling bearer [ 405.669254][T16160] __nla_validate_parse: 4 callbacks suppressed [ 405.669276][T16160] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3240'. [ 405.843612][T16171] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 406.096805][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3248'. [ 406.340192][T16197] netlink: 'syz.2.3254': attribute type 11 has an invalid length. [ 406.348790][T16197] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3254'. [ 406.816785][T16227] netlink: 'syz.1.3263': attribute type 11 has an invalid length. [ 406.832071][T16227] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.3263'. [ 406.868568][T16227] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.148492][T16243] delete_channel: no stack [ 407.261509][T16256] FAULT_INJECTION: forcing a failure. [ 407.261509][T16256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.274950][T16256] CPU: 1 UID: 0 PID: 16256 Comm: syz.1.3273 Not tainted syzkaller #0 PREEMPT(full) [ 407.274979][T16256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.274991][T16256] Call Trace: [ 407.275000][T16256] [ 407.275008][T16256] dump_stack_lvl+0xe8/0x150 [ 407.275044][T16256] should_fail_ex+0x412/0x560 [ 407.275078][T16256] _copy_from_iter+0x1d3/0x1670 [ 407.275110][T16256] ? rcu_is_watching+0x15/0xb0 [ 407.275146][T16256] ? __pfx__copy_from_iter+0x10/0x10 [ 407.275183][T16256] ? netlink_sendmsg+0x650/0xb40 [ 407.275208][T16256] ? skb_put+0x11b/0x210 [ 407.275243][T16256] netlink_sendmsg+0x6c0/0xb40 [ 407.275275][T16256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.275303][T16256] ? aa_sock_msg_perm+0xf1/0x1b0 [ 407.275327][T16256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.275355][T16256] ____sys_sendmsg+0x972/0x9f0 [ 407.275380][T16256] ? __might_fault+0xaf/0x130 [ 407.275412][T16256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.275447][T16256] ? import_iovec+0x73/0xa0 [ 407.275469][T16256] ___sys_sendmsg+0x2a5/0x360 [ 407.275496][T16256] ? __lock_acquire+0x6b5/0x2cf0 [ 407.275525][T16256] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.275582][T16256] ? __fget_files+0x2a/0x420 [ 407.275602][T16256] ? __fget_files+0x3a0/0x420 [ 407.277338][T16256] __x64_sys_sendmsg+0x1bd/0x2a0 [ 407.277383][T16256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.277419][T16256] ? __pfx_ksys_write+0x10/0x10 [ 407.277456][T16256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.277476][T16256] do_syscall_64+0x15f/0xf80 [ 407.277500][T16256] ? trace_irq_disable+0x3b/0x140 [ 407.277521][T16256] ? clear_bhb_loop+0x40/0x90 [ 407.277545][T16256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.277563][T16256] RIP: 0033:0x7f176119cdd9 [ 407.277583][T16256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.277599][T16256] RSP: 002b:00007f17620b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.277622][T16256] RAX: ffffffffffffffda RBX: 00007f1761415fa0 RCX: 00007f176119cdd9 [ 407.277635][T16256] RDX: 0000000000048884 RSI: 0000200000000180 RDI: 0000000000000003 [ 407.277648][T16256] RBP: 00007f17620b9090 R08: 0000000000000000 R09: 0000000000000000 [ 407.277660][T16256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.277671][T16256] R13: 00007f1761416038 R14: 00007f1761415fa0 R15: 00007fff59d3ce18 [ 407.277700][T16256] [ 408.111160][T16295] netlink: 'syz.2.3283': attribute type 13 has an invalid length. [ 408.121800][T16295] netlink: 'syz.2.3283': attribute type 58 has an invalid length. [ 408.129895][T16295] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3283'. [ 408.574613][T16322] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 408.782236][T16330] syzkaller0: entered promiscuous mode [ 408.802348][T16330] syzkaller0: entered allmulticast mode [ 408.920422][T16339] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 408.948547][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 408.958934][T16342] tipc: Enabling of bearer rejected, failed to enable media [ 409.055755][T16346] netlink: 'syz.2.3303': attribute type 2 has an invalid length. [ 409.093339][T16346] netlink: 'syz.2.3303': attribute type 2 has an invalid length. [ 409.632356][T16381] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 409.800469][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3316'. [ 409.843492][T16397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.861971][T16398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3317'. [ 410.125500][T16412] macvtap1: entered allmulticast mode [ 410.131063][T16412] veth0_macvtap: entered allmulticast mode [ 410.216312][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3323'. [ 410.233169][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3323'. [ 410.338388][T16424] tipc: Enabling of bearer rejected, failed to enable media [ 410.760896][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3339'. [ 410.876626][T16447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3340'. [ 411.004208][T16460] syzkaller1: entered promiscuous mode [ 411.021871][T16460] syzkaller1: entered allmulticast mode [ 411.062062][T16460] netlink: 'syz.4.3344': attribute type 1 has an invalid length. [ 411.415630][T16482] netlink: 'syz.2.3350': attribute type 2 has an invalid length. [ 411.496402][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 411.537686][T16488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.579787][T16493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.597676][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'. [ 411.986315][T16508] tipc: Enabling of bearer rejected, failed to enable media [ 411.991348][T16511] netlink: 'syz.4.3363': attribute type 21 has an invalid length. [ 412.005446][T16511] IPv6: NLM_F_CREATE should be specified when creating new route [ 412.025683][T16511] netlink: 'syz.4.3363': attribute type 2 has an invalid length. [ 412.041951][T16511] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3363'. [ 412.365530][T16534] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3369'. [ 412.408563][T16526] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3366'. [ 412.600107][T16539] netlink: 'syz.4.3371': attribute type 1 has an invalid length. [ 412.667369][ T5917] IPVS: starting estimator thread 0... [ 412.697733][T16539] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.762559][T16549] vlan2: entered allmulticast mode [ 412.779237][T16548] IPVS: using max 24 ests per chain, 57600 per kthread [ 412.825695][T16549] veth0_to_bond: entered allmulticast mode [ 412.855126][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 412.872706][T16556] xt_connbytes: Forcing CT accounting to be enabled [ 412.889380][T16549] bond5: (slave vlan2): Enslaving as an active interface with a down link [ 412.977830][T16551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3375'. [ 412.995379][T16539] gtp1: entered promiscuous mode [ 413.013774][T16539] gtp1: entered allmulticast mode [ 413.023841][T16556] xt_CT: No such helper "netbios-ns" [ 413.044647][T16551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3375'. [ 413.173999][T16566] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 413.807654][T16601] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 413.839964][T16602] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 414.463808][T16627] bridge_slave_1: left allmulticast mode [ 414.724105][T16627] bond2: left promiscuous mode [ 414.728964][T16627] bond2: left allmulticast mode [ 414.735024][T16627] sit2: left allmulticast mode [ 414.777402][T16629] netlink: 'syz.4.3404': attribute type 8 has an invalid length. [ 414.798097][T16629] sch_fq: defrate 0 ignored. [ 414.844703][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.874290][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.885004][T16650] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 414.885301][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.912896][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.963523][T16640] syzkaller1: entered promiscuous mode [ 414.971632][T16640] syzkaller1: entered allmulticast mode [ 414.983445][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.995265][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.008057][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.026641][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.623340][T16684] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 415.828388][T16688] syzkaller0: entered promiscuous mode [ 415.843303][T16688] syzkaller0: entered allmulticast mode [ 416.019375][T16695] __nla_validate_parse: 7 callbacks suppressed [ 416.019399][T16695] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3426'. [ 416.053128][T16697] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.158641][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3430'. [ 416.282697][T16712] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 416.322772][T16716] netlink: 'syz.2.3434': attribute type 1 has an invalid length. [ 416.336447][T16714] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 416.395919][T16719] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3432'. [ 416.440264][T16722] tipc: Enabling of bearer rejected, failed to enable media [ 416.462790][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 416.670188][T16735] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3441'. [ 416.697497][T16714] bond5 (unregistering): Released all slaves [ 416.785124][T16725] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3437'. [ 416.939738][T16743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3444'. [ 417.073834][T16747] netlink: 'syz.2.3446': attribute type 18 has an invalid length. [ 417.131474][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.148615][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.158021][T16747] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.168913][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.191005][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.780112][T16783] netlink: 'syz.0.3457': attribute type 13 has an invalid length. [ 417.810060][T16783] gretap0: refused to change device tx_queue_len [ 417.853055][T16783] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 418.183776][T16802] netlink: 'syz.3.3465': attribute type 7 has an invalid length. [ 418.188381][T16801] netlink: 'syz.2.3464': attribute type 39 has an invalid length. [ 418.309956][T16804] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3466'. [ 418.345033][T16804] syzkaller0: entered promiscuous mode [ 418.373283][T16804] syzkaller0: entered allmulticast mode [ 418.574479][T16818] syzkaller1: entered promiscuous mode [ 418.596563][T16818] syzkaller1: entered allmulticast mode [ 418.801358][T16827] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3474'. [ 418.813580][T16827] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3474'. [ 419.092943][ T5205] block nbd1: Possible stuck request ffff88802742e000: control (read@0,1024B). Runtime 210 seconds [ 419.105311][ T5205] block nbd1: Possible stuck request ffff88802742e1c0: control (read@1024,1024B). Runtime 210 seconds [ 419.117634][ T5205] block nbd1: Possible stuck request ffff88802742e380: control (read@2048,1024B). Runtime 210 seconds [ 419.128730][ T5205] block nbd1: Possible stuck request ffff88802742e540: