last executing test programs: 5.176808677s ago: executing program 3 (id=11481): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000005700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001300)="0000000035fdca249bf6ffffffffffffff556eab", 0x14}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}, {{&(0x7f00000013c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200000}}], 0x30}}], 0x2, 0x4800) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1000000000000218, 0x1) close(r1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9a}, 'vcan0\x00'}}, 0x1e) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000080), 0x4) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x6) 2.91623469s ago: executing program 0 (id=11505): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) 2.76798766s ago: executing program 0 (id=11507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003a40)=""/4107, 0x100b}, {&(0x7f0000000540)=""/60, 0x3c}, {0x0}, {&(0x7f0000000700)=""/87, 0x57}], 0x4}, 0x2142) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed', 0x9) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000fdffffff67000000080001000800000008001500", @ANYRES32=0x0, @ANYBLOB="0800c300741300000800c40000000000545f6c8889d1495bcc2d593c244cdcfcb1e564045abd8991dc42d65c8a6a65f1e1219937d0a3cc54057d1b"], 0x34}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000300)=[{r7, 0x80}], 0x1, 0x101) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$netlink(0x10, 0x3, 0xa) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f59aa975c3c3f808ee112"], &(0x7f0000000f80)=""/4100, 0x31, 0x1004, 0x9, 0x20}, 0x28) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) 2.121994146s ago: executing program 3 (id=11514): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="90", 0x1}, {0x0, 0x2e}], 0x2}, 0x0) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="fd4a3a74dfe15fba8a0c60922387ea944228a870315c1205bc146b26ecdaad257acf2ef498808f574c1e807a77bf58ae7331c5615213988b6055a716bbc06112f06b07471185a04d4c33192e1116"], 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000d, 0x2000000000032, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000000)=0x7, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$kcm(0xa, 0x2, 0x3a) (async) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="90", 0x1}, {0x0, 0x2e}], 0x2}, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="fd4a3a74dfe15fba8a0c60922387ea944228a870315c1205bc146b26ecdaad257acf2ef498808f574c1e807a77bf58ae7331c5615213988b6055a716bbc06112f06b07471185a04d4c33192e1116"], 0x0) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000d, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) (async) setsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000000)=0x7, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 1.964794186s ago: executing program 4 (id=11517): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e3f08000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.948743372s ago: executing program 3 (id=11519): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x48, 0x30, 0xfdeb, 0x1, 0xfffff000, {}, [{0x34, 0x1, [@m_mpls={0x30, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r0, 0x1, 0x0, 0x0, 0x11, 0x8, 0x5, 0x5508, 0x6, 0x2, 0x1, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = socket(0xa, 0x3, 0x3a) bind$alg(r3, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(lrw-twofish-3way,sha384-generic)\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x8, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r7 = socket(0xa, 0x3, 0x3a) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) clock_gettime(0x0, 0x0) recvmmsg(r7, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x40}], 0x2, 0x20, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r10, r11, 0x0, 0x4) close(r11) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="33400002", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xda7a3a8869fa9d65) 1.6646861s ago: executing program 4 (id=11522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2, 0x1, 0x7, 0x9, 0x100, 0x4d, 0x81040211}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000050206010100000000000000000300fffd14000780080011400000000005001500010000000500010006000000050005000a00000005000400020000000900020073797a300000000011000300686173683a69702c6d61726b00000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r2, &(0x7f0000000380)={0x1f, 0x0, @any, 0x9}, 0xe) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x6, 0x3, 0x2) getsockname$packet(r3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x21, @private=0xe010101, 0x15, 0x3, 'rr\x00', 0x0, 0x7, 0x70}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{0x0}], 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYBLOB]) 1.627776013s ago: executing program 2 (id=11523): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000380)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x2e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) shutdown(r0, 0x1) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0xa, 0x4e23, 0x8, @private1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000100)="8eee15533e314b214a081b55e6ec50ee1f0c0bf13b9a7185d5a28509307b215ec5812a921abd72451b148277b64c9ea7bde0267b7d8008347ffb6213e12309e2bfb110206020d9e350e0515996652d34726243b1795dbe8c01ed78038f609860fcf996094a12cc5ce9b26ade878b0666169be5c1fc662806f2b93dca8b5417f873fd9487a0708a31b9843c4cfb753287041cb39ff5994dee2663ec7a489f8801bcf85b994adc6222e15f265ff0399a57a333f2acc04fb73acf27422a05cbb8197c757953aa2cfd8464", 0xc9}, {&(0x7f0000000200)="224a589e06d8e44b284b4fb3d72c95624c403aaba00b82f0c566ea255e4f7665a3857cbb75231d3e367a37b72da00db658110233d0c9aa96ab10fc10e67468f80cc2127fc737114ff770", 0x4a}], 0x2, &(0x7f0000000440)=[@dstopts={{0x18, 0x29, 0x37, {0x87}}}, @hoplimit={{0x14, 0x29, 0x34, 0x401}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x48}, 0x88) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0x40c}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) 1.396630862s ago: executing program 2 (id=11525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x800}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.21870371s ago: executing program 2 (id=11527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x2, 0x2, 0x8, 0x0, 0x8}, 0x20) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x98, 0x290, 0x290, 0x138, 0x138, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffe, 0x0, @local, 0x2}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x8, 0x3, 'fsm\x00', "320ed162cd7bbb5c623b980ee055668b8f3f37bc739cba06a6605408a96fb717fd4766f42da23c709c33f142c91d568e249b1538c77b20b7a8f1463c65099f65e88d93e223d375ba102a44e0b5a6092ab2c8ef1600ed1b4c255dfb8fb0c6e89f5aa8086005f19e9d7d50aafd97b9a468bb568b0d52b485deac7342bcf62ba601", 0x4f, 0x2, {0x100000003}}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40, 0x8, @rand_addr=0x64010101, 0x4e21}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'erspan0\x00', {0xff}}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) setsockopt$inet_opts(r2, 0x0, 0xf, &(0x7f00000000c0)="a8c7ac3d810baf305d3ab980361488b8bde874bfeb15d4ee31b803cdeb97c2896db7026220a62acf82dc7c59e1760ea4a9049fe9c71284c2ad3ff2c1f7bc2fccd948f5ae422dd9df142ef0eb93463fdcf88d3f9263b75e260c93725f599994ad297a29db0d4ae2b83a84611de452c6", 0x6f) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000000) 1.149150105s ago: executing program 0 (id=11529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x18, 0x0, 0x2) getpeername$netrom(r1, 0x0, &(0x7f0000000080)=0xffffffffffffff77) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x18, 0x800, 0x5) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x94) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @dev, @local}, &(0x7f0000000540)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000085c0)=@newtclass={0x0, 0x28, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xb}, {0x7, 0xfff3}, {0xfff2, 0x9}}, [@tclass_kind_options=@c_sfb]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r7, 0x4b9b6000) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x80000004, 0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xff, 0x99, &(0x7f0000000180)=""/153, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4) 1.040007481s ago: executing program 2 (id=11530): recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0), 0x14) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="3900000014", 0x5}], 0x1}, 0x0) (rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000002c0), 0x4) (async) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0xe9c}, {&(0x7f0000001200)=""/114, 0x72}], 0x2}, 0x562a}], 0x3ffffffffffff27, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 1.039834561s ago: executing program 1 (id=11531): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x93a9a38a4978d2f2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) 887.914751ms ago: executing program 0 (id=11532): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a09000040"], 0x4c}}, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) unshare(0x2c020400) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYBLOB="9d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) clock_gettime(0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r6, &(0x7f0000002140)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x81, @local, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="9c5054a5af2f81d706d451f728eeeb", 0xf}, {&(0x7f0000000240)="a356f58980a4d1bc340b4e2fde9103daf31d759e26dc8c7daf932a29deb282c831f5ac7c221bd877f910efe1305661a004d56dcdae60bf8c5afcdf94e242116d01754e2c8bf813abff4130fbf20f90d34ec6312e92c1f0702bdc590d16a0e93b9a7cb6f4a57018173bdc851f1a55fca8ff825e03bdabad1c447a88abbcfafe7b8c76a6e71a03f4abbe22454a88599438b9c3740cdbd09e74715e6a6b640fd621b67df416dcf324fe233f3e043b", 0xad}, {&(0x7f0000000340)="c046641ca8108ae11f406a3f6dd523a4b312f92777b24ad78aab6c826de6", 0x1e}, {&(0x7f00000006c0)="9416acfde1a73a7a1efd2d18429095ae9d31dc914cd671a059a0f0db651179fbae4aa18c50c09f8700572e6a6cda96af26365f9744b5201fa08a9e16d0469506f1db7026f3a7d358c5749daf2cdc46a1693a54bb8d20ced0d7d3bd01b7cac380c2d91ef243c4b3dbfa64310ffed013954d4640f6965ae4f7d46e5e7127ad4104b8fc819e6fc5c56d2b938e8a86074b05865b21921c1c8c1e1578bcbad5ccea0e1b857ab2cd86ccad22afda7a7a9dd6c9e589e3debe39ca7999bf906911642c404cd3a1d767cfd007bfc250c8bd7a57e1531f01546ba6f19ec41850a427f994c92e36e4b47883341c819a88411e0324783507d778b49d1ae87b2d2e28ce7569378369e4b6fd78fc7c166d9dbd67f7a704e31962c543f3d1d3c2516f4b24f295311bd0c7ce0add3eb2ef21fd62c048a8be7ae52cda2a209d70592c3d996f34484e4f2d3cd04eb0b09a349fcbd8d243441f6cdd5c693c684abff434d0544a5089283a13b639d274a12d8ab9d32307778e00f35fe7d5820dd4502b4e0ae13f7fa8196a9e3e69e5828edea978c553faa85212c0ed08d0ce4e56c9471eb00328ace3d88336ef4cbcfbcf0fe6466d6937f8e8c28615966993fedd2e4e2684484829fe95553f85c273a17cdbe69b35de969d5c40ec4c15d1d259de60da0d8881f6503c48527efc5b618246dbd95e950798cc6aade069126ad392d831c4801ce645dcafd29579825f247197196407a4d410e9785ee3418b2a0186d190b4d03111ca42c845795478cd30a802a7f479ce646101e6b9303f1006d2458a2a494552794cdf09ef22968e3d650b3fdeda989a12bd14e85b4876a4ef1a253b5c07b70db2a8daedd93618db3d1177e368bc214c13e5dfff275a16a5030f4415fbcd7b95393480733c4b95ec38962194d4a75ab876bbd62fcf50ca35831e05a12f69488f959990ae43ed3114fb77a1a71c3ee4cedde06f4e4d12d7f17c6d8acba7e3a4472534fa78aa9ca507d92d47d9d792803683195cbe4bdc95361c1c5898514a440c5c8cd7a1153d6eea859798c60af468980e894156c3a374111878eea05b5395196bd383db85325b1bdff1a040fae19ffb97841ca5955b78584199eeea31d8f471b6383d2ac5328419f3f9d18d90530598ee8c22241b647aa8e3732146c6c0451df55ef5ca14f014f3888907610cc5d186717d71573ff7fa0f42da7ff4bb0c08c16888274b6bc42c2da16717a151c9a47574a950ded1f298de1e30e24aa6ba2c6d71057a111af722e5afe04ef6041dcbdd5581dc3fed22776f17583491ed01e5f427ab03247efc8c9a8433cea0d6ce342062d9deaf1b20499a5064c2609c510e38182e69988861c811c4f00eb75560b7c74e9cc2fb6c0a837a89e7029705259d617503c17629ea1aff1c9eab3642c90f980705dee96202453eb9d4ee620e29a46cc1bb6d19d9f992c0cd1347fe87a2c0ff5163bb45619ac9c4afddcece8e2165e744c082b1fbd4e13bcce215cad1cd0dd30753947d16114856eb4dd832679ddc878e3fc86a769a60d60a66b9fc1f25554cb5c2c8a2ab7e027ec71b6239268ce1b8cc4d2d43ecb9795a33b3729859c2b0dcd25101852ead50562e2738a85621fab640b7719658256b650ec6338a3f1f8890ce72eb3441590828b8f56a783f496f442a348bcc6184b0b5d42398126b869bf8b13b935e6cf5a07cb5a96f2ba78edbe6c93cc7b7e634fc87acc8482b1dbd9e211df82d90f29e06cc2008050a85d0f5f0fbcf10ff4601f6bc11ab7bd63e5fdd131c4b3290c6f3209e1d2240daa08a59a53298b322d7931641b65b7b0ba0f3f7824c3009ba2bb1ea0e2d58dfeee12beae6334cdb66e206a2a2f2f7b7a5610e58e901a17ecd8e910bfd58247b661415da6a60dff4a9ba85fccdee8414e226d036ea10cf968b0deaac794ef906154fb53ec020389e4dd5069ae270675b5d1ac688793ce8f2c29f6511baf3229ea3704d3466150f7bc6b8b3c6434f00b4c8fb5bb9e94262db8dfad2ce4fd82f0df94a853c7eeec33dff24554d90b2c057773d11d0e0c29b8ccac35c93f3905417531e74480480d887ff23992341e3cc4bc0f44c045090191b98a97e121ab78e12eee5492a0f27980948881584b6ac6eff0a2751ae4b72d80efe22be710d14453d69d8245305be2070b18c538da4d1ecc217a9d4abbb7f1047ce42202e67a678bb175caf2c0fb0b6c8921bf4c2afff3c10344f98f33882f647487066812b8af48ebdcafe70ceecc217a8b8a990279c045abe3024aee16f3ec856ac00c4b6a1dde6220bcb3cf7a67de97085a0ab798c95f78db810b48f23dc7effe89fcb4ac03e35ea7f80aecd39be9aee9680a0dd9d09ec6f717e213bb9aa8c92d8000ab29128331c66d7e247290acc51285ba9d9b5922b2d1ea0d1f241b766e97d27d414ab15f97e031fc99c2eefdf78833cb6c7a702ed7016ce511a55815eb5ac73ef52691b74a2e2ef02440802b073be15e420e1eb19510e6ddaf98212cc4aa2903d3cac17e73f549796d980fda47082d2744530ac58a8f0731c0540517fdda62dcf434e41176aa585bb75f846c72e023ea7da2feea3d9d5fad14907dd46bb3022c0e3b7054795054589ee0893f58e49672292d706cbcd1da8128d1a1e52de9bd847ad4adcdffa4989cae0792360a0eac3427a111de88715024d8927b037152170afd8d16b84d8b9a2f6e8dbff4360068a42bd4178e397f9d769af6eb88c287fa27ef801197001854be8811bae544718d4cef836a50a59ec9cc2f217bf96da3cd4d5f7d2bca87be25d60f22bdf043cf01809447b077214448c98068420b17edd94f7aae946a65ebe4a356629d147166973b73f531ee470fd9cd944a6e38fab468d65bd4feee463d64becc9bdc012f09fef21f0fc038e2450247858750dc868cc16c6049a4800771d38779cddc851a376ca6fb20f99020cb6a9d54b8f13df71ad14595f6942dd8823000af8e21026cfd0b5d96d52b70f6fe7b491fcc71691184dba7537d8146fa3f170add1ad8acfdf32297c199a0cf389cff44549f0c1f1a3c0182ae8f3cd3445364112fe3ff042530ae41fae15e1a0d371acdb79de2347b4c788b6ccb1cf35ae9569a65671856044d20fca1afd5cd7a026332c57c0e4050047dc8a70d61dc7162529936970012f1c7be74e618cc949608c97ec84cfa9dfeddbbb62c982b1f1f195f259d2c41e0e48fe7e7295b4d6b517dcdf86ef10b5641f1774264867863a4a47e0e3024f7335b806ef661a507b1b0303a83e2d8023aa90177403cd05f68192441ac1a64754854ba583dd6e0787b916466e53cd1d3c7dfd17651cd8ce843be4fbb9eedd4e3f869e8691353a4a8294ebf6fdf98c0bae5bc85f0ef1858439f664067d8d11fa6c8613ebc100a6e331bd60170d76ee232d67760c016cca5ab177990e8b6a3d90b7f0f4e268f25ad797a60a3f078b19dc86ac7375cac8d7b45c77a618fb9ae30cd4b2911be91b8ed27d9c5256a8f6c074c463fc1c19bd14f7dc57202af013a67a2184efc38a569c8dbea4dd1973b3bb19a716518c2ac020cd10a20203837fc884120ae5781d78a3426648ebc9ffa1c88a50478eeb7c7774ae24d73b62c461a19d64fd7cf4e66c5ced72e027e70ad3fbc2e64e718cdce638d6f8f7fe60649b690c85609aa821b87ed4770bc61edc2046c7f9d263e09c2ec7b4aee678617bd57c9f6553e771cfa56ff6b2f43980d4fd95c1ddeacd2beb4f84292fe56b37e2c7b64d1d9efab780ffee89125e47887ed5031fc2d4532ab1c69aeee4a9da998ea954b674d1de407bb47c645cbd2d43e4d7f9516f299d093cc85c9cb420ca0a4aff6d2a02557d284e381a8ec3cb5e5baaf762f99eecff4b9120f3a242208dc30479a44b44a3952599335721eb6527156f3904686cc44407ee724a69c203da1f2b71f2ac5bfb2135abd9d5016ee414aedefc5eebccc6d26e2fea2a727714de546f55124deb951a9db59774d086c5fd6e8f1c2185a26544587f564279b58805507b7343fcf102ca59db3e7302205983954ce96a13eb733c550aeb3b30c669a1b878aee465d642d1e15232e29d69c5c258e76ae53203856a5b97170cf531fd3c1964d74d08f696f0bc92069f004532e914751047daf7aeb66fba4d04e50ba5a26149241d57a40d79d6081fce22a8faef48ec5cc7903472e8445d5383009f41b9e631c22538d80db02f3e7713de30a016c703d70a1c85cab58c1ad4bc548527d2dbe9bcf1ce80b1d7c14c3704255fa2379b39f39cd2b3bbaf9792648e08988474b27fadcabc5861a7adfa484ae110cd43e1ab444d7958cf71ecfd838d327915fd0f49c109329d5de2bc89bdbca70fca6b864b2fcad7b1e7b2335ac98e5128a6efee82369742099129cfaf1ce4011e93a17803378ceb13428ef419fb0b84a4225c0615156d7d1ed1eb59cdad2da278b133a059403935ac642d4e58c7e00675a42887b989084a30807a50c8f4057fd658e546ed609933576822cca3cbdd98f743924eafde1ccd3a9157d72839227cf1d1c47f818fec162907ed1604d0d37c09205c6b1d69fb2ce41ce3b7e9cc4a36f4d9c28ee4c6830322a5399c7ec3a042c49cd8f98fba2428bb8082358b085dcfb2ccb050b1ecdbb3a2d3dc8988e725e8ce3a3bc6448eaa11a391fb2b4c0ec9ebc6c6c8588979fe39e5f66ae37556e5ff01dad78de1196f4fced6f7c024181151fdd870a707abbba71f9da973dc7d60fec89d8d7000ef7a0f7a470c4b67b1ea79b74fbc5f28869f04074e991741fa85a705f8b2cce9f6e3e8e734783aceeefd7a68b8d13b0374013943f03f1b44f820a4b65706a3f66c8e24cac602e2e5cc9766cb7213b8a4da0eaab074d9f9a70b6ebb07dba961b9315d8b3621c1fe0a16cdfdf27ad9df371af2084077e661c26369e8e592893d2e66f4c258fbe94048e76d3d42cb7844d6039cffb14e777bcff6c27b3331f3276632cf7a991361cca21ec3e674adb04d09d6941cd771ef3c838fee6975552dfa75ce437fc11caae5a9560acde3be8228220c1ede838bd5587fcf0e692c80adf91aafb1d6479525a95b883516a018a2db64ec35f41983621294e06c9779d0b45963f9793b59f75ff5aae1a2bfa1ff38c7639dc12dca2ade9fb0f5ba83fe2b023c0cf242f865aefb94608cdb957449d95d11376f3cb8582076bd5c21769066c81afc0ca79f9625acc8d8009f2f6e22dd51d2c0433f0b7cfa5cab741ec00dbb6195ef3b1c183cd94489168b0c8c4ea954ad98461d70cec416dbf9169a72204f81eff4a49710da2bd0b40fef06e29a1933e37e679ba1268649410729ede2e26b5332cdde4ecc7f2c9f4070d57598d31977e087ff6627e3bce004977fb6ba2907fb5f2c26a4cfae2e491776a50be03a39d4af8a61e56d87ae32afb57dd313ee4029a0921e3803fa6743bf25c9060342ef0e92c09eb2d37c8131a46cfccaf9b2781231968914f0749bb9ed1bf2b01e632a2165453eac1c0f3580e7ddcfca71faddc67d550dae65bfc6562bad79e08149c6848bb50b2b27eecf9271eb468bdd704cd6bb7680863e12b018448ecfae1e4f000dcfc6b7b4c63c4098894538ff67ccfc92de414dd0be8618c8610e96edd50fca1a891b8e402367d6f185839b33128401753ea37b2f04a547ffe5c9f691032bf18a8463f5dedb00194715ac3094bd39a1bc294f0c8c666828682e0e9f90b955f623f80cdc89fe415926474bde917d747d7a3112e48b9c49a5baeb1b657ca93503e6337a1e2ee44695900b7be08ef172c47603157f243e6870ee7b", 0x1000}], 0x4}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x800, @mcast2, 0x3}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000480)="184be7dd4dd3c22fe23fa762c51b082ba5eb6264d83c7d095b25749124973489be6d38ba1b2a3ee79dae2f7d05e98974ec32f0951ed5fabce20d01f6c09e3b67e273bd1479eefa205c2bf612283ba7ac74a0c174c2ad25fb6627ef035a71c840f30dbe9b35426be8f8a06705c3f67b037b9ae965b77956c919ec011207267b5e87a5d2636a52125f31a85b5e5f877513", 0x90}, {&(0x7f0000000540)="c5bdbc41ea6d216af30c86900a947500ace21f154c5f02df17f28fea934c97e2638514a22c5f9e74b68b123429f5c5d885e23cd3586be026c82a12772f5559616080b302b6d79cf8b6f2dad8122e08101749a0fb82c3290ba5a7f46b", 0x5c}, {&(0x7f00000016c0)="c4b2b2f6a484059d81339951def3fb9d16f1b253e82c801953ac169d742ab8fc08c7e2e55379ea0b46a3c2f242acfa541aab7c4fe289e9965e4940aff91af6451c6b6ad0a711fa8cee59", 0x4a}, {&(0x7f00000005c0)="c277e799335444", 