last executing test programs: 2m50.411900458s ago: executing program 0 (id=2889): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xfe, 0x6}}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 2m47.986628603s ago: executing program 0 (id=2896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) (fail_nth: 17) 2m47.295350696s ago: executing program 0 (id=2900): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400006397613bac0010000305160000001dc76dc500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket$packet(0x11, 0x7cd5f14e3ea520f5, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x100000001, 0x4) recvfrom$inet6(r0, 0x0, 0xffffffffffffff32, 0x40010043, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m47.031666255s ago: executing program 0 (id=2904): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x80000000}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x220, 0x4) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) (async) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendto(r0, &(0x7f0000000080)="edd4317ef3db3fec52200e48c692811a05664818d3ae576515333cfa890bea0d48b6a0c5a72bd02721f34af84938d5563b7d1af37d0ef4ab6fd4c76247b249c120835f3c01d55dc0a3aca491697adf9d09db3ca7d36652f73dedf7a97ef89119c5a832943d9e132e47a46262d2d1c5b68ac57112d300995421cdbe5c53501f5ce51d4e5ea1bb46d2bb66476a668e4439627de7eabd1a8d577ae92e60c13d36552ceef22a01da2a71ee3743d8e9cb9cb32f26ad82ae92ff1bfe527e2830ccb3", 0xbf, 0x2400c846, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000080)="edd4317ef3db3fec52200e48c692811a05664818d3ae576515333cfa890bea0d48b6a0c5a72bd02721f34af84938d5563b7d1af37d0ef4ab6fd4c76247b249c120835f3c01d55dc0a3aca491697adf9d09db3ca7d36652f73dedf7a97ef89119c5a832943d9e132e47a46262d2d1c5b68ac57112d300995421cdbe5c53501f5ce51d4e5ea1bb46d2bb66476a668e4439627de7eabd1a8d577ae92e60c13d36552ceef22a01da2a71ee3743d8e9cb9cb32f26ad82ae92ff1bfe527e2830ccb3", 0xbf, 0x2400c846, 0x0, 0x0) shutdown(r1, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x4004) (async) sendmsg$tipc(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000002080)=ANY=[@ANYBLOB="18000000080000000000000080000000731131000000000095"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) (async) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002f00090025bd000000000400000008000c000200000004001f000000"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="3919001d1d2000000502ffff04014100"], 0x10) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) (async) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) (async) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 2m46.711710705s ago: executing program 0 (id=2907): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000b40)={r3, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000d1780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000d1980)={0x0, 0x0, "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", "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"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000d2d80)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r5}, {r7}], 0x0, "8f8214df7fea99"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 2m46.531646831s ago: executing program 0 (id=2908): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t\n', @ANYRESHEX=r3], 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x2b, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @jmp={0x5, 0x1, 0xd, 0x3, 0x5, 0xfffffffffffffff8, 0x8}, @call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x51}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0x2, 0x2, 0x2, 0x0, 0x7, 0x10, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0xfffffffc, 0x5a, &(0x7f0000000340)=""/90, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x2, 0x0, 0x7}, 0x10, 0xa7d0, 0xffffffffffffffff, 0x7, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000480)=[{0x4, 0x4, 0x6, 0x1}, {0x0, 0x1, 0x9, 0x4}, {0x4, 0x4, 0x10, 0xc}, {0x2, 0x2, 0x6, 0x6}, {0x1, 0x1, 0xb, 0xb}, {0x5, 0x4, 0x6}, {0x2, 0x3, 0xa}], 0x10, 0xfffffff8}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc880) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000040)=r4, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m46.014596282s ago: executing program 2 (id=2910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="95000000000085a3bad1f6ff5db00000000079897de7a3530f39e9127c93a952088e420708000092da728c6302dae446a9c505504f2a9a018fe3d388cc0c726b8aef92a92e6b99bdffe66e675b1c2d16753ca96cb70e143c6af66468b0580fa92971c31543240fc3ea02acf73e1445e28fc3ee20e604e68508"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010629bd7000fddbdf257cbe000005002b000200000008000200", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000040041"], 0x20, 0x4048800}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000001500)=ANY=[@ANYBLOB="986b7c93faccfc830000000000001858460e5cdb814faf4fc1c80131535ef86a9e0f26cf7ff4f3904ae023f606c01157f274db61710402749cae4b08c10a5767ac294ba295f2eba3dd868711008f4556ad2d51db6320d79005e12bc248689d4f8206d2ae3af391a1898568dd1813917f0c", @ANYRES16=r9, @ANYBLOB="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"], 0x398}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f0000000b40)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0xa2, &(0x7f0000000100)=""/162, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8ede", 0x4}], 0x2}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x2, 0x100100, 0xcb98, 0xc, "33e4a8", 0x6}}) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c00000039000100faff0700ffdbdf250a000000ed7aca3d0f000000ae6ddff77a349773ca3a29b2733a46d385a31e1fdfc56ee3e0f7c597c6ab18eb2956594d11c74bbc4680a95abe"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000080)=0x802, 0x4) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffffffffd1d, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73353cc9f1ba1f84843e8ffff5d1406156ed123bf9062f8000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m46.014268634s ago: executing program 4 (id=2911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) (fail_nth: 18) 2m45.732012704s ago: executing program 1 (id=2913): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(0x3) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {0x36, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@remote, 0x6d, r4}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c099, 0x2008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x4d9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 2m45.579407626s ago: executing program 4 (id=2914): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07840f000200", @ANYRES32=r3, @ANYBLOB='\b\x00/\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000001800000001"], 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x5, 0xfffffffb, 0x9, 0x0, 0x6, 0x2, 0xfe, 0xd, 0x7, 0x0, 0x201, 0x9, 0x2, 0x0, 0x45, [0x100000f3, 0x100089ff]}}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r5, 0x900, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYRES16=r4], &(0x7f0000000080)='GPL\x00', 0xbd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2m45.230254511s ago: executing program 4 (id=2916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x128, 0x24, 0x601, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x7, 0x35, 0x5, 0x2, 0x93, 0x3, 0x7}}, {0x12, 0x2, [0xdb, 0x0, 0x3, 0x0, 0x4, 0xea81, 0xff92]}}, {{0x1c, 0x1, {0x9, 0x1, 0xfe01, 0x7fff, 0x0, 0x6, 0x196fb157, 0x7}}, {0x12, 0x2, [0x8, 0x930, 0x5c47, 0xff, 0x4, 0xf1, 0x5]}}, {{0x1c, 0x1, {0xff, 0x0, 0xf000, 0x1, 0x2, 0xaa, 0xaf, 0x2}}, {0x8, 0x2, [0x100, 0x4]}}, {{0x1c, 0x1, {0xf8, 0x40, 0x9, 0x5, 0x0, 0xf, 0x4, 0x9}}, {0x16, 0x2, [0x0, 0x9, 0x8002, 0x2, 0xff, 0x5, 0xccc8, 0x466, 0x6]}}, {{0x1c, 0x1, {0x0, 0x19, 0x1, 0x4, 0x1, 0x2, 0x81, 0x2}}, {0x8, 0x2, [0xf000, 0x2]}}, {{0x1c, 0x1, {0x7, 0x9, 0x400, 0xff, 0x1, 0xa1, 0xfff, 0x1}}, {0x6, 0x2, [0x6c]}}]}]}, 0x128}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x0, 0x8e, 0x0, 0xffffffff}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0xa, 0x4, 0x3, 0x8089, r4, 0x10001, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x1, @value=r6}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c04}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r7, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r9, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0xbe, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4018, r9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0x0, &(0x7f00000001c0), &(0x7f0000000480)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000540)=""/89, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, r6, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, r11, 0x4, &(0x7f0000000980)=[r7, r7, r7, r7, r7, r7, r7, r7, r7, r7], &(0x7f00000009c0)=[{0x0, 0x5, 0x2}, {0x3, 0x2, 0xd, 0x9}, {0x0, 0x4, 0x9, 0x7}, {0x1, 0x5, 0xc, 0x5}], 0x10, 0x1000}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r12}, &(0x7f0000000a80), &(0x7f0000000ac0)=r13}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000180)=r14, 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000010000006d05000005"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f0000000000)="44a463", 0x0, 0x0, 0x0, 0xb496, r15}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000500)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x50, &(0x7f0000000600)=""/80, 0x41100, 0x23, '\x00', r3, @fallback=0x48451925cfe08c3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x2, 0x3, 0x1}, 0x10, r10, r14, 0x9, &(0x7f00000006c0)=[r7], &(0x7f0000000700)=[{0x1, 0x3, 0x7, 0x2}, {0x4, 0x1, 0x3, 0xc}, {0x2, 0x2, 0x8}, {0x0, 0x1, 0xd, 0x2}, {0x1, 0x4, 0x2, 0xb}, {0x2, 0x4, 0x5, 0x5}, {0x2, 0x3, 0xd, 0x9}, {0x1, 0x3, 0x2, 0x4}, {0x4, 0x2, 0xb, 0x8}], 0x10, 0xffff}, 0x94) 2m44.901389894s ago: executing program 4 (id=2917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='{,/\x00', 0x100, &(0x7f0000000080)={@_ha_fsid={[0xfffffffc, 0x9]}, {0x5, 0x8, 0x41e2, 0x8}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xfffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffdfd}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xfffffffffffffff4}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3b}, 0x94) 2m44.775338525s ago: executing program 4 (id=2918): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f00000003c0)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x5, [@const={0x9, 0x0, 0x0, 0xa, 0x3}, @union={0x9, 0x1, 0x0, 0x5, 0x0, 0xe, [{0x8, 0x3, 0x6}]}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x5, 0x1, 0x9}, {0x3, 0x6, 0x9}, {0x4, 0x3, 0xa7}], '\"'}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000540)=""/108, 0x75, 0x6c, 0x1, 0x7f}, 0x28) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x4, 0x9, 0x9, 0x18, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @tail_call, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}]}, &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, &(0x7f0000000900), 0x41100, 0x52, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x8, 0x6, 0x800}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000009c0)=[0x1, 0x1], &(0x7f0000000a00)=[{0x4, 0x2, 0x6, 0x9}, {0x5, 0x2, 0x10, 0x9}, {0x3, 0x4, 0xd, 0xc}, {0x2, 0x4, 0x0, 0x7}, {0x2, 0x3, 0x2, 0x6}, {0x2, 0x5, 0x0, 0x1}, {0x2, 0x5, 0x10, 0xb}, {0x0, 0x5, 0x0, 0x3}, {0x3, 0x4, 0x9, 0x1}], 0x10, 0x1dd}, 0x94) pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0xffffff98) r10 = socket(0x11, 0x2, 0x0) splice(r10, 0x0, r9, 0x0, 0x6, 0xa) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0xfffff800, 0x7, 0x80000000, 0x3016, r1, 0x8000, '\x00', 0x0, r7, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xc, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="186700000700000000000000996b000018010000202073250000000000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000255474ff000000000000"], &(0x7f0000000280)='GPL\x00', 0x9, 0x88, &(0x7f00000002c0)=""/136, 0x0, 0x10, '\x00', r4, @fallback=0x2d, r5, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x5, 0x6, 0x1}, 0x10, 0xffffffffffffffff, r6, 0x3, &(0x7f0000000c40)=[r7, r9, 0xffffffffffffffff, 0x1, r11], &(0x7f0000000c80)=[{0x5, 0x5, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x1}, {0x1, 0x5, 0x5, 0x8}], 0x10, 0x9}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000180)={'pimreg\x00', @random="af689c814b5b"}) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000ffdbdf250c000000180001801400020076657468315f746f5f6261746164760018000380140003800c00018008000100"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 2m44.762580726s ago: executing program 2 (id=2919): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x431, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x110080, 0x4) 2m44.745072163s ago: executing program 1 (id=2920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f00000000c0)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000f80)={0x1f, 0x3, 0x4}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a37", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="000127bd7000fbdbdf25090000001800038014000600fc000000000000000000000000000000300081800c000700010000002d00000008000900160000000800050004000000080009003e000000080008003a0000003800028008000500fbffffff140001000000000000000000000000000000000106000e004e240000080009000000000005000d0000000000080005000180000008000600db9f625c0c00018008000b00736970002000018014000300fc01000000000000000000000000000108000800f8000000"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0xa40ebe052e4c3721) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fe8000000000000000000000000000bb000000000000000092010000000000ff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000040000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x37, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a40)={'erspan0\x00', r2, 0x8000, 0x7, 0x6, 0x5, {{0x22, 0x4, 0x0, 0x7, 0x88, 0x68, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x53, [@empty, @rand_addr=0x64010101, @local]}, @timestamp_prespec={0x44, 0x54, 0x97, 0x3, 0xd, [{@private=0xa010101, 0x2}, {@private=0xa010101, 0x9}, {@remote, 0xe8a6}, {@multicast2, 0x8}, {@remote, 0x3}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x630}, {@multicast1, 0x1}, {@broadcast, 0xfffffff8}, {@rand_addr=0x64010101, 0x82d00000}]}, @generic={0x88, 0x11, "2cffac62435849817e51588b0b01e5"}]}}}}}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'tunl0\x00', r2, 0x20, 0x20, 0x7, 0x2, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x67, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, {[@lsrr={0x83, 0x23, 0x2c, [@private=0xa010102, @multicast2, @multicast2, @multicast2, @local, @broadcast, @empty, @local]}, @timestamp_prespec={0x44, 0x1c, 0xb3, 0x3, 0x5, [{@broadcast, 0x7}, {@multicast1, 0x2}, {@loopback, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000f00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x1ac, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2ce00a52f3da7d59}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x42}, 0x4040) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010900000000000000001e0000000c00018008000100", @ANYRES32=r15, @ANYBLOB="050003"], 0x28}}, 0x0) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000f40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_xfrm(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x108, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0xfb5, 0xa, 0x0, 0x80, 0x1d}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast2, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x100006}, 0x80, 0x3505, 0x2, 0x2, 0x0, 0x26}, [@replay_thresh={0x8, 0xb, 0xb}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x50}, 0x844) 2m44.505171465s ago: executing program 2 (id=2922): unshare(0x8040480) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0xfffffffffffffe32, &(0x7f0000002740)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2b, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4000040) epoll_wait(r0, 0x0, 0x0, 0x404) 2m44.15721679s ago: executing program 1 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) (fail_nth: 19) 2m43.911792211s ago: executing program 1 (id=2924): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2m43.899183216s ago: executing program 3 (id=2925): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x432}, [@jmp={0x5, 0x0, 0xb, 0x9, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x8}, 0x94) 2m43.756157073s ago: executing program 3 (id=2926): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004005100000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010000104fcffffff8000000000000000", @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYBLOB="08000a09000000a37f3ac55b3db316bab099dfcfe618b818a4f79608bf90874abc", @ANYRES32=r0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) (async) unshare(0x24020400) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340004001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000011000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) unshare(0xa000000) (async) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x10, 0x80800) accept$phonet_pipe(r5, &(0x7f0000000500), &(0x7f0000000540)=0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x15, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070001000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c000380380000800800034000000003"], 0xec}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1c0000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m43.520842871s ago: executing program 2 (id=2927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb6}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x19, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000500)={{r4, &(0x7f00000002c0)='\\+', 0x2200, &(0x7f0000000380)={@_ha_fsid={[0x2, 0x5]}, {0x8, 0xdf, 0x9b0, 0x5}}, 0x0, 0x0, &(0x7f0000000400)=0x3ff}, {[0x23a, 0x400, 0x3, 0x40000002]}, 0x7, 0x98, &(0x7f0000000440)=""/152}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, 0x0, 0xfffffc55) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x40) recvfrom(r8, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) r10 = bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00'}) 2m43.347858618s ago: executing program 3 (id=2928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 2m43.241888442s ago: executing program 3 (id=2929): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e2", @typed={0x8, 0x96, 0x0, 0x0, @fd=r0}, @nested={0x59, 0x7a, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @fd}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2m43.207598911s ago: executing program 1 (id=2930): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtaction={0x11, 0x30, 0xffff, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0xc000) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@local, 0x0, 0x2, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m43.107754882s ago: executing program 3 (id=2931): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) write(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000e, 0x13, r2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) 2m42.924425248s ago: executing program 1 (id=2932): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r2, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xd007, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0xfffffffa, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) 2m42.54903703s ago: executing program 3 (id=2933): sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="9800ffbd7000bbb5ff030000da0c00000dffe4b7", @ANYRES32=0x0, @ANYBLOB="0c009900ff030000670000002400238005000e000100000005001d00000000000500110000000000060010000200000008000300", @ANYRES32, @ANYBLOB="0c009900010000800c000000080001005f0000000c0099000800000027000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8890) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000200)=@pppoe, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000840)=""/52, 0x34}, 0x40000002) sendto$inet(r4, &(0x7f00000009c0)="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", 0x134, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000709bcbc5fa9e1002d0795f23dbd01"], 0x18}}, 0x20004018) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0x8, 0x720, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b6", 0x10}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) vmsplice(r5, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 2m42.427847328s ago: executing program 2 (id=2934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) (fail_nth: 20) 2m42.060075034s ago: executing program 2 (id=2935): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x5, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x20004c70) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)='[', 0x34000}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001440)="85", 0x1}], 0x1}}], 0x1, 0x8040) close(r8) getsockopt$inet_opts(r7, 0x0, 0x4, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd6067060000000600000000", 0x1d}, {&(0x7f0000000100)="a1c6757dfaadb021e548300000006a61a823efff3b4653473c82c035f5340400006cf0c0a85f932dcb0e5b5564dd8dccb9", 0x31}, {&(0x7f0000000440)="cb", 0x1}], 0x3) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x919000, 0x0, 0x0, 0x3}, 0x20) 2m41.675139365s ago: executing program 4 (id=2936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(r0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x110, r0, 0xdf86f000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) sendmsg$can_bcm(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x1, {0x1, 0xff, 0x4}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r8, 0x215eb000) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0xd, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 2m20.818905078s ago: executing program 32 (id=2932): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r2, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xd007, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, r6, 0x1, 0x70bd2d, 0xfffffffa, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) 0s ago: executing program 33 (id=2935): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x5, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x20004c70) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)='[', 0x34000}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001440)="85", 0x1}], 0x1}}], 0x1, 0x8040) close(r8) getsockopt$inet_opts(r7, 0x0, 0x4, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd6067060000000600000000", 0x1d}, {&(0x7f0000000100)="a1c6757dfaadb021e548300000006a61a823efff3b4653473c82c035f5340400006cf0c0a85f932dcb0e5b5564dd8dccb9", 0x31}, {&(0x7f0000000440)="cb", 0x1}], 0x3) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x919000, 0x0, 0x0, 0x3}, 0x20) kernel console output (not intermixed with test programs): 3] __x64_sys_recvmmsg+0x198/0x250 [ 342.585776][T15053] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 342.585818][T15053] do_syscall_64+0x166/0x520 [ 342.585841][T15053] ? trace_irq_disable+0x3b/0x140 [ 342.585861][T15053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.585882][T15053] ? clear_bhb_loop+0x70/0xc0 [ 342.585907][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.585927][T15053] RIP: 0033:0x7fdb6539e159 [ 342.585955][T15053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.585972][T15053] RSP: 002b:00007fdb662de028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 342.585996][T15053] RAX: ffffffffffffffda RBX: 00007fdb65626090 RCX: 00007fdb6539e159 [ 342.586011][T15053] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 342.586024][T15053] RBP: 00007fdb662de090 R08: 0000000000000000 R09: 0000000000000000 [ 342.586036][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.586048][T15053] R13: 00007fdb65626128 R14: 00007fdb65626090 R15: 00007fff5a93ae38 [ 342.586084][T15053] [ 342.886841][T15067] netlink: 'syz.0.2187': attribute type 3 has an invalid length. [ 342.886867][T15067] netlink: 'syz.0.2187': attribute type 16 has an invalid length. [ 343.293308][T15089] xt_HMARK: spi-set and port-set can't be combined [ 343.633758][T15115] FAULT_INJECTION: forcing a failure. [ 343.633758][T15115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.633796][T15115] CPU: 0 UID: 0 PID: 15115 Comm: syz.0.2197 Not tainted syzkaller #0 PREEMPT(full) [ 343.633820][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.633833][T15115] Call Trace: [ 343.633841][T15115] [ 343.633850][T15115] dump_stack_lvl+0xe8/0x150 [ 343.633886][T15115] should_fail_ex+0x410/0x560 [ 343.633929][T15115] _copy_from_user+0x2d/0xb0 [ 343.633957][T15115] ___sys_recvmsg+0x173/0x5a0 [ 343.633992][T15115] ? __pfx____sys_recvmsg+0x10/0x10 [ 343.634026][T15115] ? lock_acquire+0x115/0x350 [ 343.634082][T15115] do_recvmmsg+0x31a/0x7f0 [ 343.634120][T15115] ? __pfx_do_recvmmsg+0x10/0x10 [ 343.634164][T15115] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 343.634191][T15115] ? __fget_files+0x3a2/0x420 [ 343.634232][T15115] __x64_sys_recvmmsg+0x198/0x250 [ 343.634263][T15115] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 343.634305][T15115] do_syscall_64+0x166/0x520 [ 343.634328][T15115] ? trace_irq_disable+0x3b/0x140 [ 343.634347][T15115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.634368][T15115] ? clear_bhb_loop+0x70/0xc0 [ 343.634394][T15115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.634414][T15115] RIP: 0033:0x7f394f79e159 [ 343.634433][T15115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.634450][T15115] RSP: 002b:00007f39505af028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 343.634473][T15115] RAX: ffffffffffffffda RBX: 00007f394fa26090 RCX: 00007f394f79e159 [ 343.634487][T15115] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 343.634500][T15115] RBP: 00007f39505af090 R08: 0000000000000000 R09: 0000000000000000 [ 343.634513][T15115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.634524][T15115] R13: 00007f394fa26128 R14: 00007f394fa26090 R15: 00007ffe31ee8ca8 [ 343.634557][T15115] [ 343.839982][T15100] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.840575][T15100] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.882640][T15100] .