control (read@3072,1024B). Runtime 210 seconds [ 419.349642][T16853] netlink: 'syz.4.3482': attribute type 1 has an invalid length. [ 419.364814][T16853] netlink: 'syz.4.3482': attribute type 9 has an invalid length. [ 419.370200][T16855] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 419.427542][T16857] netlink: 'syz.4.3484': attribute type 1 has an invalid length. [ 419.871568][T16880] Bluetooth: MGMT ver 1.23 [ 419.941274][T16889] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 420.006775][T16896] FAULT_INJECTION: forcing a failure. [ 420.006775][T16896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.022098][T16896] CPU: 0 UID: 0 PID: 16896 Comm: syz.0.3496 Not tainted syzkaller #0 PREEMPT(full) [ 420.022126][T16896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.022139][T16896] Call Trace: [ 420.022147][T16896] [ 420.022155][T16896] dump_stack_lvl+0xe8/0x150 [ 420.022190][T16896] should_fail_ex+0x412/0x560 [ 420.022224][T16896] _copy_from_user+0x2d/0xb0 [ 420.022247][T16896] ___sys_sendmsg+0x1c6/0x360 [ 420.022277][T16896] ? __lock_acquire+0x6b5/0x2cf0 [ 420.022308][T16896] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.022377][T16896] ? __fget_files+0x2a/0x420 [ 420.022400][T16896] ? __fget_files+0x3a0/0x420 [ 420.022441][T16896] __x64_sys_sendmsg+0x1bd/0x2a0 [ 420.022475][T16896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.022517][T16896] ? __pfx_ksys_write+0x10/0x10 [ 420.022557][T16896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.022579][T16896] do_syscall_64+0x15f/0xf80 [ 420.022614][T16896] ? trace_irq_disable+0x3b/0x140 [ 420.022636][T16896] ? clear_bhb_loop+0x40/0x90 [ 420.022662][T16896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.022682][T16896] RIP: 0033:0x7fb33dd9cdd9 [ 420.022702][T16896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.022719][T16896] RSP: 002b:00007fb33ebfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.022742][T16896] RAX: ffffffffffffffda RBX: 00007fb33e015fa0 RCX: 00007fb33dd9cdd9 [ 420.022758][T16896] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 420.022770][T16896] RBP: 00007fb33ebfa090 R08: 0000000000000000 R09: 0000000000000000 [ 420.022783][T16896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.022795][T16896] R13: 00007fb33e016038 R14: 00007fb33e015fa0 R15: 00007ffd6d3451d8 [ 420.022829][T16896] [ 420.433967][ T5917] IPVS: starting estimator thread 0... [ 420.457872][T16909] syzkaller0: entered promiscuous mode [ 420.463825][T16909] syzkaller0: entered allmulticast mode [ 420.531944][T16914] IPVS: using max 25 ests per chain, 60000 per kthread [ 420.706505][T16927] FAULT_INJECTION: forcing a failure. [ 420.706505][T16927] name failslab, interval 1, probability 0, space 0, times 0 [ 420.720231][T16927] CPU: 1 UID: 0 PID: 16927 Comm: syz.2.3509 Not tainted syzkaller #0 PREEMPT(full) [ 420.720261][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.720274][T16927] Call Trace: [ 420.720282][T16927] [ 420.720291][T16927] dump_stack_lvl+0xe8/0x150 [ 420.720327][T16927] should_fail_ex+0x412/0x560 [ 420.720361][T16927] should_failslab+0xa8/0x100 [ 420.720385][T16927] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 420.720415][T16927] ? __alloc_skb+0x186/0x7d0 [ 420.720442][T16927] ? __alloc_skb+0x1d0/0x7d0 [ 420.720467][T16927] ? __local_bh_enable_ip+0xd0/0x130 [ 420.720500][T16927] __alloc_skb+0x1d0/0x7d0 [ 420.720538][T16927] ? netlink_ack_tlv_len+0x6c/0x210 [ 420.720571][T16927] netlink_ack+0x146/0xa50 [ 420.720597][T16927] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.720627][T16927] ? __lock_acquire+0x6b5/0x2cf0 [ 420.720669][T16927] netlink_rcv_skb+0x2b6/0x4b0 [ 420.720699][T16927] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.720735][T16927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.720778][T16927] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.720806][T16927] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.720842][T16927] netlink_unicast+0x75c/0x8e0 [ 420.720881][T16927] netlink_sendmsg+0x813/0xb40 [ 420.720922][T16927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.720956][T16927] ? aa_sock_msg_perm+0xf1/0x1b0 [ 420.720985][T16927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.721019][T16927] ____sys_sendmsg+0x972/0x9f0 [ 420.721050][T16927] ? __might_fault+0xaf/0x130 [ 420.721084][T16927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.721125][T16927] ? import_iovec+0x73/0xa0 [ 420.721150][T16927] ___sys_sendmsg+0x2a5/0x360 [ 420.721179][T16927] ? __lock_acquire+0x6b5/0x2cf0 [ 420.721209][T16927] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.721278][T16927] ? __fget_files+0x2a/0x420 [ 420.721303][T16927] ? __fget_files+0x3a0/0x420 [ 420.721340][T16927] __x64_sys_sendmsg+0x1bd/0x2a0 [ 420.721373][T16927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.721414][T16927] ? __pfx_ksys_write+0x10/0x10 [ 420.721454][T16927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.721476][T16927] do_syscall_64+0x15f/0xf80 [ 420.721523][T16927] ? trace_irq_disable+0x3b/0x140 [ 420.721546][T16927] ? clear_bhb_loop+0x40/0x90 [ 420.721571][T16927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.721591][T16927] RIP: 0033:0x7f5be299cdd9 [ 420.721612][T16927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.721630][T16927] RSP: 002b:00007f5be37f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.721652][T16927] RAX: ffffffffffffffda RBX: 00007f5be2c15fa0 RCX: 00007f5be299cdd9 [ 420.721667][T16927] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 420.721680][T16927] RBP: 00007f5be37f5090 R08: 0000000000000000 R09: 0000000000000000 [ 420.721692][T16927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.721704][T16927] R13: 00007f5be2c16038 R14: 00007f5be2c15fa0 R15: 00007ffc3fe68608 [ 420.721739][T16927] [ 421.070029][T16931] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 421.095853][T16929] __nla_validate_parse: 7 callbacks suppressed [ 421.095873][T16929] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3510'. [ 421.213803][T16934] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3513'. [ 421.286871][T16934] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3513'. [ 421.354541][T16942] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3516'. [ 421.386974][T16944] pim6reg: entered allmulticast mode [ 422.050377][T16974] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 422.236138][T16965] tipc: Enabling of bearer rejected, failed to enable media [ 422.259919][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3526'. [ 422.325335][T16982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3528'. [ 422.382116][T16984] FAULT_INJECTION: forcing a failure. [ 422.382116][T16984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.424193][T16984] CPU: 0 UID: 0 PID: 16984 Comm: syz.0.3529 Not tainted syzkaller #0 PREEMPT(full) [ 422.424223][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 422.424235][T16984] Call Trace: [ 422.424244][T16984] [ 422.424253][T16984] dump_stack_lvl+0xe8/0x150 [ 422.424289][T16984] should_fail_ex+0x412/0x560 [ 422.424324][T16984] _copy_from_user+0x2d/0xb0 [ 422.424347][T16984] __sys_connect+0x156/0x450 [ 422.424379][T16984] ? __pfx___sys_connect+0x10/0x10 [ 422.424421][T16984] ? __pfx_ksys_write+0x10/0x10 [ 422.424457][T16984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.424481][T16984] __x64_sys_connect+0x7a/0x90 [ 422.424510][T16984] do_syscall_64+0x15f/0xf80 [ 422.424535][T16984] ? trace_irq_disable+0x3b/0x140 [ 422.424558][T16984] ? clear_bhb_loop+0x40/0x90 [ 422.424593][T16984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.424613][T16984] RIP: 0033:0x7fb33dd9cdd9 [ 422.424633][T16984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.424651][T16984] RSP: 002b:00007fb33ebfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 422.424675][T16984] RAX: ffffffffffffffda RBX: 00007fb33e015fa0 RCX: 00007fb33dd9cdd9 [ 422.424690][T16984] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000006 [ 422.424702][T16984] RBP: 00007fb33ebfa090 R08: 0000000000000000 R09: 0000000000000000 [ 422.424715][T16984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.424727][T16984] R13: 00007fb33e016038 R14: 00007fb33e015fa0 R15: 00007ffd6d3451d8 [ 422.424762][T16984] [ 422.658943][T16987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3530'. [ 422.972318][T16993] FAULT_INJECTION: forcing a failure. [ 422.972318][T16993] name failslab, interval 1, probability 0, space 0, times 0 [ 423.004473][T16993] CPU: 1 UID: 0 PID: 16993 Comm: syz.4.3532 Not tainted syzkaller #0 PREEMPT(full) [ 423.004527][T16993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.004540][T16993] Call Trace: [ 423.004548][T16993] [ 423.004558][T16993] dump_stack_lvl+0xe8/0x150 [ 423.004594][T16993] should_fail_ex+0x412/0x560 [ 423.004629][T16993] should_failslab+0xa8/0x100 [ 423.004653][T16993] __kmalloc_cache_noprof+0x88/0x660 [ 423.004690][T16993] ? resv_map_alloc+0x51/0x2c0 [ 423.004725][T16993] resv_map_alloc+0x51/0x2c0 [ 423.004756][T16993] hugetlbfs_get_inode+0x5d/0x650 [ 423.004779][T16993] ? fput+0xa0/0xd0 [ 423.004809][T16993] hugetlb_file_setup+0x21d/0x630 [ 423.004835][T16993] ksys_mmap_pgoff+0x22e/0x760 [ 423.004867][T16993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.004889][T16993] do_syscall_64+0x15f/0xf80 [ 423.004914][T16993] ? trace_irq_disable+0x3b/0x140 [ 423.004937][T16993] ? clear_bhb_loop+0x40/0x90 [ 423.004963][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.004982][T16993] RIP: 0033:0x7f1b1c79cdd9 [ 423.005002][T16993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.005019][T16993] RSP: 002b:00007f1b1d5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 423.005041][T16993] RAX: ffffffffffffffda RBX: 00007f1b1ca15fa0 RCX: 00007f1b1c79cdd9 [ 423.005056][T16993] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 423.005070][T16993] RBP: 00007f1b1d5c9090 R08: ffffffffffffffff R09: 0000000000000000 [ 423.005083][T16993] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 423.005095][T16993] R13: 00007f1b1ca16038 R14: 00007f1b1ca15fa0 R15: 00007ffc4b95d7d8 [ 423.005129][T16993] [ 423.365030][T17003] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 423.489682][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3538'. [ 423.619304][T17010] netlink: 'syz.4.3539': attribute type 39 has an invalid length. [ 423.844808][T17018] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3544'. [ 424.545643][T17047] FAULT_INJECTION: forcing a failure. [ 424.545643][T17047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.587583][T17047] CPU: 1 UID: 0 PID: 17047 Comm: syz.2.3555 Not tainted syzkaller #0 PREEMPT(full) [ 424.587612][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.587624][T17047] Call Trace: [ 424.587632][T17047] [ 424.587639][T17047] dump_stack_lvl+0xe8/0x150 [ 424.587673][T17047] should_fail_ex+0x412/0x560 [ 424.587705][T17047] _copy_from_iter+0x1d3/0x1670 [ 424.587738][T17047] ? rcu_is_watching+0x15/0xb0 [ 424.587772][T17047] ? __pfx__copy_from_iter+0x10/0x10 [ 424.587810][T17047] ? netlink_sendmsg+0x650/0xb40 [ 424.587837][T17047] ? skb_put+0x11b/0x210 [ 424.587868][T17047] netlink_sendmsg+0x6c0/0xb40 [ 424.587907][T17047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.587939][T17047] ? aa_sock_msg_perm+0xf1/0x1b0 [ 424.587967][T17047] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.588000][T17047] ____sys_sendmsg+0x972/0x9f0 [ 424.588029][T17047] ? __might_fault+0xaf/0x130 [ 424.588062][T17047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.588101][T17047] ? import_iovec+0x73/0xa0 [ 424.588124][T17047] ___sys_sendmsg+0x2a5/0x360 [ 424.588152][T17047] ? __lock_acquire+0x6b5/0x2cf0 [ 424.588182][T17047] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.588250][T17047] ? __fget_files+0x2a/0x420 [ 424.588272][T17047] ? __fget_files+0x3a0/0x420 [ 424.588307][T17047] __x64_sys_sendmsg+0x1bd/0x2a0 [ 424.588339][T17047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.588378][T17047] ? __pfx_ksys_write+0x10/0x10 [ 424.588417][T17047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.588439][T17047] do_syscall_64+0x15f/0xf80 [ 424.588463][T17047] ? trace_irq_disable+0x3b/0x140 [ 424.588484][T17047] ? clear_bhb_loop+0x40/0x90 [ 424.588514][T17047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.588535][T17047] RIP: 0033:0x7f5be299cdd9 [ 424.588554][T17047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.588571][T17047] RSP: 002b:00007f5be37f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.588594][T17047] RAX: ffffffffffffffda RBX: 00007f5be2c15fa0 RCX: 00007f5be299cdd9 [ 424.588608][T17047] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 424.588619][T17047] RBP: 00007f5be37f5090 R08: 0000000000000000 R09: 0000000000000000 [ 424.588631][T17047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.588642][T17047] R13: 00007f5be2c16038 R14: 00007f5be2c15fa0 R15: 00007ffc3fe68608 [ 424.588674][T17047] [ 424.600361][T17050] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 424.759919][T17057] netlink: 'syz.4.3558': attribute type 1 has an invalid length. [ 424.853703][T17051] can: request_module (can-proto-5) failed. [ 424.872246][T17060] netlink: 'syz.2.3559': attribute type 39 has an invalid length. [ 424.907671][T17060] FAULT_INJECTION: forcing a failure. [ 424.907671][T17060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.924265][T17058] netlink: 'syz.4.3558': attribute type 1 has an invalid length. [ 424.935390][T17060] CPU: 1 UID: 0 PID: 17060 Comm: syz.2.3559 Not tainted syzkaller #0 PREEMPT(full) [ 424.935417][T17060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.935430][T17060] Call Trace: [ 424.935438][T17060] [ 424.935446][T17060] dump_stack_lvl+0xe8/0x150 [ 424.935482][T17060] should_fail_ex+0x412/0x560 [ 424.935526][T17060] _copy_to_user+0x31/0xb0 [ 424.935550][T17060] simple_read_from_buffer+0xe1/0x170 [ 424.935584][T17060] proc_fail_nth_read+0x1bb/0x230 [ 424.935615][T17060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.935646][T17060] ? rw_verify_area+0x2a6/0x4d0 [ 424.935674][T17060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.935703][T17060] vfs_read+0x20c/0xa70 [ 424.935737][T17060] ? __pfx___mutex_lock+0x10/0x10 [ 424.935766][T17060] ? __pfx_vfs_read+0x10/0x10 [ 424.935797][T17060] ? __fget_files+0x2a/0x420 [ 424.935828][T17060] ? __fget_files+0x3a0/0x420 [ 424.935851][T17060] ? __fget_files+0x2a/0x420 [ 424.935887][T17060] ksys_read+0x150/0x270 [ 424.935919][T17060] ? __pfx_ksys_read+0x10/0x10 [ 424.935958][T17060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.935986][T17060] do_syscall_64+0x15f/0xf80 [ 424.936010][T17060] ? trace_irq_disable+0x3b/0x140 [ 424.936033][T17060] ? clear_bhb_loop+0x40/0x90 [ 424.936059][T17060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.936080][T17060] RIP: 0033:0x7f5be295d60e [ 424.936100][T17060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 424.936118][T17060] RSP: 002b:00007f5be37d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.936141][T17060] RAX: ffffffffffffffda RBX: 00007f5be37d46c0 RCX: 00007f5be295d60e [ 424.936157][T17060] RDX: 000000000000000f RSI: 00007f5be37d40a0 RDI: 0000000000000009 [ 424.936170][T17060] RBP: 00007f5be37d4090 R08: 0000000000000000 R09: 0000000000000000 [ 424.936183][T17060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.936196][T17060] R13: 00007f5be2c16128 R14: 00007f5be2c16090 R15: 00007ffc3fe68608 [ 424.936231][T17060] [ 425.469591][T17072] netlink: 'syz.4.3562': attribute type 39 has an invalid length. [ 425.880941][T17086] syzkaller0: entered promiscuous mode [ 425.889162][T17086] syzkaller0: entered allmulticast mode [ 426.019653][T17092] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 426.079870][T17095] netlink: 'syz.1.3571': attribute type 39 has an invalid length. [ 426.295957][T17102] vlan2: entered promiscuous mode [ 426.573743][T17112] ieee802154 phy0 wpan0: encryption failed: -90 [ 426.687630][T17119] netlink: 'syz.1.3580': attribute type 39 has an invalid length. [ 426.745778][T17123] syzkaller0: entered promiscuous mode [ 426.751479][T17123] syzkaller0: entered allmulticast mode [ 426.799169][T17125] Cannot find set identified by id 1 to match [ 427.042074][T17132] netlink: 'syz.4.3587': attribute type 32 has an invalid length. [ 427.237856][T17143] FAULT_INJECTION: forcing a failure. [ 427.237856][T17143] name failslab, interval 1, probability 0, space 0, times 0 [ 427.264787][T17144] ieee802154 phy0 wpan0: encryption failed: -90 [ 427.277707][T17143] CPU: 0 UID: 0 PID: 17143 Comm: syz.0.3593 Not tainted syzkaller #0 PREEMPT(full) [ 427.277739][T17143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.277751][T17143] Call Trace: [ 427.277760][T17143] [ 427.277769][T17143] dump_stack_lvl+0xe8/0x150 [ 427.277806][T17143] should_fail_ex+0x412/0x560 [ 427.277842][T17143] should_failslab+0xa8/0x100 [ 427.277866][T17143] __kmalloc_noprof+0xe8/0x760 [ 427.277896][T17143] ? tcf_idr_create+0x5d/0x6b0 [ 427.277920][T17143] ? tcf_idr_check_alloc+0xc8/0x7f0 [ 427.277946][T17143] tcf_idr_create+0x5d/0x6b0 [ 427.277970][T17143] ? __nla_parse+0x40/0x60 [ 427.277995][T17143] tcf_mpls_init+0x4c6/0x12d0 [ 427.278029][T17143] ? __pfx_tcf_mpls_init+0x10/0x10 [ 427.278068][T17143] ? nla_memcpy+0x5b/0xc0 [ 427.278099][T17143] tcf_action_init_1+0x4ba/0x740 [ 427.278133][T17143] ? __pfx_tcf_action_init_1+0x10/0x10 [ 427.278158][T17143] ? _raw_read_unlock+0x28/0x50 [ 427.278181][T17143] ? tc_action_load_ops+0x247/0x540 [ 427.278230][T17143] ? __nla_parse+0x40/0x60 [ 427.278254][T17143] tcf_action_init+0x31e/0xb40 [ 427.278283][T17143] ? __lock_acquire+0x6b5/0x2cf0 [ 427.278317][T17143] ? __pfx_tcf_action_init+0x10/0x10 [ 427.278374][T17143] ? __pfx___nla_validate_parse+0x10/0x10 [ 427.278438][T17143] tc_ctl_action+0x43b/0xc70 [ 427.278479][T17143] ? __pfx_tc_ctl_action+0x10/0x10 [ 427.278520][T17143] ? trace_contention_end+0x3d/0x140 [ 427.278591][T17143] ? __pfx_tc_ctl_action+0x10/0x10 [ 427.278616][T17143] rtnetlink_rcv_msg+0x77e/0xbe0 [ 427.278643][T17143] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 427.278671][T17143] ? netlink_sendmsg+0x5d4/0xb40 [ 427.278703][T17143] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 427.278730][T17143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.278756][T17143] ? __lock_acquire+0x6b5/0x2cf0 [ 427.278798][T17143] netlink_rcv_skb+0x232/0x4b0 [ 427.278828][T17143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.278858][T17143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.278902][T17143] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.278936][T17143] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.278968][T17143] netlink_unicast+0x75c/0x8e0 [ 427.279008][T17143] netlink_sendmsg+0x813/0xb40 [ 427.279048][T17143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.279081][T17143] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.279110][T17143] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.279144][T17143] ____sys_sendmsg+0x972/0x9f0 [ 427.279174][T17143] ? __might_fault+0xaf/0x130 [ 427.279206][T17143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.279246][T17143] ? import_iovec+0x73/0xa0 [ 427.279273][T17143] ___sys_sendmsg+0x2a5/0x360 [ 427.279300][T17143] ? __lock_acquire+0x6b5/0x2cf0 [ 427.279331][T17143] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.279401][T17143] ? __fget_files+0x2a/0x420 [ 427.279426][T17143] ? __fget_files+0x3a0/0x420 [ 427.279464][T17143] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.279507][T17143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.279548][T17143] ? __pfx_ksys_write+0x10/0x10 [ 427.279594][T17143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.279617][T17143] do_syscall_64+0x15f/0xf80 [ 427.279640][T17143] ? trace_irq_disable+0x3b/0x140 [ 427.279663][T17143] ? clear_bhb_loop+0x40/0x90 [ 427.279688][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.279708][T17143] RIP: 0033:0x7fb33dd9cdd9 [ 427.279730][T17143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.279747][T17143] RSP: 002b:00007fb33ebfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.279770][T17143] RAX: ffffffffffffffda RBX: 00007fb33e015fa0 RCX: 00007fb33dd9cdd9 [ 427.279785][T17143] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 427.279798][T17143] RBP: 00007fb33ebfa090 R08: 0000000000000000 R09: 0000000000000000 [ 427.279811][T17143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.279824][T17143] R13: 00007fb33e016038 R14: 00007fb33e015fa0 R15: 00007ffd6d3451d8 [ 427.279860][T17143] [ 427.806482][T17146] netlink: 'syz.4.3591': attribute type 39 has an invalid length. [ 428.159711][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'. [ 428.193077][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3597'. [ 428.205925][T17159] sctp: [Deprecated]: syz.0.3597 (pid 17159) Use of int in maxseg socket option. [ 428.205925][T17159] Use struct sctp_assoc_value instead [ 428.345329][T17165] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3601'. [ 428.578318][T17175] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 428.671265][T17179] ieee802154 phy0 wpan0: encryption failed: -90 [ 428.867646][T17188] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3610'. [ 429.014094][ T5144] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 429.174165][T17197] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3613'. [ 429.240638][T17199] FAULT_INJECTION: forcing a failure. [ 429.240638][T17199] name failslab, interval 1, probability 0, space 0, times 0 [ 429.248102][T17200] netlink: 'syz.0.3613': attribute type 39 has an invalid length. [ 429.282020][T17199] CPU: 1 UID: 0 PID: 17199 Comm: syz.3.3614 Not tainted syzkaller #0 PREEMPT(full) [ 429.282049][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.282061][T17199] Call Trace: [ 429.282069][T17199] [ 429.282078][T17199] dump_stack_lvl+0xe8/0x150 [ 429.282114][T17199] should_fail_ex+0x412/0x560 [ 429.282147][T17199] should_failslab+0xa8/0x100 [ 429.282166][T17199] ? security_file_alloc+0x34/0x310 [ 429.282189][T17199] kmem_cache_alloc_noprof+0x87/0x650 [ 429.282218][T17199] ? rcu_is_watching+0x15/0xb0 [ 429.282245][T17199] ? trace_kmem_cache_alloc+0x29/0xe0 [ 429.282276][T17199] security_file_alloc+0x34/0x310 [ 429.282300][T17199] init_file+0x90/0x2b0 [ 429.282325][T17199] alloc_empty_file+0x74/0x1d0 [ 429.282349][T17199] alloc_file_pseudo+0x155/0x240 [ 429.282377][T17199] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 