0x7}, {&(0x7f0000001740)="25fc1088813ded3a5ef4eeb8e5eac5190fa30844bec5bb9ce93c7b62dd9fd51aca5210699faf755d02433f8212123559f27d2e8218042a683b603f9065f3374a62b3859dbc32a686757565d455989d3da1f43219d507fc52ca97750a4c8bef09bc2277c3d33e44d0d1b59936285814b42cff72f534ddba51d3b0abc494aa90026f688e40a7a1744d5c9bc90b66d7066aefe19c0fce8ea633faa060454aaa93b9028e833a55d0b6ed2e22572cf6d08f3ffcca343e", 0xb4}, {&(0x7f0000001800)="2ba52e68f13cf73c38fe3179aaf496cddd288200c601a1c2b2fd4ad023200e2dd63d10709141e9aab7f730717b5c5ad54c552f1d585fb60be701f26227daf37259c2c625adc95a7c460b2be43af55b12854c125539213c42c27b15cc04c07169244ce96ba7ff4d15b7dfe7fbfb8e5c77a79e286de396bd5e69c1fab0e4896f83170c8df15c58d07f158b21d6444c597324d923141a438aee53ce76f4c833b41c6ec1827c9c", 0xa5}], 0x6, &(0x7f0000001940)=ANY=[@ANYBLOB="1400000000000000290000ff2207310d38003400"/30, @ANYRES8=r4], 0x18}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001980)="31528e6cebdca11051b51b31c269713759553a", 0x13}, {&(0x7f00000019c0)="1b5dc47c03816fb5bb06281920bf061b1dc509aec54e40237de1468e90c05e1c873517b5", 0x24}, {&(0x7f0000001a00)="0acb5f642beddb047742422f921e13bd56b9894e8ff9ecf84183eef4d2b2121fb85fcf232dcac2d9780b569c59d0bdc0e05558d75927622176b4b3216d1bd60008ae4f3f79a159324ab279f39a860201cab70650681c1169018b85f800a90d8cc438b5c1c3c3bb0ccf2e37acfd8ea171b0f977ca5142e91e2716f5ffd74b64345b66f9e4bfc2abc9659968d0915ad79d26a0b81fb30001272e10", 0x9a}, {&(0x7f0000001ac0)="d2e28d1a1fce04d8f58c25c3b48ce2fb415ce2f561c65e730e3243d33d9490046c3cf8da337d1e65d98ea136c20661bd69092a1b9802703495cdeffeee", 0x3d}, {&(0x7f0000001b00)="334ab4db6d9b9f94b67ac9cd1753a82730881f2ce8628c9e8e85945cb4ba03aba3f868162b7933102505cbaba8773fd4d79cba6e48103035e087112dcf57f75c919109f1", 0x44}, {&(0x7f0000001b80)="213fa5b18ceb14f0643b4152c759d31c7fc994cd405012c08c3b6dc58e6efc8cd1fa88a86b20486d24fb9f1155d8643c6d9cf986291a42b9f0654dd1f7ccaf1dd9db49f22a96c0c453944e3832f2a0a7feba00f40a01a7e1a0945b7f9a33fa3eccf2049b1b71e61820e6793a716cd78a25a86d62c1950ae42deb2f24f355be107f6a0be8282173facf30453c50e1447cce3271d230ef98c7d75653e12e07b60080af50f5bee909985176d66145c39f241eb2ee46801ebd01f01ae0b1c84406e606f2f437b0f89fbaf4b4b661c0685ff7f864358f55efee97f480", 0xda}, {&(0x7f0000001c80)="50fc7cd0287dd963d2a983375fbf662998a716474e7e28fbf39b8e3895548546817a62bea2cb63b33e210c128d54fa7b288dc9155aa8c9cdeab091f4e5abf60dcd82ed3d3fd0afeb065ac186db7b914270b48a1c9259a42fa038fe911b96a9ddb53d902a49a170c86b4ad5d70322a48b811a3e17c6d48a75198b937665b306980215ce71c19479ff619e01b25e543bd4f20a54662f147b50ce935334f7e781e8c1ab512c7fdbb7153b88a56a2fecfadcf9a5262d90d40d74ae1973a3dcbd097405a3083f893f4100679b965578c804dba6d2084269cd780bb4e9e1e4b5aa32c73fa75ee7c97b53e0e9ee4f5cc7b707518164bae608192247", 0xf8}, {&(0x7f0000001d80)="8dd742d1808f6d37ed8489f943e2d2e9d85062990ebfaf708b036c5116f763adf073589a99a6b70cefd6f0b5ea025459f841bf701d49f2aff88c92c95289a9653f5d422f6816c82180902476e12092d7c17d04d8de6f5a207bc2d32c64a60905647e4492bcbba4c4af225d054da6df0cd62dd504f2ede57371b15bce402062a667690d14d8ff5c3b7ebc7861768909f0cfb8b87b606b1f9598058fd5ca12222b3c1f23e3aad17fdc4eeed7809b993bb84ed3083d594dfe19ed260504d258f4780ab801e4c68b177f017783ffa435736d07f215f0fc14ada1c3407d4a42", 0xdd}], 0x8, &(0x7f0000002200)=ANY=[@ANYBLOB="300000000000000029000000370000001603000000000000040100000100000100c20400000001c20400000007040109480000000000000029000000390000008406020600000000fe8000000000000000000000000000aafe8000000000000000000000000000bbfe88000000000000000000000000000114000000006a8000290000000b00000000000073000000001400000000000000290000003e00000001000100000000001400000000000000290000003e00000057d20000000005a5dca50000000000002900000034000000080000000000000024000000000000002900000032000000200100"/248, @ANYRES32=0x0, @ANYBLOB="00000000140000000000000029000000430000000000000000000000c000000000000000290000000400000016140000000000003b8758642afd28dbec2a49f99b36ff0d2a406423e56d2b63d1ec132e4b58f8e93518a12ab21c866d4fa4153c150e0c622c7534bb64883c65c971962686464b261afdd57aafc648e2595cd468b57adb24d3a806b8b066545e5b9c6ea8930621d497cdd3e47ce5f296de28628e96ce701d2dcb7c2d5c8c65e0c92e46d502f81830c8e9d3bbf8adf311e201080000000000000000050244fe0502006f04010504010cc20400000fff00"], 0x1d8}}], 0x3, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x18, 0x80805, 0x0) 885.998564ms ago: executing program 1 (id=11533): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x4, {0x0, 0x0, 0x74, r4, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000005000000020000010400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, '\x00', 0x3}, 0x18) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7fffffff}, 0x8) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48d1) recvmsg$kcm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001840)=""/185, 0xbb}, {&(0x7f00000001c0)=""/256, 0xff}, {&(0x7f00000038c0)=""/4041, 0xfffffe65}, {&(0x7f0000000600)=""/4120, 0x1021}, {&(0x7f00000002c0)=""/114, 0x72}], 0x5}, 0x40000040) 877.334691ms ago: executing program 3 (id=11534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x4b, 0x7, 0x5, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) (rerun: 32) 793.144584ms ago: executing program 4 (id=11535): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r1 = epoll_create1(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) r5 = socket$unix(0x1, 0x5, 0x0) close(r5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f00000000c0)={0xa0028000}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB="2e00000010"], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 740.668998ms ago: executing program 0 (id=11536): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x62040400) listen(0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0c1e9fb5a2d80000000000000000081a1b000000000004001a80180002"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000200012800e00010069703665727370616e0000000c00028006000000007f0000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) unshare(0x24060400) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x10, 0x140f, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000710000000000000095007400000000000389c0dc1b1e8fcc938d01cf519bb9961bd83651f709c94ff5ae1b8970b266a297034656858dc13d3dc6e7203903445d797181deb467614fe3"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000f80)={r1, &(0x7f0000000e80)='+-@\x00', 0xa85d7062822a671, &(0x7f0000000ec0)={@_ha_fsid={[0x7fffffff, 0x9]}, {0x2, 0x8, 0x3, 0xfffffffffffffff9}}, 0x1, &(0x7f0000000f00), &(0x7f0000000f40)=0xe}) recvmmsg(r3, &(0x7f00000042c0)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000000340)=""/215, 0xd7}], 0x2}, 0x3}, {{&(0x7f00000004c0)=@pppoe, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/55, 0x37}, {&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000000640)=""/10, 0xa}, {&(0x7f0000000680)=""/28, 0x1c}], 0x4, &(0x7f0000000740)=""/127, 0x7f}, 0x1}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/201, 0xc9}, {&(0x7f00000008c0)=""/7, 0x7}, {&(0x7f0000000900)=""/194, 0xc2}], 0x3, &(0x7f0000000a40)=""/14, 0xe}, 0x100}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000b00)=""/122, 0x7a}, {&(0x7f0000000b80)=""/245, 0xf5}, {&(0x7f0000000c80)=""/103, 0x67}, {&(0x7f0000000d00)=""/234, 0xea}, {&(0x7f0000000e00)=""/125, 0x7d}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/254, 0xfe}], 0x7, &(0x7f0000002b40)=""/14, 0xe}, 0xe000}, {{&(0x7f0000002b80)=@sco={0x1f, @none}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002c00)=""/143, 0x8f}, {&(0x7f0000002cc0)=""/99, 0x63}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/180, 0xb4}, {&(0x7f0000003e00)=""/198, 0xc6}], 0x5, &(0x7f0000003f80)=""/175, 0xaf}, 0x1}, {{&(0x7f0000004040)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004240)=[{&(0x7f00000040c0)=""/171, 0xab}, {&(0x7f0000004180)=""/139, 0x8b}], 0x2, &(0x7f0000004280)=""/41, 0x29}, 0x80000000}], 0x6, 0x40, &(0x7f0000004440)={0x0, 0x989680}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_tcp_int(r6, 0x11e, 0x1, 0x0, 0x0) 635.665013ms ago: executing program 1 (id=11537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 590.035602ms ago: executing program 4 (id=11538): pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000002100)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 539.63709ms ago: executing program 3 (id=11539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x92}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x90) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x772}, 0x1c) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x300}}, 0x100, 0x0, 0x3000000, 0x0, 0x54}, 0x9c) 420.381545ms ago: executing program 1 (id=11540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0xfffffff9, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='@', 0x1}, {0x0}], 0x2}}], 0x1, 0x4) 420.132659ms ago: executing program 4 (id=11541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x200408c4) 333.281712ms ago: executing program 1 (id=11542): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 294.704731ms ago: executing program 4 (id=11543): unshare(0x62000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@bridge_delvlan={0x60, 0x71, 0x200, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x9, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x60}}, 0x8c0) r3 = epoll_create1(0x80000) epoll_wait(r3, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x6) 244.096089ms ago: executing program 3 (id=11544): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x48, 0x30, 0xfdeb, 0x1, 0xfffff000, {}, [{0x34, 0x1, [@m_mpls={0x30, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r0, 0x1, 0x0, 0x0, 0x11, 0x8, 0x5, 0x5508, 0x6, 0x2, 0x1, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = socket(0xa, 0x3, 0x3a) bind$alg(r3, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(lrw-twofish-3way,sha384-generic)\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x8, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r7 = socket(0xa, 0x3, 0x3a) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) clock_gettime(0x0, 0x0) recvmmsg(r7, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x40}], 0x2, 0x20, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r10, r11, 0x0, 0x4) close(r11) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="33400002", @ANYRES16=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xda7a3a8869fa9d65) 226.696116ms ago: executing program 1 (id=11545): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000004000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061117b000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 136.732952ms ago: executing program 2 (id=11546): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 39.09803ms ago: executing program 2 (id=11547): unshare(0x24060400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000005, 0x12, r0, 0x977da000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000240)=0x4, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x210) unshare(0x4000400) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0xa, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@gettclass={0x24, 0x2a, 0xcab357a34a588d63, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x5, 0x6}, {0xfff2, 0xfff1}, {0xd, 0x9}}, ["", "", "", "", "", ""]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1}, {0x0, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0xdc7a}, "254143f1"}}]}]}]}}]}, 0x64}}, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r10, 0x11e, 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=11548): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x2, 0x24}, {0x1, 0x2, 0x9, 0xfffffff6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r5}, 0x4) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): uld_fail_ex+0x412/0x560 [ 1341.248116][ T9787] should_failslab+0xa8/0x100 [ 1341.248149][ T9787] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1341.248176][ T9787] ? __alloc_skb+0x1d0/0x7d0 [ 1341.248205][ T9787] ? __local_bh_enable_ip+0xd0/0x130 [ 1341.248242][ T9787] __alloc_skb+0x1d0/0x7d0 [ 1341.248272][ T9787] ? netlink_ack_tlv_len+0x6c/0x210 [ 1341.248307][ T9787] netlink_ack+0x146/0xa50 [ 1341.248333][ T9787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1341.248357][ T9787] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1341.248507][ T9787] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1341.248558][ T9787] netlink_rcv_skb+0x2b6/0x4b0 [ 1341.248592][ T9787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1341.248620][ T9787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1341.248669][ T9787] ? down_read+0x272/0x2e0 [ 1341.248706][ T9787] ? genl_rcv+0xd/0x40 [ 1341.248731][ T9787] genl_rcv+0x28/0x40 [ 1341.248754][ T9787] netlink_unicast+0x75c/0x8e0 [ 1341.248796][ T9787] netlink_sendmsg+0x813/0xb40 [ 1341.248840][ T9787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.248876][ T9787] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1341.248901][ T9787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1341.248932][ T9787] ____sys_sendmsg+0x972/0x9f0 [ 1341.248978][ T9787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1341.249028][ T9787] ? import_iovec+0x73/0xa0 [ 1341.249060][ T9787] ___sys_sendmsg+0x2a5/0x360 [ 1341.249101][ T9787] ? __pfx____sys_sendmsg+0x10/0x10 [ 1341.249176][ T9787] ? __fget_files+0x2a/0x420 [ 1341.249195][ T9787] ? __fget_files+0x3a0/0x420 [ 1341.249228][ T9787] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1341.249266][ T9787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1341.249312][ T9787] ? __pfx_ksys_write+0x10/0x10 [ 1341.249351][ T9787] do_syscall_64+0x14d/0xf80 [ 1341.249378][ T9787] ? trace_irq_disable+0x3b/0x150 [ 1341.249398][ T9787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.249421][ T9787] ? clear_bhb_loop+0x40/0x90 [ 1341.249449][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.249472][ T9787] RIP: 0033:0x7f042c39c819 [ 1341.249494][ T9787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.249515][ T9787] RSP: 002b:00007f042d225028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1341.249539][ T9787] RAX: ffffffffffffffda RBX: 00007f042c615fa0 RCX: 00007f042c39c819 [ 1341.249556][ T9787] RDX: 0000000000004800 RSI: 0000200000000600 RDI: 0000000000000004 [ 1341.249571][ T9787] RBP: 00007f042d225090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.249584][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.249598][ T9787] R13: 00007f042c616038 R14: 00007f042c615fa0 R15: 00007ffe7f5ea948 [ 1341.249635][ T9787] [ 1341.640341][ T9790] lo speed is unknown, defaulting to 1000 [ 1341.647926][ T9790] lo speed is unknown, defaulting to 1000 [ 1341.923055][ T9805] netlink: 'syz.0.10256': attribute type 4 has an invalid length. [ 1341.958399][ T9807] __nla_validate_parse: 4 callbacks suppressed [ 1341.958424][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10257'. [ 1342.069073][ T9805] netlink: 'syz.0.10256': attribute type 4 has an invalid length. [ 1342.132762][ T9816] FAULT_INJECTION: forcing a failure. [ 1342.132762][ T9816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1342.190256][ T9816] CPU: 1 UID: 0 PID: 9816 Comm: syz.2.10258 Not tainted syzkaller #0 PREEMPT(full) [ 1342.190303][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1342.190319][ T9816] Call Trace: [ 1342.190328][ T9816] [ 1342.190338][ T9816] dump_stack_lvl+0xe8/0x150 [ 1342.190377][ T9816] should_fail_ex+0x412/0x560 [ 1342.190423][ T9816] _copy_from_user+0x2d/0xb0 [ 1342.190454][ T9816] sk_setsockopt+0x2b3/0x2d60 [ 1342.190496][ T9816] ? __pfx_sk_setsockopt+0x10/0x10 [ 1342.190532][ T9816] ? aa_sk_perm+0x6d5/0x900 [ 1342.190575][ T9816] ? __pfx_aa_sk_perm+0x10/0x10 [ 1342.190611][ T9816] ? __fget_files+0x2a/0x420 [ 1342.190631][ T9816] ? aa_sock_opt_perm+0xff/0x1a0 [ 1342.190656][ T9816] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1342.190689][ T9816] do_sock_setsockopt+0x11b/0x1b0 [ 1342.190727][ T9816] __x64_sys_setsockopt+0x13d/0x1b0 [ 1342.190767][ T9816] do_syscall_64+0x14d/0xf80 [ 1342.190794][ T9816] ? trace_irq_disable+0x3b/0x150 [ 1342.190814][ T9816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.190837][ T9816] ? clear_bhb_loop+0x40/0x90 [ 1342.190864][ T9816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.190887][ T9816] RIP: 0033:0x7f62a1f9c819 [ 1342.190908][ T9816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.190928][ T9816] RSP: 002b:00007f62a2ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1342.190952][ T9816] RAX: ffffffffffffffda RBX: 00007f62a2216090 RCX: 00007f62a1f9c819 [ 1342.190969][ T9816] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000003 [ 1342.190982][ T9816] RBP: 00007f62a2ef3090 R08: 0000000000000004 R09: 0000000000000000 [ 1342.190996][ T9816] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1342.191011][ T9816] R13: 00007f62a2216128 R14: 00007f62a2216090 R15: 00007fffa87bbfb8 [ 1342.191046][ T9816] [ 1342.433205][ T9819] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10261'. [ 1342.468414][ T9822] FAULT_INJECTION: forcing a failure. [ 1342.468414][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1342.503633][ T9819] xfrm0: entered promiscuous mode [ 1342.509038][ T9819] xfrm0: entered allmulticast mode [ 1342.509211][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.2.10262 Not tainted syzkaller #0 PREEMPT(full) [ 1342.509277][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1342.509320][ T9822] Call Trace: [ 1342.509343][ T9822] [ 1342.509367][ T9822] dump_stack_lvl+0xe8/0x150 [ 1342.509476][ T9822] should_fail_ex+0x412/0x560 [ 1342.509595][ T9822] _copy_from_user+0x2d/0xb0 [ 1342.509671][ T9822] __sys_bpf+0x229/0x950 [ 1342.509734][ T9822] ? __pfx___sys_bpf+0x10/0x10 [ 1342.509844][ T9822] ? ksys_write+0x242/0x270 [ 1342.509926][ T9822] ? __pfx_ksys_write+0x10/0x10 [ 1342.510017][ T9822] __x64_sys_bpf+0x7c/0x90 [ 1342.510112][ T9822] do_syscall_64+0x14d/0xf80 [ 1342.510193][ T9822] ? trace_irq_disable+0x3b/0x150 [ 1342.510246][ T9822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.510320][ T9822] ? clear_bhb_loop+0x40/0x90 [ 1342.510391][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.510457][ T9822] RIP: 0033:0x7f62a1f9c819 [ 1342.510504][ T9822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.510564][ T9822] RSP: 002b:00007f62a2f14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1342.510644][ T9822] RAX: ffffffffffffffda RBX: 00007f62a2215fa0 RCX: 00007f62a1f9c819 [ 1342.510694][ T9822] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 0000000000000000 [ 1342.510734][ T9822] RBP: 00007f62a2f14090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.510768][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.510800][ T9822] R13: 00007f62a2216038 R14: 00007f62a2215fa0 R15: 00007fffa87bbfb8 [ 1342.510881][ T9822] [ 1342.694071][ T9824] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1344.057611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.884778][ T9869] openvswitch: netlink: IP tunnel dst address not specified [ 