`: (slave bond_slave_1): Error -28 calling ndo_bpf [ 343.902381][T15100] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 343.937772][T15096] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.308957][T15133] __nla_validate_parse: 8 callbacks suppressed [ 344.308980][T15133] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2203'. [ 344.309002][T15133] netlink: 239 bytes leftover after parsing attributes in process `syz.1.2203'. [ 344.319646][T15133] netlink: zone id is out of range [ 344.319661][T15133] netlink: zone id is out of range [ 344.319668][T15133] netlink: zone id is out of range [ 344.319675][T15133] netlink: zone id is out of range [ 344.319682][T15133] netlink: zone id is out of range [ 344.319689][T15133] netlink: zone id is out of range [ 344.319695][T15133] netlink: zone id is out of range [ 344.319703][T15133] netlink: zone id is out of range [ 344.319730][T15133] netlink: zone id is out of range [ 344.596388][T15142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2205'. [ 344.596431][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2205'. [ 344.822056][T15156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2211'. [ 344.823036][T15157] FAULT_INJECTION: forcing a failure. [ 344.823036][T15157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.823070][T15157] CPU: 1 UID: 0 PID: 15157 Comm: syz.2.2210 Not tainted syzkaller #0 PREEMPT(full) [ 344.823094][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.823105][T15157] Call Trace: [ 344.823114][T15157] [ 344.823123][T15157] dump_stack_lvl+0xe8/0x150 [ 344.823159][T15157] should_fail_ex+0x410/0x560 [ 344.823188][T15157] _copy_from_user+0x2d/0xb0 [ 344.823215][T15157] ___sys_recvmsg+0x173/0x5a0 [ 344.823251][T15157] ? __pfx____sys_recvmsg+0x10/0x10 [ 344.823289][T15157] ? lock_acquire+0x115/0x350 [ 344.823343][T15157] do_recvmmsg+0x31a/0x7f0 [ 344.823380][T15157] ? __pfx_do_recvmmsg+0x10/0x10 [ 344.823422][T15157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 344.823450][T15157] ? __fget_files+0x3a2/0x420 [ 344.823490][T15157] __x64_sys_recvmmsg+0x198/0x250 [ 344.823521][T15157] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 344.823562][T15157] do_syscall_64+0x166/0x520 [ 344.823587][T15157] ? trace_irq_disable+0x3b/0x140 [ 344.823615][T15157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.823636][T15157] ? clear_bhb_loop+0x70/0xc0 [ 344.823661][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.823681][T15157] RIP: 0033:0x7f425d39e159 [ 344.823701][T15157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.823717][T15157] RSP: 002b:00007f425e238028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 344.823741][T15157] RAX: ffffffffffffffda RBX: 00007f425d626090 RCX: 00007f425d39e159 [ 344.823756][T15157] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 344.823770][T15157] RBP: 00007f425e238090 R08: 0000000000000000 R09: 0000000000000000 [ 344.823782][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.823794][T15157] R13: 00007f425d626128 R14: 00007f425d626090 R15: 00007ffc794eb328 [ 344.823828][T15157] [ 345.483073][T15178] syzkaller1: entered promiscuous mode [ 345.483097][T15178] syzkaller1: entered allmulticast mode [ 345.539748][ T3400] syzkaller0: (slave syz_tun): link status definitely down, disabling slave [ 345.704686][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 345.752470][T15180] ipip0: entered promiscuous mode [ 346.101958][T15201] netlink: 'syz.2.2221': attribute type 8 has an invalid length. [ 346.156314][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2219'. [ 346.621922][T15207] set match dimension is over the limit! [ 346.928984][T15232] syzkaller1: entered promiscuous mode [ 346.929012][T15232] syzkaller1: entered allmulticast mode [ 346.971423][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 347.036944][T15233] ip6gre2: entered promiscuous mode [ 347.036969][T15233] ip6gre2: entered allmulticast mode [ 347.203132][ T8110] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 347.203389][ T8110] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 347.228566][T14279] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 347.551647][T15251] xt_hashlimit: size too large, truncated to 1048576 [ 347.661065][T15254] xt_hashlimit: size too large, truncated to 1048576 [ 347.798910][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 347.819294][T14255] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 347.982202][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2237'. [ 348.019208][T14255] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.469054][T15285] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.912046][T15305] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 349.494474][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.494573][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.494663][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.494755][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.494845][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.494936][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.495049][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.495140][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.495227][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.495315][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.495401][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.495485][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.495571][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.495658][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.505342][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.505448][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.505526][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.505605][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.505684][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.505760][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.505835][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.505913][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.505988][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506071][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506147][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506225][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506300][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506376][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506452][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506532][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506608][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506684][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.506759][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.516767][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.516858][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.516934][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517010][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517096][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517173][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517249][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517324][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517401][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517477][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517552][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517626][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517703][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517779][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517855][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.517930][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.518009][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.518092][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521177][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521270][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521345][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521421][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521498][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521573][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521649][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521724][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521801][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521875][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.521950][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.522033][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.522144][T15335] netpci0: tun_chr_ioctl cmd 1074025673 [ 349.541651][T15336] netpci0: tun_chr_ioctl cmd 1074025678 [ 349.541672][T15336] netpci0: group set to 0 [ 349.991643][T15350] __nla_validate_parse: 2 callbacks suppressed [ 349.991689][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2256'. [ 350.271023][T15360] x_tables: unsorted underflow at hook 2 [ 350.394715][T15365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2259'. [ 350.611782][T15375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2264'. [ 350.611814][T15375] net_ratelimit: 5 callbacks suppressed [ 350.611888][T15375] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 350.617801][T15375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2264'. [ 351.493978][T15419] netlink: 'syz.3.2276': attribute type 2 has an invalid length. [ 351.508016][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2276'. [ 351.568354][T15421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 351.618885][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 352.189076][T15446] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2283'. [ 352.189107][T15446] netlink: 'syz.3.2283': attribute type 2 has an invalid length. [ 352.189121][T15446] netlink: 'syz.3.2283': attribute type 1 has an invalid length. [ 352.189134][T15446] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2283'. [ 352.847090][T15481] lo speed is unknown, defaulting to 1000 [ 352.854672][T15481] wg2 speed is unknown, defaulting to 1000 [ 353.135570][T15489] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 353.364082][T15498] netlink: 'syz.1.2296': attribute type 27 has an invalid length. [ 353.495654][T15500] netlink: 'syz.2.2297': attribute type 2 has an invalid length. [ 353.784847][T15510] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 353.805610][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 353.966035][T15510] veth7: entered promiscuous mode [ 353.966061][T15510] veth7: entered allmulticast mode [ 353.970358][T15510] bridge5: port 1(veth7) entered blocking state [ 353.970549][T15510] bridge5: port 1(veth7) entered disabled state [ 353.983307][T15510] bridge5: port 1(veth7) entered blocking state [ 353.983429][T15510] bridge5: port 1(veth7) entered forwarding state [ 354.027643][ T13] bridge5: port 1(veth7) entered disabled state [ 354.409979][T15516] vlan3: entered promiscuous mode [ 354.594626][T15531] netlink: 'syz.0.2305': attribute type 1 has an invalid length. [ 354.709712][T15539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2305'. [ 354.765708][T15531] 8021q: adding VLAN 0 to HW filter on device bond11 [ 354.875963][T15541] netlink: Unknown nat attribute (0) [ 354.876012][T15541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.906685][T15537] bond11: (slave veth11): Enslaving as an active interface with a down link [ 354.970318][T15539] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 354.986325][T15539] bond11: (slave batadv1): making interface the new active one [ 355.003645][T15539] batadv1: entered promiscuous mode [ 355.004188][T15539] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 355.213610][T15549] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2309'. [ 355.434650][T15558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2312'. [ 355.996640][T15572] ip6gre2: left promiscuous mode [ 355.996668][T15572] ip6gre2: left allmulticast mode [ 355.998105][T15572] dummy0: left allmulticast mode [ 356.042270][T15572] macvlan2: left promiscuous mode [ 356.042298][T15572] macvlan2: left allmulticast mode [ 356.077916][T15572] batadv_slave_0: left allmulticast mode [ 356.084905][T15572] macvlan3: left promiscuous mode [ 356.084923][T15572] macvlan3: left allmulticast mode [ 356.145998][T15572] gre1: left promiscuous mode [ 356.154410][T15572] ipip0: left promiscuous mode [ 356.208531][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.208593][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.208628][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.208661][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.741521][ T31] audit: type=1804 audit(1789920211.129:6): pid=15622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2321" name="/newroot/485/memory.events" dev="tmpfs" ino=2528 res=1 errno=0 [ 357.741583][ T31] audit: type=1800 audit(1789920211.129:7): pid=15622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2321" name="memory.events" dev="tmpfs" ino=2528 res=0 errno=0 [ 357.744899][ T31] audit: type=1804 audit(1789920211.129:8): pid=15623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2321" name="/newroot/485/memory.events" dev="tmpfs" ino=2528 res=1 errno=0 [ 357.795998][T15615] syzkaller1: entered promiscuous mode [ 357.796025][T15615] syzkaller1: entered allmulticast mode [ 358.323070][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2326'. [ 358.528574][T15643] netlink: Unknown conntrack attr (type=12293, max=9) [ 358.528618][T15643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.532184][T15645] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2328'. [ 358.565172][ T5620] block nbd2: Receive control failed (result -32) [ 358.832434][T15656] netlink: 'syz.1.2330': attribute type 2 has an invalid length. [ 359.723957][T15682] netlink: 'syz.4.2336': attribute type 2 has an invalid length. [ 359.728003][T15676] x_tables: duplicate entry at hook 4 [ 359.797375][T15685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2339'. [ 359.869623][T15685] ipvlan0: entered promiscuous mode [ 359.887440][T15685] ipvlan0: left promiscuous mode [ 360.066946][T15694] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2343'. [ 360.173741][T15709] syzkaller0: left promiscuous mode [ 360.173765][T15709] bond_slave_0: left promiscuous mode [ 360.174100][T15709] bond_slave_1: left promiscuous mode [ 360.174278][T15709] syz_tun: left promiscuous mode [ 360.175442][T15709] syzkaller0: left allmulticast mode [ 360.175461][T15709] bond_slave_0: left allmulticast mode [ 360.175477][T15709] bond_slave_1: left allmulticast mode [ 360.175492][T15709] syz_tun: left allmulticast mode [ 360.898390][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 360.898390][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.900111][T15744] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 360.900138][T15744] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 360.940395][T15744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2351'. [ 360.940663][T15744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2351'. [ 361.431941][T15751] syzkaller0: entered promiscuous mode [ 361.431968][T15751] syzkaller0: entered allmulticast mode [ 361.917698][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2360'. [ 361.965715][T15778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2360'. [ 362.127607][T15792] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2364'. [ 362.273138][T15780] syzkaller0: left allmulticast mode [ 362.284330][T15780] veth9: left allmulticast mode [ 362.299281][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.299319][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.299447][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.299472][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.299530][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.299555][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.299590][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.299614][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.434337][T15783] batman_adv: batadv0: Interface deactivated: veth0 [ 362.507255][T15783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.519755][T15783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.522309][T15783] xfrm0: left allmulticast mode [ 362.541212][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'. [ 362.557472][T15783] vxlan0: left allmulticast mode [ 362.565225][T15783] vxlan1: left allmulticast mode [ 362.567137][T15783] bond6: left allmulticast mode [ 362.662538][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.662576][ T12] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 256 - 0 [ 362.668926][ T8108] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.668957][ T8108] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 256 - 0 [ 362.669048][ T8108] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.669069][ T8108] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 256 - 0 [ 362.669098][ T8108] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.669118][ T8108] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 256 - 0 [ 362.766378][T15813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2368'. [ 363.841197][T15930] netlink: 'syz.3.2380': attribute type 1 has an invalid length. [ 363.970737][T15925] netlink: 'syz.2.2378': attribute type 4 has an invalid length. [ 364.081833][T15936] xt_limit: Overflow, try lower: 268435456/134217728 [ 364.109884][T15938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2382'. [ 364.113010][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'. [ 364.157454][T15938] netlink: 'syz.4.2382': attribute type 1 has an invalid length. [ 364.157514][T15938] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2382'. [ 364.559941][T15957] macsec0: entered promiscuous mode [ 364.586150][T15957] macsec0 (unregistering): left promiscuous mode [ 364.678508][T15964] netlink: 'syz.1.2389': attribute type 2 has an invalid length. [ 364.849394][T15978] sctp: [Deprecated]: syz.4.2393 (pid 15978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.849394][T15978] Use struct sctp_sack_info instead [ 365.744008][T16017] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 365.766906][T16021] netlink: 'syz.4.2406': attribute type 9 has an invalid length. [ 366.149045][ T8115] batadv1: left promiscuous mode [ 366.181042][T16036] __nla_validate_parse: 13 callbacks suppressed [ 366.181069][T16036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2410'. [ 366.295237][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 366.435018][T16058] netlink: 'syz.3.2415': attribute type 1 has an invalid length. [ 366.435044][T16058] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2415'. [ 366.541277][T16064] FAULT_INJECTION: forcing a failure. [ 366.541277][T16064] name failslab, interval 1, probability 0, space 0, times 1 [ 366.541310][T16064] CPU: 1 UID: 0 PID: 16064 Comm: syz.4.2417 Not tainted syzkaller #0 PREEMPT(full) [ 366.541332][T16064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.541344][T16064] Call Trace: [ 366.541426][T16064] [ 366.541482][T16064] dump_stack_lvl+0xe8/0x150 [ 366.541614][T16064] should_fail_ex+0x410/0x560 [ 366.541701][T16064] ? __alloc_skb+0x1db/0x7a0 [ 366.541798][T16064] should_failslab+0xa8/0x100 [ 366.541857][T16064] ? __alloc_skb+0x1db/0x7a0 [ 366.541877][T16064] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 366.541913][T16064] ? __alloc_skb+0x18d/0x7a0 [ 366.541934][T16064] ? __alloc_skb+0x1db/0x7a0 [ 366.541962][T16064] __alloc_skb+0x1db/0x7a0 [ 366.541990][T16064] netlink_sendmsg+0x5d4/0xb40 [ 366.542071][T16064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.542107][T16064] ? apparmor_socket_sendmsg+0x98/0x360 [ 366.542197][T16064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.542223][T16064] sock_sendmsg_nosec+0x13a/0x180 [ 366.542269][T16064] ____sys_sendmsg+0x54e/0x850 [ 366.542301][T16064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.542336][T16064] ? import_iovec+0x73/0xa0 [ 366.542403][T16064] ___sys_sendmsg+0x2a5/0x360 [ 366.542424][T16064] ? __lock_acquire+0x747/0x2de0 [ 366.542474][T16064] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.542548][T16064] ? __fget_files+0x2a/0x420 [ 366.542587][T16064] ? __fget_files+0x3a2/0x420 [ 366.542623][T16064] __x64_sys_sendmsg+0x1b1/0x290 [ 