429.282402][T17199] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 429.282433][T17199] ? rcu_is_watching+0x15/0xb0 [ 429.282467][T17199] ? hugetlbfs_get_inode+0x432/0x650 [ 429.282499][T17199] hugetlb_file_setup+0x3ee/0x630 [ 429.282525][T17199] ksys_mmap_pgoff+0x22e/0x760 [ 429.282556][T17199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.282578][T17199] do_syscall_64+0x15f/0xf80 [ 429.282604][T17199] ? trace_irq_disable+0x3b/0x140 [ 429.282639][T17199] ? clear_bhb_loop+0x40/0x90 [ 429.282665][T17199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.282683][T17199] RIP: 0033:0x7f953259cdd9 [ 429.282705][T17199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.282723][T17199] RSP: 002b:00007f95334ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 429.282746][T17199] RAX: ffffffffffffffda RBX: 00007f9532815fa0 RCX: 00007f953259cdd9 [ 429.282762][T17199] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 429.282776][T17199] RBP: 00007f95334ef090 R08: ffffffffffffffff R09: 0000000000000000 [ 429.282790][T17199] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 429.282803][T17199] R13: 00007f9532816038 R14: 00007f9532815fa0 R15: 00007ffca7c29448 [ 429.282838][T17199] [ 429.659811][T17211] ieee802154 phy0 wpan0: encryption failed: -90 [ 429.702780][T17216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3619'. [ 429.865528][T17218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3622'. [ 429.894961][T17222] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 429.923009][T17224] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 429.929382][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 429.966180][T17220] syzkaller0: entered promiscuous mode [ 429.982634][T17220] syzkaller0: entered allmulticast mode [ 430.296672][T17241] ieee802154 phy0 wpan0: encryption failed: -90 [ 430.452169][T17251] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3636'. [ 430.469508][T17254] xt_TCPMSS: Only works on TCP SYN packets [ 430.483302][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3639'. [ 430.502970][T17251] netlink: 'syz.2.3636': attribute type 39 has an invalid length. [ 431.552203][T17319] netlink: 'syz.3.3658': attribute type 39 has an invalid length. [ 432.134957][T17338] netlink: 'syz.1.3667': attribute type 1 has an invalid length. [ 432.253240][T17338] bond7: entered promiscuous mode [ 432.259997][T17338] 8021q: adding VLAN 0 to HW filter on device bond7 [ 432.339903][T17338] 8021q: adding VLAN 0 to HW filter on device bond7 [ 432.353783][T17338] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 432.364233][T17338] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 432.381892][T17338] bond7: (slave vti0): making interface the new active one [ 432.395044][T17338] vti0: entered promiscuous mode [ 432.402845][T17338] bond7: (slave vti0): Enslaving as an active interface with an up link [ 432.622032][T17368] FAULT_INJECTION: forcing a failure. [ 432.622032][T17368] name failslab, interval 1, probability 0, space 0, times 0 [ 432.646150][T17368] CPU: 0 UID: 0 PID: 17368 Comm: syz.4.3677 Not tainted syzkaller #0 PREEMPT(full) [ 432.646179][T17368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.646192][T17368] Call Trace: [ 432.646200][T17368] [ 432.646209][T17368] dump_stack_lvl+0xe8/0x150 [ 432.646245][T17368] should_fail_ex+0x412/0x560 [ 432.646281][T17368] should_failslab+0xa8/0x100 [ 432.646305][T17368] __kmalloc_cache_noprof+0x88/0x660 [ 432.646334][T17368] ? reacquire_held_locks+0x104/0x190 [ 432.646364][T17368] ? resv_map_alloc+0x88/0x2c0 [ 432.646389][T17368] ? __kmalloc_cache_noprof+0x15b/0x660 [ 432.646424][T17368] resv_map_alloc+0x88/0x2c0 [ 432.646456][T17368] hugetlb_reserve_pages+0x1f1/0x10a0 [ 432.646492][T17368] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 432.646518][T17368] ? hugetlbfs_file_mmap_prepare+0x36f/0x6b0 [ 432.646553][T17368] hugetlbfs_file_mmap_prepare+0x4b3/0x6b0 [ 432.646590][T17368] ? __pfx_hugetlbfs_file_mmap_prepare+0x10/0x10 [ 432.646617][T17368] ? mas_find+0xb0e/0xd30 [ 432.646651][T17368] mmap_region+0xdac/0x22a0 [ 432.646689][T17368] ? rcu_is_watching+0x15/0xb0 [ 432.646721][T17368] ? __pfx_mmap_region+0x10/0x10 [ 432.646774][T17368] ? finish_task_switch+0x41f/0xbe0 [ 432.646808][T17368] ? __schedule+0x17ca/0x5680 [ 432.646916][T17368] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 432.646946][T17368] ? __pfx_hugetlb_get_unmapped_area+0x10/0x10 [ 432.646983][T17368] ? apparmor_capable+0x126/0x170 [ 432.647008][T17368] ? bpf_lsm_capable+0x9/0x20 [ 432.647031][T17368] ? security_capable+0x7e/0x2c0 [ 432.647057][T17368] ? shmem_mapping+0xd/0x50 [ 432.647079][T17368] ? memfd_check_seals_mmap+0x165/0x200 [ 432.647109][T17368] do_mmap+0xc39/0x10c0 [ 432.647150][T17368] ? __pfx_do_mmap+0x10/0x10 [ 432.647172][T17368] ? down_write_killable+0x180/0x240 [ 432.647205][T17368] ? __pfx_down_write_killable+0x10/0x10 [ 432.647235][T17368] ? apparmor_mmap_file+0x2da/0x3e0 [ 432.647265][T17368] vm_mmap_pgoff+0x2c9/0x4f0 [ 432.647301][T17368] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 432.647323][T17368] ? rcu_is_watching+0x15/0xb0 [ 432.647351][T17368] ? hugetlbfs_get_inode+0x432/0x650 [ 432.647384][T17368] ? hugetlb_file_setup+0x42c/0x630 [ 432.647411][T17368] ksys_mmap_pgoff+0x586/0x760 [ 432.647442][T17368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.647466][T17368] do_syscall_64+0x15f/0xf80 [ 432.647490][T17368] ? trace_irq_disable+0x3b/0x140 [ 432.647511][T17368] ? clear_bhb_loop+0x40/0x90 [ 432.647538][T17368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.647558][T17368] RIP: 0033:0x7f1b1c79cdd9 [ 432.647578][T17368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.647602][T17368] RSP: 002b:00007f1b1d5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 432.647624][T17368] RAX: ffffffffffffffda RBX: 00007f1b1ca15fa0 RCX: 00007f1b1c79cdd9 [ 432.647639][T17368] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 432.647652][T17368] RBP: 00007f1b1d5c9090 R08: ffffffffffffffff R09: 0000000000000000 [ 432.647666][T17368] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 432.647677][T17368] R13: 00007f1b1ca16038 R14: 00007f1b1ca15fa0 R15: 00007ffc4b95d7d8 [ 432.647712][T17368] [ 433.020268][T17371] ieee802154 phy0 wpan0: encryption failed: -90 [ 433.847358][T17416] netlink: 'syz.2.3695': attribute type 3 has an invalid length. [ 434.192612][T17388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 434.522462][T17460] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 435.057252][T17491] netlink: 'syz.0.3723': attribute type 39 has an invalid length. [ 435.163267][T17495] __nla_validate_parse: 6 callbacks suppressed [ 435.163289][T17495] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3725'. [ 435.458147][T17503] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3728'. [ 435.553421][T17473] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 435.577892][T17509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3731'. [ 435.661492][T17509] team0: Port device gretap2 added [ 435.828965][T17521] vlan2: entered promiscuous mode [ 436.428116][T17562] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3750'. [ 437.010137][T17547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.232517][T17611] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.239755][T17611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.265972][T17618] FAULT_INJECTION: forcing a failure. [ 437.265972][T17618] name failslab, interval 1, probability 0, space 0, times 0 [ 437.314083][T17618] CPU: 1 UID: 0 PID: 17618 Comm: syz.0.3773 Not tainted syzkaller #0 PREEMPT(full) [ 437.314114][T17618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.314126][T17618] Call Trace: [ 437.314133][T17618] [ 437.314142][T17618] dump_stack_lvl+0xe8/0x150 [ 437.314179][T17618] should_fail_ex+0x412/0x560 [ 437.314214][T17618] should_failslab+0xa8/0x100 [ 437.314237][T17618] ? dst_alloc+0x105/0x170 [ 437.314259][T17618] kmem_cache_alloc_noprof+0x87/0x650 [ 437.314299][T17618] dst_alloc+0x105/0x170 [ 437.314326][T17618] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 437.314355][T17618] ? ip_route_output_key_hash_rcu+0x1d11/0x25d0 [ 437.314386][T17618] ? ip_route_output_key_hash+0xd8/0x2a0 [ 437.314410][T17618] ip_route_output_key_hash+0x18d/0x2a0 [ 437.314436][T17618] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 437.314489][T17618] tcp_v4_connect+0x74e/0x19b0 [ 437.314541][T17618] ? __pfx_tcp_v4_connect+0x10/0x10 [ 437.314568][T17618] ? aa_label_sk_perm+0x532/0x6e0 [ 437.314592][T17618] ? tcp_v6_connect+0x62d/0x1b10 [ 437.314621][T17618] tcp_v6_connect+0xbbb/0x1b10 [ 437.314643][T17618] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 437.314679][T17618] ? __lock_acquire+0x6b5/0x2cf0 [ 437.314709][T17618] ? __pfx_tcp_v6_connect+0x10/0x10 [ 437.314749][T17618] __inet_stream_connect+0x25a/0xdd0 [ 437.314780][T17618] ? do_raw_spin_lock+0x12b/0x2f0 [ 437.314800][T17618] ? lock_sock_nested+0x6a/0x100 [ 437.314827][T17618] ? __pfx___inet_stream_connect+0x10/0x10 [ 437.314855][T17618] ? inet_stream_connect+0x51/0xa0 [ 437.314879][T17618] ? __local_bh_enable_ip+0xd0/0x130 [ 437.314913][T17618] inet_stream_connect+0x66/0xa0 [ 437.314940][T17618] __sys_connect+0x312/0x450 [ 437.314971][T17618] ? __pfx___sys_connect+0x10/0x10 [ 437.315014][T17618] ? __pfx_ksys_write+0x10/0x10 [ 437.315048][T17618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.315070][T17618] __x64_sys_connect+0x7a/0x90 [ 437.315099][T17618] do_syscall_64+0x15f/0xf80 [ 437.315124][T17618] ? trace_irq_disable+0x3b/0x140 [ 437.315146][T17618] ? clear_bhb_loop+0x40/0x90 [ 437.315172][T17618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.315192][T17618] RIP: 0033:0x7fb33dd9cdd9 [ 437.315212][T17618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.315229][T17618] RSP: 002b:00007fb33ebfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 437.315251][T17618] RAX: ffffffffffffffda RBX: 00007fb33e015fa0 RCX: 00007fb33dd9cdd9 [ 437.315266][T17618] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 437.315279][T17618] RBP: 00007fb33ebfa090 R08: 0000000000000000 R09: 0000000000000000 [ 437.315291][T17618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.315302][T17618] R13: 00007fb33e016038 R14: 00007fb33e015fa0 R15: 00007ffd6d3451d8 [ 437.315339][T17618] [ 437.653700][T17624] sctp: [Deprecated]: syz.3.3777 (pid 17624) Use of int in maxseg socket option. [ 437.653700][T17624] Use struct sctp_assoc_value instead [ 438.083012][T17646] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3786'. [ 438.086719][T17642] IPVS: Error connecting to the multicast addr [ 438.567236][T17669] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3792'. [ 438.717471][T17635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 438.809973][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3794'. [ 438.825005][T17678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.080114][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3803'. [ 439.194767][T17699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3805'. [ 439.388347][T17707] lo speed is unknown, defaulting to 1000 [ 439.438903][T17709] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3809'. [ 439.913139][T17727] nbd: couldn't find a device at index 786432 [ 