1349.096991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.414198][ T9890] lo speed is unknown, defaulting to 1000 [ 1349.423369][ T9890] lo speed is unknown, defaulting to 1000 [ 1349.714662][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10279'. [ 1350.027882][ T9921] netlink: 'syz.4.10284': attribute type 10 has an invalid length. [ 1350.063812][ T9921] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1350.335575][ T9937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10288'. [ 1350.394542][ T9941] batadv_slave_0: entered promiscuous mode [ 1350.440929][ T9944] x_tables: duplicate underflow at hook 1 [ 1350.462212][ T9938] batadv_slave_0: left promiscuous mode [ 1351.184480][ T9987] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10305'. [ 1351.212592][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10305'. [ 1351.564140][ T9991] netlink: 'syz.4.10303': attribute type 2 has an invalid length. [ 1351.583922][ T9991] tipc: Started in network mode [ 1351.589057][ T9991] tipc: Node identity 340008, cluster identity 4711 [ 1351.606247][ T9991] tipc: Node number set to 3407880 [ 1351.753272][T10008] FAULT_INJECTION: forcing a failure. [ 1351.753272][T10008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.786277][T10008] CPU: 0 UID: 0 PID: 10008 Comm: syz.1.10313 Not tainted syzkaller #0 PREEMPT(full) [ 1351.786309][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1351.786323][T10008] Call Trace: [ 1351.786333][T10008] [ 1351.786343][T10008] dump_stack_lvl+0xe8/0x150 [ 1351.786383][T10008] should_fail_ex+0x412/0x560 [ 1351.786424][T10008] _copy_to_user+0x31/0xb0 [ 1351.786460][T10008] simple_read_from_buffer+0xe1/0x170 [ 1351.786499][T10008] proc_fail_nth_read+0x1bb/0x230 [ 1351.786536][T10008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1351.786573][T10008] ? rw_verify_area+0x2a6/0x4d0 [ 1351.786596][T10008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1351.786631][T10008] vfs_read+0x20c/0xa70 [ 1351.786653][T10008] ? fdget_pos+0x246/0x320 [ 1351.786678][T10008] ? __pfx___mutex_lock+0x10/0x10 [ 1351.786708][T10008] ? __pfx_vfs_read+0x10/0x10 [ 1351.786746][T10008] ? __fget_files+0x2a/0x420 [ 1351.786772][T10008] ? __fget_files+0x3a0/0x420 [ 1351.786792][T10008] ? __fget_files+0x2a/0x420 [ 1351.786824][T10008] ksys_read+0x150/0x270 [ 1351.786853][T10008] ? __pfx_ksys_read+0x10/0x10 [ 1351.786891][T10008] do_syscall_64+0x14d/0xf80 [ 1351.786916][T10008] ? trace_irq_disable+0x3b/0x150 [ 1351.786941][T10008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.786966][T10008] ? clear_bhb_loop+0x40/0x90 [ 1351.786993][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.787016][T10008] RIP: 0033:0x7ff5e475d04e [ 1351.787039][T10008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1351.787059][T10008] RSP: 002b:00007ff5e56c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1351.787082][T10008] RAX: ffffffffffffffda RBX: 00007ff5e56c86c0 RCX: 00007ff5e475d04e [ 1351.787099][T10008] RDX: 000000000000000f RSI: 00007ff5e56c80a0 RDI: 0000000000000004 [ 1351.787113][T10008] RBP: 00007ff5e56c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.787127][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.787140][T10008] R13: 00007ff5e4a16038 R14: 00007ff5e4a15fa0 R15: 00007ffcf0530c38 [ 1351.787181][T10008] [ 1352.212762][T10013] bridge1: entered promiscuous mode [ 1352.218847][T10013] bridge1: entered allmulticast mode [ 1352.479040][T10034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10322'. [ 1352.497637][T10032] batadv_slave_0: entered promiscuous mode [ 1352.540318][T10030] batadv_slave_0: left promiscuous mode [ 1352.749403][T10051] netlink: 'syz.4.10319': attribute type 2 has an invalid length. [ 1352.801194][T10055] netlink: 'syz.3.10325': attribute type 1 has an invalid length. [ 1352.833241][T10051] netlink: 'syz.4.10319': attribute type 2 has an invalid length. [ 1353.934982][T10109] netlink: 'syz.0.10337': attribute type 1 has an invalid length. [ 1354.059956][T10117] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10338'. [ 1354.137694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.170367][T10116] bond3: (slave geneve3): making interface the new active one [ 1354.199735][T10116] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1354.219126][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20160 - 0 [ 1354.236175][T10115] lo speed is unknown, defaulting to 1000 [ 1354.242444][T30124] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20160 - 0 [ 1354.242514][T30124] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20160 - 0 [ 1354.242555][T30124] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20160 - 0 [ 1354.335043][T10115] lo speed is unknown, defaulting to 1000 [ 1354.505050][T10125] lo speed is unknown, defaulting to 1000 [ 1354.513678][T10125] lo speed is unknown, defaulting to 1000 [ 1355.134404][T22254] lec:lec_start_xmit: lec0:No lecd attached [ 1355.521087][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10354'. [ 1355.665392][T10165] veth3: entered promiscuous mode [ 1355.766355][T10172] batadv_slave_0: entered promiscuous mode [ 1355.822193][T10170] batadv_slave_0: left promiscuous mode [ 1355.864752][T10177] lo speed is unknown, defaulting to 1000 [ 1355.924690][T10177] lo speed is unknown, defaulting to 1000 [ 1356.019405][T10181] netlink: 'syz.4.10358': attribute type 8 has an invalid length. [ 1356.035156][T10161] batadv_slave_0: entered promiscuous mode [ 1356.112600][T10160] batadv_slave_0: left promiscuous mode [ 1356.336013][T10191] netlink: 'syz.2.10364': attribute type 1 has an invalid length. [ 1356.671107][T10203] lo speed is unknown, defaulting to 1000 [ 1356.705999][T10203] lo speed is unknown, defaulting to 1000 [ 1356.998106][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10371'. [ 1357.010063][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10371'. [ 1357.024585][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10371'. [ 1357.340836][T10228] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10375'. [ 1357.353277][T10228] tipc: Invalid UDP bearer configuration [ 1357.353352][T10228] tipc: Enabling of bearer rejected, failed to enable media [ 1357.568378][T10239] macsec1: entered allmulticast mode [ 1357.573800][T10239] macsec0: entered allmulticast mode [ 1357.585840][T10239] veth1_macvtap: entered allmulticast mode [ 1358.375098][T10258] netlink: 348 bytes leftover after parsing attributes in process `syz.2.10385'. [ 1358.454939][T10264] netlink: 'syz.4.10387': attribute type 1 has an invalid length. [ 1358.575765][T10269] bond3: (slave geneve3): making interface the new active one [ 1358.631523][T10269] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1358.656884][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1358.689892][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1358.716446][T10275] bond0: (slave bond_slave_1): Releasing backup interface [ 1358.762764][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1358.796790][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1359.176691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.585339][T10317] lo speed is unknown, defaulting to 1000 [ 1359.607005][T10317] lo speed is unknown, defaulting to 1000 [ 1360.857061][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 1360.865373][ C1] lec:lec_tx_timeout: lec0 [ 1361.660584][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.671327][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1361.679180][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.301540][T10306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1366.528488][T10378] netlink: 'syz.0.10407': attribute type 10 has an invalid length. [ 1366.573135][T10378] team0: Port device dummy0 added [ 1366.634320][T10378] netlink: 'syz.0.10407': attribute type 10 has an invalid length. [ 1366.751311][T10378] team0: Port device dummy0 removed [ 1366.843432][T10378] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1366.856519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1366.864688][ C1] lec:lec_tx_timeout: lec0 [ 1367.085821][T10403] netlink: 'syz.2.10417': attribute type 16 has an invalid length. [ 1367.096369][T10400] syzkaller1: entered promiscuous mode [ 1367.125203][T10406] netlink: 'syz.1.10418': attribute type 10 has an invalid length. [ 1367.125803][T10403] netlink: 'syz.2.10417': attribute type 17 has an invalid length. [ 1367.145135][T10400] syzkaller1: entered allmulticast mode [ 1367.219492][T10406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1367.273784][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.306116][T10403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1367.714028][T10424] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10424'. [ 1367.908942][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10416'. [ 1367.946379][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10416'. [ 1367.958533][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10416'. [ 1367.986164][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10416'. [ 1368.002946][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10416'. [ 1368.018720][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10416'. [ 1368.044139][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10416'. [ 1368.084836][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10416'. [ 1368.125779][T10400] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1368.258448][T10452] FAULT_INJECTION: forcing a failure. [ 1368.258448][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.329174][T10452] CPU: 1 UID: 0 PID: 10452 Comm: syz.0.10428 Not tainted syzkaller #0 PREEMPT(full) [ 1368.329207][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1368.329222][T10452] Call Trace: [ 1368.329241][T10452] [ 1368.329251][T10452] dump_stack_lvl+0xe8/0x150 [ 1368.329289][T10452] should_fail_ex+0x412/0x560 [ 1368.329331][T10452] _copy_from_user+0x2d/0xb0 [ 1368.329360][T10452] __sys_sendto+0x2b0/0x710 [ 1368.329396][T10452] ? __pfx___sys_sendto+0x10/0x10 [ 1368.329426][T10452] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1368.329469][T10452] ? __fget_files+0x3a0/0x420 [ 1368.329504][T10452] ? ksys_write+0x242/0x270 [ 1368.329533][T10452] ? __pfx_ksys_write+0x10/0x10 [ 1368.329565][T10452] __x64_sys_sendto+0xde/0x100 [ 1368.329602][T10452] do_syscall_64+0x14d/0xf80 [ 1368.329628][T10452] ? trace_irq_disable+0x3b/0x150 [ 1368.329648][T10452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.329672][T10452] ? clear_bhb_loop+0x40/0x90 [ 1368.329700][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.329723][T10452] RIP: 0033:0x7fd567b9c819 [ 1368.329743][T10452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.329763][T10452] RSP: 002b:00007fd568ab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1368.329787][T10452] RAX: ffffffffffffffda RBX: 00007fd567e15fa0 RCX: 00007fd567b9c819 [ 1368.329803][T10452] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 1368.329818][T10452] RBP: 00007fd568ab0090 R08: 0000200000000000 R09: 0000000000000014 [ 1368.329833][T10452] R10: 0000000024004090 R11: 0000000000000246 R12: 0000000000000001 [ 1368.329847][T10452] R13: 00007fd567e16038 R14: 00007fd567e15fa0 R15: 00007ffeef4f8338 [ 1368.329884][T10452] [ 1369.135089][T10472] netlink: 'syz.2.10432': attribute type 1 has an invalid length. [ 1369.265068][T10478] bond10: (slave geneve3): making interface the new active one [ 1369.309189][T10478] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 1369.328108][T10480] batadv_slave_0: entered promiscuous mode [ 1369.334509][T10621] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1369.366093][T10621] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1369.388275][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10434'. [ 1369.411975][T10621] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1369.441961][T10621] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1369.464884][T19922] block nbd71: Receive control failed (result -1) [ 1369.504890][T10479] batadv_slave_0: left promiscuous mode [ 1369.818887][T10507] netlink: 'syz.4.10437': attribute type 14 has an invalid length. [ 1369.914749][T10511] netlink: zone id is out of range [ 1369.920837][T10511] netlink: zone id is out of range [ 1369.926301][T10511] netlink: zone id is out of range [ 1369.932541][T10511] netlink: zone id is out of range [ 1369.938139][T10511] netlink: zone id is out of range [ 1369.943320][T10511] netlink: zone id is out of range [ 1369.957182][T10511] netlink: zone id is out of range [ 1369.962369][T10511] netlink: zone id is out of range [ 1370.008108][T10511] netlink: 'syz.4.10438': attribute type 2 has an invalid length. [ 1370.034012][T10511] : entered promiscuous mode [ 1370.049192][T10511] netlink: 'syz.4.10438': attribute type 2 has an invalid length. [ 1370.332894][T10522] FAULT_INJECTION: forcing a failure. [ 1370.332894][T10522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1370.350628][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.4.10440 Not tainted syzkaller #0 PREEMPT(full) [ 1370.350660][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1370.350674][T10522] Call Trace: [ 1370.350683][T10522] [ 1370.350692][T10522] dump_stack_lvl+0xe8/0x150 [ 1370.350731][T10522] should_fail_ex+0x412/0x560 [ 1370.350771][T10522] _copy_to_user+0x31/0xb0 [ 1370.350802][T10522] simple_read_from_buffer+0xe1/0x170 [ 1370.350842][T10522] proc_fail_nth_read+0x1bb/0x230 [ 1370.350880][T10522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1370.350918][T10522] ? rw_verify_area+0x2a6/0x4d0 [ 1370.350942][T10522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1370.350977][T10522] vfs_read+0x20c/0xa70 [ 1370.351001][T10522] ? fdget_pos+0x246/0x320 [ 1370.351028][T10522] ? __pfx___mutex_lock+0x10/0x10 [ 1370.351057][T10522] ? __pfx_vfs_read+0x10/0x10 [ 1370.351083][T10522] ? __fget_files+0x2a/0x420 [ 1370.351109][T10522] ? __fget_files+0x3a0/0x420 [ 1370.351128][T10522] ? __fget_files+0x2a/0x420 [ 1370.351156][T10522] ksys_read+0x150/0x270 [ 1370.351185][T10522] ? __pfx_ksys_read+0x10/0x10 [ 1370.351224][T10522] do_syscall_64+0x14d/0xf80 [ 1370.351250][T10522] ? trace_irq_disable+0x3b/0x150 [ 1370.351269][T10522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.351293][T10522] ? clear_bhb_loop+0x40/0x90 [ 1370.351321][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.351343][T10522] RIP: 0033:0x7f042c35d04e [ 1370.351363][T10522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1370.351381][T10522] RSP: 002b:00007f042d224fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1370.351403][T10522] RAX: ffffffffffffffda RBX: 00007f042d2256c0 RCX: 00007f042c35d04e [ 1370.351416][T10522] RDX: 000000000000000f RSI: 00007f042d2250a0 RDI: 0000000000000004 [ 1370.351428][T10522] RBP: 00007f042d225090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.351439][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.351452][T10522] R13: 00007f042c616038 R14: 00007f042c615fa0 R15: 00007ffe7f5ea948 [ 1370.351485][T10522] [ 1371.056355][T10547] batadv_slave_0: entered promiscuous mode [ 1371.110317][T10548] syzkaller0: entered promiscuous mode [ 1371.115980][T10548] syzkaller0: entered allmulticast mode [ 1371.150632][T10546] batadv_slave_0: left promiscuous mode [ 1371.720471][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809daed800: rx timeout, send abort [ 1371.890154][T10588] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1371.908290][T10588] bridge2: entered allmulticast mode [ 1372.152833][T10603] 8021q: VLANs not supported on ip_vti0 [ 1372.220608][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028641800: rx timeout, send abort [ 1372.229367][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809daed800: abort rx timeout. Force session deactivation [ 1372.438794][T10612] dummy0: entered promiscuous mode [ 1372.444364][T10612] dummy0: left promiscuous mode [ 1372.602182][T10620] vlan2: entered allmulticast mode [ 1372.607993][T10620] macvtap0: entered allmulticast mode [ 1372.613646][T10620] veth0_macvtap: entered allmulticast mode [ 1372.728953][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028641800: abort rx timeout. Force session deactivation [ 1372.868641][T10635] syzkaller1: entered promiscuous mode [ 1372.879950][T10635] syzkaller1: entered allmulticast mode [ 1373.070092][T10639] netlink: 'syz.3.10468': attribute type 2 has an invalid length. [ 1373.083833][T10639] netlink: 'syz.3.10468': attribute type 2 has an invalid length. [ 1373.153519][T10641] __nla_validate_parse: 4 callbacks suppressed [ 1373.153535][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10469'. [ 1373.458607][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10472'. [ 1373.838799][T10658] dummy0: entered promiscuous mode [ 1373.869365][T10658] dummy0: left promiscuous mode [ 1374.883327][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10478'. [ 1374.912070][T10684] net_ratelimit: 360 callbacks suppressed [ 1374.912093][T10684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1375.209214][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10483'. [ 1375.938034][T10728] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.133673][T10728] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.192982][T10734] ip6erspan0: entered allmulticast mode [ 1376.279936][T10728] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.488056][T10728] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.712186][T30124] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.780433][T30124] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.789261][T30124] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.832677][T10621] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.975772][T10621] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.992489][T10621] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.011884][T10621] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.062804][T10617] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.356009][T10759] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10499'. [ 1378.566748][T10789] lo speed is unknown, defaulting to 1000 [ 1378.611795][T10789] lo speed is unknown, defaulting to 1000 [ 1379.128377][T10811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1379.180102][T10814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1379.382960][T10805] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1379.783365][T10805] bond4 (unregistering): Released all slaves [ 1379.814826][T10814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1381.309545][ T7972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.986395][T10807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1391.310875][T10850] netlink: 240 bytes leftover after parsing attributes in process `syz.2.10513'. [ 1391.597581][T10868] netlink: 51 bytes leftover after parsing attributes in process `syz.3.10518'. [ 1391.681534][T10868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1392.036728][T10884] tipc: Started in network mode [ 1392.041867][T10884] tipc: Node identity 361aaf7a59a1, cluster identity 4711 [ 1392.060254][T10884] tipc: Enabled bearer , priority 0 [ 1392.069455][T10884] syzkaller0: entered promiscuous mode [ 1392.075403][T10884] syzkaller0: entered allmulticast mode [ 1392.132191][T10884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10526'. [ 1392.155619][T10884] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10526'. [ 1392.182093][T10888] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 1392.217475][T10889] tipc: Resetting bearer [ 1392.241815][T10883] tipc: Resetting bearer [ 1392.278214][T10883] tipc: Disabling bearer [ 1392.401222][T10896] netlink: 240 bytes leftover after parsing attributes in process `syz.2.10529'. [ 1392.578929][T10902] xt_socket: unknown flags 0x4 [ 1392.937320][T10921] netlink: 'syz.4.10535': attribute type 1 has an invalid length. [ 1393.032132][T10921] netlink: 'syz.4.10535': attribute type 2 has an invalid length. [ 1393.122189][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10533'. [ 1393.271971][T19922] block nbd72: Receive control failed (result -1) [ 1393.381005][T10899] netlink: 'syz.3.10530': attribute type 2 has an invalid length. [ 1393.505358][T10899] bridge0: port 3(vlan2) entered blocking state [ 1393.523394][T10899] bridge0: port 3(vlan2) entered disabled state [ 1393.543071][T10899] vlan2: entered allmulticast mode [ 1393.559183][T10899] bridge0: entered allmulticast mode [ 1393.582010][T10899] vlan2: left allmulticast mode [ 1393.611053][T10899] bridge0: left allmulticast mode [ 1393.675409][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10539'. [ 1393.710794][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1393.749620][T10938] dummy0: entered promiscuous mode [ 1393.760852][T10938] dummy0: left promiscuous mode [ 1393.873832][T19922] block nbd73: Receive control failed (result -1) [ 1394.138849][T10952] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10542'. [ 1394.376076][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10544'. [ 1394.514215][T10969] lo speed is unknown, defaulting to 1000 [ 1394.523942][T10969] lo speed is unknown, defaulting to 1000 [ 1395.131293][T10988] netlink: 'syz.0.10550': attribute type 4 has an invalid length. [ 1395.405699][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047df2800: rx timeout, send abort [ 1395.905846][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047df2400: rx timeout, send abort [ 1395.914559][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047df2800: abort rx timeout. Force session deactivation [ 1396.414310][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047df2400: abort rx timeout. Force session deactivation [ 1397.320810][T10960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1397.670193][T11037] __nla_validate_parse: 4 callbacks suppressed [ 1397.670215][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10559'. [ 1402.315944][T11060] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10562'. [ 1402.328512][T11060] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10562'. [ 1402.665649][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10571'. [ 1402.857998][T11092] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10572'. [ 1403.201825][T11108] netlink: 'syz.0.10578': attribute type 1 has an invalid length. [ 1403.221996][T11108] netlink: 476 bytes leftover after parsing attributes in process `syz.0.10578'. [ 1403.241208][T11108] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.10578'. [ 1403.252162][T11108] syzkaller1: entered promiscuous mode [ 1403.258579][T11108] syzkaller1: entered allmulticast mode [ 1403.300987][T11113] : entered promiscuous mode [ 1403.635209][T11142] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10588'. [ 1404.659805][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10593'. [ 1406.523503][T11129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1406.705876][T11187] netlink: 'syz.1.10605': attribute type 1 has an invalid length. [ 1406.738168][T11184] batadv_slave_0: entered promiscuous mode [ 1406.774166][T11187] bond6: (slave geneve3): making interface the new active one [ 1406.785860][T11187] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1406.800230][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1406.816788][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1406.825145][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1406.844882][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1406.891289][T11190] syzkaller0: entered promiscuous mode [ 1406.898243][T11190] syzkaller0: entered allmulticast mode [ 1406.989388][T11181] batadv_slave_0: left promiscuous mode [ 1407.114616][T11199] netlink: 'syz.1.10608': attribute type 4 has an invalid length. [ 1407.179256][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10611'. [ 1407.354110][T11216] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10615'. [ 1410.283609][T11210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1414.018002][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10626'. [ 1414.078691][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10627'. [ 1414.126269][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10630'. [ 1414.304881][T11301] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1414.377307][T11309] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10634'. [ 1414.657296][T11328] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10634'. [ 1417.420508][T11314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1418.051429][T11359] ÿ: renamed from veth1_to_batadv (while UP) [ 1418.127422][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10648'. [ 1418.257195][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10649'. [ 1418.579453][T11382] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10653'. [ 1418.691242][T11382] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10653'. [ 1419.004576][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10660'. [ 1419.022096][T11415] netlink: 'syz.2.10660': attribute type 1 has an invalid length. [ 1419.032582][T11414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10660'. [ 1419.191376][T22254] lec:lec_start_xmit: lec0:No lecd attached [ 1419.296186][T11425] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1419.794854][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10664'. [ 1420.048148][T11430] netlink: 'syz.4.10665': attribute type 2 has an invalid length. [ 1420.059505][T11430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10665'. [ 1421.578365][T11387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1421.799682][T11436] netlink: 'syz.1.10669': attribute type 1 has an invalid length. [ 1421.823877][T11438] netlink: 240 bytes leftover after parsing attributes in process `syz.2.10668'. [ 1421.915023][T11443] sctp: [Deprecated]: syz.4.10670 (pid 11443) Use of int in max_burst socket option. [ 1421.915023][T11443] Use struct sctp_assoc_value instead [ 1421.982292][T11451] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10668'. [ 1422.818945][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10677'. [ 1422.984614][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10671'. [ 1423.102248][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.139542][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.158903][T11500] netlink: 'syz.4.10680': attribute type 2 has an invalid length. [ 1423.170544][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10680'. [ 1423.464382][T11511] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.469926][T11510] netlink: 'syz.1.10683': attribute type 1 has an invalid length. [ 1423.487078][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10684'. [ 1423.494372][T11511] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.537249][T11511] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1423.624766][T11512] vlan0: entered promiscuous mode [ 1423.630622][T11512] geneve1: entered promiscuous mode [ 1423.647446][T11512] vlan0: entered allmulticast mode [ 1423.655901][T11512] geneve1: entered allmulticast mode [ 1423.671822][T11511] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.684332][T11511] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.717215][T11511] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1423.775069][T11523] geneve3: entered promiscuous mode [ 1423.788504][T10621] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1423.799705][T10621] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1423.836929][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10690'. [ 1423.853252][T10621] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1423.868508][T10621] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1423.892007][T11511] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.922210][T11511] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.955943][T11511] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1424.058476][T11518] lo speed is unknown, defaulting to 1000 [ 1424.075451][T11518] lo speed is unknown, defaulting to 1000 [ 1424.112332][T11511] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.134898][T11511] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.158983][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10694'. [ 1424.168400][T11511] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1424.179870][T11540] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10694'. [ 1424.402505][T16297] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.411944][T16297] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1424.421662][T16297] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1424.444812][T16297] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.453680][T16297] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1424.464010][T16297] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1424.486940][T16297] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.497226][T16297] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1424.505813][T16297] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1424.526948][T11553] netlink: 'syz.0.10695': attribute type 2 has an invalid length. [ 1424.530140][T16297] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1424.543882][T16297] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1424.555465][T16297] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1424.599821][T11553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10695'. [ 1424.731546][T11562] netlink: 'syz.2.10697': attribute type 2 has an invalid length. [ 1424.770299][T11562] netlink: 'syz.2.10697': attribute type 2 has an invalid length. [ 1424.813178][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10699'. [ 1424.856647][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1424.864769][ C1] lec:lec_tx_timeout: lec0 [ 1424.869651][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1424.884561][T11565] netlink: 'syz.3.10700': attribute type 1 has an invalid length. [ 1424.902576][T11560] xfrm0: left promiscuous mode [ 1424.911146][T11560] xfrm0: left allmulticast mode [ 1424.973585][T11560] veth3: left promiscuous mode [ 1424.998986][T11560] bridge2: left allmulticast mode [ 1425.055547][T16297] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1425.064731][T16297] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1425.074233][T16297] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1425.090037][T16297] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1425.105425][T16297] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1425.122560][T16297] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1425.168300][T11571] FAULT_INJECTION: forcing a failure. [ 1425.168300][T11571] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.182061][T11571] CPU: 0 UID: 0 PID: 11571 Comm: syz.0.10701 Not tainted syzkaller #0 PREEMPT(full) [ 1425.182099][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1425.182114][T11571] Call Trace: [ 1425.182124][T11571] [ 1425.182134][T11571] dump_stack_lvl+0xe8/0x150 [ 1425.182173][T11571] should_fail_ex+0x412/0x560 [ 1425.182215][T11571] should_failslab+0xa8/0x100 [ 1425.182248][T11571] __kmalloc_cache_noprof+0x88/0x660 [ 1425.182276][T11571] ? nft_netdev_hook_alloc+0x220/0x570 [ 1425.182382][T11571] nft_netdev_hook_alloc+0x220/0x570 [ 1425.182419][T11571] nf_tables_parse_netdev_hooks+0x138/0x950 [ 1425.182455][T11571] nft_flowtable_parse_hook+0x46a/0x920 [ 1425.182489][T11571] ? queue_delayed_work_on+0x12f/0x1e0 [ 1425.182519][T11571] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 1425.182556][T11571] ? nf_flow_table_init+0x280/0x2a0 [ 1425.182619][T11571] nf_tables_newflowtable+0x14e4/0x23d0 [ 1425.182658][T11571] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 1425.182697][T11571] ? __nla_parse+0x40/0x60 [ 1425.182722][T11571] nfnetlink_rcv+0x1240/0x27b0 [ 1425.182804][T11571] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1425.182852][T11571] ? ref_tracker_free+0x693/0x840 [ 1425.182908][T11571] ? __netlink_deliver_tap+0x807/0x850 [ 1425.182953][T11571] ? netlink_deliver_tap+0x2e/0x1b0 [ 1425.182984][T11571] ? netlink_deliver_tap+0x2e/0x1b0 [ 1425.183021][T11571] netlink_unicast+0x75c/0x8e0 [ 1425.183061][T11571] netlink_sendmsg+0x813/0xb40 [ 1425.183111][T11571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1425.183148][T11571] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1425.183172][T11571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1425.183203][T11571] ____sys_sendmsg+0x972/0x9f0 [ 1425.183249][T11571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1425.183294][T11571] ? import_iovec+0x73/0xa0 [ 1425.183325][T11571] ___sys_sendmsg+0x2a5/0x360 [ 1425.183365][T11571] ? __pfx____sys_sendmsg+0x10/0x10 [ 1425.183438][T11571] ? __fget_files+0x2a/0x420 [ 1425.183459][T11571] ? __fget_files+0x3a0/0x420 [ 1425.183490][T11571] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1425.183527][T11571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1425.183573][T11571] ? __pfx_ksys_write+0x10/0x10 [ 1425.183613][T11571] do_syscall_64+0x14d/0xf80 [ 1425.183640][T11571] ? trace_irq_disable+0x3b/0x150 [ 1425.183660][T11571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.183683][T11571] ? clear_bhb_loop+0x40/0x90 [ 1425.183710][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.183733][T11571] RIP: 0033:0x7fd567b9c819 [ 1425.183753][T11571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.183772][T11571] RSP: 002b:00007fd568ab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1425.183796][T11571] RAX: ffffffffffffffda RBX: 00007fd567e15fa0 RCX: 00007fd567b9c819 [ 1425.183812][T11571] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1425.183826][T11571] RBP: 00007fd568ab0090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.183840][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1425.183852][T11571] R13: 00007fd567e16038 R14: 00007fd567e15fa0 R15: 00007ffeef4f8338 [ 1425.183889][T11571] [ 1425.592526][T11567] bond8: (slave geneve4): making interface the new active one [ 1425.612355][T11567] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1425.691558][T16297] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1425.766744][T16297] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1425.825833][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10702'. [ 1425.846602][T16297] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1425.890308][T16297] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1425.916379][T16297] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1425.943331][T16297] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1426.001635][T16297] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1426.066335][T16297] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1426.109436][T16297] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1426.152139][T16297] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1426.311344][T11596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10710'. [ 1426.441589][T11608] rdma_rxe: rxe_newlink: failed to add bond0 [ 1426.522171][T11605] netlink: 'syz.4.10711': attribute type 2 has an invalid length. [ 1426.547748][T11606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10712'. [ 1426.583534][T11613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10711'. [ 1426.617394][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10714'. [ 1426.628229][T11614] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1426.991516][T11619] lo speed is unknown, defaulting to 1000 [ 1426.997483][T11622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10715'. [ 1427.035090][T11619] lo speed is unknown, defaulting to 1000 [ 1429.896594][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1429.904667][ C1] lec:lec_tx_timeout: lec0 [ 1433.051003][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10718'. [ 1433.516919][T11680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10724'. [ 1433.890697][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10728'. [ 1433.907990][T11695] syzkaller0: entered promiscuous mode [ 1433.923857][T11695] syzkaller0: entered allmulticast mode [ 1434.075367][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10732'. [ 1434.201507][T19922] block nbd74: Receive control failed (result -1) [ 1434.687243][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10737'. [ 1435.957093][T11778] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10751'. [ 1436.148103][T11791] netlink: 'syz.4.10755': attribute type 1 has an invalid length. [ 1437.285841][T11820] netlink: 'syz.3.10766': attribute type 21 has an invalid length. [ 1437.327297][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10766'. [ 1437.357159][T11820] netlink: 'syz.3.10766': attribute type 1 has an invalid length. [ 1437.361734][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10766'. [ 1437.395604][T11820] netlink: 180 bytes leftover after parsing attributes in process `syz.3.10766'. [ 1437.411632][T11820] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1437.433797][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10767'. [ 1437.766088][T11839] netlink: 'syz.0.10770': attribute type 1 has an invalid length. [ 1437.799199][T11829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1437.867549][T11837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1438.027033][T11842] bond4: (slave geneve4): making interface the new active one [ 1438.035980][T11842] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 1438.064988][T10617] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1438.109624][T10617] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1438.159131][T10617] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1438.197245][T10617] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1438.403282][T11857] netlink: 'syz.3.10778': attribute type 3 has an invalid length. [ 1438.415914][T11857] __nla_validate_parse: 1 callbacks