366.542651][T16064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.542698][T16064] do_syscall_64+0x166/0x520 [ 366.542784][T16064] ? trace_irq_disable+0x3b/0x140 [ 366.542827][T16064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.542866][T16064] ? clear_bhb_loop+0x70/0xc0 [ 366.542890][T16064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.542907][T16064] RIP: 0033:0x7fd80c79e159 [ 366.542953][T16064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.542996][T16064] RSP: 002b:00007fd80d71b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.543041][T16064] RAX: ffffffffffffffda RBX: 00007fd80ca25fa0 RCX: 00007fd80c79e159 [ 366.543055][T16064] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 366.543067][T16064] RBP: 00007fd80d71b090 R08: 0000000000000000 R09: 0000000000000000 [ 366.543080][T16064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.543091][T16064] R13: 00007fd80ca26038 R14: 00007fd80ca25fa0 R15: 00007ffe5b80c928 [ 366.543124][T16064] [ 366.626893][T16068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2416'. [ 366.762171][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'. [ 366.876996][T16073] lo: entered allmulticast mode [ 366.934675][T16075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2420'. [ 366.934715][T16075] vlan0: entered promiscuous mode [ 366.960170][T16075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.092114][T16072] lo: left allmulticast mode [ 367.463705][T16104] netlink: 'syz.2.2426': attribute type 1 has an invalid length. [ 367.515492][T16094] macvlan0: entered promiscuous mode [ 367.516944][T16094] netlink: 'syz.0.2424': attribute type 1 has an invalid length. [ 367.516966][T16094] netlink: 'syz.0.2424': attribute type 2 has an invalid length. [ 367.517230][T16094] netlink: 'syz.0.2424': attribute type 1 has an invalid length. [ 367.676392][T16104] bond12: entered promiscuous mode [ 367.676484][T16104] bond12: entered allmulticast mode [ 367.676948][T16104] 8021q: adding VLAN 0 to HW filter on device bond12 [ 367.897514][T16117] tipc: New replicast peer: 255.255.255.255 [ 367.902321][T16117] tipc: Enabled bearer , priority 10 [ 368.398005][T16135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2433'. [ 368.671996][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 368.691676][T16156] FAULT_INJECTION: forcing a failure. [ 368.691676][T16156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.691715][T16156] CPU: 1 UID: 0 PID: 16156 Comm: syz.0.2441 Not tainted syzkaller #0 PREEMPT(full) [ 368.691740][T16156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.691753][T16156] Call Trace: [ 368.691762][T16156] [ 368.691771][T16156] dump_stack_lvl+0xe8/0x150 [ 368.691808][T16156] should_fail_ex+0x410/0x560 [ 368.691838][T16156] _copy_from_iter+0x1d3/0x1660 [ 368.691864][T16156] ? __alloc_skb+0x27a/0x7a0 [ 368.691890][T16156] ? __alloc_skb+0x27a/0x7a0 [ 368.691917][T16156] ? __alloc_skb+0x27a/0x7a0 [ 368.691940][T16156] ? __pfx__copy_from_iter+0x10/0x10 [ 368.691961][T16156] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 368.691991][T16156] ? __alloc_skb+0x27a/0x7a0 [ 368.692009][T16156] ? __alloc_skb+0x27a/0x7a0 [ 368.692039][T16156] ? netlink_sendmsg+0x650/0xb40 [ 368.692069][T16156] ? skb_put+0x112/0x210 [ 368.692171][T16156] netlink_sendmsg+0x6c0/0xb40 [ 368.692212][T16156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.692252][T16156] ? apparmor_socket_sendmsg+0x98/0x360 [ 368.692278][T16156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.692307][T16156] sock_sendmsg_nosec+0x13a/0x180 [ 368.692332][T16156] ____sys_sendmsg+0x54e/0x850 [ 368.692366][T16156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.692404][T16156] ? import_iovec+0x73/0xa0 [ 368.692433][T16156] ___sys_sendmsg+0x2a5/0x360 [ 368.692458][T16156] ? __lock_acquire+0x747/0x2de0 [ 368.692485][T16156] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.692563][T16156] ? __fget_files+0x2a/0x420 [ 368.692591][T16156] ? __fget_files+0x3a2/0x420 [ 368.692630][T16156] __x64_sys_sendmsg+0x1b1/0x290 [ 368.692660][T16156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.692712][T16156] do_syscall_64+0x166/0x520 [ 368.692737][T16156] ? trace_irq_disable+0x3b/0x140 [ 368.692758][T16156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.692779][T16156] ? clear_bhb_loop+0x70/0xc0 [ 368.692803][T16156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.692824][T16156] RIP: 0033:0x7f394f79e159 [ 368.692846][T16156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.692864][T16156] RSP: 002b:00007f39505d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.692889][T16156] RAX: ffffffffffffffda RBX: 00007f394fa25fa0 RCX: 00007f394f79e159 [ 368.692903][T16156] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 368.692917][T16156] RBP: 00007f39505d0090 R08: 0000000000000000 R09: 0000000000000000 [ 368.692929][T16156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.692942][T16156] R13: 00007f394fa26038 R14: 00007f394fa25fa0 R15: 00007ffe31ee8ca8 [ 368.692977][T16156] [ 368.991492][T16160] syzkaller0: entered promiscuous mode [ 368.991521][T16160] bond_slave_0: entered promiscuous mode [ 368.991738][T16160] bond_slave_1: entered promiscuous mode [ 368.991919][T16160] syz_tun: entered promiscuous mode [ 368.992171][T16160] syzkaller0: entered allmulticast mode [ 368.992188][T16160] bond_slave_0: entered allmulticast mode [ 368.992203][T16160] bond_slave_1: entered allmulticast mode [ 368.992217][T16160] syz_tun: entered allmulticast mode [ 369.019151][T14258] tipc: Node number set to 1018398289 [ 369.176700][T16169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2445'. [ 369.582311][T16186] bond7: Removing last arp target with arp_interval on [ 369.799203][T16203] FAULT_INJECTION: forcing a failure. [ 369.799203][T16203] name failslab, interval 1, probability 0, space 0, times 0 [ 369.799237][T16203] CPU: 0 UID: 0 PID: 16203 Comm: syz.3.2453 Not tainted syzkaller #0 PREEMPT(full) [ 369.799259][T16203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.799271][T16203] Call Trace: [ 369.799280][T16203] [ 369.799289][T16203] dump_stack_lvl+0xe8/0x150 [ 369.799329][T16203] should_fail_ex+0x410/0x560 [ 369.799358][T16203] should_failslab+0xa8/0x100 [ 369.799385][T16203] __kmalloc_noprof+0xfe/0x720 [ 369.799405][T16203] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 369.799499][T16203] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 369.799533][T16203] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 369.799564][T16203] genl_family_rcv_msg_doit+0xda/0x340 [ 369.799595][T16203] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.799630][T16203] ? apparmor_capable+0x126/0x170 [ 369.799662][T16203] ? bpf_lsm_capable+0x9/0x20 [ 369.799702][T16203] ? security_capable+0x7e/0x2c0 [ 369.799761][T16203] genl_rcv_msg+0x614/0x7a0 [ 369.799801][T16203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.799822][T16203] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 369.799887][T16203] ? __pfx_nl802154_del_llsec_seclevel+0x10/0x10 [ 369.799910][T16203] ? __pfx_nl802154_post_doit+0x10/0x10 [ 369.799948][T16203] netlink_rcv_skb+0x226/0x4a0 [ 369.799979][T16203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.800004][T16203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.800052][T16203] ? down_read+0x2be/0x330 [ 369.800128][T16203] genl_rcv+0x28/0x40 [ 369.800149][T16203] netlink_unicast+0x7bd/0x940 [ 369.800197][T16203] netlink_sendmsg+0x813/0xb40 [ 369.800239][T16203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.800306][T16203] ? apparmor_socket_sendmsg+0x98/0x360 [ 369.800330][T16203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.800357][T16203] sock_sendmsg_nosec+0x13a/0x180 [ 369.800382][T16203] ____sys_sendmsg+0x54e/0x850 [ 369.800416][T16203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.800452][T16203] ? import_iovec+0x73/0xa0 [ 369.800483][T16203] ___sys_sendmsg+0x2a5/0x360 [ 369.800507][T16203] ? __lock_acquire+0x747/0x2de0 [ 369.800533][T16203] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.800603][T16203] ? __fget_files+0x2a/0x420 [ 369.800630][T16203] ? __fget_files+0x3a2/0x420 [ 369.800670][T16203] __x64_sys_sendmsg+0x1b1/0x290 [ 369.800701][T16203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.800754][T16203] do_syscall_64+0x166/0x520 [ 369.800778][T16203] ? trace_irq_disable+0x3b/0x140 [ 369.800808][T16203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.800829][T16203] ? clear_bhb_loop+0x70/0xc0 [ 369.800855][T16203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.800875][T16203] RIP: 0033:0x7fdb6539e159 [ 369.800895][T16203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.800912][T16203] RSP: 002b:00007fdb662ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.800934][T16203] RAX: ffffffffffffffda RBX: 00007fdb65625fa0 RCX: 00007fdb6539e159 [ 369.800949][T16203] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 369.800962][T16203] RBP: 00007fdb662ff090 R08: 0000000000000000 R09: 0000000000000000 [ 369.800975][T16203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.800986][T16203] R13: 00007fdb65626038 R14: 00007fdb65625fa0 R15: 00007fff5a93ae38 [ 369.801021][T16203] [ 369.999254][T16208] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2455'. [ 370.344850][T16226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.346073][T16227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.056961][T16264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.185443][T16269] validate_nla: 63 callbacks suppressed [ 371.185536][T16269] netlink: 'syz.2.2476': attribute type 2 has an invalid length. [ 371.185551][T16269] netlink: 'syz.2.2476': attribute type 1 has an invalid length. [ 371.244956][T16276] netlink: 'syz.1.2477': attribute type 49 has an invalid length. [ 371.407829][T16276] ip6gretap0: entered promiscuous mode [ 371.407853][T16276] ip6gretap0: entered allmulticast mode [ 371.585185][T16284] syzkaller1: entered promiscuous mode [ 371.585210][T16284] syzkaller1: entered allmulticast mode [ 371.994730][T16306] __nla_validate_parse: 5 callbacks suppressed [ 371.994756][T16306] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2485'. [ 372.207204][T16320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'. [ 372.314175][T16320] team0: Port device team_slave_0 removed [ 372.693184][T16330] syzkaller1: entered promiscuous mode [ 372.693213][T16330] syzkaller1: entered allmulticast mode [ 373.008838][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 373.134855][T16358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2492'. [ 373.303604][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 373.303630][T16379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2497'. [ 373.490525][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 373.492327][T16388] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2500'. [ 373.513189][T16384] bridge7: entered promiscuous mode [ 373.554282][T16390] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2498'. [ 373.564168][T16390] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2498'. [ 373.565608][T16387] bridge8: entered promiscuous mode [ 373.641682][T16384] ip6gre3: entered promiscuous mode [ 373.641710][T16384] ip6gre3: entered allmulticast mode [ 373.646171][T16383] syzkaller0: entered promiscuous mode [ 373.646240][T16383] syzkaller0: entered allmulticast mode [ 373.714689][ T3400] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 373.716514][ T3400] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 373.738575][T12867] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 374.002501][T16406] x_tables: duplicate underflow at hook 1 [ 374.192496][T16411] xt_CT: No such helper "snmp_trap" [ 374.317416][T16420] netlink: Unknown conntrack attr (0) [ 374.396386][T16416] lo speed is unknown, defaulting to 1000 [ 374.404635][T16416] wg2 speed is unknown, defaulting to 1000 [ 374.463864][T16423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.578603][T11200] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 374.603772][T16433] block nbd3: Unsupported socket: should be TCP or UNIX. [ 374.658843][T11200] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 374.692660][T16431] syzkaller0: entered promiscuous mode [ 374.692687][T16431] syzkaller0: entered allmulticast mode [ 374.821622][T16443] syzkaller0: entered promiscuous mode [ 374.821650][T16443] syzkaller0: entered allmulticast mode [ 375.397175][T16476] openvswitch: netlink: Missing key (keys=40, expected=100) [ 375.502566][T16462] bond4: entered promiscuous mode [ 375.502591][T16462] bond4: entered allmulticast mode [ 375.520455][ T31] audit: type=1804 audit(1789920228.909:9): pid=16482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2525" name="/newroot/515/cgroup.controllers" dev="tmpfs" ino=2673 res=1 errno=0 [ 375.520707][ T31] audit: type=1800 audit(1789920228.909:10): pid=16482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2525" name="cgroup.controllers" dev="tmpfs" ino=2673 res=0 errno=0 [ 375.652473][T16469] lo speed is unknown, defaulting to 1000 [ 375.669649][T16469] wg2 speed is unknown, defaulting to 1000 [ 375.994672][T16501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.145049][T16508] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 376.330293][T16508] 8021q: adding VLAN 0 to HW filter on device bond13 [ 377.015591][T16562] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.016458][T16562] __nla_validate_parse: 73 callbacks suppressed [ 377.016478][T16562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2549'. [ 377.106792][T16568] netlink: 3596 bytes leftover after parsing attributes in process `syz.1.2552'. [ 377.150212][T16572] netlink: 'syz.4.2553': attribute type 39 has an invalid length. [ 377.150390][T16573] netlink: 'syz.4.2553': attribute type 39 has an invalid length. [ 377.342109][T16578] batadv_slave_1: entered promiscuous mode [ 377.355557][T16568] can: request_module (can-proto-0) failed. [ 377.387052][T16567] batadv_slave_1: left promiscuous mode [ 377.538565][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 377.549584][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 377.554209][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 377.554579][T16589] syzkaller0: left promiscuous mode [ 377.554597][T16589] bond_slave_0: left promiscuous mode [ 377.554793][T16589] bond_slave_1: left promiscuous mode [ 377.554959][T16589] syz_tun: left promiscuous mode [ 377.555078][T16589] syzkaller0: left allmulticast mode [ 377.555090][T16589] bond_slave_0: left allmulticast mode [ 377.555102][T16589] bond_slave_1: left allmulticast mode [ 377.555114][T16589] syz_tun: left allmulticast mode [ 377.834678][T16600] netlink: 'syz.4.2557': attribute type 7 has an invalid length. [ 377.897257][T16602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2558'. [ 378.039192][T16610] lo speed is unknown, defaulting to 1000 [ 378.039264][T16610] lo speed is unknown, defaulting to 1000 [ 378.040159][T16610] lo speed is unknown, defaulting to 1000 [ 378.041403][T16610] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 378.041439][T16610] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 378.041477][T16610] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 378.047115][T16610] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 378.149957][T16610] lo speed is unknown, defaulting to 1000 [ 378.152081][T16610] lo speed is unknown, defaulting to 1000 [ 378.179757][T16610] lo speed is unknown, defaulting to 1000 [ 378.181984][T16610] lo speed is unknown, defaulting to 1000 [ 378.184065][T16610] lo speed is unknown, defaulting to 1000 [ 378.613826][T16631] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2566'. [ 378.615959][T16631] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2566'. [ 378.643451][T16632] netlink: 344 bytes leftover after parsing attributes in process `syz.2.2565'. [ 378.781565][T16641] lo: entered promiscuous mode [ 378.781589][T16641] lo: entered allmulticast mode [ 378.805959][T16641] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2568'. [ 378.806024][T14257] lo speed is unknown, defaulting to 1000 [ 378.806043][T14257] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 379.000332][T16647] ip6gretap2: entered allmulticast mode [ 379.007445][T16647] batman_adv: batadv0: Adding interface: ip6gretap2 [ 379.007464][T16647] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.014199][T16647] batman_adv: batadv0: Interface activated: ip6gretap2 [ 379.372146][T16667] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 379.384599][T16672] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 379.477053][T16676] veth12: entered promiscuous mode [ 379.477078][T16676] veth12: entered allmulticast mode [ 379.752974][T16681] netlink: 'syz.0.2577': attribute type 1 has an invalid length. [ 379.850552][T16681] 8021q: adding VLAN 0 to HW filter on device bond12 [ 379.878700][T16681] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2577'. [ 379.882134][T16687] netlink: 'syz.4.2578': attribute type 1 has an invalid length. [ 379.882157][T16687] netlink: 'syz.4.2578': attribute type 4 has an invalid length. [ 379.885290][T16687] netlink: 'syz.4.2578': attribute type 1 has an invalid length. [ 379.885308][T16687] netlink: 'syz.4.2578': attribute type 4 has an invalid length. [ 379.951997][T16684] bond12: (slave veth13): Enslaving as an active interface with a down link [ 380.062299][T16684] bond12 (unregistering): (slave veth13): Releasing active interface [ 380.080681][T16684] bond12 (unregistering): Released all slaves [ 380.098417][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 380.327705][T16700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.327727][T16700] IPv6: NLM_F_CREATE should be set when creating new route [ 380.327774][T16700] IPv6: NLM_F_CREATE should be set when creating new route [ 380.491374][T16706] lo speed is unknown, defaulting to 1000 [ 380.495236][T16706] wg2 speed is unknown, defaulting to 1000 [ 380.525586][T16706] lo speed is unknown, defaulting to 1000 [ 380.571646][T16712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.574193][T16705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.574213][T16705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.943221][T16719] batadv_slave_1: entered promiscuous mode [ 380.962189][T16722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.175405][T16719] batadv_slave_1: left promiscuous mode [ 381.263143][T16709] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.263288][T16709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.263639][T16709] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.263748][T16709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.328623][T16709] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 381.358320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.099864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.100971][T16751] __nla_validate_parse: 5 callbacks suppressed [ 382.100990][T16751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2594'. [ 382.300974][T16758] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2595'. [ 382.791139][T16759] netlink: 95 bytes leftover after parsing attributes in process `syz.2.2596'. [ 382.793964][T16758] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2595'. [ 382.828393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.828780][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 383.097823][T16775] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2604'. [ 383.194304][T16779] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2604'. [ 383.390460][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 383.394306][T16787] FAULT_INJECTION: forcing a failure. [ 383.394306][T16787] name failslab, interval 1, probability 0, space 0, times 0 [ 383.394341][T16787] CPU: 1 UID: 0 PID: 16787 Comm: syz.3.2607 Not tainted syzkaller #0 PREEMPT(full) [ 383.394364][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.394377][T16787] Call Trace: [ 383.394385][T16787] [ 383.394394][T16787] dump_stack_lvl+0xe8/0x150 [ 383.394430][T16787] should_fail_ex+0x410/0x560 [ 383.394461][T16787] should_failslab+0xa8/0x100 [ 383.394486][T16787] ? skb_clone+0x212/0x3a0 [ 383.394515][T16787] kmem_cache_alloc_noprof+0xa1/0x600 [ 383.394547][T16787] ? skb_clone+0x212/0x3a0 [ 383.394579][T16787] skb_clone+0x212/0x3a0 [ 383.394602][T16787] ? nfnetlink_rcv+0x4b0/0x28c0 [ 383.394723][T16787] nfnetlink_rcv+0x4de/0x28c0 [ 383.394753][T16787] ? kernel_text_address+0xa5/0xe0 [ 383.394793][T16787] ? __kernel_text_address+0xd/0x30 [ 383.394817][T16787] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 383.394846][T16787] ? arch_stack_walk+0xfb/0x150 [ 383.394896][T16787] ? stack_trace_save+0xa9/0x100 [ 383.394919][T16787] ? __lock_acquire+0x747/0x2de0 [ 383.394941][T16787] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 383.394991][T16787] ? __lock_acquire+0x747/0x2de0 [ 383.395026][T16787] ? __netlink_lookup+0xc6/0x8b0 [ 383.395059][T16787] ? lock_acquire+0x115/0x350 [ 383.395080][T16787] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.395117][T16787] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.395144][T16787] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.395180][T16787] netlink_unicast+0x7bd/0x940 [ 383.395223][T16787] netlink_sendmsg+0x813/0xb40 [ 383.395264][T16787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.395313][T16787] ? apparmor_socket_sendmsg+0x98/0x360 [ 383.395339][T16787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.395367][T16787] sock_sendmsg_nosec+0x13a/0x180 [ 383.395392][T16787] ____sys_sendmsg+0x54e/0x850 [ 383.395425][T16787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.395462][T16787] ? import_iovec+0x73/0xa0 [ 383.395492][T16787] ___sys_sendmsg+0x2a5/0x360 [ 383.395517][T16787] ? __lock_acquire+0x747/0x2de0 [ 383.395542][T16787] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.395608][T16787] ? __fget_files+0x2a/0x420 [ 383.395635][T16787] ? __fget_files+0x3a2/0x420 [ 383.395672][T16787] __x64_sys_sendmsg+0x1b1/0x290 [ 383.395700][T16787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.395750][T16787] do_syscall_64+0x166/0x520 [ 383.395774][T16787] ? trace_irq_disable+0x3b/0x140 [ 383.395794][T16787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.395814][T16787] ? clear_bhb_loop+0x70/0xc0 [ 383.395840][T16787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.395860][T16787] RIP: 0033:0x7fdb6539e159 [ 383.395881][T16787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.395898][T16787] RSP: 002b:00007fdb662ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.395921][T16787] RAX: ffffffffffffffda RBX: 00007fdb65625fa0 RCX: 00007fdb6539e159 [ 383.395936][T16787] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 383.395949][T16787] RBP: 00007fdb662ff090 R08: 0000000000000000 R09: 0000000000000000 [ 383.395961][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.395973][T16787] R13: 00007fdb65626038 R14: 00007fdb65625fa0 R15: 00007fff5a93ae38 [ 383.396008][T16787] [ 383.407395][T16785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2606'. [ 383.786672][T16795] FAULT_INJECTION: forcing a failure. [ 383.786672][T16795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.786707][T16795] CPU: 