440.066732][T17734] tipc: Enabling of bearer rejected, failed to enable media [ 440.217501][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.229277][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 440.240569][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.352642][T17754] __nla_validate_parse: 1 callbacks suppressed [ 440.352662][T17754] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3821'. [ 440.588533][T17761] lo speed is unknown, defaulting to 1000 [ 440.604957][T17761] lo speed is unknown, defaulting to 1000 [ 440.650188][T17761] lo speed is unknown, defaulting to 1000 [ 440.700570][T17765] Cannot find set identified by id 1 to match [ 440.736466][T17761] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 440.808381][T17761] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 440.950498][T17772] netlink: 'syz.2.3829': attribute type 39 has an invalid length. [ 440.976296][T17761] lo speed is unknown, defaulting to 1000 [ 441.004941][T17761] lo speed is unknown, defaulting to 1000 [ 441.043983][T17761] lo speed is unknown, defaulting to 1000 [ 441.055820][T17761] lo speed is unknown, defaulting to 1000 [ 441.065824][T17761] lo speed is unknown, defaulting to 1000 [ 441.241547][T17779] tipc: Enabling of bearer rejected, failed to enable media [ 441.320541][T17782] netlink: 'syz.0.3835': attribute type 11 has an invalid length. [ 441.347724][T17782] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3835'. [ 441.500118][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3839'. [ 442.245053][T17828] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3853'. [ 442.639643][T17844] nbd: couldn't find a device at index 196608 [ 442.787476][T17857] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3864'. [ 442.949961][T17868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3867'. [ 442.975809][T17868] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 442.991542][T17868] Cannot find del_set index 4 as target [ 445.644575][T17846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.880958][T17895] openvswitch: netlink: Flow key attr not present in new flow. [ 446.051703][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 446.059814][ C1] lec:lec_tx_timeout: lec0 [ 446.319805][T17917] xt_hashlimit: overflow, rate too high: 0 [ 446.358695][T17923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3887'. [ 446.414626][T17925] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3890'. [ 446.515497][T17931] syzkaller0: entered promiscuous mode [ 446.527122][T17931] syzkaller0: entered allmulticast mode [ 446.581231][T17922] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3889'. [ 446.619417][T17931] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3892'. [ 446.806672][T17936] vlan3: entered allmulticast mode [ 446.812086][T17936] bridge_slave_0: entered allmulticast mode [ 446.994581][T17948] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 447.042365][T17953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3901'. [ 447.303605][T17975] ieee802154 phy0 wpan0: encryption failed: -90 [ 447.468290][T17986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3911'. [ 447.619561][T17995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3913'. [ 447.924393][T18004] tipc: Enabling of bearer rejected, failed to enable media [ 448.226438][T18019] ieee802154 phy0 wpan0: encryption failed: -90 [ 448.291305][T18022] netlink: 'syz.0.3921': attribute type 39 has an invalid length. [ 448.595154][T18035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3924'. [ 448.804187][T18042] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3928'. [ 448.854155][T18042] netem: change failed [ 448.898146][T18042] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3928'. [ 448.919327][T18042] C: renamed from lo [ 448.927350][T18042] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 449.068684][T18056] ieee802154 phy0 wpan0: encryption failed: -90 [ 449.173457][ T5205] block nbd1: Possible stuck request ffff88802742e000: control (read@0,1024B). Runtime 240 seconds [ 449.184368][ T5205] block nbd1: Possible stuck request ffff88802742e1c0: control (read@1024,1024B). Runtime 240 seconds [ 449.196024][ T5205] block nbd1: Possible stuck request ffff88802742e380: control (read@2048,1024B). Runtime 240 seconds [ 449.208349][ T5205] block nbd1: Possible stuck request ffff88802742e540: control (read@3072,1024B). Runtime 240 seconds [ 449.517015][T18079] netlink: 'syz.1.3943': attribute type 39 has an invalid length. [ 449.631102][T18083] gretap1: entered promiscuous mode [ 449.638492][T18083] batman_adv: batadv0: Adding interface: gretap1 [ 449.645809][T18083] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 449.666739][T18083] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 449.942953][T18095] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 450.167960][T18109] netem: change failed [ 450.194242][T18073] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.728040][T18135] FAULT_INJECTION: forcing a failure. [ 450.728040][T18135] name failslab, interval 1, probability 0, space 0, times 0 [ 450.754068][T18135] CPU: 0 UID: 0 PID: 18135 Comm: syz.3.3963 Not tainted syzkaller #0 PREEMPT(full) [ 450.754097][T18135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.754109][T18135] Call Trace: [ 450.754117][T18135] [ 450.754126][T18135] dump_stack_lvl+0xe8/0x150 [ 450.754162][T18135] should_fail_ex+0x412/0x560 [ 450.754196][T18135] should_failslab+0xa8/0x100 [ 450.754220][T18135] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 450.754251][T18135] ? __alloc_skb+0x1d0/0x7d0 [ 450.754276][T18135] ? __local_bh_enable_ip+0xd0/0x130 [ 450.754309][T18135] __alloc_skb+0x1d0/0x7d0 [ 450.754335][T18135] ? netlink_ack_tlv_len+0x6c/0x210 [ 450.754366][T18135] netlink_ack+0x146/0xa50 [ 450.754392][T18135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.754434][T18135] netlink_rcv_skb+0x2b6/0x4b0 [ 450.754464][T18135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.754488][T18135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.754534][T18135] ? down_read+0x270/0x2e0 [ 450.754560][T18135] ? genl_rcv+0xd/0x40 [ 450.754584][T18135] genl_rcv+0x28/0x40 [ 450.754613][T18135] netlink_unicast+0x75c/0x8e0 [ 450.754652][T18135] netlink_sendmsg+0x813/0xb40 [ 450.754692][T18135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.754726][T18135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 450.754756][T18135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.754790][T18135] ____sys_sendmsg+0x972/0x9f0 [ 450.754822][T18135] ? __might_fault+0xaf/0x130 [ 450.754856][T18135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.754898][T18135] ? import_iovec+0x73/0xa0 [ 450.754925][T18135] ___sys_sendmsg+0x2a5/0x360 [ 450.754954][T18135] ? __lock_acquire+0x6b5/0x2cf0 [ 450.754985][T18135] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.755057][T18135] ? __fget_files+0x2a/0x420 [ 450.755087][T18135] ? __fget_files+0x3a0/0x420 [ 450.755125][T18135] __x64_sys_sendmsg+0x1bd/0x2a0 [ 450.755157][T18135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.755199][T18135] ? __pfx_ksys_write+0x10/0x10 [ 450.755238][T18135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.755260][T18135] do_syscall_64+0x15f/0xf80 [ 450.755286][T18135] ? trace_irq_disable+0x3b/0x140 [ 450.755308][T18135] ? clear_bhb_loop+0x40/0x90 [ 450.755334][T18135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.755355][T18135] RIP: 0033:0x7f953259cdd9 [ 450.755375][T18135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.755394][T18135] RSP: 002b:00007f95334ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.755418][T18135] RAX: ffffffffffffffda RBX: 00007f9532815fa0 RCX: 00007f953259cdd9 [ 450.755432][T18135] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 450.755446][T18135] RBP: 00007f95334ef090 R08: 0000000000000000 R09: 0000000000000000 [ 450.755458][T18135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.755470][T18135] R13: 00007f9532816038 R14: 00007f9532815fa0 R15: 00007ffca7c29448 [ 450.755506][T18135] [ 451.337660][T18151] netlink: 'syz.0.3970': attribute type 1 has an invalid length. [ 451.352193][T18148] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 451.439827][T18157] bond5: (slave geneve3): making interface the new active one [ 451.449618][T18157] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 451.462845][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 451.474265][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 451.489490][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 451.501976][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 451.552794][T18163] __nla_validate_parse: 8 callbacks suppressed [ 451.552814][T18163] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3973'. [ 451.819852][T18179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3979'. [ 452.139971][T18149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 453.005295][T18255] FAULT_INJECTION: forcing a failure. [ 453.005295][T18255] name failslab, interval 1, probability 0, space 0, times 0 [ 453.039802][T18255] CPU: 1 UID: 0 PID: 18255 Comm: syz.1.4003 Not tainted syzkaller #0 PREEMPT(full) [ 453.039831][T18255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 453.039843][T18255] Call Trace: [ 453.039852][T18255] [ 453.039861][T18255] dump_stack_lvl+0xe8/0x150 [ 453.039901][T18255] should_fail_ex+0x412/0x560 [ 453.039931][T18255] should_failslab+0xa8/0x100 [ 453.039949][T18255] ? cgw_create_job+0x4d4/0xc90 [ 453.039974][T18255] kmem_cache_alloc_noprof+0x87/0x650 [ 453.040005][T18255] cgw_create_job+0x4d4/0xc90 [ 453.040037][T18255] ? __pfx_cgw_create_job+0x10/0x10 [ 453.040069][T18255] ? __pfx_cgw_create_job+0x10/0x10 [ 453.040092][T18255] rtnetlink_rcv_msg+0x77e/0xbe0 [ 453.040114][T18255] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 453.040137][T18255] ? netlink_sendmsg+0x5d4/0xb40 [ 453.040163][T18255] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 453.040184][T18255] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 453.040207][T18255] ? __lock_acquire+0x6b5/0x2cf0 [ 453.040241][T18255] netlink_rcv_skb+0x232/0x4b0 [ 453.040266][T18255] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 453.040290][T18255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.040327][T18255] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.040350][T18255] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.040378][T18255] netlink_unicast+0x75c/0x8e0 [ 453.040410][T18255] netlink_sendmsg+0x813/0xb40 [ 453.040442][T18255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.040469][T18255] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.040493][T18255] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.040522][T18255] ____sys_sendmsg+0x972/0x9f0 [ 453.040546][T18255] ? __might_fault+0xaf/0x130 [ 453.040581][T18255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.040614][T18255] ? import_iovec+0x73/0xa0 [ 453.040634][T18255] ___sys_sendmsg+0x2a5/0x360 [ 453.040657][T18255] ? __lock_acquire+0x6b5/0x2cf0 [ 453.040681][T18255] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.040738][T18255] ? __fget_files+0x2a/0x420 [ 453.040758][T18255] ? __fget_files+0x3a0/0x420 [ 