suppressed [ 1438.415935][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10778'. [ 1439.820001][T11912] rdma_rxe: rxe_newlink: failed to add bond0 [ 1439.894320][T11916] lo speed is unknown, defaulting to 1000 [ 1439.932118][T11916] lo speed is unknown, defaulting to 1000 [ 1440.043971][T11923] netlink: 'syz.1.10792': attribute type 2 has an invalid length. [ 1440.173770][T11923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10792'. [ 1440.684708][T11941] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10799'. [ 1440.742992][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10799'. [ 1440.783551][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10799'. [ 1440.868355][T11931] netlink: 'syz.2.10795': attribute type 2 has an invalid length. [ 1440.909975][T11931] tipc: Cannot configure node identity twice [ 1440.944018][T11931] bridge0: port 4(vlan3) entered blocking state [ 1440.959521][T11931] bridge0: port 4(vlan3) entered disabled state [ 1440.990056][T11931] vlan3: entered allmulticast mode [ 1440.995304][T11931] bridge0: entered allmulticast mode [ 1441.028454][T11931] vlan3: left allmulticast mode [ 1441.033439][T11931] bridge0: left allmulticast mode [ 1441.178358][T11959] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10803'. [ 1441.329285][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10803'. [ 1441.340958][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10803'. [ 1441.468680][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10806'. [ 1441.564778][T19922] block nbd75: Receive control failed (result -1) [ 1441.699501][T11974] bond9 (unregistering): Released all slaves [ 1441.902555][T11975] bond9 (unregistering): Released all slaves [ 1442.311869][T11993] netlink: 'syz.0.10812': attribute type 2 has an invalid length. [ 1442.331235][T11998] netlink: 'syz.3.10814': attribute type 1 has an invalid length. [ 1442.454785][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10816'. [ 1442.665032][T11998] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1442.775506][T12006] veth5: entered allmulticast mode [ 1442.840093][T12006] bond11: (slave veth5): Enslaving as an active interface with an up link [ 1442.885014][T12012] bond11 (unregistering): (slave veth5): Releasing backup interface [ 1442.913497][T12012] bond11 (unregistering): Released all slaves [ 1443.022697][T12016] xfrm0: entered promiscuous mode [ 1443.029698][T12016] xfrm0: entered allmulticast mode [ 1443.490532][T12045] netlink: 'syz.0.10822': attribute type 9 has an invalid length. [ 1443.526640][T12045] __nla_validate_parse: 3 callbacks suppressed [ 1443.526661][T12045] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.10822'. [ 1443.641316][T12052] rdma_rxe: rxe_newlink: failed to add bond0 [ 1443.873949][T12045] lo speed is unknown, defaulting to 1000 [ 1443.955986][T12045] lo speed is unknown, defaulting to 1000 [ 1444.106231][T12065] xfrm1: entered allmulticast mode [ 1444.252661][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10830'. [ 1444.393709][T19922] block nbd76: Receive control failed (result -1) [ 1444.740486][T12089] netlink: 'syz.4.10829': attribute type 2 has an invalid length. [ 1444.775693][T12089] netlink: 'syz.4.10829': attribute type 2 has an invalid length. [ 1445.592931][ T7972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.069207][T12113] netlink: 'syz.0.10832': attribute type 1 has an invalid length. [ 1450.170971][T12128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1450.240553][T12129] netlink: 'syz.1.10833': attribute type 2 has an invalid length. [ 1450.293431][T12138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10833'. [ 1450.659248][T12151] syzkaller1: entered promiscuous mode [ 1450.664797][T12151] syzkaller1: entered allmulticast mode [ 1450.731374][T12158] lo speed is unknown, defaulting to 1000 [ 1450.744514][T12158] lo speed is unknown, defaulting to 1000 [ 1451.028717][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10849'. [ 1451.274682][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10851'. [ 1451.450916][T19922] block nbd77: Receive control failed (result -1) [ 1451.669337][T12203] netlink: 'syz.4.10853': attribute type 2 has an invalid length. [ 1451.739093][T12203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10853'. [ 1452.212247][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10862'. [ 1452.237869][T12220] batadv_slave_0: entered promiscuous mode [ 1452.308125][T12218] batadv_slave_0: left promiscuous mode [ 1452.444230][T12230] netlink: 272 bytes leftover after parsing attributes in process `syz.0.10869'. [ 1452.467099][T12235] netlink: 'syz.1.10867': attribute type 1 has an invalid length. [ 1452.475483][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10867'. [ 1452.535468][T12235] netlink: 'syz.1.10867': attribute type 1 has an invalid length. [ 1452.557254][T12240] netlink: 'syz.2.10866': attribute type 32 has an invalid length. [ 1452.615736][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10866'. [ 1452.677373][T12240] bond11: Setting coupled_control to off (0) [ 1452.690470][T12246] netlink: 'syz.1.10870': attribute type 7 has an invalid length. [ 1452.706263][ T29] audit: type=1800 audit(1776260801.862:13): pid=12240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10866" name="e" dev="tmpfs" ino=2102 res=0 errno=0 [ 1452.730446][T12246] netlink: 'syz.1.10870': attribute type 7 has an invalid length. [ 1452.736748][T16297] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.827702][T16297] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1452.853820][ T29] audit: type=1800 audit(1776260801.922:14): pid=12245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10866" name="e" dev="tmpfs" ino=2102 res=0 errno=0 [ 1453.218660][T16297] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1453.229845][T16297] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1453.305534][T12273] 8021q: VLANs not supported on ip_vti0 [ 1453.315647][T12273] netlink: 'syz.2.10875': attribute type 39 has an invalid length. [ 1453.419505][T12277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10878'. [ 1453.541012][T12282] batadv_slave_0: entered promiscuous mode [ 1453.568343][T12283] netlink: 'syz.0.10877': attribute type 2 has an invalid length. [ 1453.617502][T12281] batadv_slave_0: left promiscuous mode [ 1453.863058][T12295] nbd: must specify a device to reconfigure [ 1453.975471][T12299] FAULT_INJECTION: forcing a failure. [ 1453.975471][T12299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.016223][T12299] CPU: 1 UID: 0 PID: 12299 Comm: syz.2.10886 Not tainted syzkaller #0 PREEMPT(full) [ 1454.016252][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1454.016265][T12299] Call Trace: [ 1454.016273][T12299] [ 1454.016283][T12299] dump_stack_lvl+0xe8/0x150 [ 1454.016320][T12299] should_fail_ex+0x412/0x560 [ 1454.016359][T12299] _copy_from_user+0x2d/0xb0 [ 1454.016385][T12299] ___sys_sendmsg+0x1c6/0x360 [ 1454.016438][T12299] ? __pfx____sys_sendmsg+0x10/0x10 [ 1454.016507][T12299] ? __fget_files+0x2a/0x420 [ 1454.016530][T12299] ? __fget_files+0x3a0/0x420 [ 1454.016560][T12299] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1454.016596][T12299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1454.016639][T12299] ? __pfx_ksys_write+0x10/0x10 [ 1454.016676][T12299] do_syscall_64+0x14d/0xf80 [ 1454.016703][T12299] ? trace_irq_disable+0x3b/0x150 [ 1454.016723][T12299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.016745][T12299] ? clear_bhb_loop+0x40/0x90 [ 1454.016772][T12299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.016794][T12299] RIP: 0033:0x7f62a1f9c819 [ 1454.016813][T12299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.016832][T12299] RSP: 002b:00007f62a2f14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1454.016856][T12299] RAX: ffffffffffffffda RBX: 00007f62a2215fa0 RCX: 00007f62a1f9c819 [ 1454.016872][T12299] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1454.016885][T12299] RBP: 00007f62a2f14090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.016899][T12299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.016912][T12299] R13: 00007f62a2216038 R14: 00007f62a2215fa0 R15: 00007fffa87bbfb8 [ 1454.016948][T12299] [ 1455.085854][T12328] syzkaller0: entered promiscuous mode [ 1455.109786][T12328] syzkaller0: entered allmulticast mode [ 1455.412853][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10903'. [ 1455.666260][T12358] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:24 [ 1455.740728][T12352] lo speed is unknown, defaulting to 1000 [ 1455.794197][T12352] lo speed is unknown, defaulting to 1000 [ 1456.210915][T12371] bond1: (slave dummy0): Releasing active interface [ 1456.271295][T12371] batman_adv: batadv0: Adding interface: dummy0 [ 1456.287363][T12371] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.302424][T12382] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 1456.338196][T12371] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1456.397388][T12357] validate_nla: 4 callbacks suppressed [ 1456.397410][T12357] netlink: 'syz.1.10907': attribute type 2 has an invalid length. [ 1456.504344][T12386] team_slave_0: entered promiscuous mode [ 1456.510727][T12386] team_slave_1: entered promiscuous mode [ 1456.516570][T12386] bridge0: entered promiscuous mode [ 1456.603937][T12386] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1456.970796][T12407] netlink: 'syz.0.10919': attribute type 1 has an invalid length. [ 1457.164750][T12416] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10921'. [ 1457.479803][T12434] wg1: entered allmulticast mode [ 1457.803074][T12444] tipc: New replicast peer: 255.255.255.255 [ 1457.811731][T12444] tipc: Enabled bearer , priority 10 [ 1457.820086][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10926'. [ 1457.988295][T12452] ip6t_srh: unknown srh invflags 4000 [ 1458.719462][T12477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10939'. [ 1458.743308][T12477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1458.750744][T12477] IPv6: NLM_F_CREATE should be set when creating new route [ 1458.927894][T12481] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1458.939466][ T5835] tipc: Node number set to 1874571130 [ 1458.957541][T12481] netlink: 'syz.2.10940': attribute type 1 has an invalid length. [ 1459.024843][T12487] batadv_slave_0: entered promiscuous mode [ 1459.083956][T12486] batadv_slave_0: left promiscuous mode [ 1459.229748][T12489] dvmrp6: entered allmulticast mode [ 1459.393464][T12493] netlink: 'syz.4.10945': attribute type 2 has an invalid length. [ 1459.647634][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10945'. [ 1459.750179][T12510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1459.872287][T12512] netlink: 'syz.0.10951': attribute type 11 has an invalid length. [ 1459.991482][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10951'. [ 1460.037196][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10951'. [ 1460.119757][T16294] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1460.150132][T16294] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1460.163105][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10954'. [ 1460.176591][T16294] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1460.215333][T16294] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1460.341746][T12526] netlink: 'syz.3.10957': attribute type 9 has an invalid length. [ 1460.454918][T12531] FAULT_INJECTION: forcing a failure. [ 1460.454918][T12531] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.544307][T12537] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10961'. [ 1460.607091][T12531] CPU: 1 UID: 0 PID: 12531 Comm: syz.1.10959 Not tainted syzkaller #0 PREEMPT(full) [ 1460.607124][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1460.607139][T12531] Call Trace: [ 1460.607149][T12531] [ 1460.607158][T12531] dump_stack_lvl+0xe8/0x150 [ 1460.607196][T12531] should_fail_ex+0x412/0x560 [ 1460.607237][T12531] should_failslab+0xa8/0x100 [ 1460.607271][T12531] __kmalloc_cache_noprof+0x88/0x660 [ 1460.607299][T12531] ? prog_array_map_alloc+0x51/0x200 [ 1460.607330][T12531] prog_array_map_alloc+0x51/0x200 [ 1460.607354][T12531] map_create+0xafd/0x16a0 [ 1460.607380][T12531] ? security_bpf+0x7e/0x2d0 [ 1460.607416][T12531] __sys_bpf+0x6e1/0x950 [ 1460.607442][T12531] ? __pfx___sys_bpf+0x10/0x10 [ 1460.607482][T12531] ? ksys_write+0x242/0x270 [ 1460.607511][T12531] ? __pfx_ksys_write+0x10/0x10 [ 1460.607546][T12531] __x64_sys_bpf+0x7c/0x90 [ 1460.607579][T12531] do_syscall_64+0x14d/0xf80 [ 1460.607607][T12531] ? trace_irq_disable+0x3b/0x150 [ 1460.607626][T12531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.607650][T12531] ? clear_bhb_loop+0x40/0x90 [ 1460.607678][T12531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.607701][T12531] RIP: 0033:0x7ff5e479c819 [ 1460.607723][T12531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.607742][T12531] RSP: 002b:00007ff5e56c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1460.607767][T12531] RAX: ffffffffffffffda RBX: 00007ff5e4a15fa0 RCX: 00007ff5e479c819 [ 1460.607784][T12531] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 0000000000000000 [ 1460.607798][T12531] RBP: 00007ff5e56c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.607812][T12531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.607824][T12531] R13: 00007ff5e4a16038 R14: 00007ff5e4a15fa0 R15: 00007ffcf0530c38 [ 1460.607860][T12531] [ 1460.974733][T12540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10963'. [ 1461.018944][T12540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10963'. [ 1461.243034][T12553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1461.257906][T12553] netlink: 5264 bytes leftover after parsing attributes in process `syz.1.10963'. [ 1461.289420][T12553] openvswitch: netlink: Flow key attr not present in new flow. [ 1461.308896][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10967'. [ 1461.560145][T12563] netlink: 'syz.3.10966': attribute type 2 has an invalid length. [ 1461.783746][T12571] netlink: 'syz.2.10971': attribute type 1 has an invalid length. [ 1461.857572][T12572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10966'. [ 1461.893411][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10971'. [ 1462.331415][ T5920] IPVS: starting estimator thread 0... [ 1462.427562][T12590] IPVS: using max 27 ests per chain, 64800 per kthread [ 1462.530296][T12598] xt_TCPMSS: Only works on TCP SYN packets [ 1462.692182][T12588] tipc: Resetting bearer [ 1475.045354][T12685] netlink: 'syz.3.10980': attribute type 1 has an invalid length. [ 1475.063527][T12678] netlink: 'syz.4.10981': attribute type 21 has an invalid length. [ 1475.124620][T12678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10981'. [ 1475.151948][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10980'. [ 1475.233987][T12690] lo speed is unknown, defaulting to 1000 [ 1475.314788][T12690] lo speed is unknown, defaulting to 1000 [ 1475.353518][T12702] Cannot find del_set index 2 as target [ 1475.442165][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10984'. [ 1475.454115][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10984'. [ 1475.509122][T12705] bridge1: port 1(erspan0) entered blocking state [ 1475.515782][T12705] bridge1: port 1(erspan0) entered disabled state [ 1475.559880][T12705] erspan0: entered allmulticast mode [ 1475.593844][T12705] erspan0: entered promiscuous mode [ 1475.605816][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10988'. [ 1475.816111][T12725] netlink: 'syz.3.10987': attribute type 2 has an invalid length. [ 1475.859190][T12709] bond7 (unregistering): Released all slaves [ 1475.896849][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10987'. [ 1476.219727][T12735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1476.478777][T12750] netlink: 'syz.1.10999': attribute type 1 has an invalid length. [ 1476.540622][T12750] bond8: (slave geneve4): making interface the new active one [ 1476.550331][T12750] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1476.562001][T16297] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1476.572010][T16297] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1476.583517][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10999'. [ 1476.587989][T16297] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1476.607974][T16297] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1476.623836][T12750] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1476.663667][T12750] tipc: Resetting bearer [ 1476.820248][T12764] netlink: 'syz.2.11000': attribute type 3 has an invalid length. [ 1479.365764][T12739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1479.791975][T12812] rdma_rxe: rxe_newlink: failed to add bond0 [ 1479.799661][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11009'. [ 1479.885031][T12815] netlink: 'syz.1.11005': attribute type 2 has an invalid length. [ 1479.917954][T12815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11005'. [ 1480.007051][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1480.120040][T12818] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1480.151057][T12819] macvlan0: entered allmulticast mode [ 1480.168985][T12819] veth0_to_bond: entered allmulticast mode [ 1480.185437][T12819] bond5: (slave macvlan0): Enslaving as an active interface with an up link [ 1480.214546][T12821] macvlan1: entered allmulticast mode [ 1480.233638][T12821] bond5: (slave macvlan1): Error -98 calling set_mac_address [ 1480.549249][T12823] FAULT_INJECTION: forcing a failure. [ 1480.549249][T12823] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.572428][T12823] CPU: 1 UID: 0 PID: 12823 Comm: syz.2.11006 Not tainted syzkaller #0 PREEMPT(full) [ 1480.572461][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1480.572476][T12823] Call Trace: [ 1480.572486][T12823] [ 1480.572496][T12823] dump_stack_lvl+0xe8/0x150 [ 1480.572536][T12823] should_fail_ex+0x412/0x560 [ 1480.572579][T12823] should_failslab+0xa8/0x100 [ 1480.572610][T12823] ? skb_clone+0x212/0x3a0 [ 1480.572633][T12823] kmem_cache_alloc_noprof+0x87/0x650 [ 1480.572668][T12823] skb_clone+0x212/0x3a0 [ 1480.572698][T12823] __netlink_deliver_tap+0x404/0x850 [ 1480.572748][T12823] ? netlink_deliver_tap+0x2e/0x1b0 [ 1480.572783][T12823] netlink_deliver_tap+0x19c/0x1b0 [ 1480.572818][T12823] netlink_sendskb+0x68/0x140 [ 1480.572849][T12823] netlink_rcv_skb+0x2b6/0x4b0 [ 1480.572883][T12823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1480.572911][T12823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1480.572962][T12823] ? down_read+0x272/0x2e0 [ 1480.572991][T12823] ? genl_rcv+0xd/0x40 [ 1480.573017][T12823] genl_rcv+0x28/0x40 [ 1480.573040][T12823] netlink_unicast+0x75c/0x8e0 [ 1480.573090][T12823] netlink_sendmsg+0x813/0xb40 [ 