1 UID: 0 PID: 16795 Comm: syz.0.2610 Not tainted syzkaller #0 PREEMPT(full) [ 383.786729][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.786740][T16795] Call Trace: [ 383.786748][T16795] [ 383.786756][T16795] dump_stack_lvl+0xe8/0x150 [ 383.786789][T16795] should_fail_ex+0x410/0x560 [ 383.786817][T16795] _copy_from_user+0x2d/0xb0 [ 383.786909][T16795] ___sys_sendmsg+0x1c6/0x360 [ 383.786935][T16795] ? __lock_acquire+0x747/0x2de0 [ 383.786959][T16795] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.787022][T16795] ? __fget_files+0x2a/0x420 [ 383.787047][T16795] ? __fget_files+0x3a2/0x420 [ 383.787083][T16795] __x64_sys_sendmsg+0x1b1/0x290 [ 383.787111][T16795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.787159][T16795] do_syscall_64+0x166/0x520 [ 383.787186][T16795] ? trace_irq_disable+0x3b/0x140 [ 383.787204][T16795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.787223][T16795] ? clear_bhb_loop+0x70/0xc0 [ 383.787247][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.787274][T16795] RIP: 0033:0x7f394f79e159 [ 383.787293][T16795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.787310][T16795] RSP: 002b:00007f39505d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.787331][T16795] RAX: ffffffffffffffda RBX: 00007f394fa25fa0 RCX: 00007f394f79e159 [ 383.787346][T16795] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 383.787358][T16795] RBP: 00007f39505d0090 R08: 0000000000000000 R09: 0000000000000000 [ 383.787369][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.787381][T16795] R13: 00007f394fa26038 R14: 00007f394fa25fa0 R15: 00007ffe31ee8ca8 [ 383.787413][T16795] [ 383.941371][T16793] erspan0: left promiscuous mode [ 384.034418][T16793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.060741][T16793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.187009][T16793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.202905][T16793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.202933][T16793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.255854][T16793] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 384.282735][T16809] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 384.435963][T16793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.444167][T14257] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.828596][T14257] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.864065][T16834] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 384.915351][T16842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2618'. [ 384.915387][T16842] validate_nla: 1 callbacks suppressed [ 384.915399][T16842] netlink: 'syz.0.2618': attribute type 8 has an invalid length. [ 384.915412][T16842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2618'. [ 384.916556][T16843] netlink: 'syz.0.2618': attribute type 8 has an invalid length. [ 385.063627][T10974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 385.099508][T16849] FAULT_INJECTION: forcing a failure. [ 385.099508][T16849] name failslab, interval 1, probability 0, space 0, times 0 [ 385.099543][T16849] CPU: 1 UID: 0 PID: 16849 Comm: syz.2.2619 Not tainted syzkaller #0 PREEMPT(full) [ 385.099566][T16849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.099578][T16849] Call Trace: [ 385.099587][T16849] [ 385.099596][T16849] dump_stack_lvl+0xe8/0x150 [ 385.099633][T16849] should_fail_ex+0x410/0x560 [ 385.099661][T16849] should_failslab+0xa8/0x100 [ 385.099686][T16849] ? skb_clone+0x212/0x3a0 [ 385.099712][T16849] kmem_cache_alloc_noprof+0xa1/0x600 [ 385.099742][T16849] ? skb_clone+0x212/0x3a0 [ 385.099777][T16849] skb_clone+0x212/0x3a0 [ 385.099809][T16849] __netlink_deliver_tap+0x413/0x860 [ 385.099860][T16849] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.099896][T16849] netlink_deliver_tap+0x19c/0x1b0 [ 385.099926][T16849] netlink_unicast+0x781/0x940 [ 385.099967][T16849] netlink_sendmsg+0x813/0xb40 [ 385.100008][T16849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.100047][T16849] ? apparmor_socket_sendmsg+0x98/0x360 [ 385.100072][T16849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.100101][T16849] sock_sendmsg_nosec+0x13a/0x180 [ 385.100126][T16849] ____sys_sendmsg+0x54e/0x850 [ 385.100159][T16849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.100220][T16849] ? import_iovec+0x73/0xa0 [ 385.100250][T16849] ___sys_sendmsg+0x2a5/0x360 [ 385.100275][T16849] ? __lock_acquire+0x747/0x2de0 [ 385.100302][T16849] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.100367][T16849] ? __fget_files+0x2a/0x420 [ 385.100393][T16849] ? __fget_files+0x3a2/0x420 [ 385.100432][T16849] __x64_sys_sendmsg+0x1b1/0x290 [ 385.100462][T16849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.100513][T16849] do_syscall_64+0x166/0x520 [ 385.100538][T16849] ? trace_irq_disable+0x3b/0x140 [ 385.100557][T16849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.100578][T16849] ? clear_bhb_loop+0x70/0xc0 [ 385.100602][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.100622][T16849] RIP: 0033:0x7f425d39e159 [ 385.100643][T16849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.100659][T16849] RSP: 002b:00007f425e259028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.100682][T16849] RAX: ffffffffffffffda RBX: 00007f425d625fa0 RCX: 00007f425d39e159 [ 385.100698][T16849] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 385.100710][T16849] RBP: 00007f425e259090 R08: 0000000000000000 R09: 0000000000000000 [ 385.100722][T16849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.100734][T16849] R13: 00007f425d626038 R14: 00007f425d625fa0 R15: 00007ffc794eb328 [ 385.100769][T16849] [ 385.221345][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 385.590778][T16867] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 385.612044][T16867] netlink: 'syz.1.2625': attribute type 4 has an invalid length. [ 385.949454][T16889] FAULT_INJECTION: forcing a failure. [ 385.949454][T16889] name failslab, interval 1, probability 0, space 0, times 0 [ 385.949490][T16889] CPU: 0 UID: 0 PID: 16889 Comm: syz.4.2632 Not tainted syzkaller #0 PREEMPT(full) [ 385.949512][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.949524][T16889] Call Trace: [ 385.949533][T16889] [ 385.949542][T16889] dump_stack_lvl+0xe8/0x150 [ 385.949579][T16889] should_fail_ex+0x410/0x560 [ 385.949608][T16889] should_failslab+0xa8/0x100 [ 385.949635][T16889] __kmalloc_cache_noprof+0xa3/0x600 [ 385.949657][T16889] ? nfnetlink_rcv+0x1021/0x28c0 [ 385.949682][T16889] ? nfnetlink_rcv+0x1021/0x28c0 [ 385.949717][T16889] nfnetlink_rcv+0x1021/0x28c0 [ 385.949780][T16889] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 385.949863][T16889] ? lock_acquire+0x115/0x350 [ 385.949896][T16889] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.949926][T16889] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.949961][T16889] netlink_unicast+0x7bd/0x940 [ 385.950001][T16889] netlink_sendmsg+0x813/0xb40 [ 385.950042][T16889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.950080][T16889] ? apparmor_socket_sendmsg+0x98/0x360 [ 385.950106][T16889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.950132][T16889] sock_sendmsg_nosec+0x13a/0x180 [ 385.950161][T16889] ____sys_sendmsg+0x54e/0x850 [ 385.950195][T16889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.950233][T16889] ? import_iovec+0x73/0xa0 [ 385.950262][T16889] ___sys_sendmsg+0x2a5/0x360 [ 385.950287][T16889] ? __lock_acquire+0x747/0x2de0 [ 385.950313][T16889] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.950390][T16889] ? __fget_files+0x2a/0x420 [ 385.950415][T16889] ? __fget_files+0x3a2/0x420 [ 385.950452][T16889] __x64_sys_sendmsg+0x1b1/0x290 [ 385.950483][T16889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.950536][T16889] do_syscall_64+0x166/0x520 [ 385.950558][T16889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.950580][T16889] ? clear_bhb_loop+0x70/0xc0 [ 385.950604][T16889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.950624][T16889] RIP: 0033:0x7fd80c79e159 [ 385.950644][T16889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.950661][T16889] RSP: 002b:00007fd80d71b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.950684][T16889] RAX: ffffffffffffffda RBX: 00007fd80ca25fa0 RCX: 00007fd80c79e159 [ 385.950699][T16889] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 385.950710][T16889] RBP: 00007fd80d71b090 R08: 0000000000000000 R09: 0000000000000000 [ 385.950723][T16889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.950735][T16889] R13: 00007fd80ca26038 R14: 00007fd80ca25fa0 R15: 00007ffe5b80c928 [ 385.950770][T16889] [ 385.980394][T16892] netlink: 'syz.1.2629': attribute type 1 has an invalid length. [ 386.223450][T16895] gretap2: entered allmulticast mode [ 386.256818][T16895] bond5: (slave gretap2): making interface the new active one [ 386.257351][T16895] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 386.257890][ T8113] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 386.258127][ T8113] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 386.332460][T16904] netlink: 'syz.0.2633': attribute type 2 has an invalid length. [ 386.391812][T16892] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 386.396054][T16892] bond6 (unregistering): Released all slaves [ 386.550072][T16908] bond8: Invalid ad_actor_system MAC address. [ 386.550095][T16908] bond8: option ad_actor_system: invalid value (7) [ 386.569268][T16908] bond8 (unregistering): Released all slaves [ 386.640617][T16915] FAULT_INJECTION: forcing a failure. [ 386.640617][T16915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.640652][T16915] CPU: 0 UID: 0 PID: 16915 Comm: syz.3.2636 Not tainted syzkaller #0 PREEMPT(full) [ 386.640674][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.640686][T16915] Call Trace: [ 386.640694][T16915] [ 386.640703][T16915] dump_stack_lvl+0xe8/0x150 [ 386.640740][T16915] should_fail_ex+0x410/0x560 [ 386.640769][T16915] _copy_from_iter+0x1d3/0x1660 [ 386.640793][T16915] ? __alloc_skb+0x27a/0x7a0 [ 386.640819][T16915] ? __alloc_skb+0x27a/0x7a0 [ 386.640843][T16915] ? __alloc_skb+0x27a/0x7a0 [ 386.640866][T16915] ? __pfx__copy_from_iter+0x10/0x10 [ 386.640887][T16915] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 386.640914][T16915] ? __alloc_skb+0x27a/0x7a0 [ 386.640934][T16915] ? __alloc_skb+0x27a/0x7a0 [ 386.640961][T16915] ? netlink_sendmsg+0x650/0xb40 [ 386.640988][T16915] ? skb_put+0x112/0x210 [ 386.641016][T16915] netlink_sendmsg+0x6c0/0xb40 [ 386.641054][T16915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.641091][T16915] ? apparmor_socket_sendmsg+0x98/0x360 [ 386.641115][T16915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.641142][T16915] sock_sendmsg_nosec+0x13a/0x180 [ 386.641165][T16915] ____sys_sendmsg+0x54e/0x850 [ 386.641199][T16915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.641237][T16915] ? import_iovec+0x73/0xa0 [ 386.641267][T16915] ___sys_sendmsg+0x2a5/0x360 [ 386.641292][T16915] ? __lock_acquire+0x747/0x2de0 [ 386.641319][T16915] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.641386][T16915] ? __fget_files+0x2a/0x420 [ 386.641422][T16915] ? __fget_files+0x3a2/0x420 [ 386.641460][T16915] __x64_sys_sendmsg+0x1b1/0x290 [ 386.641491][T16915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.641542][T16915] do_syscall_64+0x166/0x520 [ 386.641570][T16915] ? trace_irq_disable+0x3b/0x140 [ 386.641590][T16915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.641610][T16915] ? clear_bhb_loop+0x70/0xc0 [ 386.641636][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.641656][T16915] RIP: 0033:0x7fdb6539e159 [ 386.641675][T16915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.641692][T16915] RSP: 002b:00007fdb662ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.641716][T16915] RAX: ffffffffffffffda RBX: 00007fdb65625fa0 RCX: 00007fdb6539e159 [ 386.641731][T16915] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 386.641745][T16915] RBP: 00007fdb662ff090 R08: 0000000000000000 R09: 0000000000000000 [ 386.641757][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.641770][T16915] R13: 00007fdb65626038 R14: 00007fdb65625fa0 R15: 00007fff5a93ae38 [ 386.641804][T16915] [ 386.703066][T16898] lo: left promiscuous mode [ 386.703089][T16898] lo: left allmulticast mode [ 386.766300][T16898] vlan0: left promiscuous mode [ 386.824624][T16898] bond4: left promiscuous mode [ 386.824650][T16898] bond4: left allmulticast mode [ 386.871889][T16898] gretap2: left allmulticast mode [ 386.936248][T14257] lo speed is unknown, defaulting to 1000 [ 386.936286][T14257] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 386.988706][T12867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 387.055179][T16917] tc_dump_action: action bad kind [ 387.130901][T16929] __nla_validate_parse: 9 callbacks suppressed [ 387.130924][T16929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2638'. [ 387.156083][T16929] ip6gre1: entered promiscuous mode [ 387.156106][T16929] ip6gre1: entered allmulticast mode [ 387.314690][T16922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2637'. [ 387.349185][T16936] bond14: option ad_user_port_key: invalid value (65535) [ 387.349211][T16936] bond14: option ad_user_port_key: allowed values 0 - 1023 [ 387.354000][T16936] bond14 (unregistering): Released all slaves [ 387.374365][T16942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.629223][T16944] lo speed is unknown, defaulting to 1000 [ 387.629536][T16947] syzkaller0: entered promiscuous mode [ 387.629555][T16947] syzkaller0: entered allmulticast mode [ 387.635687][T16939] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.636022][T16939] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.641339][T16939] bridge_slave_0: entered promiscuous mode [ 387.682828][T16958] FAULT_INJECTION: forcing a failure. [ 387.682828][T16958] name failslab, interval 1, probability 0, space 0, times 0 [ 387.684110][T16944] wg2 speed is unknown, defaulting to 1000 [ 387.703604][T16944] lo speed is unknown, defaulting to 1000 [ 387.726823][T16958] CPU: 1 UID: 0 PID: 16958 Comm: syz.4.2644 Not tainted syzkaller #0 PREEMPT(full) [ 387.726843][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.726850][T16958] Call Trace: [ 387.726855][T16958] [ 387.726862][T16958] dump_stack_lvl+0xe8/0x150 [ 387.726885][T16958] should_fail_ex+0x410/0x560 [ 387.726903][T16958] should_failslab+0xa8/0x100 [ 387.726919][T16958] __kmalloc_noprof+0xfe/0x720 [ 387.726930][T16958] ? __kasan_kmalloc+0x93/0xb0 [ 387.726944][T16958] ? nla_strdup+0x9d/0x140 [ 387.726982][T16958] ? nla_strdup+0x9d/0x140 [ 387.726995][T16958] ? __kmalloc_cache_noprof+0x14d/0x600 [ 387.727010][T16958] nla_strdup+0x9d/0x140 [ 387.727025][T16958] nf_tables_newchain+0x1aba/0x28b0 [ 387.727105][T16958] ? __pfx_nf_tables_newchain+0x10/0x10 [ 387.727140][T16958] ? nfnl_pernet+0x23/0x240 [ 387.727162][T16958] ? __nla_parse+0x40/0x60 [ 387.727179][T16958] nfnetlink_rcv+0x1288/0x28c0 [ 387.727219][T16958] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 387.727306][T16958] ? lock_acquire+0x115/0x350 [ 387.727336][T16958] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.727364][T16958] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.727399][T16958] netlink_unicast+0x7bd/0x940 [ 387.727429][T16958] netlink_sendmsg+0x813/0xb40 [ 387.727451][T16958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.727472][T16958] ? apparmor_socket_sendmsg+0x98/0x360 [ 387.727487][T16958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.727502][T16958] sock_sendmsg_nosec+0x13a/0x180 [ 387.727517][T16958] ____sys_sendmsg+0x54e/0x850 [ 387.727535][T16958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.727556][T16958] ? import_iovec+0x73/0xa0 [ 387.727573][T16958] ___sys_sendmsg+0x2a5/0x360 [ 387.727587][T16958] ? __lock_acquire+0x747/0x2de0 [ 387.727601][T16958] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.727637][T16958] ? __fget_files+0x2a/0x420 [ 387.727651][T16958] ? __fget_files+0x3a2/0x420 [ 387.727672][T16958] __x64_sys_sendmsg+0x1b1/0x290 [ 387.727688][T16958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.727716][T16958] do_syscall_64+0x166/0x520 [ 387.727730][T16958] ? trace_irq_disable+0x3b/0x140 [ 387.727742][T16958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.727757][T16958] ? clear_bhb_loop+0x70/0xc0 [ 387.727771][T16958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.727783][T16958] RIP: 0033:0x7fd80c79e159 [ 387.727796][T16958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.727806][T16958] RSP: 002b:00007fd80d6fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.727821][T16958] RAX: ffffffffffffffda RBX: 00007fd80ca26090 RCX: 00007fd80c79e159 [ 387.727830][T16958] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 387.727838][T16958] RBP: 00007fd80d6fa090 R08: 0000000000000000 R09: 0000000000000000 [ 387.727845][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.727852][T16958] R13: 00007fd80ca26128 R14: 00007fd80ca26090 R15: 00007ffe5b80c928 [ 387.727871][T16958] [ 388.147858][T16969] syzkaller0: left promiscuous mode [ 388.252721][T16980] netlink: 'syz.4.2648': attribute type 1 has an invalid length. [ 388.456061][T16976] bond9: option arp_validate: invalid value (1048579) [ 388.468433][T16976] bond9 (unregistering): Released all slaves [ 388.509502][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 388.529767][ T3400] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.648465][T16980] bond9: option arp_validate: invalid value (1048579) [ 388.709321][T16980] bond9 (unregistering): Released all slaves [ 388.848598][ T43] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.854141][ T43] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.854187][ T43] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.062165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 389.570394][T17010] IPv6: sit3: Disabled Multicast RS [ 389.609809][T17012] FAULT_INJECTION: forcing a failure. [ 389.609809][T17012] name failslab, interval 1, probability 0, space 0, times 0 [ 389.609845][T17012] CPU: 0 UID: 0 PID: 17012 Comm: syz.2.2658 Not tainted syzkaller #0 PREEMPT(full) [ 389.609868][T17012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.609881][T17012] Call Trace: [ 389.609890][T17012] [ 389.609899][T17012] dump_stack_lvl+0xe8/0x150 [ 389.609937][T17012] should_fail_ex+0x410/0x560 [ 389.609969][T17012] should_failslab+0xa8/0x100 [ 389.609998][T17012] __kmalloc_noprof+0xfe/0x720 [ 389.610018][T17012] ? __kasan_kmalloc+0x93/0xb0 [ 389.610042][T17012] ? nla_strdup+0x9d/0x140 [ 389.610066][T17012] ? nla_strdup+0x9d/0x140 [ 389.610092][T17012] ? __kmalloc_cache_noprof+0x14d/0x600 [ 389.610118][T17012] nla_strdup+0x9d/0x140 [ 389.610146][T17012] nf_tables_newtable+0x49a/0x1990 [ 389.610198][T17012] nfnetlink_rcv+0x1288/0x28c0 [ 389.610277][T17012] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 389.610325][T17012] ? ref_tracker_free+0x689/0x830 [ 389.610454][T17012] ? skb_clone+0x246/0x3a0 [ 389.610486][T17012] ? __netlink_deliver_tap+0x811/0x860 [ 389.610526][T17012] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.610555][T17012] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.610592][T17012] netlink_unicast+0x7bd/0x940 [ 389.610634][T17012] netlink_sendmsg+0x813/0xb40 [ 389.610676][T17012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.610718][T17012] ? apparmor_socket_sendmsg+0x98/0x360 [ 389.610744][T17012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.610773][T17012] sock_sendmsg_nosec+0x13a/0x180 [ 389.610799][T17012] ____sys_sendmsg+0x54e/0x850 [ 389.610833][T17012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.610871][T17012] ? import_iovec+0x73/0xa0 [ 389.610901][T17012] ___sys_sendmsg+0x2a5/0x360 [ 389.610927][T17012] ? __lock_acquire+0x747/0x2de0 [ 389.610953][T17012] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.611023][T17012] ? __fget_files+0x2a/0x420 [ 389.611049][T17012] ? __fget_files+0x3a2/0x420 [ 389.611088][T17012] __x64_sys_sendmsg+0x1b1/0x290 [ 389.611119][T17012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.611171][T17012] do_syscall_64+0x166/0x520 [ 389.611195][T17012] ? trace_irq_disable+0x3b/0x140 [ 389.611215][T17012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.611244][T17012] ? clear_bhb_loop+0x70/0xc0 [ 389.611270][T17012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.611289][T17012] RIP: 0033:0x7f425d39e159 [ 389.611309][T17012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.611325][T17012] RSP: 002b:00007f425e259028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.611347][T17012] RAX: ffffffffffffffda RBX: 00007f425d625fa0 RCX: 00007f425d39e159 [ 389.611362][T17012] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 389.611375][T17012] RBP: 00007f425e259090 R08: 0000000000000000 R09: 0000000000000000 [ 389.611388][T17012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.611401][T17012] R13: 00007f425d626038 R14: 00007f425d625fa0 R15: 00007ffc794eb328 [ 389.611437][T17012] [ 389.671768][T17014] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2659'. [ 389.985545][T17020] gre3: entered promiscuous mode [ 390.346431][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 390.346466][T17042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 390.391357][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 390.391396][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'. [ 390.498424][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 390.723308][T17044] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2667'. [ 390.950713][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 390.968086][ T43] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.968384][ T43] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.968459][ T43] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.968513][ T43] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.036407][T17061] FAULT_INJECTION: forcing a failure. [ 391.036407][T17061] name failslab, interval 1, probability 0, space 0, times 0 [ 391.036441][T17061] CPU: 0 UID: 0 PID: 17061 Comm: syz.1.2672 Not tainted syzkaller #0 PREEMPT(full) [ 391.036463][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.036475][T17061] Call Trace: [ 391.036483][T17061] [ 391.036492][T17061] dump_stack_lvl+0xe8/0x150 [ 391.036528][T17061] should_fail_ex+0x410/0x560 [ 391.036557][T17061] should_failslab+0xa8/0x100 [ 391.036582][T17061] __kvmalloc_node_noprof+0x176/0x820 [ 391.036603][T17061] ? nla_strdup+0x9d/0x140 [ 391.036625][T17061] ? nla_strdup+0xb8/0x140 [ 391.036647][T17061] ? nf_tables_newchain+0x1c9a/0x28b0 [ 391.036671][T17061] ? nf_tables_newchain+0x1c9a/0x28b0 [ 391.036704][T17061] nf_tables_newchain+0x1c9a/0x28b0 [ 391.036745][T17061] ? __pfx_nf_tables_newchain+0x10/0x10 [ 391.036806][T17061] ? nfnl_pernet+0x23/0x240 [ 391.036852][T17061] ? __nla_parse+0x40/0x60 [ 391.036881][T17061] nfnetlink_rcv+0x1288/0x28c0 [ 391.036946][T17061] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 391.037026][T17061] ? lock_acquire+0x115/0x350 [ 391.037059][T17061] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.037088][T17061] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.037123][T17061] netlink_unicast+0x7bd/0x940 [ 391.037164][T17061] netlink_sendmsg+0x813/0xb40 [ 391.037208][T17061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.037246][T17061] ? apparmor_socket_sendmsg+0x98/0x360 [ 391.037273][T17061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.037300][T17061] sock_sendmsg_nosec+0x13a/0x180 [ 391.037324][T17061] ____sys_sendmsg+0x54e/0x850 [ 391.037357][T17061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.037393][T17061] ? import_iovec+0x73/0xa0 [ 391.037423][T17061] ___sys_sendmsg+0x2a5/0x360 [ 391.037448][T17061] ? __lock_acquire+0x747/0x2de0 [ 391.037474][T17061] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.037544][T17061] ? __fget_files+0x2a/0x420 [ 391.037571][T17061] ? __fget_files+0x3a2/0x420 [ 391.037610][T17061] __x64_sys_sendmsg+0x1b1/0x290 [ 391.037639][T17061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.037690][T17061] do_syscall_64+0x166/0x520 [ 391.037715][T17061] ? trace_irq_disable+0x3b/0x140 [ 391.037732][T17061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.037753][T17061] ? clear_bhb_loop+0x70/0xc0 [ 391.037778][T17061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.037798][T17061] RIP: 0033:0x7f1ce779e159 [ 391.037826][T17061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.037842][T17061] RSP: 002b:00007f1ce86de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.037864][T17061] RAX: ffffffffffffffda RBX: 00007f1ce7a25fa0 RCX: 00007f1ce779e159 [ 391.037878][T17061] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 391.037891][T17061] RBP: 00007f1ce86de090 R08: 0000000000000000 R09: 0000000000000000 [ 391.037902][T17061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.037914][T17061] R13: 00007f1ce7a26038 R14: 00007f1ce7a25fa0 R15: 00007ffec1765ca8 [ 391.037949][T17061] [ 391.739575][T17086] ip6tnl1: entered allmulticast mode [ 391.745289][ T43] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.745550][ T43] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.768468][T14257] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.839469][T14257] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.034799][T17111] FAULT_INJECTION: forcing a failure. [ 392.034799][T17111] name failslab, interval 1, probability 0, space 0, times 0 [ 392.034843][T17111] CPU: 1 UID: 0 PID: 17111 Comm: syz.0.2685 Not tainted syzkaller #0 PREEMPT(full) [ 392.034862][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.034872][T17111] Call Trace: [ 392.034879][T17111] [ 392.034892][T17111] dump_stack_lvl+0xe8/0x150 [ 392.034922][T17111] should_fail_ex+0x410/0x560 [ 392.034946][T17111] should_failslab+0xa8/0x100 [ 392.034969][T17111] __kvmalloc_node_noprof+0x176/0x820 [ 392.034988][T17111] ? nla_strdup+0x9d/0x140 [ 392.035008][T17111] ? nla_strdup+0xb8/0x140 [ 392.035028][T17111] ? nf_tables_newchain+0x1c9a/0x28b0 [ 392.035049][T17111] ? nf_tables_newchain+0x1c9a/0x28b0 [ 392.035075][T17111] nf_tables_newchain+0x1c9a/0x28b0 [ 392.035112][T17111] ? __pfx_nf_tables_newchain+0x10/0x10 [ 392.035170][T17111] ? nfnl_pernet+0x23/0x240 [ 392.035203][T17111] ? __nla_parse+0x40/0x60 [ 392.035227][T17111] nfnetlink_rcv+0x1288/0x28c0 [ 392.035283][T17111] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 392.035322][T17111] ? ref_tracker_free+0x689/0x830 [ 392.035368][T17111] ? skb_clone+0x246/0x3a0 [ 392.035393][T17111] ? __netlink_deliver_tap+0x811/0x860 [ 392.035425][T17111] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.035447][T17111] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.035475][T17111] netlink_unicast+0x7bd/0x940 [ 392.035508][T17111] netlink_sendmsg+0x813/0xb40 [ 392.035541][T17111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.035574][T17111] ? apparmor_socket_sendmsg+0x98/0x360 [ 392.035595][T17111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.035617][T17111] sock_sendmsg_nosec+0x13a/0x180 [ 392.035637][T17111] ____sys_sendmsg+0x54e/0x850 [ 392.035664][T17111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.035696][T17111] ? import_iovec+0x73/0xa0 [ 392.035721][T17111] ___sys_sendmsg+0x2a5/0x360 [ 392.035742][T17111] ? __lock_acquire+0x747/0x2de0 [ 392.035765][T17111] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.035831][T17111] ? __fget_files+0x2a/0x420 [ 392.035854][T17111] ? __fget_files+0x3a2/0x420 [ 392.035886][T17111] __x64_sys_sendmsg+0x1b1/0x290 [ 392.035914][T17111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.035963][T17111] do_syscall_64+0x166/0x520 [ 392.035983][T17111] ? trace_irq_disable+0x3b/0x140 [ 392.036000][T17111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.036020][T17111] ? clear_bhb_loop+0x70/0xc0 [ 392.036042][T17111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.036060][T17111] RIP: 0033:0x7f394f79e159 [ 392.036078][T17111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.036092][T17111] RSP: 002b:00007f39505d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.036110][T17111] RAX: ffffffffffffffda RBX: 00007f394fa25fa0 RCX: 00007f394f79e159 [ 392.036122][T17111] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 392.036132][T17111] RBP: 00007f39505d0090 R08: 0000000000000000 R09: 0000000000000000 [ 392.036142][T17111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.036151][T17111] R13: 00007f394fa26038 R14: 00007f394fa25fa0 R15: 00007ffe31ee8ca8 [ 392.036181][T17111] [ 392.317743][T17116] vlan0: entered promiscuous mode [ 392.384516][T17118] __nla_validate_parse: 5 callbacks suppressed [ 392.384539][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 392.384560][T17118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2688'. [ 392.385134][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 392.385157][T17118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2688'. [ 392.574999][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 392.691567][T17121] bond9: (slave bond_slave_1): Device is not our slave [ 392.691593][T17121] bond9: option active_slave: invalid value (bond_slave_1) [ 392.694816][T17121] bond9 (unregistering): Released all slaves [ 392.739461][T14257] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.843943][T17139] bridge0: port 3(veth0) entered blocking state [ 392.844086][T17139] bridge0: port 3(veth0) entered disabled state [ 392.844238][T17139] veth0: entered allmulticast mode [ 392.853611][T17139] veth0: entered promiscuous mode [ 393.013593][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 393.211983][T17148] syzkaller1: entered promiscuous mode [ 393.212008][T17148] syzkaller1: entered allmulticast mode [ 393.233301][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2694'. [ 393.265258][T17148] ip6gre2: entered promiscuous mode [ 393.265284][T17148] ip6gre2: entered allmulticast mode [ 393.327758][T17145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2695'. [ 393.327798][T17145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2695'. [ 393.617896][T17159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2697'. [ 393.803559][T17174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.903289][T17187] netlink: 'syz.0.2704': attribute type 1 has an invalid length. [ 394.198568][ T31] audit: type=1107 audit(1789920247.579:11): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 394.689719][T11200] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 394.725029][T17219] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 394.870705][T11200] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 394.980365][T17230] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 395.000767][T17225] syzkaller1: entered promiscuous mode [ 395.000792][T17225] syzkaller1: entered allmulticast mode [ 395.159332][T17230] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.184374][T17233] netlink: Failed to add helper -22 [ 395.184431][T17233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.306835][T17230] bond9: (slave gretap2): making interface the new active one [ 395.325077][T17230] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 395.794836][T17262] 8021q: VLANs not supported on ip6tnl0 [ 395.858483][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 396.226184][T17291] netlink: 'syz.2.2731': attribute type 1 has an invalid length. [ 396.226228][T17291] netlink: 'syz.2.2731': attribute type 1 has an invalid length. [ 396.268395][T17294] tipc: Enabling of bearer rejected, already enabled [ 397.267908][T17329] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 397.268137][T17328] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 397.517607][T17336] netlink: 'syz.3.2738': attribute type 30 has an invalid length. [ 397.563360][T17341] netlink: 'syz.3.2738': attribute type 30 has an invalid length. [ 397.723307][T17351] netlink: 'syz.2.2741': attribute type 15 has an invalid length. [ 399.300233][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.300878][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 400.744621][T17392] __nla_validate_parse: 8 callbacks suppressed [ 400.744644][T17392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2748'. [ 401.061404][T17407] openvswitch: netlink: IPv4 tunnel dst address is zero [ 401.227489][T17410] netlink: 'syz.0.2750': attribute type 3 has an invalid length. [ 401.628932][T17429] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2754'. [ 401.746463][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 401.746665][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 401.746827][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 401.746993][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 401.747149][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 401.747306][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 401.747505][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 401.747674][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 401.814349][T17442] netlink: 'syz.4.2757': attribute type 1 has an invalid length. [ 401.945960][T17450] x_tables: duplicate underflow at hook 3 [ 402.141595][T17433] ip6gretap0: entered promiscuous mode [ 402.167047][T17433] 8021q: adding VLAN 0 to HW filter on device .` [ 402.183434][T17433] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.199337][T17433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.216001][T17433] batman_adv: batadv0: Interface activated: veth0 [ 402.283276][T17433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.294365][T17433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.323524][T17433] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 402.356470][ T3400] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.356596][ T3400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.382984][ T3400] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.383103][ T3400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.631542][T17468] 8021q: VLANs not supported on vxcan1 [ 403.050242][T17490] netlink: 'syz.1.2769': attribute type 12 has an invalid length. [ 403.099834][T17491] netlink: 'syz.3.2768': attribute type 2 has an invalid length. [ 403.359586][T17508] netlink: 'syz.2.2775': attribute type 58 has an invalid length. [ 403.366008][T17501] syzkaller0: mtu less than device minimum [ 404.419725][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.891732][T17564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.892915][T17557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.975975][T17567] netlink: 'syz.2.2791': attribute type 21 has an invalid length. [ 405.159550][T17581] xt_ecn: cannot match TCP bits for non-tcp packets [ 405.246693][T17574] lo speed is unknown, defaulting to 1000 [ 405.262400][T17574] wg2 speed is unknown, defaulting to 1000 [ 405.267388][T17574] lo speed is unknown, defaulting to 1000 [ 405.446568][T17588] netlink: 'syz.3.2796': attribute type 3 has an invalid length. [ 405.446595][T17588] netlink: 'syz.3.2796': attribute type 1 has an invalid length. [ 406.004421][T17606] __nla_validate_parse: 65 callbacks suppressed [ 406.004446][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2801'. [ 406.038643][T17609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.394465][T17614] lo speed is unknown, defaulting to 1000 [ 406.395854][T17614] wg2 speed is unknown, defaulting to 1000 [ 406.430720][T17614] lo speed is unknown, defaulting to 1000 [ 406.445815][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2805'. [ 407.016304][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2809'. [ 407.050428][T17641] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2812'. [ 407.390203][T17656] netlink: 'syz.4.2815': attribute type 2 has an invalid length. [ 407.513161][T17670] syzkaller0: left promiscuous mode [ 407.513186][T17670] syzkaller0: left allmulticast mode [ 407.515609][T17670] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 407.540406][T17674] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 407.594443][T17678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.594462][T17678] IPv6: NLM_F_CREATE should be set when creating new route [ 407.594511][T17678] IPv6: NLM_F_CREATE should be set when creating new route [ 407.721681][T17678] syzkaller0: entered promiscuous mode [ 407.721706][T17678] syzkaller0: entered allmulticast mode [ 407.918873][T17693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2825'. [ 407.954668][T17693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 408.072911][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'. [ 408.072939][T17693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 408.172738][T17693] bond6: (slave bond0): Enslaving as an active interface with an up link [ 408.229044][T17702] bond6 (unregistering): (slave bond0): Releasing backup interface [ 408.290628][T17702] bond6 (unregistering): Released all slaves [ 408.477293][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 408.477324][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 408.477396][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 408.641891][T17722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 408.671924][T17723] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.681476][T17722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 409.551399][T17765] bridge0: port 3(.`) entered blocking state [ 409.553677][T17765] bridge0: port 3(.`) entered disabled state [ 409.553868][T17765] .`: entered allmulticast mode [ 409.553886][T17765] bond_slave_0: entered allmulticast mode [ 409.553904][T17765] bond_slave_1: entered allmulticast mode [ 409.553918][T17765] veth0_to_bond: entered allmulticast mode [ 409.555043][T17761] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 409.572366][T17765] .`: entered promiscuous mode [ 409.572386][T17765] bond_slave_0: entered promiscuous mode [ 409.572510][T17765] bond_slave_1: entered promiscuous mode [ 409.572630][T17765] veth0_to_bond: entered promiscuous mode [ 409.573572][T17765] bridge0: port 3(.`) entered blocking state [ 409.574932][T17765] bridge0: port 3(.`) entered forwarding state [ 409.901278][T17792] openvswitch: netlink: Invalid VLAN frame [ 409.903499][T17793] openvswitch: netlink: Invalid VLAN frame [ 410.037094][T17796] xt_l2tp: invalid flags combination: 8 [ 410.149737][T17801] FAULT_INJECTION: forcing a failure. [ 410.149737][T17801] name failslab, interval 1, probability 0, space 0, times 0 [ 410.149773][T17801] CPU: 0 UID: 0 PID: 17801 Comm: syz.4.2857 Not tainted syzkaller #0 PREEMPT(full) [ 410.149796][T17801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.149808][T17801] Call Trace: [ 410.149817][T17801] [ 410.149827][T17801] dump_stack_lvl+0xe8/0x150 [ 410.149863][T17801] should_fail_ex+0x410/0x560 [ 410.149894][T17801] should_failslab+0xa8/0x100 [ 410.149922][T17801] __kmalloc_noprof+0xfe/0x720 [ 410.149947][T17801] ? nft_pernet+0x23/0x240 [ 410.150036][T17801] ? nf_tables_newrule+0x1524/0x28a0 [ 410.150060][T17801] ? nf_tables_newrule+0x1524/0x28a0 [ 410.150093][T17801] nf_tables_newrule+0x1524/0x28a0 [ 410.150138][T17801] ? __pfx_nf_tables_newrule+0x10/0x10 [ 410.150163][T17801] ? lock_acquire+0x115/0x350 [ 410.150185][T17801] ? nfnl_pernet+0x23/0x240 [ 410.150221][T17801] ? __nla_parse+0x40/0x60 [ 410.150254][T17801] nfnetlink_rcv+0x1288/0x28c0 [ 410.150323][T17801] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 410.150370][T17801] ? ref_tracker_free+0x689/0x830 [ 410.150424][T17801] ? skb_clone+0x246/0x3a0 [ 410.150458][T17801] ? __netlink_deliver_tap+0x811/0x860 [ 410.150499][T17801] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.150528][T17801] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.150573][T17801] netlink_unicast+0x7bd/0x940 [ 410.150615][T17801] netlink_sendmsg+0x813/0xb40 [ 410.150657][T17801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.150698][T17801] ? apparmor_socket_sendmsg+0x98/0x360 [ 410.150724][T17801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.150752][T17801] sock_sendmsg_nosec+0x13a/0x180 [ 410.150777][T17801] ____sys_sendmsg+0x54e/0x850 [ 410.150809][T17801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.150844][T17801] ? import_iovec+0x73/0xa0 [ 410.150875][T17801] ___sys_sendmsg+0x2a5/0x360 [ 410.150899][T17801] ? __lock_acquire+0x747/0x2de0 [ 410.150925][T17801] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.150997][T17801] ? __fget_files+0x2a/0x420 [ 410.151023][T17801] ? __fget_files+0x3a2/0x420 [ 410.151062][T17801] __x64_sys_sendmsg+0x1b1/0x290 [ 410.151093][T17801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.151146][T17801] do_syscall_64+0x166/0x520 [ 410.151170][T17801] ? trace_irq_disable+0x3b/0x140 [ 410.151190][T17801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.151211][T17801] ? clear_bhb_loop+0x70/0xc0 [ 410.151236][T17801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.151256][T17801] RIP: 0033:0x7fd80c79e159 [ 410.151276][T17801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.151293][T17801] RSP: 002b:00007fd80d71b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.151316][T17801] RAX: ffffffffffffffda RBX: 00007fd80ca25fa0 RCX: 00007fd80c79e159 [ 410.151331][T17801] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 410.151344][T17801] RBP: 00007fd80d71b090 R08: 0000000000000000 R09: 0000000000000000 [ 410.151356][T17801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.151369][T17801] R13: 00007fd80ca26038 R14: 00007fd80ca25fa0 R15: 00007ffe5b80c928 [ 410.151406][T17801] [ 410.670658][T17816] syzkaller1: entered promiscuous mode [ 410.670684][T17816] syzkaller1: entered allmulticast mode [ 410.812649][T17831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.905128][T17834] ipvlan3: entered promiscuous mode [ 411.034184][T17837] ipvlan4: entered promiscuous mode [ 411.117270][T17845] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 411.136683][T17845] __nla_validate_parse: 17 callbacks suppressed [ 411.136705][T17845] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2867'. [ 411.136727][T17845] netlink: 239 bytes leftover after parsing attributes in process `syz.2.2867'. [ 411.155270][T17846] netlink: zone id is out of range [ 411.177733][T17848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.177753][T17848] IPv6: NLM_F_CREATE should be set when creating new route [ 411.353433][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 411.357826][T17855] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2871'. [ 411.380993][T17855] FAULT_INJECTION: forcing a failure. [ 411.380993][T17855] name failslab, interval 1, probability 0, space 0, times 0 [ 411.381028][T17855] CPU: 0 UID: 0 PID: 17855 Comm: syz.0.2871 Not tainted syzkaller #0 PREEMPT(full) [ 411.381052][T17855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.381064][T17855] Call Trace: [ 411.381072][T17855] [ 411.381081][T17855] dump_stack_lvl+0xe8/0x150 [ 411.381117][T17855] should_fail_ex+0x410/0x560 [ 411.381147][T17855] should_failslab+0xa8/0x100 [ 411.381172][T17855] ? skb_clone+0x212/0x3a0 [ 411.381202][T17855] kmem_cache_alloc_noprof+0xa1/0x600 [ 411.381232][T17855] ? kasan_quarantine_put+0xbb/0x1f0 [ 411.381253][T17855] ? lockdep_hardirqs_on+0x7b/0x110 [ 411.381277][T17855] ? skb_clone+0x212/0x3a0 [ 411.381312][T17855] skb_clone+0x212/0x3a0 [ 411.381343][T17855] nfnetlink_rcv+0x20fd/0x28c0 [ 411.381408][T17855] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 411.381452][T17855] ? ref_tracker_free+0x689/0x830 [ 411.381502][T17855] ? skb_clone+0x246/0x3a0 [ 411.381531][T17855] ? __netlink_deliver_tap+0x811/0x860 [ 411.381567][T17855] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.381603][T17855] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.381637][T17855] netlink_unicast+0x7bd/0x940 [ 411.381674][T17855] netlink_sendmsg+0x813/0xb40 [ 411.381712][T17855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.381749][T17855] ? apparmor_socket_sendmsg+0x98/0x360 [ 411.381772][T17855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.381799][T17855] sock_sendmsg_nosec+0x13a/0x180 [ 411.381821][T17855] ____sys_sendmsg+0x54e/0x850 [ 411.381854][T17855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.381892][T17855] ? import_iovec+0x73/0xa0 [ 411.381922][T17855] ___sys_sendmsg+0x2a5/0x360 [ 411.381952][T17855] ? __lock_acquire+0x747/0x2de0 [ 411.381979][T17855] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.382045][T17855] ? __fget_files+0x2a/0x420 [ 411.382073][T17855] ? __fget_files+0x3a2/0x420 [ 411.382112][T17855] __x64_sys_sendmsg+0x1b1/0x290 [ 411.382142][T17855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.382195][T17855] do_syscall_64+0x166/0x520 [ 411.382219][T17855] ? trace_irq_disable+0x3b/0x140 [ 411.382239][T17855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.382260][T17855] ? clear_bhb_loop+0x70/0xc0 [ 411.382286][T17855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.382306][T17855] RIP: 0033:0x7f394f79e159 [ 411.382327][T17855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.382344][T17855] RSP: 002b:00007f39505d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.382368][T17855] RAX: ffffffffffffffda RBX: 00007f394fa25fa0 RCX: 00007f394f79e159 [ 411.382382][T17855] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 411.382396][T17855] RBP: 00007f39505d0090 R08: 0000000000000000 R09: 0000000000000000 [ 411.382408][T17855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.382420][T17855] R13: 00007f394fa26038 R14: 00007f394fa25fa0 R15: 00007ffe31ee8ca8 [ 411.382454][T17855] [ 411.431996][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 411.497107][T17859] 8021q: adding VLAN 0 to HW filter on device bond14 [ 411.796754][T17873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2877'. [ 411.797333][T17873] macsec0: entered promiscuous mode [ 411.814002][T17872] macsec0: left promiscuous mode [ 411.828060][T17874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2876'. [ 412.067289][T17882] syzkaller0: entered promiscuous mode [ 412.067397][T17882] syzkaller0: entered allmulticast mode [ 412.071845][T17886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2881'. [ 412.071875][T17886] netlink: 'syz.0.2881': attribute type 7 has an invalid length. [ 412.071886][T17886] netlink: 'syz.0.2881': attribute type 8 has an invalid length. [ 412.071897][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2881'. [ 412.135316][T17882] tipc: Enabled bearer , priority 0 [ 412.148651][T17882] tipc: Resetting bearer [ 