453.040787][T18255] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.040815][T18255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.040849][T18255] ? __pfx_ksys_write+0x10/0x10 [ 453.040880][T18255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.040899][T18255] do_syscall_64+0x15f/0xf80 [ 453.040919][T18255] ? trace_irq_disable+0x3b/0x140 [ 453.040937][T18255] ? clear_bhb_loop+0x40/0x90 [ 453.040956][T18255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.040972][T18255] RIP: 0033:0x7f176119cdd9 [ 453.040989][T18255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.041003][T18255] RSP: 002b:00007f17620b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.041021][T18255] RAX: ffffffffffffffda RBX: 00007f1761415fa0 RCX: 00007f176119cdd9 [ 453.041033][T18255] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 453.041043][T18255] RBP: 00007f17620b9090 R08: 0000000000000000 R09: 0000000000000000 [ 453.041053][T18255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.041063][T18255] R13: 00007f1761416038 R14: 00007f1761415fa0 R15: 00007fff59d3ce18 [ 453.041091][T18255] [ 453.424798][T18265] netlink: 'syz.2.4006': attribute type 1 has an invalid length. [ 453.633215][T18241] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 453.890026][T18292] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 453.898954][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 453.907262][T18294] netlink: 'syz.2.4020': attribute type 1 has an invalid length. [ 453.929718][T18296] netlink: 'syz.1.4018': attribute type 39 has an invalid length. [ 454.296644][T18310] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4026'. [ 454.386844][T18320] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 454.626202][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4035'. [ 454.709960][T18338] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 454.854844][T18346] syzkaller0: entered promiscuous mode [ 454.871093][T18346] syzkaller0: entered allmulticast mode [ 455.235009][T18370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4048'. [ 455.411507][T18376] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4050'. [ 455.444872][T18376] syzkaller0: entered promiscuous mode [ 455.455806][T18376] syzkaller0: entered allmulticast mode [ 455.977731][T18405] syzkaller0: entered promiscuous mode [ 456.008899][T18405] syzkaller0: entered allmulticast mode [ 456.022667][T10708] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 456.048707][T18407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.101211][T18414] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 456.177255][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4064'. [ 456.307289][T18426] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4065'. [ 456.330068][T18426] x_tables: duplicate underflow at hook 2 [ 456.720524][T18452] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4073'. [ 456.763306][T18452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'. [ 457.163995][T18483] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4082'. [ 457.178988][T18483] syzkaller0: entered promiscuous mode [ 457.185285][T18483] syzkaller0: entered allmulticast mode [ 457.288203][T18488] netlink: 'syz.3.4083': attribute type 29 has an invalid length. [ 457.433065][T18490] syzkaller0: entered promiscuous mode [ 463.812640][ T7392] lec:lec_start_xmit: lec0:No lecd attached [ 469.011959][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 469.019986][ C1] lec:lec_tx_timeout: lec0 [ 479.252474][ T5205] block nbd1: Possible stuck request ffff88802742e000: control (read@0,1024B). Runtime 270 seconds [ 479.263324][ T5205] block nbd1: Possible stuck request ffff88802742e1c0: control (read@1024,1024B). Runtime 270 seconds [ 479.274407][ T5205] block nbd1: Possible stuck request ffff88802742e380: control (read@2048,1024B). Runtime 270 seconds [ 479.285746][ T5205] block nbd1: Possible stuck request ffff88802742e540: control (read@3072,1024B). Runtime 270 seconds [ 501.655204][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.663454][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 501.669542][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 507.011725][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 507.019828][ C1] lec:lec_tx_timeout: lec0 [ 507.821388][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4087'. [ 507.838706][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4091'. [ 507.895320][T18516] macvlan3: entered allmulticast mode [ 507.902653][T18516] hsr0: entered allmulticast mode [ 507.914833][T18516] hsr_slave_0: entered allmulticast mode [ 507.922783][T18516] hsr_slave_1: entered allmulticast mode [ 507.928663][T18516] hsr0: entered promiscuous mode [ 508.233041][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 508.441233][T18548] sctp: [Deprecated]: syz.2.4099 (pid 18548) Use of int in max_burst socket option. [ 508.441233][T18548] Use struct sctp_assoc_value instead [ 508.640964][T18512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 508.715068][T18562] netem: incorrect ge model size [ 508.732131][T18562] netem: change failed [ 508.784112][T18569] netlink: 'syz.1.4109': attribute type 1 has an invalid length. [ 508.806342][T18570] netlink: 'syz.1.4109': attribute type 1 has an invalid length. [ 508.852055][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4110'. [ 508.905317][T18570] 8021q: adding VLAN 0 to HW filter on device bond8 [ 508.917197][T18578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.006714][T18573] bond6: option xmit_hash_policy: invalid value (64) [ 509.030433][T18573] bond6 (unregistering): Released all slaves [ 509.125030][T18589] netlink: 'syz.2.4114': attribute type 18 has an invalid length. [ 509.175886][T18589] tipc: Failed to remove unknown binding: 66,1,1/4186495353:3005061767/3005061769 [ 509.338951][ T5205] block nbd1: Possible stuck request ffff88802742e000: control (read@0,1024B). Runtime 300 seconds [ 509.349883][ T5205] block nbd1: Possible stuck request ffff88802742e1c0: control (read@1024,1024B). Runtime 300 seconds [ 509.361168][ T5205] block nbd1: Possible stuck request ffff88802742e380: control (read@2048,1024B). Runtime 300 seconds [ 509.373557][ T5205] block nbd1: Possible stuck request ffff88802742e540: control (read@3072,1024B). Runtime 300 seconds [ 509.461478][T18603] netlink: 'syz.2.4116': attribute type 39 has an invalid length. [ 509.759272][T18612] netlink: 'syz.0.4122': attribute type 10 has an invalid length. [ 509.780074][T18612] netlink: 396 bytes leftover after parsing attributes in process `syz.0.4122'. [ 509.953651][T18616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4123'. [ 510.954834][T18613] veth7: entered allmulticast mode [ 511.448835][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4129'. [ 511.480064][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4129'. [ 511.831526][T18674] FAULT_INJECTION: forcing a failure. [ 511.831526][T18674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.886109][T18674] CPU: 0 UID: 0 PID: 18674 Comm: syz.3.4137 Not tainted syzkaller #0 PREEMPT(full) [ 511.886140][T18674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.886153][T18674] Call Trace: [ 511.886162][T18674] [ 511.886171][T18674] dump_stack_lvl+0xe8/0x150 [ 511.886214][T18674] should_fail_ex+0x412/0x560 [ 511.886249][T18674] _copy_from_user+0x2d/0xb0 [ 511.886268][T18674] ___sys_sendmsg+0x1c6/0x360 [ 511.886298][T18674] ? __lock_acquire+0x6b5/0x2cf0 [ 511.886329][T18674] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.886395][T18674] ? __fget_files+0x2a/0x420 [ 511.886419][T18674] ? __fget_files+0x3a0/0x420 [ 511.886454][T18674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 511.886488][T18674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.886528][T18674] ? __pfx_ksys_write+0x10/0x10 [ 511.886568][T18674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.886591][T18674] do_syscall_64+0x15f/0xf80 [ 511.886615][T18674] ? trace_irq_disable+0x3b/0x140 [ 511.886637][T18674] ? clear_bhb_loop+0x40/0x90 [ 511.886663][T18674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.886683][T18674] RIP: 0033:0x7f953259cdd9 [ 511.886703][T18674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.886722][T18674] RSP: 002b:00007f95334ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.886744][T18674] RAX: ffffffffffffffda RBX: 00007f9532815fa0 RCX: 00007f953259cdd9 [ 511.886760][T18674] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 511.886772][T18674] RBP: 00007f95334ef090 R08: 0000000000000000 R09: 0000000000000000 [ 511.886783][T18674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.886796][T18674] R13: 00007f9532816038 R14: 00007f9532815fa0 R15: 00007ffca7c29448 [ 511.886830][T18674] [ 512.193777][T18685] tipc: Enabled bearer , priority 0 [ 512.263467][T18685] syzkaller0: entered promiscuous mode [ 512.269120][T18685] syzkaller0: entered allmulticast mode [ 512.275391][T18685] tipc: Resetting bearer [ 512.328911][T18679] tipc: Resetting bearer [ 513.038452][T18726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4149'. [ 514.618084][T18679] tipc: Disabling bearer [ 514.854271][T18737] syzkaller0: entered promiscuous mode [ 514.874921][T18739] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 514.887145][T18737] syzkaller0: entered allmulticast mode [ 515.056979][T18752] netlink: 'syz.1.4160': attribute type 11 has an invalid length. [ 515.075650][T18752] netlink: 'syz.1.4160': attribute type 11 has an invalid length. [ 515.096195][T18752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4160'. [ 515.199949][T18753] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4158'. [ 515.340171][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 515.364808][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 515.390382][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 515.417388][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 515.424559][T18771] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 515.439566][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 515.460517][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 515.470797][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 516.051380][T18802] xt_hashlimit: invalid rate [ 516.120273][T18810] netlink: 'syz.1.4184': attribute type 1 has an invalid length. [ 516.163927][T18810] 8021q: adding VLAN 0 to HW filter on device bond9 [ 516.204781][T18812] bond9: (slave veth7): Enslaving as an active interface with a down link [ 516.225595][T18810] bond9: (slave dummy0): making interface the new active one [ 516.237683][T18810] dummy0: entered promiscuous mode [ 516.244007][T18810] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 516.274018][T18810] bond9: (slave dummy0): Releasing active interface [ 516.285390][T18810] dummy0 (unregistering): left promiscuous mode [ 516.755850][T18846] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 516.945983][T18854] veth9: entered allmulticast mode [ 516.985797][T18862] IPVS: length: 209 != 216 [ 517.166124][T18873] netlink: 'syz.1.4204': attribute type 1 has an invalid length. [ 518.137959][T18914] __nla_validate_parse: 34 callbacks suppressed [ 518.137984][T18914] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4220'. [ 