1480.573135][T12823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1480.573173][T12823] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1480.573198][T12823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1480.573230][T12823] ____sys_sendmsg+0x972/0x9f0 [ 1480.573277][T12823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1480.573323][T12823] ? import_iovec+0x73/0xa0 [ 1480.573357][T12823] ___sys_sendmsg+0x2a5/0x360 [ 1480.573399][T12823] ? __pfx____sys_sendmsg+0x10/0x10 [ 1480.573477][T12823] ? __fget_files+0x2a/0x420 [ 1480.573498][T12823] ? __fget_files+0x3a0/0x420 [ 1480.573532][T12823] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1480.573571][T12823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1480.573619][T12823] ? __pfx_ksys_write+0x10/0x10 [ 1480.573659][T12823] do_syscall_64+0x14d/0xf80 [ 1480.573686][T12823] ? trace_irq_disable+0x3b/0x150 [ 1480.573706][T12823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.573730][T12823] ? clear_bhb_loop+0x40/0x90 [ 1480.573759][T12823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.573783][T12823] RIP: 0033:0x7f62a1f9c819 [ 1480.573805][T12823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.573826][T12823] RSP: 002b:00007f62a2f14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1480.573850][T12823] RAX: ffffffffffffffda RBX: 00007f62a2215fa0 RCX: 00007f62a1f9c819 [ 1480.573867][T12823] RDX: 0000000004004054 RSI: 0000200000000180 RDI: 0000000000000004 [ 1480.573882][T12823] RBP: 00007f62a2f14090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.573897][T12823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1480.573911][T12823] R13: 00007f62a2216038 R14: 00007f62a2215fa0 R15: 00007fffa87bbfb8 [ 1480.573948][T12823] [ 1482.648726][T22254] lec:lec_start_xmit: lec0:No lecd attached [ 1484.550879][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.562345][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.309015][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11015'. [ 1487.325044][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11015'. [ 1487.824298][T12892] netlink: 'syz.4.11022': attribute type 2 has an invalid length. [ 1487.896532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 1487.904649][ C1] lec:lec_tx_timeout: lec0 [ 1487.909883][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1487.922731][T12883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11022'. [ 1488.119707][T12911] netlink: 'syz.0.11026': attribute type 19 has an invalid length. [ 1488.150748][T12913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11027'. [ 1488.582679][T12935] xfrm1: entered allmulticast mode [ 1488.718130][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11036'. [ 1488.804739][T19922] block nbd78: Receive control failed (result -1) [ 1489.109705][T12967] netlink: 'syz.2.11041': attribute type 1 has an invalid length. [ 1489.180804][T12971] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11042'. [ 1489.225563][T12967] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1489.278251][T12969] bond13: (slave ip6gretap2): making interface the new active one [ 1489.308747][T12969] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1489.347199][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11043'. [ 1489.525434][T12986] netlink: 980 bytes leftover after parsing attributes in process `syz.3.11044'. [ 1489.644426][T12991] lo speed is unknown, defaulting to 1000 [ 1489.672489][T12991] lo speed is unknown, defaulting to 1000 [ 1492.033684][T13026] netlink: 'syz.1.11049': attribute type 4 has an invalid length. [ 1492.164725][T12971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1492.185362][T13028] team0: Unable to change to the same mode the team is in [ 1492.421365][T13038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11054'. [ 1492.602267][T13048] lo speed is unknown, defaulting to 1000 [ 1492.679684][T13048] lo speed is unknown, defaulting to 1000 [ 1492.790824][T13058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11058'. [ 1492.916488][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1492.924763][ C1] lec:lec_tx_timeout: lec0 [ 1492.979778][T12950] udevd[12950]: inotify_add_watch(7, /dev/nbd79, 10) failed: No such file or directory [ 1492.996374][T12950] udevd[12950]: inotify_add_watch(7, /dev/nbd79, 10) failed: No such file or directory [ 1498.854601][T13093] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.11063'. [ 1498.882495][T13093] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1498.892029][T13096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11060'. [ 1498.915488][ T42] IPVS: starting estimator thread 0... [ 1498.935257][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11059'. [ 1499.047463][T13098] IPVS: using max 26 ests per chain, 62400 per kthread [ 1499.145415][T19922] block nbd79: Receive control failed (result -1) [ 1500.237880][T13149] ªªªªª: renamed from virt_wifi0 [ 1500.382297][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11075'. [ 1500.684880][T13169] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11080'. [ 1500.773589][T13172] FAULT_INJECTION: forcing a failure. [ 1500.773589][T13172] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1500.796076][T13172] CPU: 1 UID: 0 PID: 13172 Comm: syz.0.11081 Not tainted syzkaller #0 PREEMPT(full) [ 1500.796107][T13172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1500.796121][T13172] Call Trace: [ 1500.796129][T13172] [ 1500.796140][T13172] dump_stack_lvl+0xe8/0x150 [ 1500.796177][T13172] should_fail_ex+0x412/0x560 [ 1500.796221][T13172] prepare_alloc_pages+0x22a/0x650 [ 1500.796263][T13172] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1500.796299][T13172] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1500.796331][T13172] ? __pfx_policy_nodemask+0x10/0x10 [ 1500.796369][T13172] ? trace_kmalloc+0x2a/0x110 [ 1500.796401][T13172] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1500.796431][T13172] alloc_pages_mpol+0x232/0x4a0 [ 1500.796466][T13172] alloc_pages_noprof+0xa8/0x1a0 [ 1500.796498][T13172] alloc_skb_with_frags+0x24a/0x890 [ 1500.796550][T13172] sock_alloc_send_pskb+0x878/0x990 [ 1500.796595][T13172] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1500.796637][T13172] tun_get_user+0x92d/0x3ed0 [ 1500.796690][T13172] ? aa_file_perm+0x50e/0x15e0 [ 1500.796714][T13172] ? __pfx_tun_get_user+0x10/0x10 [ 1500.796740][T13172] ? aa_file_perm+0x192/0x15e0 [ 1500.796771][T13172] ? __lock_acquire+0x6b5/0x2cf0 [ 1500.796813][T13172] ? ref_tracker_alloc+0x35c/0x4c0 [ 1500.796840][T13172] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1500.796869][T13172] ? tun_get+0x1c/0x2f0 [ 1500.796903][T13172] ? tun_get+0x1c/0x2f0 [ 1500.796930][T13172] ? tun_get+0x1c/0x2f0 [ 1500.796963][T13172] tun_chr_write_iter+0x113/0x200 [ 1500.796994][T13172] vfs_write+0x61d/0xb90 [ 1500.797030][T13172] ? __pfx_vfs_write+0x10/0x10 [ 1500.797066][T13172] ? __fget_files+0x2a/0x420 [ 1500.797098][T13172] ksys_write+0x150/0x270 [ 1500.797125][T13172] ? __pfx_ksys_write+0x10/0x10 [ 1500.797162][T13172] do_syscall_64+0x14d/0xf80 [ 1500.797188][T13172] ? trace_irq_disable+0x3b/0x150 [ 1500.797208][T13172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.797231][T13172] ? clear_bhb_loop+0x40/0x90 [ 1500.797258][T13172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.797280][T13172] RIP: 0033:0x7fd567b5d04e [ 1500.797301][T13172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1500.797320][T13172] RSP: 002b:00007fd568aaffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1500.797352][T13172] RAX: ffffffffffffffda RBX: 00007fd568ab06c0 RCX: 00007fd567b5d04e [ 1500.797368][T13172] RDX: 0000000000000fc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 1500.797382][T13172] RBP: 00007fd568ab0090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.797396][T13172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.797408][T13172] R13: 00007fd567e16038 R14: 00007fd567e15fa0 R15: 00007ffeef4f8338 [ 1500.797444][T13172] [ 1501.416018][T13193] syzkaller0: entered promiscuous mode [ 1501.423335][T13193] syzkaller0: entered allmulticast mode [ 1502.032192][T13201] netlink: 'syz.4.11091': attribute type 1 has an invalid length. [ 1502.089218][T13201] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1502.178219][T13212] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11094'. [ 1502.277791][T13216] netlink: 240 bytes leftover after parsing attributes in process `syz.0.11096'. [ 1502.329310][T13220] FAULT_INJECTION: forcing a failure. [ 1502.329310][T13220] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.342655][T13220] CPU: 1 UID: 0 PID: 13220 Comm: syz.3.11098 Not tainted syzkaller #0 PREEMPT(full) [ 1502.342687][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1502.342702][T13220] Call Trace: [ 1502.342712][T13220] [ 1502.342722][T13220] dump_stack_lvl+0xe8/0x150 [ 1502.342760][T13220] should_fail_ex+0x412/0x560 [ 1502.342801][T13220] should_failslab+0xa8/0x100 [ 1502.342832][T13220] ? skb_clone+0x212/0x3a0 [ 1502.342854][T13220] kmem_cache_alloc_noprof+0x87/0x650 [ 1502.342880][T13220] ? __netlink_lookup+0xc6/0x8b0 [ 1502.342921][T13220] skb_clone+0x212/0x3a0 [ 1502.342946][T13220] __netlink_deliver_tap+0x404/0x850 [ 1502.343007][T13220] ? netlink_deliver_tap+0x2e/0x1b0 [ 1502.343050][T13220] netlink_deliver_tap+0x19c/0x1b0 [ 1502.343084][T13220] netlink_unicast+0x730/0x8e0 [ 1502.343126][T13220] netlink_sendmsg+0x813/0xb40 [ 1502.343169][T13220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1502.343206][T13220] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1502.343231][T13220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1502.343261][T13220] ____sys_sendmsg+0x972/0x9f0 [ 1502.343306][T13220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1502.343351][T13220] ? import_iovec+0x73/0xa0 [ 1502.343382][T13220] ___sys_sendmsg+0x2a5/0x360 [ 1502.343424][T13220] ? __pfx____sys_sendmsg+0x10/0x10 [ 1502.343503][T13220] ? __fget_files+0x2a/0x420 [ 1502.343524][T13220] ? __fget_files+0x3a0/0x420 [ 1502.343556][T13220] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1502.343594][T13220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1502.343640][T13220] ? __pfx_ksys_write+0x10/0x10 [ 1502.343680][T13220] do_syscall_64+0x14d/0xf80 [ 1502.343707][T13220] ? trace_irq_disable+0x3b/0x150 [ 1502.343727][T13220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.343750][T13220] ? clear_bhb_loop+0x40/0x90 [ 1502.343777][T13220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.343800][T13220] RIP: 0033:0x7f562ed9c819 [ 1502.343821][T13220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.343840][T13220] RSP: 002b:00007f562fc4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1502.343863][T13220] RAX: ffffffffffffffda RBX: 00007f562f015fa0 RCX: 00007f562ed9c819 [ 1502.343880][T13220] RDX: 0000000004044890 RSI: 0000200000000080 RDI: 0000000000000003 [ 1502.343894][T13220] RBP: 00007f562fc4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.343908][T13220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.343921][T13220] R13: 00007f562f016038 R14: 00007f562f015fa0 R15: 00007ffeae2b6428 [ 1502.343958][T13220] [ 1502.384752][T13216] xfrm0: entered promiscuous mode [ 1502.812823][T13232] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 1502.872873][T13235] xt_connbytes: Forcing CT accounting to be enabled [ 1502.894487][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11104'. [ 1502.908340][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11101'. [ 1502.937773][T13241] hsr0: entered promiscuous mode [ 1502.943582][T13238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11101'. [ 1503.285041][T13257] netlink: 'syz.4.11110': attribute type 1 has an invalid length. [ 1503.298199][T13257] netlink: 'syz.4.11110': attribute type 1 has an invalid length. [ 1509.420122][ T7972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.244664][T13338] rdma_rxe: rxe_newlink: failed to add bond0 [ 1511.279941][T13326] block nbd80: server does not support multiple connections per device. [ 1511.291202][T13326] block nbd80: shutting down sockets [ 1511.631455][T13352] netlink: 'syz.4.11127': attribute type 4 has an invalid length. [ 1511.790501][T13345] netlink: 'syz.2.11121': attribute type 2 has an invalid length. [ 1511.799595][T13345] tipc: Cannot configure node identity twice [ 1511.839438][T13345] bridge0: port 4(vlan4) entered blocking state [ 1511.856228][T13345] bridge0: port 4(vlan4) entered disabled state [ 1511.870987][T13345] vlan4: entered allmulticast mode [ 1511.883043][T13345] bridge0: entered allmulticast mode [ 1511.895112][T13345] vlan4: left allmulticast mode [ 1511.906230][T13345] bridge0: left allmulticast mode [ 1512.083628][T13364] __nla_validate_parse: 5 callbacks suppressed [ 1512.083651][T13364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11130'. [ 1512.129248][T13367] netlink: 240 bytes leftover after parsing attributes in process `syz.2.11132'. [ 1512.374847][T13373] syzkaller0: entered promiscuous mode [ 1512.390672][T13373] syzkaller0: entered allmulticast mode [ 1512.431138][T13381] rdma_rxe: rxe_newlink: failed to add bond0 [ 1513.102612][T13415] netlink: 240 bytes leftover after parsing attributes in process `syz.2.11148'. [ 1513.143249][T13415] netlink: 'syz.2.11148': attribute type 1 has an invalid length. [ 1513.163543][T13415] sctp: [Deprecated]: syz.2.11148 (pid 13415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1513.163543][T13415] Use struct sctp_sack_info instead [ 1516.150264][T13391] netlink: 'syz.1.11142': attribute type 2 has an invalid length. [ 1516.232844][T13427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1516.273233][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1516.283425][T13427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1516.429404][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11154'. [ 1516.491078][T13439] FAULT_INJECTION: forcing a failure. [ 1516.491078][T13439] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.564816][T13439] CPU: 0 UID: 0 PID: 13439 Comm: syz.4.11155 Not tainted syzkaller #0 PREEMPT(full) [ 1516.564860][T13439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1516.564876][T13439] Call Trace: [ 1516.564885][T13439] [ 1516.564895][T13439] dump_stack_lvl+0xe8/0x150 [ 1516.564934][T13439] should_fail_ex+0x412/0x560 [ 1516.564977][T13439] should_failslab+0xa8/0x100 [ 1516.565012][T13439] __kmalloc_cache_noprof+0x88/0x660 [ 1516.565038][T13439] ? nf_logger_find_get+0x2e2/0x330 [ 1516.565063][T13439] ? nft_trans_rule_add+0x59/0x440 [ 1516.565097][T13439] nft_trans_rule_add+0x59/0x440 [ 1516.565130][T13439] nf_tables_newrule+0x1b72/0x28b0 [ 1516.565174][T13439] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1516.565203][T13439] ? nfnl_pernet+0x23/0x240 [ 1516.565244][T13439] ? __nla_parse+0x40/0x60 [ 1516.565275][T13439] nfnetlink_rcv+0x1240/0x27b0 [ 1516.565345][T13439] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1516.565372][T13439] ? __lock_acquire+0x6b5/0x2cf0 [ 1516.565415][T13439] ? ___sys_sendmsg+0x2a5/0x360 [ 1516.565448][T13439] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1516.565481][T13439] ? do_syscall_64+0x14d/0xf80 [ 1516.565507][T13439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.565585][T13439] ? netlink_deliver_tap+0x2e/0x1b0 [ 1516.565619][T13439] ? netlink_deliver_tap+0x2e/0x1b0 [ 1516.565659][T13439] netlink_unicast+0x75c/0x8e0 [ 1516.565701][T13439] netlink_sendmsg+0x813/0xb40 [ 1516.565745][T13439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.565782][T13439] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1516.565807][T13439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1516.565846][T13439] ____sys_sendmsg+0x972/0x9f0 [ 1516.565892][T13439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.565938][T13439] ? import_iovec+0x73/0xa0 [ 1516.565970][T13439] ___sys_sendmsg+0x2a5/0x360 [ 1516.566011][T13439] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.566087][T13439] ? __fget_files+0x2a/0x420 [ 1516.566107][T13439] ? __fget_files+0x3a0/0x420 [ 1516.566140][T13439] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1516.566179][T13439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1516.566224][T13439] ? __pfx_ksys_write+0x10/0x10 [ 1516.566264][T13439] do_syscall_64+0x14d/0xf80 [ 1516.566291][T13439] ? trace_irq_disable+0x3b/0x150 [ 1516.566311][T13439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.566334][T13439] ? clear_bhb_loop+0x40/0x90 [ 1516.566362][T13439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.566385][T13439] RIP: 0033:0x7f042c39c819 [ 1516.566404][T13439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.566423][T13439] RSP: 002b:00007f042d225028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.566445][T13439] RAX: ffffffffffffffda RBX: 00007f042c615fa0 RCX: 00007f042c39c819 [ 1516.566461][T13439] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1516.566475][T13439] RBP: 00007f042d225090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.566488][T13439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.566500][T13439] R13: 00007f042c616038 R14: 00007f042c615fa0 R15: 00007ffe7f5ea948 [ 1516.566536][T13439] [ 1517.331750][T13461] netlink: 'syz.4.11164': attribute type 1 has an invalid length. [ 1517.356826][T13463] syzkaller1: entered promiscuous mode [ 1517.362374][T13463] syzkaller1: entered allmulticast mode [ 1517.374143][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11163'. [ 1517.388172][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11164'. [ 1517.484740][T13461] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1517.552675][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11169'. [ 1517.954279][T13502] netlink: 'syz.2.11176': attribute type 1 has an invalid length. [ 1517.964284][T13500] sctp: [Deprecated]: syz.3.11177 (pid 13500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1517.964284][T13500] Use struct sctp_sack_info instead [ 1517.994858][T13502] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11176'. [ 1518.012754][T13500] sctp: [Deprecated]: syz.3.11177 (pid 13500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1518.012754][T13500] Use struct sctp_sack_info instead [ 1518.059377][T13502] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11176'. [ 1518.108436][T13500] nbd: nbd3 already in use [ 1518.115138][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11177'. [ 1518.219480][T13512] netlink: 'syz.4.11180': attribute type 1 has an invalid length. [ 1518.248780][T13511] block nbd3: NBD_DISCONNECT [ 1518.254760][T13511] block nbd3: Send disconnect failed -32 [ 1518.268314][T13511] block nbd3: Send disconnect failed -32 [ 1518.294811][T13511] block nbd3: Send disconnect failed -32 [ 1518.313206][T13511] block nbd3: shutting down sockets [ 1518.330710][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11181'. [ 1518.449443][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11181'. [ 1518.526462][T13512] bond8: entered promiscuous mode [ 