412.152513][T17881] tipc: Resetting bearer [ 412.182892][T17881] tipc: Disabling bearer [ 412.612089][T17908] FAULT_INJECTION: forcing a failure. [ 412.612089][T17908] name failslab, interval 1, probability 0, space 0, times 0 [ 412.612141][T17908] CPU: 0 UID: 0 PID: 17908 Comm: syz.2.2885 Not tainted syzkaller #0 PREEMPT(full) [ 412.612162][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.612173][T17908] Call Trace: [ 412.612180][T17908] [ 412.612189][T17908] dump_stack_lvl+0xe8/0x150 [ 412.612223][T17908] should_fail_ex+0x410/0x560 [ 412.612250][T17908] should_failslab+0xa8/0x100 [ 412.612276][T17908] __kmalloc_cache_noprof+0xa3/0x600 [ 412.612297][T17908] ? nf_tables_newchain+0x1e10/0x28b0 [ 412.612320][T17908] ? nf_tables_newchain+0x1e10/0x28b0 [ 412.612352][T17908] nf_tables_newchain+0x1e10/0x28b0 [ 412.612394][T17908] ? __pfx_nf_tables_newchain+0x10/0x10 [ 412.612456][T17908] ? nfnl_pernet+0x23/0x240 [ 412.612492][T17908] ? __nla_parse+0x40/0x60 [ 412.612522][T17908] nfnetlink_rcv+0x1288/0x28c0 [ 412.612586][T17908] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 412.612630][T17908] ? ref_tracker_free+0x689/0x830 [ 412.612691][T17908] ? skb_clone+0x246/0x3a0 [ 412.612723][T17908] ? __netlink_deliver_tap+0x811/0x860 [ 412.612762][T17908] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.612785][T17908] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.612814][T17908] netlink_unicast+0x7bd/0x940 [ 412.612849][T17908] netlink_sendmsg+0x813/0xb40 [ 412.612884][T17908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.612922][T17908] ? apparmor_socket_sendmsg+0x98/0x360 [ 412.612944][T17908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.612967][T17908] sock_sendmsg_nosec+0x13a/0x180 [ 412.612988][T17908] ____sys_sendmsg+0x54e/0x850 [ 412.613018][T17908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.613050][T17908] ? import_iovec+0x73/0xa0 [ 412.613076][T17908] ___sys_sendmsg+0x2a5/0x360 [ 412.613097][T17908] ? __lock_acquire+0x747/0x2de0 [ 412.613121][T17908] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.613182][T17908] ? __fget_files+0x2a/0x420 [ 412.613205][T17908] ? __fget_files+0x3a2/0x420 [ 412.613240][T17908] __x64_sys_sendmsg+0x1b1/0x290 [ 412.613265][T17908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.613313][T17908] do_syscall_64+0x166/0x520 [ 412.613334][T17908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.613352][T17908] ? clear_bhb_loop+0x70/0xc0 [ 412.613373][T17908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.613391][T17908] RIP: 0033:0x7f425d39e159 [ 412.613410][T17908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.613424][T17908] RSP: 002b:00007f425e259028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.613445][T17908] RAX: ffffffffffffffda RBX: 00007f425d625fa0 RCX: 00007f425d39e159 [ 412.613458][T17908] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 412.613469][T17908] RBP: 00007f425e259090 R08: 0000000000000000 R09: 0000000000000000 [ 412.613480][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.613490][T17908] R13: 00007f425d626038 R14: 00007f425d625fa0 R15: 00007ffc794eb328 [ 412.613524][T17908] [ 415.445306][T17916] syzkaller0: entered promiscuous mode [ 415.445327][T17916] bond_slave_0: entered promiscuous mode [ 415.445455][T17916] bond_slave_1: entered promiscuous mode [ 415.445569][T17916] syz_tun: entered promiscuous mode [ 415.446408][T17916] syzkaller0: entered allmulticast mode [ 415.446419][T17916] bond_slave_0: entered allmulticast mode [ 415.446428][T17916] bond_slave_1: entered allmulticast mode [ 415.446435][T17916] syz_tun: entered allmulticast mode [ 415.450200][T17917] tipc: Enabling of bearer rejected, already enabled [ 415.450687][T17920] tipc: Enabling of bearer rejected, already enabled [ 415.455647][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2887'. [ 415.455667][T17922] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 416.188662][T17954] FAULT_INJECTION: forcing a failure. [ 416.188662][T17954] name failslab, interval 1, probability 0, space 0, times 0 [ 416.188699][T17954] CPU: 0 UID: 0 PID: 17954 Comm: syz.0.2896 Not tainted syzkaller #0 PREEMPT(full) [ 416.188721][T17954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.188734][T17954] Call Trace: [ 416.188743][T17954] [ 416.188752][T17954] dump_stack_lvl+0xe8/0x150 [ 416.188788][T17954] should_fail_ex+0x410/0x560 [ 416.188819][T17954] should_failslab+0xa8/0x100 [ 416.188847][T17954] __kmalloc_cache_noprof+0xa3/0x600 [ 416.188869][T17954] ? nf_tables_newchain+0x1098/0x28b0 [ 416.188894][T17954] ? nf_tables_newchain+0x1098/0x28b0 [ 416.188928][T17954] nf_tables_newchain+0x1098/0x28b0 [ 416.188974][T17954] ? __pfx_nf_tables_newchain+0x10/0x10 [ 416.189039][T17954] ? nfnl_pernet+0x23/0x240 [ 416.189077][T17954] ? __nla_parse+0x40/0x60 [ 416.189107][T17954] nfnetlink_rcv+0x1288/0x28c0 [ 416.189175][T17954] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 416.189223][T17954] ? ref_tracker_free+0x689/0x830 [ 416.189277][T17954] ? skb_clone+0x246/0x3a0 [ 416.189309][T17954] ? __netlink_deliver_tap+0x811/0x860 [ 416.189349][T17954] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.189378][T17954] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.189414][T17954] netlink_unicast+0x7bd/0x940 [ 416.189456][T17954] netlink_sendmsg+0x813/0xb40 [ 416.189497][T17954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.189537][T17954] ? apparmor_socket_sendmsg+0x98/0x360 [ 416.189568][T17954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.189608][T17954] sock_sendmsg_nosec+0x13a/0x180 [ 416.189633][T17954] ____sys_sendmsg+0x54e/0x850 [ 416.189667][T17954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.189705][T17954] ? import_iovec+0x73/0xa0 [ 416.189736][T17954] ___sys_sendmsg+0x2a5/0x360 [ 416.189762][T17954] ? __lock_acquire+0x747/0x2de0 [ 416.189790][T17954] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.189860][T17954] ? __fget_files+0x2a/0x420 [ 416.189887][T17954] ? __fget_files+0x3a2/0x420 [ 416.189926][T17954] __x64_sys_sendmsg+0x1b1/0x290 [ 416.189957][T17954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.190009][T17954] do_syscall_64+0x166/0x520 [ 416.190033][T17954] ? trace_irq_disable+0x3b/0x140 [ 416.190053][T17954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.190073][T17954] ? clear_bhb_loop+0x70/0xc0 [ 416.190100][T17954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.190120][T17954] RIP: 0033:0x7f394f79e159 [ 416.190141][T17954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.190158][T17954] RSP: 002b:00007f39505d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.190182][T17954] RAX: ffffffffffffffda RBX: 00007f394fa25fa0 RCX: 00007f394f79e159 [ 416.190197][T17954] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 416.190210][T17954] RBP: 00007f39505d0090 R08: 0000000000000000 R09: 0000000000000000 [ 416.190223][T17954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.190235][T17954] R13: 00007f394fa26038 R14: 00007f394fa25fa0 R15: 00007ffe31ee8ca8 [ 416.190272][T17954] [ 416.512866][T17972] __nla_validate_parse: 5 callbacks suppressed [ 416.512887][T17972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2898'. [ 416.515682][T17968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2898'. [ 416.660954][T17979] lo speed is unknown, defaulting to 1000 [ 416.663015][T17979] wg2 speed is unknown, defaulting to 1000 [ 416.666242][T17979] lo speed is unknown, defaulting to 1000 [ 416.805263][T17987] tipc: Can't bind to reserved service type 1 [ 416.849253][T17988] net_ratelimit: 15 callbacks suppressed [ 416.849275][T17988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.046383][T17996] dvmrp0: entered allmulticast mode [ 417.073903][T17999] dvmrp1: entered allmulticast mode [ 417.074948][T17996] dvmrp0: left allmulticast mode [ 417.075062][T17996] dvmrp1: left allmulticast mode [ 417.133444][T18003] syzkaller0: Caught tx_queue_len zero misconfig [ 417.220047][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 417.858767][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 417.936675][T18013] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.951329][T18013] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.967179][T18013] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.976678][T18013] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.985953][T18013] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.013866][T18015] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2911'. [ 418.029525][T18015] FAULT_INJECTION: forcing a failure. [ 418.029525][T18015] name failslab, interval 1, probability 0, space 0, times 0 [ 418.029577][T18015] CPU: 1 UID: 0 PID: 18015 Comm: syz.4.2911 Not tainted syzkaller #0 PREEMPT(full) [ 418.029608][T18015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.029619][T18015] Call Trace: [ 418.029627][T18015] [ 418.029635][T18015] dump_stack_lvl+0xe8/0x150 [ 418.029667][T18015] should_fail_ex+0x410/0x560 [ 418.029694][T18015] should_failslab+0xa8/0x100 [ 418.029718][T18015] __kmalloc_noprof+0xfe/0x720 [ 418.029736][T18015] ? __kasan_kmalloc+0x93/0xb0 [ 418.029754][T18015] ? nla_strdup+0x9d/0x140 [ 418.029771][T18015] ? nla_strdup+0x9d/0x140 [ 418.029794][T18015] ? __kmalloc_cache_noprof+0x14d/0x600 [ 418.029818][T18015] nla_strdup+0x9d/0x140 [ 418.029844][T18015] nf_tables_newchain+0x1aba/0x28b0 [ 418.029890][T18015] ? __pfx_nf_tables_newchain+0x10/0x10 [ 418.029950][T18015] ? nfnl_pernet+0x23/0x240 [ 418.029982][T18015] ? __nla_parse+0x40/0x60 [ 418.030007][T18015] nfnetlink_rcv+0x1288/0x28c0 [ 418.030064][T18015] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 418.030102][T18015] ? ref_tracker_free+0x689/0x830 [ 418.030150][T18015] ? skb_clone+0x246/0x3a0 [ 418.030180][T18015] ? __netlink_deliver_tap+0x811/0x860 [ 418.030215][T18015] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.030242][T18015] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.030268][T18015] netlink_unicast+0x7bd/0x940 [ 418.030310][T18015] netlink_sendmsg+0x813/0xb40 [ 418.030351][T18015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.030386][T18015] ? apparmor_socket_sendmsg+0x98/0x360 [ 418.030410][T18015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.030436][T18015] sock_sendmsg_nosec+0x13a/0x180 [ 418.030459][T18015] ____sys_sendmsg+0x54e/0x850 [ 418.030494][T18015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.030530][T18015] ? import_iovec+0x73/0xa0 [ 418.030558][T18015] ___sys_sendmsg+0x2a5/0x360 [ 418.030581][T18015] ? __lock_acquire+0x747/0x2de0 [ 418.030611][T18015] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.030665][T18015] ? __fget_files+0x2a/0x420 [ 418.030685][T18015] ? __fget_files+0x3a2/0x420 [ 418.030715][T18015] __x64_sys_sendmsg+0x1b1/0x290 [ 418.030738][T18015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.030779][T18015] do_syscall_64+0x166/0x520 [ 418.030797][T18015] ? trace_irq_disable+0x3b/0x140 [ 418.030812][T18015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.030828][T18015] ? clear_bhb_loop+0x70/0xc0 [ 418.030848][T18015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.030862][T18015] RIP: 0033:0x7fd80c79e159 [ 418.030878][T18015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.030892][T18015] RSP: 002b:00007fd80d71b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.030914][T18015] RAX: ffffffffffffffda RBX: 00007fd80ca25fa0 RCX: 00007fd80c79e159 [ 418.030925][T18015] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 418.030935][T18015] RBP: 00007fd80d71b090 R08: 0000000000000000 R09: 0000000000000000 [ 418.030945][T18015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.030954][T18015] R13: 00007fd80ca26038 R14: 00007fd80ca25fa0 R15: 00007ffe5b80c928 [ 418.030982][T18015] [ 418.069571][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.072910][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.078013][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.119537][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.142877][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.163805][T18017] netlink: 'syz.2.2910': attribute type 10 has an invalid length. [ 418.219763][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'. [ 418.223512][T18017] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2910'. [ 418.573712][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'. [ 418.573739][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2916'. [ 418.573990][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'. [ 418.574006][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2916'. [ 418.836873][T18032] syzkaller1: entered promiscuous mode [ 418.836901][T18032] syzkaller1: entered allmulticast mode [ 419.021212][T18044] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 419.022069][T18044] netlink: 'syz.1.2920': attribute type 4 has an invalid length. [ 419.024309][T18044] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2920'. [ 419.121189][T18049] netlink: 'syz.1.2920': attribute type 1 has an invalid length. [ 419.285392][T18054] erspan2: entered allmulticast mode [ 419.451979][T18056] syzkaller0: left promiscuous mode [ 419.452004][T18056] syzkaller0: left allmulticast mode [ 419.542399][ T3400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.691631][T18078] FAULT_INJECTION: forcing a failure. [ 419.691631][T18078] name failslab, interval 1, probability 0, space 0, times 0 [ 419.691668][T18078] CPU: 0 UID: 0 PID: 18078 Comm: syz.1.2923 Not tainted syzkaller #0 PREEMPT(full) [ 419.691690][T18078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.691702][T18078] Call Trace: [ 419.691710][T18078] [ 419.691719][T18078] dump_stack_lvl+0xe8/0x150 [ 419.691754][T18078] should_fail_ex+0x410/0x560 [ 419.691783][T18078] should_failslab+0xa8/0x100 [ 419.691811][T18078] __kvmalloc_node_noprof+0x176/0x820 [ 419.691833][T18078] ? nla_strdup+0x9d/0x140 [ 419.691857][T18078] ? nla_strdup+0xb8/0x140 [ 419.691880][T18078] ? nf_tables_newchain+0x1c9a/0x28b0 [ 419.691904][T18078] ? nf_tables_newchain+0x1c9a/0x28b0 [ 419.691936][T18078] nf_tables_newchain+0x1c9a/0x28b0 [ 419.691980][T18078] ? __pfx_nf_tables_newchain+0x10/0x10 [ 419.692043][T18078] ? nfnl_pernet+0x23/0x240 [ 419.692082][T18078] ? __nla_parse+0x40/0x60 [ 419.692113][T18078] nfnetlink_rcv+0x1288/0x28c0 [ 419.692180][T18078] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 419.692298][T18078] ? lock_acquire+0x115/0x350 [ 419.692332][T18078] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.692360][T18078] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.692394][T18078] netlink_unicast+0x7bd/0x940 [ 419.692436][T18078] netlink_sendmsg+0x813/0xb40 [ 419.692476][T18078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.692516][T18078] ? apparmor_socket_sendmsg+0x98/0x360 [ 419.692542][T18078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.692569][T18078] sock_sendmsg_nosec+0x13a/0x180 [ 419.692595][T18078] ____sys_sendmsg+0x54e/0x850 [ 419.692629][T18078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.692668][T18078] ? import_iovec+0x73/0xa0 [ 419.692698][T18078] ___sys_sendmsg+0x2a5/0x360 [ 419.692722][T18078] ? __lock_acquire+0x747/0x2de0 [ 419.692747][T18078] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.692817][T18078] ? __fget_files+0x2a/0x420 [ 419.692846][T18078] ? __fget_files+0x3a2/0x420 [ 419.692886][T18078] __x64_sys_sendmsg+0x1b1/0x290 [ 419.692917][T18078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.692970][T18078] do_syscall_64+0x166/0x520 [ 419.692994][T18078] ? trace_irq_disable+0x3b/0x140 [ 419.693014][T18078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.693034][T18078] ? clear_bhb_loop+0x70/0xc0 [ 419.693060][T18078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.693079][T18078] RIP: 0033:0x7f1ce779e159 [ 419.693100][T18078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.693116][T18078] RSP: 002b:00007f1ce86de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.693138][T18078] RAX: ffffffffffffffda RBX: 00007f1ce7a25fa0 RCX: 00007f1ce779e159 [ 419.693153][T18078] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 419.693166][T18078] RBP: 00007f1ce86de090 R08: 0000000000000000 R09: 0000000000000000 [ 419.693178][T18078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.693190][T18078] R13: 00007f1ce7a26038 R14: 00007f1ce7a25fa0 R15: 00007ffec1765ca8 [ 419.693226][T18078] [ 419.942280][ T3400] bond0: (slave netdevsim1): Releasing backup interface [ 419.990716][ T3400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.008411][T18085] netlink: 'syz.1.2924': attribute type 1 has an invalid length. [ 420.138768][T18085] 8021q: adding VLAN 0 to HW filter on device bond6 [ 420.218793][T18088] bond6: (slave veth9): Enslaving as an active interface with a down link [ 420.254093][T18091] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 420.256972][T18091] bond6: (slave batadv1): making interface the new active one [ 420.258542][ T5620] Bluetooth: hci5: command tx timeout [ 420.281777][T18091] batadv1: entered promiscuous mode [ 420.283684][T18091] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 420.330160][T18085] bond6 (unregistering): (slave veth9): Releasing active interface [ 420.352343][T18085] bond6 (unregistering): (slave batadv1): Releasing active interface [ 420.352376][T18085] batadv1: left promiscuous mode [ 420.385686][T18085] bond6 (unregistering): Released all slaves [ 420.546780][T18105] netlink: 'syz.3.2929': attribute type 1 has an invalid length. [ 420.638810][ T3400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.656355][T18009] lo speed is unknown, defaulting to 1000 [ 420.667514][T18009] wg2 speed is unknown, defaulting to 1000 [ 420.674085][T18009] lo speed is unknown, defaulting to 1000 [ 420.996240][T18119] ip_tables: iptables: counters copy to user failed while replacing table [ 421.419090][T18130] FAULT_INJECTION: forcing a failure. [ 421.419090][T18130] name failslab, interval 1, probability 0, space 0, times 0 [ 421.419126][T18130] CPU: 1 UID: 0 PID: 18130 Comm: syz.2.2934 Not tainted syzkaller #0 PREEMPT(full) [ 421.419147][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.419158][T18130] Call Trace: [ 421.419166][T18130] [ 421.419175][T18130] dump_stack_lvl+0xe8/0x150 [ 421.419209][T18130] should_fail_ex+0x410/0x560 [ 421.419239][T18130] should_failslab+0xa8/0x100 [ 421.419269][T18130] __kmalloc_cache_noprof+0xa3/0x600 [ 421.419291][T18130] ? nft_trans_rule_add+0x59/0x440 [ 421.419316][T18130] ? nft_trans_rule_add+0x59/0x440 [ 421.419342][T18130] ? __kmalloc_noprof+0x38c/0x720 [ 421.419365][T18130] nft_trans_rule_add+0x59/0x440 [ 421.419397][T18130] nf_tables_newrule+0x1b50/0x28a0 [ 421.419440][T18130] ? __pfx_nf_tables_newrule+0x10/0x10 [ 421.419462][T18130] ? lock_acquire+0x115/0x350 [ 421.419483][T18130] ? nfnl_pernet+0x23/0x240 [ 421.419520][T18130] ? __nla_parse+0x40/0x60 [ 421.419549][T18130] nfnetlink_rcv+0x1288/0x28c0 [ 421.419616][T18130] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 421.419661][T18130] ? ref_tracker_free+0x689/0x830 [ 421.419713][T18130] ? skb_clone+0x246/0x3a0 [ 421.419742][T18130] ? __netlink_deliver_tap+0x811/0x860 [ 421.419779][T18130] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.419805][T18130] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.419838][T18130] netlink_unicast+0x7bd/0x940 [ 421.419878][T18130] netlink_sendmsg+0x813/0xb40 [ 421.419915][T18130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.419953][T18130] ? apparmor_socket_sendmsg+0x98/0x360 [ 421.419979][T18130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.420056][T18130] sock_sendmsg_nosec+0x13a/0x180 [ 421.420080][T18130] ____sys_sendmsg+0x54e/0x850 [ 421.420112][T18130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.420148][T18130] ? import_iovec+0x73/0xa0 [ 421.420177][T18130] ___sys_sendmsg+0x2a5/0x360 [ 421.420200][T18130] ? __lock_acquire+0x747/0x2de0 [ 421.420226][T18130] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.420294][T18130] ? __fget_files+0x2a/0x420 [ 421.420318][T18130] ? __fget_files+0x3a2/0x420 [ 421.420356][T18130] __x64_sys_sendmsg+0x1b1/0x290 [ 421.420384][T18130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.420436][T18130] do_syscall_64+0x166/0x520 [ 421.420459][T18130] ? trace_irq_disable+0x3b/0x140 [ 421.420478][T18130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.420497][T18130] ? clear_bhb_loop+0x70/0xc0 [ 421.420521][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.420541][T18130] RIP: 0033:0x7f425d39e159 [ 421.420560][T18130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.420576][T18130] RSP: 002b:00007f425e259028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.420598][T18130] RAX: ffffffffffffffda RBX: 00007f425d625fa0 RCX: 00007f425d39e159 [ 421.420611][T18130] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 421.420624][T18130] RBP: 00007f425e259090 R08: 0000000000000000 R09: 0000000000000000 [ 421.420636][T18130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 421.420647][T18130] R13: 00007f425d626038 R14: 00007f425d625fa0 R15: 00007ffc794eb328 [ 421.420682][T18130] [ 421.635590][ T3400] bridge_slave_1: left allmulticast mode [ 421.635647][ T3400] bridge_slave_1: left promiscuous mode [ 421.639526][ T3400] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.666953][ T3400] bridge_slave_0: left allmulticast mode [ 421.667177][ T3400] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.703876][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 421.893446][ T3400] veth5: left allmulticast mode [ 421.893475][ T3400] veth5: left promiscuous mode [ 421.893705][ T3400] bridge2: port 2(veth5) entered disabled state [ 421.896398][ T3400] veth3: left allmulticast mode [ 421.896420][ T3400] veth3: left promiscuous mode [ 421.898097][ T3400] bridge2: port 1(veth3) entered disabled state [ 421.953951][ T3400] pim6reg: left allmulticast mode [ 421.970316][ T3400] dvmrp0: left allmulticast mode [ 422.299737][ T3400] batman_adv: batadv0: Removing interface: ip6gretap1 [ 422.301354][T18157] __nla_validate_parse: 7 callbacks suppressed [ 422.301374][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 422.440124][ T5620] Bluetooth: hci5: command tx timeout [ 424.914359][ T5620] Bluetooth: hci5: command tx timeout [ 427.085854][T18013] Bluetooth: hci5: command tx timeout [ 427.608454][ C0] sched: DL replenish lagged too much [ 428.740113][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 430.025268][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 431.979155][ C0] bridge0: received packet on .` with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.983033][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 461.419732][ C0] bridge0: received packet on .