518.814433][T18950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4234'. [ 518.842607][T18950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4234'. [ 519.255295][T18972] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4238'. [ 519.359673][T18974] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4243'. [ 519.372428][T18974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4243'. [ 519.593574][T18985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4245'. [ 519.683143][T18994] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4249'. [ 519.781055][T18999] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 519.889823][T19001] sctp: [Deprecated]: syz.2.4252 (pid 19001) Use of int in maxseg socket option. [ 519.889823][T19001] Use struct sctp_assoc_value instead [ 519.943110][T19001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4252'. [ 520.366170][T19020] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4257'. [ 521.249665][T19057] syzkaller1: entered promiscuous mode [ 521.260001][T19057] syzkaller1: entered allmulticast mode [ 521.289234][T19057] syzkaller1: left promiscuous mode [ 521.306918][T19057] syzkaller1: left allmulticast mode [ 521.318849][T19061] xt_hashlimit: size too large, truncated to 1048576 [ 521.974976][T19092] bond6 (unregistering): Released all slaves [ 522.042821][T19094] netlink: 'syz.4.4277': attribute type 29 has an invalid length. [ 522.051401][T19099] netlink: 'syz.4.4277': attribute type 29 has an invalid length. [ 522.237202][T19110] netlink: 'syz.0.4284': attribute type 6 has an invalid length. [ 523.318124][T19125] __nla_validate_parse: 10 callbacks suppressed [ 523.318145][T19125] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4288'. [ 524.680466][T19080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.928521][T19139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4293'. [ 524.937970][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4293'. [ 524.951508][T19136] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 524.981056][T19139] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4293'. [ 525.013674][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4293'. [ 525.017642][T19142] Cannot find add_set index 46338 as target [ 525.038460][T19139] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4293'. [ 525.413967][T19174] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 525.453346][T19177] netlink: 'syz.4.4301': attribute type 39 has an invalid length. [ 525.602650][T19185] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 525.825686][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4309'. [ 525.846419][T19191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4309'. [ 525.859295][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4311'. [ 525.943008][T19201] netlink: 'syz.4.4313': attribute type 24 has an invalid length. [ 525.967700][T19199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.031081][T19212] tipc: Enabling of bearer rejected, failed to enable media [ 526.230215][T19220] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 526.324689][T19225] netlink: 'syz.2.4321': attribute type 39 has an invalid length. [ 526.411080][T19227] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4322'. [ 526.766842][T19242] ieee802154 phy0 wpan0: encryption failed: -90 [ 526.973338][T19251] tipc: Enabling of bearer rejected, failed to enable media [ 527.023678][T19256] IPVS: Error connecting to the multicast addr [ 527.048514][ T7392] lec:lec_start_xmit: lec0:No lecd attached [ 527.600763][T19282] netlink: 'syz.3.4337': attribute type 39 has an invalid length. [ 528.577155][T19319] __nla_validate_parse: 7 callbacks suppressed [ 528.577176][T19319] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4350'. [ 528.666404][T19327] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4352'. [ 528.696086][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4353'. [ 528.711234][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4352'. [ 528.739670][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4354'. [ 528.917821][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4357'. [ 528.947273][T19342] bridge_slave_1: left allmulticast mode [ 528.953051][T19342] bridge_slave_1: left promiscuous mode [ 528.961066][T19342] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.972082][T19342] bridge_slave_0: left allmulticast mode [ 528.978400][T19342] bridge_slave_0: left promiscuous mode [ 528.985262][T19342] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.640667][T19343] bond10: (slave 26aD): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 529.659750][T19343] bond10: (slave 26aD): Enslaving as an active interface with an up link [ 529.669682][T19343] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 529.789061][T19368] netlink: 'syz.1.4364': attribute type 29 has an invalid length. [ 529.798598][T19368] netlink: 'syz.1.4364': attribute type 29 has an invalid length. [ 529.808366][T19368] netlink: 'syz.1.4364': attribute type 29 has an invalid length. [ 529.835205][T19368] netlink: 'syz.1.4364': attribute type 29 has an invalid length. [ 529.845665][T19368] netlink: 'syz.1.4364': attribute type 29 has an invalid length. [ 529.874389][T19368] netlink: 'syz.1.4364': attribute type 29 has an invalid length. [ 529.895051][T19368] netlink: 'syz.1.4364': attribute type 29 has an invalid length. [ 529.917266][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4368'. [ 530.220909][T19404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4376'. [ 530.231503][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4376'. [ 530.317115][T19414] netlink: 'syz.0.4374': attribute type 39 has an invalid length. [ 530.649096][T19416] syzkaller0: entered promiscuous mode [ 530.671371][T19416] syzkaller0: entered allmulticast mode [ 531.115323][T19434] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 531.294908][T19445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4383'. [ 532.061663][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 532.069847][ C1] lec:lec_tx_timeout: lec0 [ 534.479138][T19466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.661486][T19532] __nla_validate_parse: 3 callbacks suppressed [ 534.661509][T19532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4412'. [ 534.675950][T19534] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4411'. [ 534.705101][T19534] 1: renamed from c0 (while UP) [ 534.727911][T19534] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 534.824394][T19543] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 535.053014][T19554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.357431][T19573] bond3: entered allmulticast mode [ 535.382984][T19573] bond3: left allmulticast mode [ 535.640949][T19588] vlan4: entered promiscuous mode [ 535.647297][T19588] vlan4: entered allmulticast mode [ 538.145004][T19561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.362811][T19612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4440'. [ 538.474523][T19623] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4445'. [ 538.543014][T19625] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4445'. [ 538.565624][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4445'. [ 538.599688][T19625] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4445'. [ 538.632732][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4445'. [ 538.651730][T19625] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4445'. [ 538.958260][T19651] netlink: 'syz.1.4451': attribute type 21 has an invalid length. [ 539.412515][ T5205] block nbd1: Possible stuck request ffff88802742e000: control (read@0,1024B). Runtime 330 seconds [ 539.423847][ T5205] block nbd1: Possible stuck request ffff88802742e1c0: control (read@1024,1024B). Runtime 330 seconds [ 539.435674][ T5205] block nbd1: Possible stuck request ffff88802742e380: control (read@2048,1024B). Runtime 330 seconds [ 539.447427][ T5205] block nbd1: Possible stuck request ffff88802742e540: control (read@3072,1024B). Runtime 330 seconds [ 539.487243][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4457'. [ 539.733017][T19690] __nla_validate_parse: 2 callbacks suppressed [ 539.733039][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4464'. [ 539.736613][T19686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4462'. [ 539.870877][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4464'. [ 540.087092][T19714] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4471'. [ 540.527776][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 540.561257][T19743] netlink: 'syz.3.4481': attribute type 1 has an invalid length. [ 540.569324][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 540.578496][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 540.587868][T19743] netlink: 'syz.3.4481': attribute type 1 has an invalid length. [ 540.596038][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 540.694448][T19751] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.4482'. [ 540.706360][T19751] IPVS: length: 24 != 6168 [ 541.903952][T19646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.126755][T19758] openvswitch: netlink: Duplicate or invalid key (type 0). [ 542.135299][T19758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.137726][T19757] syzkaller0: entered promiscuous mode [ 542.151184][T19758] openvswitch: netlink: Duplicate or invalid key (type 0). [ 542.159062][T19758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.168326][T19757] syzkaller0: entered allmulticast mode [ 542.181440][T19757] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 542.358624][T19776] tipc: Enabling of bearer rejected, failed to enable media [ 543.206506][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4502'. [ 543.485385][T19791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.185532][T19983] netlink: 'syz.1.4512': attribute type 39 has an invalid length. [ 544.675401][T19987] bond7: invalid ARP target 0.0.0.0 specified for addition [ 544.715556][T19987] bond7: option arp_ip_target: invalid value (0) [ 544.761495][T19987] bond7 (unregistering): Released all slaves [ 544.885149][T19991] bond6 (unregistering): Released all slaves [ 544.953274][ T29] audit: type=1800 audit(1776990481.024:6): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4519" name="memory.events" dev="tmpfs" ino=4591 res=0 errno=0 [ 545.674639][T19996] syzkaller0: entered promiscuous mode [ 545.697007][T19996] syzkaller0: entered allmulticast mode [ 545.889642][T20031] __nla_validate_parse: 5 callbacks suppressed [ 545.889665][T20031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4525'. [ 548.180594][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4524'. [ 548.189785][T20026] netlink: 'syz.4.4524': attribute type 5 has an invalid length. [ 548.197861][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4524'. [ 548.216386][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4524'. [ 548.250996][T20026] netlink: 'syz.4.4524': attribute type 5 has an invalid length. [ 548.275058][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4524'. [ 548.449292][T20052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4532'. [ 548.622239][T20058] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 