1518.532151][T13512] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1521.783207][T13522] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1522.491938][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11199'. [ 1522.649653][T13589] FAULT_INJECTION: forcing a failure. [ 1522.649653][T13589] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.687665][T13589] CPU: 1 UID: 0 PID: 13589 Comm: syz.1.11200 Not tainted syzkaller #0 PREEMPT(full) [ 1522.687695][T13589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1522.687710][T13589] Call Trace: [ 1522.687718][T13589] [ 1522.687730][T13589] dump_stack_lvl+0xe8/0x150 [ 1522.687768][T13589] should_fail_ex+0x412/0x560 [ 1522.687810][T13589] should_failslab+0xa8/0x100 [ 1522.687843][T13589] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1522.687871][T13589] ? __alloc_skb+0x1d0/0x7d0 [ 1522.687901][T13589] ? __local_bh_enable_ip+0xd0/0x130 [ 1522.687939][T13589] __alloc_skb+0x1d0/0x7d0 [ 1522.687976][T13589] nf_tables_rule_notify+0xc0/0x570 [ 1522.688012][T13589] ? nft_pernet+0x23/0x240 [ 1522.688049][T13589] nf_tables_commit+0x1c93/0xa400 [ 1522.688109][T13589] ? __pfx_nf_tables_commit+0x10/0x10 [ 1522.688136][T13589] ? __free_frozen_pages+0x706/0xdb0 [ 1522.688174][T13589] ? nf_tables_newrule+0x2590/0x28b0 [ 1522.688217][T13589] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1522.688283][T13589] nfnetlink_rcv+0x1c1b/0x27b0 [ 1522.688352][T13589] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1522.688380][T13589] ? __lock_acquire+0x6b5/0x2cf0 [ 1522.688422][T13589] ? ___sys_sendmsg+0x2a5/0x360 [ 1522.688455][T13589] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1522.688488][T13589] ? do_syscall_64+0x14d/0xf80 [ 1522.688514][T13589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.688589][T13589] ? netlink_deliver_tap+0x2e/0x1b0 [ 1522.688622][T13589] ? netlink_deliver_tap+0x2e/0x1b0 [ 1522.688660][T13589] netlink_unicast+0x75c/0x8e0 [ 1522.688703][T13589] netlink_sendmsg+0x813/0xb40 [ 1522.688747][T13589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1522.688784][T13589] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1522.688809][T13589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1522.688840][T13589] ____sys_sendmsg+0x972/0x9f0 [ 1522.688885][T13589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1522.688930][T13589] ? import_iovec+0x73/0xa0 [ 1522.688962][T13589] ___sys_sendmsg+0x2a5/0x360 [ 1522.689005][T13589] ? __pfx____sys_sendmsg+0x10/0x10 [ 1522.689081][T13589] ? __fget_files+0x2a/0x420 [ 1522.689102][T13589] ? __fget_files+0x3a0/0x420 [ 1522.689135][T13589] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1522.689175][T13589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1522.689222][T13589] ? __pfx_ksys_write+0x10/0x10 [ 1522.689269][T13589] do_syscall_64+0x14d/0xf80 [ 1522.689295][T13589] ? trace_irq_disable+0x3b/0x150 [ 1522.689315][T13589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.689338][T13589] ? clear_bhb_loop+0x40/0x90 [ 1522.689367][T13589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.689390][T13589] RIP: 0033:0x7ff5e479c819 [ 1522.689411][T13589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.689431][T13589] RSP: 002b:00007ff5e56c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1522.689455][T13589] RAX: ffffffffffffffda RBX: 00007ff5e4a15fa0 RCX: 00007ff5e479c819 [ 1522.689472][T13589] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1522.689487][T13589] RBP: 00007ff5e56c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.689501][T13589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1522.689514][T13589] R13: 00007ff5e4a16038 R14: 00007ff5e4a15fa0 R15: 00007ffcf0530c38 [ 1522.689551][T13589] [ 1530.087412][T13624] netlink: 'syz.1.11203': attribute type 1 has an invalid length. [ 1530.160573][T13630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11203'. [ 1530.275872][T13635] netlink: 'syz.4.11209': attribute type 2 has an invalid length. [ 1530.291387][T13624] bond9: (slave gretap1): making interface the new active one [ 1530.311470][T13635] netlink: 'syz.4.11209': attribute type 11 has an invalid length. [ 1530.321200][T13635] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11209'. [ 1530.335060][T13624] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 1530.453710][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11213'. [ 1530.510925][T13645] sctp: [Deprecated]: syz.2.11213 (pid 13645) Use of int in max_burst socket option. [ 1530.510925][T13645] Use struct sctp_assoc_value instead [ 1530.720332][T13667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11220'. [ 1530.720332][T13665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11220'. [ 1530.988882][T13682] netlink: 'syz.1.11225': attribute type 4 has an invalid length. [ 1531.008002][T13682] netlink: 'syz.1.11225': attribute type 8 has an invalid length. [ 1531.017127][T13682] netlink: 'syz.1.11225': attribute type 1 has an invalid length. [ 1531.027649][T13682] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11225'. [ 1531.037236][T13682] NCSI netlink: No device for ifindex 0 [ 1531.129549][T13685] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1531.342682][T13704] netlink: 2064 bytes leftover after parsing attributes in process `syz.0.11229'. [ 1531.379487][T13704] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1531.720042][T13721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11238'. [ 1531.788771][T13716] lo speed is unknown, defaulting to 1000 [ 1531.823403][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11236'. [ 1531.933423][T13716] lo speed is unknown, defaulting to 1000 [ 1532.370475][T13755] batadv_slave_0: entered promiscuous mode [ 1532.394975][T13751] batadv_slave_0: left promiscuous mode [ 1532.941007][T13788] netlink: 'syz.3.11262': attribute type 10 has an invalid length. [ 1532.967648][T13788] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.11262'. [ 1533.020981][T13791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1533.280182][T13803] sock: sock_timestamping_bind_phc: sock not bind to device [ 1533.288935][T13802] syz_tun: entered allmulticast mode [ 1533.441588][T13813] syzkaller0: entered promiscuous mode [ 1533.448799][T13813] syzkaller0: entered allmulticast mode [ 1533.482872][T13812] tipc: Enabled bearer , priority 0 [ 1533.593416][T13807] netlink: 'syz.2.11260': attribute type 2 has an invalid length. [ 1533.617478][T13807] tipc: Cannot configure node identity twice [ 1533.649849][T13807] bridge0: port 4(vlan4) entered blocking state [ 1533.660105][T13807] bridge0: port 4(vlan4) entered disabled state [ 1533.670134][T13807] vlan4: entered allmulticast mode [ 1533.675345][T13807] bridge0: entered allmulticast mode [ 1533.689184][T13807] vlan4: left allmulticast mode [ 1533.699459][T13807] bridge0: left allmulticast mode [ 1533.761430][T13824] x_tables: unsorted underflow at hook 2 [ 1533.787519][T13812] tipc: Resetting bearer [ 1533.850478][T13812] tipc: Disabling bearer [ 1534.720209][T19922] block nbd3: Receive control failed (result -1) [ 1535.326177][T13883] __nla_validate_parse: 4 callbacks suppressed [ 1535.326202][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11290'. [ 1535.608909][T13882] netlink: 'syz.2.11289': attribute type 2 has an invalid length. [ 1535.630785][T13882] tipc: Cannot configure node identity twice [ 1535.686308][T13888] bridge0: port 4(vlan4) entered blocking state [ 1535.702644][T13888] bridge0: port 4(vlan4) entered disabled state [ 1535.736000][T13888] vlan4: entered allmulticast mode [ 1535.742995][T13888] bridge0: entered allmulticast mode [ 1535.779402][T13888] vlan4: left allmulticast mode [ 1535.784590][T13888] bridge0: left allmulticast mode [ 1536.003762][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11296'. [ 1536.212344][ T5838] block nbd81: Receive control failed (result -1) [ 1536.225801][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11302'. [ 1536.603048][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11305'. [ 1536.803860][T13947] sctp: [Deprecated]: syz.2.11307 (pid 13947) Use of int in max_burst socket option. [ 1536.803860][T13947] Use struct sctp_assoc_value instead [ 1537.250723][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11314'. [ 1537.362867][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11316'. [ 1537.364136][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11316'. [ 1537.412576][T13972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11317'. [ 1537.640771][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11320'. [ 1537.673393][T13980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.768431][T13963] netlink: 'syz.1.11310': attribute type 2 has an invalid length. [ 1537.923636][T13984] lo speed is unknown, defaulting to 1000 [ 1537.947917][T13984] lo speed is unknown, defaulting to 1000 [ 1537.981269][T13996] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.997451][T13996] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1538.012327][T13996] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1538.095364][T14001] lo speed is unknown, defaulting to 1000 [ 1538.114182][T13995] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11323'. [ 1538.146139][T14001] lo speed is unknown, defaulting to 1000 [ 1538.168916][T13996] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.192278][T13996] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1538.218111][T13996] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1538.334953][T13996] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.348792][T13996] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1538.387875][T13996] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1538.505321][T13996] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.526607][T13996] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1538.550481][T13996] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1538.775249][T16290] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1538.785588][T16290] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1538.794966][T16290] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 1538.905559][T12784] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1538.940517][T12784] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1538.972331][T12784] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 1539.091962][T12784] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1539.119011][T12784] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1539.137325][T12784] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 1539.184033][T12784] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1539.224534][T12784] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1539.246088][T12784] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 1539.419781][T14038] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1539.499278][T14038] bond7: (slave lo): Enslaving as an active interface with an up link [ 1539.539779][T14038] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1539.605261][T14037] FAULT_INJECTION: forcing a failure. [ 1539.605261][T14037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1539.626805][T14037] CPU: 1 UID: 0 PID: 14037 Comm: syz.3.11334 Not tainted syzkaller #0 PREEMPT(full) [ 1539.626838][T14037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1539.626852][T14037] Call Trace: [ 1539.626862][T14037] [ 1539.626872][T14037] dump_stack_lvl+0xe8/0x150 [ 1539.626917][T14037] should_fail_ex+0x412/0x560 [ 1539.626958][T14037] _copy_from_iter+0x1d3/0x1670 [ 1539.626987][T14037] ? rcu_is_watching+0x15/0xb0 [ 1539.627025][T14037] ? __pfx__copy_from_iter+0x10/0x10 [ 1539.627056][T14037] ? netlink_sendmsg+0x650/0xb40 [ 1539.627087][T14037] ? skb_put+0x11b/0x210 [ 1539.627122][T14037] netlink_sendmsg+0x6c0/0xb40 [ 1539.627164][T14037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1539.627208][T14037] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1539.627232][T14037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1539.627262][T14037] ____sys_sendmsg+0x972/0x9f0 [ 1539.627295][T14037] ? __lock_acquire+0x6b5/0x2cf0 [ 1539.627332][T14037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1539.627375][T14037] ? import_iovec+0x73/0xa0 [ 1539.627406][T14037] ___sys_sendmsg+0x2a5/0x360 [ 1539.627447][T14037] ? __pfx____sys_sendmsg+0x10/0x10 [ 1539.627537][T14037] __sys_sendmmsg+0x27c/0x4e0 [ 1539.627566][T14037] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1539.627586][T14037] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1539.627645][T14037] ? ksys_write+0x242/0x270 [ 1539.627675][T14037] ? __pfx_ksys_write+0x10/0x10 [ 1539.627709][T14037] __x64_sys_sendmmsg+0xa0/0xc0 [ 1539.627733][T14037] do_syscall_64+0x14d/0xf80 [ 1539.627759][T14037] ? trace_irq_disable+0x3b/0x150 [ 1539.627778][T14037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.627801][T14037] ? clear_bhb_loop+0x40/0x90 [ 1539.627828][T14037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.627851][T14037] RIP: 0033:0x7f562ed9c819 [ 1539.627872][T14037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.627892][T14037] RSP: 002b:00007f562fc4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1539.627916][T14037] RAX: ffffffffffffffda RBX: 00007f562f015fa0 RCX: 00007f562ed9c819 [ 1539.627932][T14037] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 1539.627949][T14037] RBP: 00007f562fc4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.627963][T14037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1539.627977][T14037] R13: 00007f562f016038 R14: 00007f562f015fa0 R15: 00007ffeae2b6428 [ 1539.628013][T14037] [ 1540.155338][T14057] netlink: 'syz.0.11339': attribute type 1 has an invalid length. [ 1540.201755][T14057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1540.391020][T14046] netlink: 'syz.1.11335': attribute type 2 has an invalid length. [ 1540.569347][T14078] __nla_validate_parse: 2 callbacks suppressed [ 1540.569370][T14078] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11343'. [ 1540.606224][T14080] netlink: 'syz.0.11344': attribute type 1 has an invalid length. [ 1540.659562][T14080] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1540.674329][T14080] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1540.698110][T14082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11344'. [ 1540.722441][T14082] bond9: (slave bridge3): Enslaving as an active interface with a down link [ 1541.978570][T19922] block nbd80: Receive control failed (result -113) [ 1545.990561][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.001499][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1546.008367][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.179730][T14110] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11348'. [ 1546.195269][T14111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11347'. [ 1546.286188][T14110] FAULT_INJECTION: forcing a failure. [ 1546.286188][T14110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1546.320934][T14110] CPU: 1 UID: 0 PID: 14110 Comm: syz.3.11348 Not tainted syzkaller #0 PREEMPT(full) [ 1546.320967][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1546.320981][T14110] Call Trace: [ 1546.320991][T14110] [ 1546.321002][T14110] dump_stack_lvl+0xe8/0x150 [ 1546.321041][T14110] should_fail_ex+0x412/0x560 [ 1546.321084][T14110] _copy_from_user+0x2d/0xb0 [ 1546.321114][T14110] kstrtouint_from_user+0xd6/0x180 [ 1546.321154][T14110] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1546.321210][T14110] proc_fail_nth_write+0x8e/0x210 [ 1546.321256][T14110] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1546.321297][T14110] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1546.321333][T14110] vfs_write+0x29a/0xb90 [ 1546.321372][T14110] ? __pfx_vfs_write+0x10/0x10 [ 1546.321400][T14110] ? __fget_files+0x2a/0x420 [ 1546.321428][T14110] ? __fget_files+0x3a0/0x420 [ 1546.321447][T14110] ? __fget_files+0x2a/0x420 [ 1546.321480][T14110] ksys_write+0x150/0x270 [ 1546.321509][T14110] ? __pfx_ksys_write+0x10/0x10 [ 1546.321550][T14110] do_syscall_64+0x14d/0xf80 [ 1546.321577][T14110] ? trace_irq_disable+0x3b/0x150 [ 1546.321597][T14110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.321621][T14110] ? clear_bhb_loop+0x40/0x90 [ 1546.321649][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.321672][T14110] RIP: 0033:0x7f562ed5d04e [ 1546.321693][T14110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1546.321713][T14110] RSP: 002b:00007f562fc49fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1546.321738][T14110] RAX: ffffffffffffffda RBX: 00007f562fc4a6c0 RCX: 00007f562ed5d04e [ 1546.321755][T14110] RDX: 0000000000000001 RSI: 00007f562fc4a0a0 RDI: 0000000000000009 [ 1546.321769][T14110] RBP: 00007f562fc4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.321784][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1546.321797][T14110] R13: 00007f562f016038 R14: 00007f562f015fa0 R15: 00007ffeae2b6428 [ 1546.321835][T14110] [ 1546.623948][T14124] macvlan2: entered promiscuous mode [ 1546.632846][T14124] bond0: entered promiscuous mode [ 1546.638925][T14124] mac80211_hwsim hwsim95 wlan1: entered promiscuous mode [ 1546.646239][T14124] dummy0: entered promiscuous mode [ 1546.653589][T14124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1546.673388][T14124] team0: Port device macvlan2 added [ 1546.690696][T14126] netlink: 220 bytes leftover after parsing attributes in process `syz.2.11353'. [ 1547.160927][T14148] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11359'. [ 1547.300912][T14146] netlink: 'syz.4.11356': attribute type 2 has an invalid length. [ 1547.491370][T14155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11361'. [ 1547.502851][T14154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11361'. [ 1547.763424][T14171] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11365'. [ 1547.858099][T14175] rdma_rxe: rxe_newlink: failed to add bond0 [ 1547.903353][T14178] bridge4: entered promiscuous mode [ 1547.909132][T14178] bridge4: entered allmulticast mode [ 1547.921177][T14178] team0: Port device bridge4 added [ 1547.973617][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11368'. [ 1547.991669][T14182] netlink: 'syz.4.11370': attribute type 3 has an invalid length. [ 1548.062809][T19922] block nbd82: Receive control failed (result -1) [ 1548.130148][T14182] nbd: nbd4 already in use [ 1548.152356][T14182] block nbd4: NBD_DISCONNECT [ 1548.162468][T14182] block nbd4: Send disconnect failed -32 [ 1548.177051][ T7273] block nbd4: Wrong magic (0x25609513) [ 1548.177291][T14182] block nbd4: Send disconnect failed -32 [ 1548.191124][ T7272] block nbd4: Wrong magic (0x25609513) [ 1548.198058][ T7272] block nbd4: Disconnected due to user request. [ 1548.248110][T14182] block nbd4: Send disconnect failed -32 [ 1548.447449][T14182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.480739][T14182] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.499418][T14182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1548.591730][T14199] lo