` with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.461056][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 532.423436][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 546.108606][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 563.143117][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 596.681589][ T32] INFO: task dhcpcd:5276 blocked for more than 155 seconds. [ 596.681619][ T32] Not tainted syzkaller #0 [ 596.681631][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.681641][ T32] task:dhcpcd state:D stack:21384 pid:5276 tgid:5276 ppid:5275 task_flags:0x400140 flags:0x00080000 [ 596.681710][ T32] Call Trace: [ 596.681718][ T32] [ 596.681736][ T32] __schedule+0x17db/0x58f0 [ 596.681793][ T32] ? trace_irq_disable+0x3b/0x140 [ 596.681834][ T32] ? __pfx___schedule+0x10/0x10 [ 596.681870][ T32] ? schedule+0x90/0x2b0 [ 596.681897][ T32] schedule+0x164/0x2b0 [ 596.681924][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.681947][ T32] __mutex_lock+0x7c1/0x1550 [ 596.681979][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.682009][ T32] ? devinet_ioctl+0x2fb/0x1c50 [ 596.682136][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.682172][ T32] ? bpf_lsm_capable+0x9/0x20 [ 596.682192][ T32] ? security_capable+0x7e/0x2c0 [ 596.682230][ T32] devinet_ioctl+0x2fb/0x1c50 [ 596.682272][ T32] ? __pfx_devinet_ioctl+0x10/0x10 [ 596.682305][ T32] ? get_user_ifreq+0x12b/0x180 [ 596.682340][ T32] inet_ioctl+0x42a/0x560 [ 596.682365][ T32] ? __pfx_inet_ioctl+0x10/0x10 [ 596.682414][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 596.682463][ T32] sock_do_ioctl+0x101/0x320 [ 596.682499][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 596.682528][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 596.682600][ T32] sock_ioctl+0x57a/0x7e0 [ 596.682634][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 596.682676][ T32] ? fd_install+0x94/0x3d0 [ 596.682701][ T32] ? fd_install+0x309/0x3d0 [ 596.682732][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 596.682760][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 596.682790][ T32] __se_sys_ioctl+0xfc/0x170 [ 596.682817][ T32] do_syscall_64+0x166/0x520 [ 596.682842][ T32] ? trace_irq_disable+0x3b/0x140 [ 596.682862][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.682886][ T32] ? clear_bhb_loop+0x70/0xc0 [ 596.692678][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.692706][ T32] RIP: 0033:0x7ff017331378 [ 596.692728][ T32] RSP: 002b:00007fffc8645dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.692753][ T32] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 00007ff017331378 [ 596.692768][ T32] RDX: 00007fffc8655fd0 RSI: 0000000000008914 RDI: 000000000000001b [ 596.692781][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.692794][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc8666170 [ 596.692808][ T32] R13: 00007ff017231708 R14: 0000000000000028 R15: 0000000000008914 [ 596.692847][ T32] [ 596.692903][ T32] INFO: task kworker/u8:25:10972 blocked for more than 155 seconds. [ 596.692919][ T32] Not tainted syzkaller #0 [ 596.692930][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.692939][ T32] task:kworker/u8:25 state:D stack:21544 pid:10972 tgid:10972 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.692997][ T32] Workqueue: events_unbound linkwatch_event [ 596.693088][ T32] Call Trace: [ 596.693095][ T32] [ 596.693109][ T32] __schedule+0x17db/0x58f0 [ 596.693159][ T32] ? __lock_acquire+0x747/0x2de0 [ 596.693193][ T32] ? __pfx___schedule+0x10/0x10 [ 596.693228][ T32] ? schedule+0x90/0x2b0 [ 596.693257][ T32] schedule+0x164/0x2b0 [ 596.693284][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.693307][ T32] __mutex_lock+0x7c1/0x1550 [ 596.693339][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.693370][ T32] ? linkwatch_event+0xe/0x60 [ 596.693403][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.693431][ T32] ? lock_acquire+0x115/0x350 [ 596.693465][ T32] ? rcu_is_watching+0x16/0xb0 [ 596.693493][ T32] ? process_scheduled_works+0x97a/0x1630 [ 596.693524][ T32] linkwatch_event+0xe/0x60 [ 596.693553][ T32] process_scheduled_works+0xc3d/0x1630 [ 596.693620][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.693665][ T32] ? assign_work+0x3cf/0x5d0 [ 596.693700][ T32] worker_thread+0xa47/0xfb0 [ 596.693763][ T32] kthread+0x38b/0x480 [ 596.693786][ T32] ? __pfx_worker_thread+0x10/0x10 [ 596.693812][ T32] ? __pfx_kthread+0x10/0x10 [ 596.693835][ T32] ret_from_fork+0x514/0xb70 [ 596.693862][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 596.693884][ T32] ? __switch_to+0xc89/0x1420 [ 596.693940][ T32] ? __pfx_kthread+0x10/0x10 [ 596.693964][ T32] ret_from_fork_asm+0x1a/0x30 [ 596.694017][ T32] [ 596.694030][ T32] INFO: task kworker/0:18:11200 blocked for more than 155 seconds. [ 596.694045][ T32] Not tainted syzkaller #0 [ 596.694055][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.694064][ T32] task:kworker/0:18 state:D stack:23408 pid:11200 tgid:11200 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.694121][ T32] Workqueue: events netdev_work_proc [ 596.694186][ T32] Call Trace: [ 596.694193][ T32] [ 596.694208][ T32] __schedule+0x17db/0x58f0 [ 596.694256][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 596.694292][ T32] ? __pfx___schedule+0x10/0x10 [ 596.694328][ T32] ? schedule+0x90/0x2b0 [ 596.694356][ T32] schedule+0x164/0x2b0 [ 596.694383][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.694406][ T32] __mutex_lock+0x7c1/0x1550 [ 596.694437][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.694468][ T32] ? netdev_work_proc+0x209/0x780 [ 596.694502][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.694526][ T32] ? kthread+0x38b/0x480 [ 596.694556][ T32] ? netdev_work_proc+0x12b/0x780 [ 596.694588][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 596.694627][ T32] netdev_work_proc+0x209/0x780 [ 596.694669][ T32] ? __pfx_netdev_work_proc+0x10/0x10 [ 596.694702][ T32] ? rcu_is_watching+0x16/0xb0 [ 596.694730][ T32] ? process_scheduled_works+0x97a/0x1630 [ 596.694759][ T32] process_scheduled_works+0xc3d/0x1630 [ 596.694825][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.694862][ T32] ? assign_work+0x3cf/0x5d0 [ 596.694896][ T32] worker_thread+0xa47/0xfb0 [ 596.694959][ T32] kthread+0x38b/0x480 [ 596.694981][ T32] ? __pfx_worker_thread+0x10/0x10 [ 596.695008][ T32] ? __pfx_kthread+0x10/0x10 [ 596.695031][ T32] ret_from_fork+0x514/0xb70 [ 596.695057][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 596.695078][ T32] ? __switch_to+0xc89/0x1420 [ 596.695111][ T32] ? __pfx_kthread+0x10/0x10 [ 596.695135][ T32] ret_from_fork_asm+0x1a/0x30 [ 596.695185][ T32] [ 596.695203][ T32] INFO: task kworker/0:26:12867 blocked for more than 155 seconds. [ 596.695218][ T32] Not tainted syzkaller #0 [ 596.695228][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.695237][ T32] task:kworker/0:26 state:D stack:24520 pid:12867 tgid:12867 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.695296][ T32] Workqueue: events switchdev_deferred_process_work [ 596.695380][ T32] Call Trace: [ 596.695387][ T32] [ 596.695400][ T32] __schedule+0x17db/0x58f0 [ 596.695427][ T32] ? update_protect_slice+0x128/0x210 [ 596.695485][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 596.695522][ T32] ? __pfx___schedule+0x10/0x10 [ 596.695557][ T32] ? schedule+0x90/0x2b0 [ 596.695585][ T32] schedule+0x164/0x2b0 [ 596.695612][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.695635][ T32] __mutex_lock+0x7c1/0x1550 [ 596.695677][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.695708][ T32] ? switchdev_deferred_process_work+0xe/0x20 [ 596.695738][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.695765][ T32] ? lock_acquire+0x115/0x350 [ 596.695798][ T32] ? rcu_is_watching+0x16/0xb0 [ 596.695825][ T32] ? process_scheduled_works+0x97a/0x1630 [ 596.695853][ T32] switchdev_deferred_process_work+0xe/0x20 [ 596.695879][ T32] process_scheduled_works+0xc3d/0x1630 [ 596.695947][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.695984][ T32] ? assign_work+0x3cf/0x5d0 [ 596.696019][ T32] worker_thread+0xa47/0xfb0 [ 596.696065][ T32] ? __kthread_parkme+0x71/0x1f0 [ 596.696108][ T32] kthread+0x38b/0x480 [ 596.696130][ T32] ? __pfx_worker_thread+0x10/0x10 [ 596.696156][ T32] ? __pfx_kthread+0x10/0x10 [ 596.696179][ T32] ret_from_fork+0x514/0xb70 [ 596.696205][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 596.696226][ T32] ? __switch_to+0xc89/0x1420 [ 596.696259][ T32] ? __pfx_kthread+0x10/0x10 [ 596.696283][ T32] ret_from_fork_asm+0x1a/0x30 [ 596.696334][ T32] [ 596.696358][ T32] INFO: task syz-executor:18009 blocked for more than 155 seconds. [ 596.696373][ T32] Not tainted syzkaller #0 [ 596.696383][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.696392][ T32] task:syz-executor state:D stack:23272 pid:18009 tgid:18009 ppid:18008 task_flags:0x400140 flags:0x00080000 [ 596.696449][ T32] Call Trace: [ 596.696456][ T32] [ 596.696470][ T32] __schedule+0x17db/0x58f0 [ 596.696514][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 596.696554][ T32] ? __pfx___schedule+0x10/0x10 [ 596.696589][ T32] ? schedule+0x90/0x2b0 [ 596.696617][ T32] schedule+0x164/0x2b0 [ 596.696643][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.696674][ T32] __mutex_lock+0x7c1/0x1550 [ 596.696706][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.696737][ T32] ? rtnl_newlink+0xc1d/0x1c30 [ 596.696765][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.696804][ T32] ? ns_capable+0x89/0xe0 [ 596.696834][ T32] ? rtnl_nets_add+0x16c/0x300 [ 596.696859][ T32] ? refcount_inc+0x46/0x70 [ 596.696885][ T32] rtnl_newlink+0xc1d/0x1c30 [ 596.696926][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 596.696957][ T32] ? __lock_acquire+0x747/0x2de0 [ 596.696989][ T32] ? __lock_acquire+0x747/0x2de0 [ 596.697030][ T32] ? lock_acquire+0x115/0x350 [ 596.697062][ T32] ? lock_acquire+0x115/0x350 [ 596.697096][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 596.697130][ T32] ? __lock_acquire+0x747/0x2de0 [ 596.697160][ T32] ? __kernel_text_address+0xd/0x30 [ 596.697183][ T32] ? unwind_get_return_address+0x4d/0x90 [ 596.697208][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 596.697230][ T32] ? arch_stack_walk+0xfb/0x150 [ 596.697292][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 596.697316][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 596.697340][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 596.697376][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 596.697402][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 596.697429][ T32] ? __lock_acquire+0x747/0x2de0 [ 596.697468][ T32] netlink_rcv_skb+0x226/0x4a0 [ 596.697501][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 596.697529][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 596.697576][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.697607][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.697646][ T32] netlink_unicast+0x7bd/0x940 [ 596.697696][ T32] netlink_sendmsg+0x813/0xb40 [ 596.697741][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.697783][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 596.697811][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.697841][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 596.697868][ T32] __sys_sendto+0x408/0x5a0 [ 596.697901][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 596.697923][ T32] ? errseq_sample+0x40/0x70 [ 596.697986][ T32] ? rcu_is_watching+0x16/0xb0 [ 596.698020][ T32] __x64_sys_sendto+0xde/0x100 [ 596.698051][ T32] do_syscall_64+0x166/0x520 [ 596.708822][ T32] ? trace_irq_disable+0x3b/0x140 [ 596.708852][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.708874][ T32] ? clear_bhb_loop+0x70/0xc0 [ 596.708901][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.708924][ T32] RIP: 0033:0x7f17f075e98e [ 596.708944][ T32] RSP: 002b:00007ffd1907fe68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 596.708966][ T32] RAX: ffffffffffffffda RBX: 000055556492b500 RCX: 00007f17f075e98e [ 596.708981][ T32] RDX: 000000000000004c RSI: 00007f17f1554670 RDI: 0000000000000003 [ 596.708995][ T32] RBP: 0000000000000001 R08: 00007ffd1907fee4 R09: 000000000000000c [ 596.709009][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 596.709022][ T32] R13: 0000000000000000 R14: 00007f17f1554670 R15: 0000000000000000 [ 596.709060][ T32] [ 596.709070][ T32] INFO: task syz.1.2932:18118 blocked for more than 155 seconds. [ 596.709085][ T32] Not tainted syzkaller #0 [ 596.709095][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.709105][ T32] task:syz.1.2932 state:D stack:25608 pid:18118 tgid:18118 ppid:5612 task_flags:0x400040 flags:0x00080002 [ 596.709164][ T32] Call Trace: [ 596.709171][ T32] [ 596.709186][ T32] __schedule+0x17db/0x58f0 [ 596.709228][ T32] ? arch_stack_walk+0xfb/0x150 [ 596.709267][ T32] ? __pfx___schedule+0x10/0x10 [ 596.709302][ T32] ? schedule+0x90/0x2b0 [ 596.709330][ T32] schedule+0x164/0x2b0 [ 596.709355][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.709377][ T32] __mutex_lock+0x7c1/0x1550 [ 596.709409][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.709439][ T32] ? raw_release+0x1bb/0x9f0 [ 596.709544][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.709571][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 596.709612][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 596.709646][ T32] raw_release+0x1bb/0x9f0 [ 596.709693][ T32] __sock_release+0xa0/0x1f0 [ 596.709790][ T32] ? __pfx_sock_close+0x10/0x10 [ 596.709820][ T32] sock_close+0x1c/0x30 [ 596.709849][ T32] __fput+0x418/0xa50 [ 596.709887][ T32] task_work_run+0x1d9/0x270 [ 596.709915][ T32] ? __pfx_task_work_run+0x10/0x10 [ 596.709950][ T32] exit_to_user_mode_loop+0x204/0x770 [ 596.709972][ T32] ? rcu_is_watching+0x16/0xb0 [ 596.710002][ T32] do_syscall_64+0x328/0x520 [ 596.710027][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.710048][ T32] ? clear_bhb_loop+0x70/0xc0 [ 596.710075][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.710096][ T32] RIP: 0033:0x7f1ce779e159 [ 596.710114][ T32] RSP: 002b:00007ffec1765e08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 596.710136][ T32] RAX: 0000000000000000 RBX: 00007f1ce7a27da0 RCX: 00007f1ce779e159 [ 596.710150][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 596.710162][ T32] RBP: 00007f1ce7a27da0 R08: 00007f1ce7a26038 R09: 0000000000000000 [ 596.710176][ T32] R10: 00000000003ffcc4 R11: 0000000000000246 R12: 0000000000066efc [ 596.710189][ T32] R13: 00007f1ce7a2609c R14: 0000000000066cc0 R15: 00007f1ce7a26090 [ 596.710226][ T32] [ 596.710235][ T32] INFO: task syz.3.2933:18132 blocked for more than 155 seconds. [ 596.710250][ T32] Not tainted syzkaller #0 [ 596.710260][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.710269][ T32] task:syz.3.2933 state:D stack:24584 pid:18132 tgid:18126 ppid:5625 task_flags:0x400140 flags:0x00080003 [ 596.710326][ T32] Call Trace: [ 596.710332][ T32] [ 596.710346][ T32] __schedule+0x17db/0x58f0 [ 596.710392][ T32] ? kasan_save_track+0x4f/0x80 [ 596.710416][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 596.710436][ T32] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 596.710467][ T32] ? __pfx___schedule+0x10/0x10 [ 596.710502][ T32] ? schedule+0x90/0x2b0 [ 596.710529][ T32] schedule+0x164/0x2b0 [ 596.710556][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.710577][ T32] __mutex_lock+0x7c1/0x1550 [ 596.710609][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.710639][ T32] ? reg_reload_regdb+0x145/0x490 [ 596.710740][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.710774][ T32] ? reg_reload_regdb+0x138/0x490 [ 596.710802][ T32] ? reg_reload_regdb+0x138/0x490 [ 596.710830][ T32] ? kmemdup_noprof+0x55/0x70 [ 596.710869][ T32] ? __asan_memcpy+0x40/0x70 [ 596.710896][ T32] reg_reload_regdb+0x145/0x490 [ 596.710926][ T32] ? __nla_parse+0x40/0x60 [ 596.710955][ T32] ? __pfx_reg_reload_regdb+0x10/0x10 [ 596.710989][ T32] ? nl80211_pre_doit+0x53d/0x890 [ 596.711064][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 596.711099][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 596.711139][ T32] ? bpf_lsm_capable+0x9/0x20 [ 596.711158][ T32] ? security_capable+0x7e/0x2c0 [ 596.711190][ T32] genl_rcv_msg+0x614/0x7a0 [ 596.711223][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 596.711246][ T32] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 596.711271][ T32] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 596.711300][ T32] ? __pfx_nl80211_post_doit+0x10/0x10 [ 596.711345][ T32] netlink_rcv_skb+0x226/0x4a0 [ 596.711377][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 596.711403][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 596.711452][ T32] ? down_read+0x2be/0x330 [ 596.711484][ T32] genl_rcv+0x28/0x40 [ 596.711507][ T32] netlink_unicast+0x7bd/0x940 [ 596.711549][ T32] netlink_sendmsg+0x813/0xb40 [ 596.711593][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.711634][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 596.711669][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.711699][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 596.711724][ T32] ____sys_sendmsg+0x54e/0x850 [ 596.711759][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.711798][ T32] ? import_iovec+0x73/0xa0 [ 596.711829][ T32] ___sys_sendmsg+0x2a5/0x360 [ 596.711856][ T32] ? __lock_acquire+0x747/0x2de0 [ 596.711883][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.711916][ T32] ? futex_wait+0x2a2/0x390 [ 596.711997][ T32] ? __fget_files+0x2a/0x420 [ 596.712025][ T32] ? __fget_files+0x3a2/0x420 [ 596.712066][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 596.712097][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.712151][ T32] do_syscall_64+0x166/0x520 [ 596.712174][ T32] ? trace_irq_disable+0x3b/0x140 [ 596.712194][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.712215][ T32] ? clear_bhb_loop+0x70/0xc0 [ 596.712241][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.712261][ T32] RIP: 0033:0x7fdb6539e159 [ 596.712279][ T32] RSP: 002b:00007fdb662de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.712299][ T32] RAX: ffffffffffffffda RBX: 00007fdb65626090 RCX: 00007fdb6539e159 [ 596.712314][ T32] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000004 [ 596.712328][ T32] RBP: 00007fdb6543506b R08: 0000000000000000 R09: 0000000000000000 [ 596.712341][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.712354][ T32] R13: 00007fdb65626128 R14: 00007fdb65626090 R15: 00007fff5a93ae38 [ 596.712391][ T32] [ 596.712401][ T32] INFO: task syz.2.2935:18146 blocked for more than 155 seconds. [ 596.712415][ T32] Not tainted syzkaller #0 [ 596.712425][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.712434][ T32] task:syz.2.2935 state:D stack:28808 pid:18146 tgid:18141 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 596.712496][ T32] Call Trace: [ 596.712503][ T32] [ 596.712517][ T32] __schedule+0x17db/0x58f0 [ 596.712576][ T32] ? __pfx___schedule+0x10/0x10 [ 596.712611][ T32] ? schedule+0x90/0x2b0 [ 596.712638][ T32] schedule+0x164/0x2b0 [ 596.712672][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.712694][ T32] __mutex_lock+0x7c1/0x1550 [ 596.712725][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.712754][ T32] ? __tun_chr_ioctl+0x3da/0x1e70 [ 596.712863][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.712913][ T32] __tun_chr_ioctl+0x3da/0x1e70 [ 596.712949][ T32] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 596.712978][ T32] ? __fget_files+0x2a/0x420 [ 596.713004][ T32] ? __fget_files+0x3a2/0x420 [ 596.713030][ T32] ? __fget_files+0x2a/0x420 [ 596.713062][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 596.713091][ T32] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 596.713114][ T32] __se_sys_ioctl+0xfc/0x170 [ 596.713140][ T32] do_syscall_64+0x166/0x520 [ 596.713163][ T32] ? trace_irq_disable+0x3b/0x140 [ 596.713182][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.713203][ T32] ? clear_bhb_loop+0x70/0xc0 [ 596.713229][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.713249][ T32] RIP: 0033:0x7f425d39e159 [ 596.713267][ T32] RSP: 002b:00007f425e238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.713287][ T32] RAX: ffffffffffffffda RBX: 00007f425d626090 RCX: 00007f425d39e159 [ 596.713302][ T32] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000005 [ 596.713315][ T32] RBP: 00007f425d43506b R08: 0000000000000000 R09: 0000000000000000 [ 596.713328][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.713340][ T32] R13: 00007f425d626128 R14: 00007f425d626090 R15: 00007ffc794eb328 [ 596.713378][ T32] [ 596.713386][ T32] INFO: task syz.2.2935:18147 blocked for more than 155 seconds. [ 596.713400][ T32] Not tainted syzkaller #0 [ 596.713410][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.713419][ T32] task:syz.2.2935 state:D stack:27624 pid:18147 tgid:18141 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 596.713478][ T32] Call Trace: [ 596.713485][ T32] [ 596.713498][ T32] __schedule+0x17db/0x58f0 [ 596.713546][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 596.713582][ T32] ? __pfx___schedule+0x10/0x10 [ 596.713617][ T32] ? schedule+0x90/0x2b0 [ 596.713643][ T32] schedule+0x164/0x2b0 [ 596.713677][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.713699][ T32] __mutex_lock+0x7c1/0x1550 [ 596.713730][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.713759][ T32] ? devinet_ioctl+0x2fb/0x1c50 [ 596.713789][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.713826][ T32] ? bpf_lsm_capable+0x9/0x20 [ 596.713844][ T32] ? security_capable+0x7e/0x2c0 [ 596.713877][ T32] devinet_ioctl+0x2fb/0x1c50 [ 596.713919][ T32] ? __pfx_devinet_ioctl+0x10/0x10 [ 596.713953][ T32] ? get_user_ifreq+0x12b/0x180 [ 596.713985][ T32] inet_ioctl+0x42a/0x560 [ 596.714010][ T32] ? __pfx_inet_ioctl+0x10/0x10 [ 596.714058][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 596.714083][ T32] ? packet_ioctl+0x26b/0x350 [ 596.714138][ T32] sock_do_ioctl+0x101/0x320 [ 596.714172][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 596.714201][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 596.714245][ T32] sock_ioctl+0x57a/0x7e0 [ 596.714279][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 596.714309][ T32] ? __fget_files+0x2a/0x420 [ 596.714335][ T32] ? __fget_files+0x3a2/0x420 [ 596.714362][ T32] ? __fget_files+0x2a/0x420 [ 596.714394][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 596.714422][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 596.714452][ T32] __se_sys_ioctl+0xfc/0x170 [ 596.714478][ T32] do_syscall_64+0x166/0x520 [ 596.714501][ T32] ? trace_irq_disable+0x3b/0x140 [ 596.714521][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.714543][ T32] ? clear_bhb_loop+0x70/0xc0 [ 596.714568][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.714589][ T32] RIP: 0033:0x7f425d39e159 [ 596.714606][ T32] RSP: 002b:00007f425e217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.714626][ T32] RAX: ffffffffffffffda RBX: 00007f425d626180 RCX: 00007f425d39e159 [ 596.714640][ T32] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000007 [ 596.714660][ T32] RBP: 00007f425d43506b R08: 0000000000000000 R09: 0000000000000000 [ 596.714673][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.714686][ T32] R13: 00007f425d626218 R14: 00007f425d626180 R15: 00007ffc794eb328 [ 596.714722][ T32] [ 596.714731][ T32] INFO: task syz.4.2936:18156 blocked for more than 155 seconds. [ 596.714746][ T32] Not tainted syzkaller #0 [ 596.714756][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.714765][ T32] task:syz.4.2936 state:D stack:27624 pid:18156 tgid:18155 ppid:5613 task_flags:0x400040 flags:0x00080002 [ 596.714825][ T32] Call Trace: [ 596.714831][ T32] [ 596.714845][ T32] __schedule+0x17db/0x58f0 [ 596.714903][ T32] ? __pfx___schedule+0x10/0x10 [ 596.714937][ T32] ? schedule+0x90/0x2b0 [ 596.714965][ T32] schedule+0x164/0x2b0 [ 596.714990][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.715012][ T32] __mutex_lock+0x7c1/0x1550 [ 596.715043][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.715073][ T32] ? __tun_chr_ioctl+0x3da/0x1e70 [ 596.715100][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.715150][ T32] __tun_chr_ioctl+0x3da/0x1e70 [ 596.715185][ T32] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 596.715214][ T32] ? __fget_files+0x2a/0x420 [ 596.715240][ T32] ? __fget_files+0x3a2/0x420 [ 596.715266][ T32] ? __fget_files+0x2a/0x420 [ 596.715298][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 596.715326][ T32] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 596.715347][ T32] __se_sys_ioctl+0xfc/0x170 [ 596.715374][ T32] do_syscall_64+0x166/0x520 [ 596.715397][ T32] ? trace_irq_disable+0x3b/0x140 [ 596.715417][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.715437][ T32] ? clear_bhb_loop+0x70/0xc0 [ 596.715464][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.715484][ T32] RIP: 0033:0x7fd80c79e159 [ 596.715501][ T32] RSP: 002b:00007fd80d71b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.715521][ T32] RAX: ffffffffffffffda RBX: 00007fd80ca25fa0 RCX: 00007fd80c79e159 [ 596.715535][ T32] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 596.715549][ T32] RBP: 00007fd80c83506b R08: 0000000000000000 R09: 0000000000000000 [ 596.715562][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.715574][ T32] R13: 00007fd80ca26038 R14: 00007fd80ca25fa0 R15: 00007ffe5b80c928 [ 596.715610][ T32] [ 596.715618][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 596.715628][ T32] INFO: task syz.4.2936:18157 blocked for more than 155 seconds. [ 596.715641][ T32] Not tainted syzkaller #0 [ 596.715651][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.715668][ T32] task:syz.4.2936 state:D stack:25528 pid:18157 tgid:18155 ppid:5613 task_flags:0x400140 flags:0x00080002 [ 596.715724][ T32] Call Trace: [ 596.715731][ T32] [ 596.715745][ T32] __schedule+0x17db/0x58f0 [ 596.715787][ T32] ? __pfx__printk+0x10/0x10 [ 596.715838][ T32] ? __pfx___schedule+0x10/0x10 [ 596.715872][ T32] ? schedule+0x90/0x2b0 [ 596.715900][ T32] schedule+0x164/0x2b0 [ 596.715925][ T32] schedule_preempt_disabled+0x13/0x30 [ 596.715947][ T32] __mutex_lock+0x7c1/0x1550 [ 596.715979][ T32] ? __mutex_lock+0x5d4/0x1550 [ 596.716008][ T32] ? rtnl_dellink+0x419/0x810 [ 596.716036][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 596.716063][ T32] ? kasan_save_track+0x4f/0x80 [ 596.716088][ T32] ? dev_hard_start_xmit+0x2cd/0x830 [ 596.716139][ T32] ? __dev_queue_xmit+0x14c0/0x3820 [ 596.716171][ T32] ? __nla_parse+0x40/0x60 [ 596.716203][ T32] rtnl_dellink+0x419/0x810 [ 596.716232][ T32] ? __pfx_rtnl_dellink+0x10/0x10 [ 596.716351][ T32] ? lock_acquire+0x115/0x350 [ 596.716373][ T32] ? __pfx_rtnl_dellink+0x10/0x10 [ 596.716412][ T32] ? __pfx_rtnl_dellink+0x10/0x10 [ 596.716436][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 596.716466][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 596.716490][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 596.716513][ T32] ? ref_tracker_free+0x689/0x830 [ 596.716542][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 596.716580][ T32] netlink_rcv_skb+0x226/0x4a0 [ 596.716612][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 596.716639][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 596.716695][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.716724][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.716761][ T32] netlink_unicast+0x7bd/0x940 [ 596.716802][ T32] netlink_sendmsg+0x813/0xb40 [ 596.716845][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.716886][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 596.716912][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.716941][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 596.716966][ T32] ____sys_sendmsg+0x54e/0x850 [ 596.717001][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.717041][ T32] ? import_iovec+0x73/0xa0 [ 596.717072][ T32] ___sys_sendmsg+0x2a5/0x360 [ 596.717097][ T32] ? __lock_acquire+0x747/0x2de0 [ 596.717124][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.717156][ T32] ? futex_wait+0x2a2/0x390 [ 596.717223][ T32] ? __fget_files+0x2a/0x420 [ 596.717250][ T32] ? __fget_files+0x3a2/0x420 [ 596.717290][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 596.717322][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.717376][ T32] do_syscall_64+0x166/0x520 [ 596.717401][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.717421][ T32] ? clear_bhb_loop+0x70/0xc0 [ 596.717448][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.717468][ T32] RIP: 0033:0x7fd80c79e159 [ 596.717485][ T32] RSP: 002b:00007fd80d6fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.717505][ T32] RAX: ffffffffffffffda RBX: 00007fd80ca26090 RCX: 00007fd80c79e159 [ 596.717520][ T32] RDX: 0000000020000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 596.717533][ T32] RBP: 00007fd80c83506b R08: 0000000000000000 R09: 0000000000000000 [ 596.717546][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.717559][ T32] R13: 00007fd80ca26128 R14: 00007fd80ca26090 R15: 00007ffe5b80c928 [ 596.717595][ T32] [ 596.717603][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 596.717616][ T32] [ 596.717616][ T32] Showing all locks held in the system: [ 596.717626][ T32] locks held by kworker/u8:0/12: 4, last CPU#0: [ 596.717719][ T32] #0: ffff888076d74140 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 596.717845][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 596.717904][ T32] #2: ffff888036559440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 596.718017][ T32] #3: ffff888033aad270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 600.648387][ T32] locks held by kworker/u8:1/13: 4, last CPU#1: [ 600.648412][ T32] #0: ffff888036aa8140 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.648492][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.648554][ T32] #2: ffff888036249440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 600.648622][ T32] #3: ffff888058a1f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 600.648683][ T32] locks held by pr/ttyS0/16: 3, last CPU#0: [ 600.648698][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 600.648781][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 600.648905][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 600.648958][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 600.648972][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 600.649023][ T32] locks held by kcompactd0/35: 2, last CPU#1: [ 600.649037][ T32] #0: ffff888034d89848 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: __rmap_walk_file+0x1a0/0x6a0 [ 600.649086][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 600.649140][ T32] locks held by kworker/u8:2/43: 3, last CPU#0: [ 600.649154][ T32] #0: ffff888057b26140 ((wq_completion)bond9#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.649213][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.649277][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 600.649384][ T32] locks held by kswapd0/86: 1, last CPU#0: [ 600.649398][ T32] #0: ffffffff8ee90160 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0 [ 600.649458][ T32] locks held by kworker/u8:7/1134: 4, last CPU#0: [ 600.649472][ T32] #0: ffff888036aa8940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.649531][ T32] #1: ffffc900052d7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.649586][ T32] #2: ffff88803624d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 600.649646][ T32] #3: ffff88807855dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 600.649717][ T32] locks held by kworker/u8:8/3400: 4, last CPU#0: [ 600.649732][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.649786][ T32] #1: ffffc9000e10fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.649842][ T32] #2: ffffffff90244808 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 600.649918][ T32] #3: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 600.649971][ T32] locks held by klogd/4970: 1, on CPU#1: [ 600.649985][ T32] #0: ffff88807f5696c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 600.650043][ T32] locks held by udevd/4981: 1, on CPU#1: [ 600.650056][ T32] #0: ffff88807f6f9d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 600.650114][ T32] locks held by dhcpcd/5276: 1, on CPU#1: [ 600.650128][ T32] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 600.650183][ T32] locks held by crond/5352: 1, on CPU#1: [ 600.650197][ T32] #0: ffff88807797b948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 600.650260][ T32] locks held by getty/5372: 2, on CPU#1: [ 600.650274][ T32] #0: ffff88803557b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 600.650411][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 600.650465][ T32] locks held by syz-executor/5602: 1, last CPU#0: [ 600.650479][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 600.650538][ T32] locks held by kworker/u8:12/8108: 4, last CPU#0: [ 600.650552][ T32] #0: ffff888036aaa140 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.650613][ T32] #1: ffffc90008f7fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.650669][ T32] #2: ffff888036031440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 600.650728][ T32] #3: ffff88807855f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 600.650787][ T32] locks held by kworker/u8:14/8111: 4, last CPU#0: [ 600.650800][ T32] #0: ffff88802a3dd940 ((wq_completion)krds_cp_wq#9/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.650855][ T32] #1: ffffc9000776fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.650910][ T32] #2: ffff888049de1280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 600.650996][ T32] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 600.651044][ T32] locks held by kworker/u8:16/8114: 3, on CPU#0: [ 600.651058][ T32] #0: ffff888032e4f940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.651114][ T32] #1: ffffc90009397c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.651169][ T32] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 600.651263][ T32] locks held by kworker/u8:17/8115: 4, last CPU#1: [ 600.651277][ T32] #0: ffff888036aa8140 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.651337][ T32] #1: ffffc9000978fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.651393][ T32] #2: ffff888036249440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 600.651452][ T32] #3: ffff88807855c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 600.651511][ T32] locks held by kworker/u8:22/8129: 4, last CPU#0: [ 600.651525][ T32] #0: ffff888036aa8940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.651585][ T32] #1: ffffc9000ab97c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.651640][ T32] #2: ffff88803624d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 600.651700][ T32] #3: ffff88807855d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 600.651761][ T32] locks held by kworker/u8:25/10972: 3, on CPU#0: [ 600.651775][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.651830][ T32] #1: ffffc900053a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.651883][ T32] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 600.651942][ T32] locks held by kworker/u8:28/10975: 2, last CPU#0: [ 600.651956][ T32] #0: ffff888033625940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652010][ T32] #1: ffffc90006417c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652066][ T32] locks held by kworker/u8:31/10982: 2, on CPU#1: [ 600.652080][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652128][ T32] #1: ffffc9000651fc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652184][ T32] locks held by kworker/0:18/11200: 3, on CPU#0: [ 600.652198][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652261][ T32] #1: ffffc9000e7bfc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652315][ T32] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 600.652377][ T32] locks held by kworker/0:23/12864: 2, last CPU#0: [ 600.652391][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652444][ T32] #1: ffffc90005057c40 ((work_completion)(&data->dm_alert_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652500][ T32] locks held by kworker/0:26/12867: 3, on CPU#0: [ 600.652514][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652566][ T32] #1: ffffc90004fbfc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 600.652620][ T32] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 600.652683][ T32] locks held by syz-executor/18009: 2, on CPU#0: [ 600.652697][ T32] #0: ffffffff907a7d70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 600.652754][ T32] #1: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 600.652807][ T32] locks held by syz.1.2932/18118: 2, on CPU#0: [ 600.652821][ T32] #0: ffff8880561b69c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 600.652886][ T32] #1: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bb/0x9f0 [ 600.652944][ T32] locks held by syz.3.2933/18132: 2, on CPU#0: [ 600.652960][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 600.653014][ T32] #1: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: reg_reload_regdb+0x145/0x490 [ 600.653076][ T32] locks held by syz.2.2935/18146: 1, on CPU#0: [ 600.653092][ T32] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 600.653147][ T32] locks held by syz.2.2935/18147: 1, on CPU#0: [ 600.653162][ T32] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 600.653226][ T32] locks held by syz.4.2936/18156: 1, on CPU#0: [ 600.653242][ T32] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 600.653296][ T32] locks held by syz.4.2936/18157: 1, on CPU#0: [ 600.653311][ T32] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 600.653367][ T32] locks held by syz-executor/18162: 2, last CPU#0: [ 600.653382][ T32] #0: ffff888026657678 (&mm->mmap_lock){++++}-{4:4}, at: map_vdso+0x69/0x6a0 [ 600.653433][ T32] #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 600.653488][ T32] [ 600.653494][ T32] ============================================= [ 600.653494][ T32] [ 600.653503][ T32] NMI backtrace for cpu 1 [ 600.653518][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 600.653541][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.653554][ T32] Call Trace: [ 600.653563][ T32] [ 600.653573][ T32] dump_stack_lvl+0xe8/0x150 [ 600.653605][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 600.653678][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 600.653714][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 600.653748][ T32] sys_info+0x135/0x170 [ 600.653799][ T32] watchdog+0xfd7/0x1030 [ 600.653832][ T32] ? watchdog+0x1c7/0x1030 [ 600.653863][ T32] kthread+0x38b/0x480 [ 600.653885][ T32] ? __pfx_watchdog+0x10/0x10 [ 600.653904][ T32] ? __pfx_kthread+0x10/0x10 [ 600.653928][ T32] ret_from_fork+0x514/0xb70 [ 600.653952][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 600.653972][ T32] ? __switch_to+0xc89/0x1420 [ 600.654005][ T32] ? __pfx_kthread+0x10/0x10 [ 600.654026][ T32] ret_from_fork_asm+0x1a/0x30 [ 600.654073][ T32] [ 600.654081][ T32] Sending NMI from CPU 1 to CPUs 0: [ 600.654109][ C0] NMI backtrace for cpu 0 [ 600.654124][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 600.654144][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.654156][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 600.654180][ C0] RIP: 0010:__lock_acquire+0x4b2/0x2de0 [ 600.654201][ C0] Code: c0 74 1c 83 3d a2 3c d7 0e 00 75 13 48 8d 3d b5 45 da 0e 48 c7 c6 e0 c3 53 8e 67 48 0f b9 3a 90 31 c9 84 db 0f 84 cf 01 00 00 <48> 8b 45 20 66 85 c0 0f 88 c2 01 00 00 0f b6 89 c5 00 00 00 84 c9 [ 600.654216][ C0] RSP: 0018:ffffc900000072f0 EFLAGS: 00000006 [ 600.654233][ C0] RAX: 0000000000056c48 RBX: 0000000000000003 RCX: ffffffff94415118 [ 600.654246][ C0] RDX: 0000000000042000 RSI: 0000000000002000 RDI: b300000000000000 [ 600.654259][ C0] RBP: ffff88801e2a6ad8 R08: ffffffff89b2c65e R09: 0000000000000001 [ 600.654271][ C0] R10: dffffc0000000000 R11: fffffbfff20f4830 R12: 00000000000006f1 [ 600.654284][ C0] R13: ffff88801e2a6970 R14: ffff88801e2a5dc0 R15: ffff88801e2a5dc0 [ 600.654298][ C0] FS: 0000000000000000(0000) GS:ffff888124ccd000(0000) knlGS:0000000000000000 [ 600.654313][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.654326][ C0] CR2: 00007f91fd594a1b CR3: 000000007a156000 CR4: 00000000003526f0 [ 600.654344][ C0] Call Trace: [ 600.654351][ C0] [ 600.654372][ C0] ? __lock_acquire+0x6b0/0x2de0 [ 600.654392][ C0] ? kasan_save_track+0x4f/0x80 [ 600.654409][ C0] ? kasan_save_track+0x3e/0x80 [ 600.654426][ C0] ? kasan_save_free_info+0x40/0x50 [ 600.654450][ C0] ? __kasan_slab_free+0x5c/0x80 [ 600.654467][ C0] ? kmem_cache_free+0x182/0x650 [ 600.654485][ C0] ? vxcan_xmit+0x1f7/0x780 [ 600.654538][ C0] ? dev_hard_start_xmit+0x2cd/0x830 [ 600.654561][ C0] ? __dev_queue_xmit+0x14c0/0x3820 [ 600.654584][ C0] ? can_send+0x941/0xd30 [ 600.654602][ C0] ? can_can_gw_rcv+0xd09/0xfd0 [ 600.654617][ C0] ? can_rcv_filter+0x126/0x7a0 [ 600.654636][ C0] ? can_receive+0x2c6/0x440 [ 600.654654][ C0] ? canfd_rcv+0x1f9/0x330 [ 600.654675][ C0] lock_acquire+0x115/0x350 [ 600.654693][ C0] ? enqueue_to_backlog+0x12e/0xef0 [ 600.654723][ C0] _raw_spin_lock+0x2e/0x40 [ 600.654740][ C0] ? enqueue_to_backlog+0x12e/0xef0 [ 600.654756][ C0] enqueue_to_backlog+0x12e/0xef0 [ 600.654777][ C0] netif_rx_internal+0x120/0x550 [ 600.654799][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 600.654816][ C0] ? __pfx_netif_rx_internal+0x10/0x10 [ 600.654838][ C0] ? rcu_is_watching+0x16/0xb0 [ 600.654862][ C0] netif_rx+0x5e/0xa0 [ 600.654885][ C0] vxcan_xmit+0x4cf/0x780 [ 600.654907][ C0] ? vxcan_xmit+0x49/0x780 [ 600.654931][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 600.654962][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 600.654990][ C0] ? can_can_gw_rcv+0x4b9/0xfd0 [ 600.655006][ C0] ? canfd_rcv+0x1f9/0x330 [ 600.655025][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 600.655048][ C0] ? __napi_poll+0xaa/0x330 [ 600.655064][ C0] ? net_rx_action+0x61d/0xf50 [ 600.655082][ C0] ? do_softirq+0x77/0xd0 [ 600.655104][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 600.655125][ C0] ? blake2s_compress+0xfa/0x1c00 [ 600.655172][ C0] ? blake2s_final+0x10f/0x270 [ 600.655194][ C0] ? wg_noise_handshake_create_initiation+0x5a4/0x810 [ 600.655220][ C0] ? wg_packet_handshake_send_worker+0x18c/0x370 [ 600.655239][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 600.655259][ C0] ? worker_thread+0xa47/0xfb0 [ 600.655281][ C0] ? kthread+0x38b/0x480 [ 600.655298][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 600.655335][ C0] ? rcu_is_watching+0x16/0xb0 [ 600.655355][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 600.655382][ C0] can_send+0x941/0xd30 [ 600.655400][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 600.655420][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 600.655448][ C0] ? __pfx_can_send+0x10/0x10 [ 600.655466][ C0] ? skb_ext_add+0x3b3/0x8e0 [ 600.655488][ C0] ? skb_clone+0x246/0x3a0 [ 600.655509][ C0] ? can_can_gw_rcv+0x48f/0xfd0 [ 600.655527][ C0] can_can_gw_rcv+0xd09/0xfd0 [ 600.655547][ C0] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 600.655563][ C0] can_rcv_filter+0x126/0x7a0 [ 600.655584][ C0] ? can_receive+0x16c/0x440 [ 600.655605][ C0] can_receive+0x2c6/0x440 [ 600.655627][ C0] canfd_rcv+0x1f9/0x330 [ 600.655646][ C0] ? __pfx_canfd_rcv+0x10/0x10 [ 600.655666][ C0] process_backlog+0xc26/0x18b0 [ 600.655687][ C0] ? process_backlog+0x3de/0x18b0 [ 600.655712][ C0] __napi_poll+0xaa/0x330 [ 600.655737][ C0] net_rx_action+0x61d/0xf50 [ 600.655762][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 600.655794][ C0] handle_softirqs+0x226/0x860 [ 600.655817][ C0] ? do_softirq+0x77/0xd0 [ 600.655840][ C0] ? kernel_fpu_end+0x62/0x80 [ 600.655860][ C0] do_softirq+0x77/0xd0 [ 600.655881][ C0] [ 600.655887][ C0] [ 600.655893][ C0] __local_bh_enable_ip+0x100/0x140 [ 600.655916][ C0] blake2s_compress+0xfa/0x1c00 [ 600.655948][ C0] ? __asan_memset+0x22/0x50 [ 600.655973][ C0] ? chacha20poly1305_encrypt+0x347/0x760 [ 600.656001][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 600.656027][ C0] ? __pfx_chacha20poly1305_encrypt+0x10/0x10 [ 600.656056][ C0] ? ktime_get_real_ts64+0x320/0x3d0 [ 600.656079][ C0] blake2s_final+0x10f/0x270 [ 600.656105][ C0] wg_noise_handshake_create_initiation+0x5a4/0x810 [ 600.656133][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 600.656165][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 600.656194][ C0] ? lock_acquire+0x115/0x350 [ 600.656214][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 600.656234][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 600.656254][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 600.656272][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 600.656291][ C0] wg_packet_handshake_send_worker+0x18c/0x370 [ 600.656312][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 600.656335][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 600.656365][ C0] ? rcu_is_watching+0x16/0xb0 [ 600.656385][ C0] ? process_scheduled_works+0x97a/0x1630 [ 600.656408][ C0] process_scheduled_works+0xc3d/0x1630 [ 600.656443][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.656468][ C0] ? assign_work+0x3cf/0x5d0 [ 600.656491][ C0] worker_thread+0xa47/0xfb0 [ 600.656525][ C0] kthread+0x38b/0x480 [ 600.656542][ C0] ? __pfx_worker_thread+0x10/0x10 [ 600.656563][ C0] ? __pfx_kthread+0x10/0x10 [ 600.656581][ C0] ret_from_fork+0x514/0xb70 [ 600.656598][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 600.656614][ C0] ? __switch_to+0xc89/0x1420 [ 600.656638][ C0] ? __pfx_kthread+0x10/0x10 [ 600.656655][ C0] ret_from_fork_asm+0x1a/0x30 [ 600.656687][ C0] [ 600.657107][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 604.863395][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 604.872526][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.882600][ T32] Call Trace: [ 604.885903][ T32] [ 604.888855][ T32] vpanic+0x56d/0xa60 [ 604.892877][ T32] ? __pfx_vpanic+0x10/0x10 [ 604.897416][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 604.902992][ T32] panic+0xc5/0xd0 [ 604.906747][ T32] ? __pfx_panic+0x10/0x10 [ 604.911193][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 604.916245][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 604.922434][ T32] watchdog+0x1030/0x1030 [ 604.926799][ T32] ? watchdog+0x1c7/0x1030 [ 604.931241][ T32] kthread+0x38b/0x480 [ 604.935363][ T32] ? __pfx_watchdog+0x10/0x10 [ 604.940057][ T32] ? __pfx_kthread+0x10/0x10 [ 604.944668][ T32] ret_from_fork+0x514/0xb70 [ 604.949292][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 604.954427][ T32] ? __switch_to+0xc89/0x1420 [ 604.959135][ T32] ? __pfx_kthread+0x10/0x10 [ 604.963753][ T32] ret_from_fork_asm+0x1a/0x30 [ 604.968566][ T32] [ 604.971746][ T32] Kernel Offset: disabled [ 604.976064][ T32] Rebooting in 86400 seconds..