548.767064][T20056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4533'. [ 549.317728][T20105] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4550'. [ 549.327857][T20105] 8021q: VLANs not supported on ip6tnl0 [ 549.336365][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4550'. [ 549.434474][T20114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4553'. [ 549.628128][T10713] tipc: Subscription rejected, illegal request [ 549.671825][ T30] INFO: task udevd:5841 blocked for more than 143 seconds. [ 549.683187][ T30] Not tainted syzkaller #0 [ 549.690005][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.700742][ T30] task:udevd state:D stack:22392 pid:5841 tgid:5841 ppid:5193 task_flags:0x400140 flags:0x00080002 [ 549.713585][ T30] Call Trace: [ 549.717126][ T30] [ 549.720326][ T30] __schedule+0x17b4/0x5680 [ 549.726671][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 549.741565][T20131] FAULT_INJECTION: forcing a failure. [ 549.741565][T20131] name failslab, interval 1, probability 0, space 0, times 0 [ 549.746543][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 549.761083][T20131] CPU: 1 UID: 0 PID: 20131 Comm: syz.4.4560 Not tainted syzkaller #0 PREEMPT(full) [ 549.761109][T20131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 549.761121][T20131] Call Trace: [ 549.761129][T20131] [ 549.761138][T20131] dump_stack_lvl+0xe8/0x150 [ 549.761172][T20131] should_fail_ex+0x412/0x560 [ 549.761206][T20131] should_failslab+0xa8/0x100 [ 549.761230][T20131] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 549.761262][T20131] ? __alloc_skb+0x1d0/0x7d0 [ 549.761288][T20131] ? __local_bh_enable_ip+0xd0/0x130 [ 549.761320][T20131] __alloc_skb+0x1d0/0x7d0 [ 549.761354][T20131] create_monitor_ctrl_open+0x15c/0x8b0 [ 549.761389][T20131] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 549.761418][T20131] ? bpf_lsm_capable+0x9/0x20 [ 549.761453][T20131] hci_sock_ioctl+0x2f2/0x940 [ 549.761485][T20131] sock_do_ioctl+0x101/0x320 [ 549.761513][T20131] ? __pfx_sock_do_ioctl+0x10/0x10 [ 549.761533][T20131] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 549.761586][T20131] sock_ioctl+0x5c6/0x7f0 [ 549.761610][T20131] ? __pfx_sock_ioctl+0x10/0x10 [ 549.761634][T20131] ? __fget_files+0x2a/0x420 [ 549.761659][T20131] ? __fget_files+0x3a0/0x420 [ 549.761683][T20131] ? __fget_files+0x2a/0x420 [ 549.761721][T20131] ? bpf_lsm_file_ioctl+0x9/0x20 [ 549.761742][T20131] ? __pfx_sock_ioctl+0x10/0x10 [ 549.761764][T20131] __se_sys_ioctl+0xfc/0x170 [ 549.761784][T20131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.761807][T20131] do_syscall_64+0x15f/0xf80 [ 549.761832][T20131] ? trace_irq_disable+0x3b/0x140 [ 549.761855][T20131] ? clear_bhb_loop+0x40/0x90 [ 549.761881][T20131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.761902][T20131] RIP: 0033:0x7f1b1c79cdd9 [ 549.761922][T20131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.761938][T20131] RSP: 002b:00007f1b1d5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.761961][T20131] RAX: ffffffffffffffda RBX: 00007f1b1ca15fa0 RCX: 00007f1b1c79cdd9 [ 549.761974][T20131] RDX: 0000200000000000 RSI: 00000000400448dd RDI: 0000000000000004 [ 549.761988][T20131] RBP: 00007f1b1d5c9090 R08: 0000000000000000 R09: 0000000000000000 [ 549.762000][T20131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.762013][T20131] R13: 00007f1b1ca16038 R14: 00007f1b1ca15fa0 R15: 00007ffc4b95d7d8 [ 549.762050][T20131] [ 549.770291][ T30] ? __pfx___schedule+0x10/0x10 [ 549.792380][T20131] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 549.796264][ T30] ? schedule+0x90/0x360 [ 550.015839][ T30] schedule+0x164/0x360 [ 550.020052][ T30] io_schedule+0x7f/0xd0 [ 550.024376][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 550.029734][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 550.035919][ T30] ? filemap_read_folio+0x23e/0x3b0 [ 550.041187][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 550.046830][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 550.052842][ T30] do_read_cache_folio+0x1ad/0x590 [ 550.058022][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 550.063805][ T30] read_part_sector+0xb6/0x2b0 [ 550.068601][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 550.074064][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 550.080434][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 550.097321][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 550.103718][ T30] bdev_disk_changed+0x817/0x1770 [ 550.108803][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 550.114361][ T30] blkdev_get_whole+0x380/0x510 [ 550.119259][ T30] bdev_open+0x31e/0xd30 [ 550.123663][ T30] blkdev_open+0x470/0x610 [ 550.128128][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 550.133525][ T30] do_dentry_open+0x785/0x14e0 [ 550.138348][ T30] vfs_open+0x3b/0x340 [ 550.142498][ T30] ? path_openat+0x2df0/0x3860 [ 550.147294][ T30] path_openat+0x2e08/0x3860 [ 550.152183][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 550.157618][ T30] ? stack_depot_save_flags+0x33/0x810 [ 550.163483][ T30] ? __pfx_path_openat+0x10/0x10 [ 550.168476][ T30] ? __x64_sys_openat+0x138/0x170 [ 550.173599][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 550.178574][ T30] do_file_open+0x23e/0x4a0 [ 550.183146][ T30] ? __pfx_do_file_open+0x10/0x10 [ 550.188214][ T30] ? _raw_spin_unlock+0x28/0x50 [ 550.193807][ T30] ? alloc_fd+0x64b/0x6c0 [ 550.198183][ T30] do_sys_openat2+0x113/0x200 [ 550.202956][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 550.208436][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 550.218070][ T30] ? rcu_is_watching+0x15/0xb0 [ 550.223126][ T30] __x64_sys_openat+0x138/0x170 [ 550.228038][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.234149][ T30] do_syscall_64+0x15f/0xf80 [ 550.238776][ T30] ? clear_bhb_loop+0x40/0x90 [ 550.243545][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.249472][ T30] RIP: 0033:0x7fc8fc6a7407 [ 550.254364][ T30] RSP: 002b:00007ffeac370410 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 550.262991][ T30] RAX: ffffffffffffffda RBX: 00007fc8fce4c880 RCX: 00007fc8fc6a7407 [ 550.271024][ T30] RDX: 00000000000a0800 RSI: 0000561839066ac0 RDI: ffffffffffffff9c [ 550.279059][ T30] RBP: 0000561839055910 R08: 0000000000000000 R09: 0000000000000000 [ 550.287240][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561839069ba0 [ 550.295347][ T30] R13: 0000561839063190 R14: 0000000000000000 R15: 0000561839069ba0 [ 550.303390][ T30] [ 550.306556][ T30] [ 550.306556][ T30] Showing all locks held in the system: [ 550.323936][ T30] 1 lock held by ksoftirqd/1/23: [ 550.328957][ T30] 1 lock held by khungtaskd/30: [ 550.334150][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 550.344673][ T30] 2 locks held by getty/5579: [ 550.349409][ T30] #0: ffff8880377990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 550.360071][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 550.370318][ T30] 1 lock held by udevd/5841: [ 550.375186][ T30] #0: ffff8880273b1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 550.384757][ T30] 7 locks held by kworker/u8:13/10713: [ 550.390252][ T30] 2 locks held by syz.3.4544/20088: [ 550.395543][ T30] #0: ffffffff8fdcef00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 550.404827][ T30] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 550.415902][ T30] [ 550.418292][ T30] ============================================= [ 550.418292][ T30] [ 550.426971][ T30] NMI backtrace for cpu 0 [ 550.426991][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 550.427013][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.427024][ T30] Call Trace: [ 550.427033][ T30] [ 550.427041][ T30] dump_stack_lvl+0xe8/0x150 [ 550.427076][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 550.427095][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 550.427125][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 550.427149][ T30] sys_info+0x135/0x170 [ 550.427175][ T30] watchdog+0xfaa/0x1000 [ 550.427202][ T30] ? watchdog+0x209/0x1000 [ 550.427231][ T30] kthread+0x388/0x470 [ 550.427252][ T30] ? __pfx_watchdog+0x10/0x10 [ 550.427271][ T30] ? __pfx_kthread+0x10/0x10 [ 550.427292][ T30] ret_from_fork+0x514/0xb70 [ 550.427322][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 550.427348][ T30] ? __switch_to+0xc79/0x1410 [ 550.427373][ T30] ? __pfx_kthread+0x10/0x10 [ 550.427394][ T30] ret_from_fork_asm+0x1a/0x30 [ 550.427440][ T30] [ 550.427448][ T30] Sending NMI from CPU 0 to CPUs 1: [ 550.538036][ C1] NMI backtrace for cpu 1 [ 550.538054][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 550.538074][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.538083][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 550.538109][ C1] Code: 1b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 fd 15 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 550.538124][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 550.538145][ C1] RAX: 000000000018a487 RBX: ffffffff819a67ea RCX: 0000000080000001 [ 550.538157][ C1] RDX: 0000000000000001 RSI: ffffffff8dfb71ef RDI: ffffffff8c27f000 [ 550.538169][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 550.538181][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 550.538192][ C1] R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 [ 550.538204][ C1] FS: 0000000000000000(0000) GS:ffff888125343000(0000) knlGS:0000000000000000 [ 550.538217][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.538228][ C1] CR2: 00007f1b1c9ea9b8 CR3: 0000000075014000 CR4: 00000000003526f0 [ 550.538244][ C1] Call Trace: [ 550.538251][ C1] [ 550.538257][ C1] default_idle+0x9/0x20 [ 550.538279][ C1] default_idle_call+0x72/0xb0 [ 550.538302][ C1] do_idle+0x36a/0x5f0 [ 550.538324][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 550.538345][ C1] ? __pfx_do_idle+0x10/0x10 [ 550.538370][ C1] cpu_startup_entry+0x43/0x60 [ 550.538392][ C1] start_secondary+0x101/0x110 [ 550.538411][ C1] common_startup_64+0x13e/0x147 [ 550.538436][ C1] [ 550.706488][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 550.713386][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 550.722506][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.732562][ T30] Call Trace: [ 550.735848][ T30] [ 550.738800][ T30] vpanic+0x56c/0xa60 [ 550.742818][ T30] ? __pfx___schedule+0x10/0x10 [ 550.747719][ T30] ? __pfx_vpanic+0x10/0x10 [ 550.752237][ T30] ? __pfx_console_unlock+0x10/0x10 [ 550.757448][ T30] panic+0xc5/0xd0 [ 550.761176][ T30] ? __pfx_panic+0x10/0x10 [ 550.765599][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 550.770978][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 550.777142][ T30] watchdog+0xff4/0x1000 [ 550.781405][ T30] ? watchdog+0x209/0x1000 [ 550.785846][ T30] kthread+0x388/0x470 [ 550.789932][ T30] ? __pfx_watchdog+0x10/0x10 [ 550.794617][ T30] ? __pfx_kthread+0x10/0x10 [ 550.799224][ T30] ret_from_fork+0x514/0xb70 [ 550.803852][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 550.808986][ T30] ? __switch_to+0xc79/0x1410 [ 550.813672][ T30] ? __pfx_kthread+0x10/0x10 [ 550.818274][ T30] ret_from_fork_asm+0x1a/0x30 [ 550.823069][ T30] [ 550.826445][ T30] Kernel Offset: disabled [ 550.830766][ T30] Rebooting in 86400 seconds..