speed is unknown, defaulting to 1000 [ 1548.613770][T14199] lo speed is unknown, defaulting to 1000 [ 1548.652464][T14203] lo speed is unknown, defaulting to 1000 [ 1548.683665][T14203] lo speed is unknown, defaulting to 1000 [ 1549.138915][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11381'. [ 1549.361824][T14222] netlink: 'syz.3.11383': attribute type 62 has an invalid length. [ 1549.477625][T14224] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11384'. [ 1549.727496][T14245] openvswitch: netlink: Flow key attr not present in new flow. [ 1549.965095][T14254] syzkaller0: entered promiscuous mode [ 1549.971925][T14254] syzkaller0: entered allmulticast mode [ 1550.249625][T14272] netlink: 'syz.2.11399': attribute type 4 has an invalid length. [ 1550.768695][T14296] netlink: 'syz.4.11408': attribute type 1 has an invalid length. [ 1550.817276][T14296] netlink: 'syz.4.11408': attribute type 2 has an invalid length. [ 1550.825290][T14296] netlink: 'syz.4.11408': attribute type 1 has an invalid length. [ 1551.004367][T14303] IPVS: set_ctl: invalid protocol: 59 172.30.1.3:20000 [ 1551.016498][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1551.024622][ C1] lec:lec_tx_timeout: lec0 [ 1551.029565][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1551.148752][T14314] batadv_slave_0: entered promiscuous mode [ 1551.250045][T14313] batadv_slave_0: left promiscuous mode [ 1551.293591][T14315] lo speed is unknown, defaulting to 1000 [ 1551.330698][T14315] lo speed is unknown, defaulting to 1000 [ 1551.635244][T14335] __nla_validate_parse: 5 callbacks suppressed [ 1551.635269][T14335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11419'. [ 1551.841014][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11422'. [ 1551.851147][T14346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11421'. [ 1552.218148][T14364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11423'. [ 1552.312121][T14368] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11423'. [ 1552.327339][T14364] netlink: 'syz.1.11423': attribute type 2 has an invalid length. [ 1552.335547][T14364] netlink: 'syz.1.11423': attribute type 1 has an invalid length. [ 1552.345643][T14364] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11423'. [ 1556.036611][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1556.044691][ C1] lec:lec_tx_timeout: lec0 [ 1558.813400][T14403] dummy0: entered promiscuous mode [ 1558.819671][T14403] dummy0: left promiscuous mode [ 1558.838640][T14404] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11431'. [ 1558.880412][T14404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11431'. [ 1558.892886][T14409] netlink: 'syz.1.11432': attribute type 1 has an invalid length. [ 1558.908876][T14409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1559.279039][T14427] rdma_rxe: rxe_newlink: failed to add bond0 [ 1560.211100][T14470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11449'. [ 1560.231177][T14470] nbd: nbd64 already in use [ 1560.245071][T14470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11449'. [ 1560.260681][T14473] rdma_rxe: rxe_newlink: failed to add bond0 [ 1560.831018][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11459'. [ 1560.848281][T14490] bridge1: port 1(erspan0) entered disabled state [ 1560.882017][T14500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11461'. [ 1560.984252][T14505] netlink: 424 bytes leftover after parsing attributes in process `syz.3.11460'. [ 1561.028008][T14505] netlink: 'syz.3.11460': attribute type 1 has an invalid length. [ 1561.085199][T14509] rdma_rxe: rxe_newlink: failed to add bond0 [ 1561.295469][T14490] team_slave_0: left promiscuous mode [ 1561.306996][T14496] nbd4: detected capacity change from 0 to 127 [ 1561.327072][T14490] team_slave_1: left promiscuous mode [ 1561.346130][T14514] netlink: 'syz.3.11460': attribute type 1 has an invalid length. [ 1561.644843][ T7272] block nbd4: Receive control failed (result -104) [ 1561.704583][T14490] wg1: left allmulticast mode [ 1562.028983][T14490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.081814][T14490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.104017][T14490] xfrm0: left promiscuous mode [ 1562.117382][T14490] xfrm0: left allmulticast mode [ 1562.363456][T14490] bond1: left allmulticast mode [ 1562.391375][T14490] vlan0: left promiscuous mode [ 1562.397183][T14490] geneve1: left promiscuous mode [ 1562.402602][T14490] vlan0: left allmulticast mode [ 1562.408279][T14490] geneve1: left allmulticast mode [ 1562.478168][T14490] bridge4: left promiscuous mode [ 1562.483197][T14490] bridge4: left allmulticast mode [ 1562.849177][T14517] bond0: left promiscuous mode [ 1562.854595][T14517] mac80211_hwsim hwsim95 wlan1: left promiscuous mode [ 1562.870179][T14517] dummy0: left promiscuous mode [ 1562.951869][ T6293] syz0: Port: 1 Link DOWN [ 1562.956581][T16290] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1562.964986][T16290] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.027741][T16290] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20160 - 0 [ 1563.036270][T16290] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1563.067802][T16290] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.076229][T16290] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.098731][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11468'. [ 1563.114117][T16290] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20160 - 0 [ 1563.123456][T16290] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1563.141951][T16290] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.150515][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11468'. [ 1563.150553][T14546] netlink: 'syz.2.11468': attribute type 18 has an invalid length. [ 1563.179972][T16290] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.189850][T16290] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20160 - 0 [ 1563.190972][T14549] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11469'. [ 1563.198573][T16290] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1563.198644][T16290] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.198674][T16290] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.198703][T16290] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20160 - 0 [ 1563.198732][T16290] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1563.198783][T16290] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.198813][T16290] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 57068 - 0 [ 1563.198842][T16290] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1563.198870][T16290] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1563.198909][T16290] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.198938][T16290] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 57068 - 0 [ 1563.198966][T16290] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1563.198994][T16290] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1563.199032][T16290] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.199060][T16290] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 57068 - 0 [ 1563.199088][T16290] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1563.199116][T16290] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1563.199153][T16290] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.199182][T16290] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 57068 - 0 [ 1563.375389][T16290] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1563.385691][T16290] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1563.420974][T14549] batman_adv: batadv0: Removing interface: dummy0 [ 1563.854100][T14587] x_tables: duplicate underflow at hook 1 [ 1563.880976][T14587] netlink: 'syz.1.11480': attribute type 10 has an invalid length. [ 1563.900522][T14585] lo speed is unknown, defaulting to 1000 [ 1563.908599][T14585] lo speed is unknown, defaulting to 1000 [ 1563.915303][T14587] __nla_validate_parse: 5 callbacks suppressed [ 1563.915322][T14587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11480'. [ 1563.961715][T14587] dummy0: entered promiscuous mode [ 1563.970984][T14587] bond0: (slave dummy0): Releasing backup interface [ 1563.991482][T14587] bridge0: port 1(dummy0) entered blocking state [ 1563.998922][T14587] bridge0: port 1(dummy0) entered disabled state [ 1564.005599][T14587] dummy0: entered allmulticast mode [ 1564.093369][T14594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1564.339940][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11484'. [ 1564.524137][T14603] netlink: 'syz.2.11485': attribute type 2 has an invalid length. [ 1564.532356][T14603] netlink: 'syz.2.11485': attribute type 2 has an invalid length. [ 1564.619022][ T1747] block nbd4: Connection timed out, retrying (0/1 alive) [ 1564.633269][ T1747] block nbd4: Connection timed out, retrying (0/1 alive) [ 1564.640997][ T1747] block nbd4: Connection timed out, retrying (0/1 alive) [ 1564.648379][ T1747] block nbd4: Connection timed out, retrying (0/1 alive) [ 1564.658835][ T25] block nbd4: Dead connection, failed to find a fallback [ 1564.670967][ T25] block nbd4: shutting down sockets [ 1564.679634][ T25] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.690794][ T25] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1564.700786][ T25] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.710652][ T25] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1564.719417][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.729570][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1564.738097][ T25] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.747918][ T25] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1564.758225][T14456] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.781031][T14456] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1564.789814][T14456] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.799647][T14456] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1564.807875][T14456] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.818511][T14456] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1564.827611][T14456] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.838356][T14456] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1564.846702][T14456] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.869009][T14456] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1564.877675][T14456] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1564.888262][T14456] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1564.899402][T14456] ldm_validate_partition_table(): Disk read failed. [ 1564.908168][T14456] Dev nbd4: unable to read RDB block 0 [ 1564.914617][T14456] nbd4: unable to read partition table [ 1564.937128][T14456] ldm_validate_partition_table(): Disk read failed. [ 1564.944303][T14456] Dev nbd4: unable to read RDB block 0 [ 1564.978160][T14456] nbd4: unable to read partition table [ 1565.013249][T14613] netlink: 'syz.0.11487': attribute type 1 has an invalid length. [ 1565.027006][T14613] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11487'. [ 1565.094179][T14620] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11488'. [ 1565.125424][T14620] netlink: 245 bytes leftover after parsing attributes in process `syz.1.11488'. [ 1565.241996][T14625] rdma_rxe: rxe_newlink: failed to add bond0 [ 1565.575969][T14636] batadv_slave_1: entered promiscuous mode [ 1565.588843][T14634] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1565.669795][T14635] batadv_slave_1: left promiscuous mode [ 1565.684421][T14641] netlink: 'syz.2.11497': attribute type 1 has an invalid length. [ 1565.693580][T14641] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11497'. [ 1565.703966][T14641] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11497'. [ 1565.714715][T14641] netlink: 658 bytes leftover after parsing attributes in process `syz.2.11497'. [ 1565.846873][T14650] netlink: 200 bytes leftover after parsing attributes in process `syz.2.11500'. [ 1565.975233][T14654] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 1566.050267][T14657] bond10: option updelay: invalid value (18446744073709493611) [ 1566.059399][T14657] bond10: option updelay: allowed values 0 - 2147483647 [ 1566.080627][T14657] bond10 (unregistering): Released all slaves [ 1566.192620][T14665] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11506'. [ 1566.345979][T14670] lo speed is unknown, defaulting to 1000 [ 1566.375343][T14670] lo speed is unknown, defaulting to 1000 [ 1566.540365][T14686] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1566.599192][T14689] netlink: 'syz.0.11507': attribute type 2 has an invalid length. [ 1566.633665][T14689] netlink: 'syz.0.11507': attribute type 2 has an invalid length. [ 1567.162585][T14711] netlink: 'syz.4.11517': attribute type 1 has an invalid length. [ 1567.462763][T14725] rdma_rxe: rxe_newlink: failed to add bond0 [ 1567.552961][T14729] IPVS: set_ctl: invalid protocol: 33 14.1.1.1:21 [ 1567.579063][T14723] lo speed is unknown, defaulting to 1000 [ 1567.612794][T14723] lo speed is unknown, defaulting to 1000 [ 1567.689630][T14731] lo speed is unknown, defaulting to 1000 [ 1567.697674][T14729] netlink: 'syz.4.11522': attribute type 29 has an invalid length. [ 1567.739612][T14731] lo speed is unknown, defaulting to 1000 [ 1567.745529][T14729] netlink: 'syz.4.11522': attribute type 29 has an invalid length. [ 1567.845129][T14738] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1568.458701][T14769] lo speed is unknown, defaulting to 1000 [ 1568.491124][T14769] lo speed is unknown, defaulting to 1000 [ 1568.622407][T14780] IPv6: NLM_F_CREATE should be specified when creating new route [ 1568.875138][T14785] lo speed is unknown, defaulting to 1000 [ 1568.899826][T14785] lo speed is unknown, defaulting to 1000 [ 1569.033579][T14791] [ 1569.035977][T14791] ====================================================== [ 1569.043116][T14791] WARNING: possible circular locking dependency detected [ 1569.050199][T14791] syzkaller #0 Not tainted [ 1569.054645][T14791] ------------------------------------------------------ [ 1569.061705][T14791] syz.1.11545/14791 is trying to acquire lock: [ 1569.068159][T14791] ffff8880614bb298 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 1569.077159][T14791] [ 1569.077159][T14791] but task is already holding lock: [ 1569.084656][T14791] ffff888088030f28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1569.094418][T14791] [ 1569.094418][T14791] which lock already depends on the new lock. [ 1569.094418][T14791] [ 1569.104865][T14791] [ 1569.104865][T14791] the existing dependency chain (in reverse order) is: [ 1569.114010][T14791] [ 1569.114010][T14791] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1569.121927][T14791] __mutex_lock+0x19f/0x1300 [ 1569.127078][T14791] elevator_change+0x1b3/0x450 [ 1569.132390][T14791] elevator_set_none+0xb5/0x140 [ 1569.137799][T14791] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1569.144293][T14791] nbd_start_device+0x17f/0xb10 [ 1569.149702][T14791] nbd_genl_connect+0x165b/0x1cf0 [ 1569.155301][T14791] genl_family_rcv_msg_doit+0x22a/0x330 [ 1569.161399][T14791] genl_rcv_msg+0x61c/0x7a0 [ 1569.166450][T14791] netlink_rcv_skb+0x232/0x4b0 [ 1569.171797][T14791] genl_rcv+0x28/0x40 [ 1569.176324][T14791] netlink_unicast+0x75c/0x8e0 [ 1569.181641][T14791] netlink_sendmsg+0x813/0xb40 [ 1569.186972][T14791] ____sys_sendmsg+0x972/0x9f0 [ 1569.192306][T14791] ___sys_sendmsg+0x2a5/0x360 [ 1569.197551][T14791] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1569.203044][T14791] do_syscall_64+0x14d/0xf80 [ 1569.208185][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.214637][T14791] [ 1569.214637][T14791] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1569.223276][T14791] blk_alloc_queue+0x546/0x680 [ 1569.228626][T14791] __blk_mq_alloc_disk+0x197/0x390 [ 1569.234462][T14791] nbd_dev_add+0x499/0xb50 [ 1569.239430][T14791] nbd_init+0x168/0x1f0 [ 1569.244259][T14791] do_one_initcall+0x250/0x8d0 [ 1569.249683][T14791] do_initcall_level+0x104/0x190 [ 1569.255295][T14791] do_initcalls+0x59/0xa0 [ 1569.260193][T14791] kernel_init_freeable+0x2a6/0x3e0 [ 1569.266378][T14791] kernel_init+0x1d/0x1d0 [ 1569.271415][T14791] ret_from_fork+0x51e/0xb90 [ 1569.276551][T14791] ret_from_fork_asm+0x1a/0x30 [ 1569.281886][T14791] [ 1569.281886][T14791] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1569.289134][T14791] fs_reclaim_acquire+0x71/0x100 [ 1569.294639][T14791] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1569.301000][T14791] __alloc_skb+0x1d0/0x7d0 [ 1569.305972][T14791] __ip6_append_data+0x2d6d/0x3f70 [ 1569.311811][T14791] ip6_append_data+0x10f/0x280 [ 1569.317319][T14791] rawv6_sendmsg+0x12d3/0x18e0 [ 1569.322632][T14791] ____sys_sendmsg+0x80a/0x9f0 [ 1569.327946][T14791] ___sys_sendmsg+0x2a5/0x360 [ 1569.333173][T14791] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1569.338666][T14791] do_syscall_64+0x14d/0xf80 [ 1569.343804][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.350243][T14791] [ 1569.350243][T14791] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1569.358010][T14791] lock_sock_nested+0x41/0x100 [ 1569.363332][T14791] inet_shutdown+0x6a/0x390 [ 1569.368477][T14791] nbd_mark_nsock_dead+0x2e9/0x560 [ 1569.374143][T14791] recv_work+0x1c7f/0x1d90 [ 1569.379100][T14791] process_scheduled_works+0xb6e/0x18c0 [ 1569.385189][T14791] worker_thread+0xa53/0xfc0 [ 1569.390340][T14791] kthread+0x388/0x470 [ 1569.394955][T14791] ret_from_fork+0x51e/0xb90 [ 1569.400117][T14791] ret_from_fork_asm+0x1a/0x30 [ 1569.405433][T14791] [ 1569.405433][T14791] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1569.413135][T14791] __mutex_lock+0x19f/0x1300 [ 1569.418293][T14791] nbd_queue_rq+0x37b/0x1100 [ 1569.423444][T14791] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1569.429532][T14791] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1569.436490][T14791] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1569.443035][T14791] blk_mq_run_hw_queue+0x348/0x4f0 [ 1569.448699][T14791] blk_mq_dispatch_list+0xd16/0xe10 [ 1569.454446][T14791] blk_mq_flush_plug_list+0x48d/0x570 [ 1569.460372][T14791] __blk_flush_plug+0x3ed/0x4d0 [ 1569.465847][T14791] __submit_bio+0x28d/0x580 [ 1569.471012][T14791] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1569.477194][T14791] block_read_full_folio+0x599/0x830 [ 1569.483265][T14791] filemap_read_folio+0x137/0x3b0 [ 1569.488859][T14791] do_read_cache_folio+0x358/0x590 [ 1569.494520][T14791] read_part_sector+0xb6/0x2b0 [ 1569.499833][T14791] adfspart_check_ICS+0xa5/0xa40 [ 1569.505514][T14791] bdev_disk_changed+0x7ba/0x1550 [ 1569.511189][T14791] blkdev_get_whole+0x380/0x510 [ 1569.516665][T14791] bdev_open+0x31e/0xd30 [ 1569.521493][T14791] blkdev_open+0x470/0x610 [ 1569.526465][T14791] do_dentry_open+0x785/0x14e0 [ 1569.531790][T14791] vfs_open+0x3b/0x340 [ 1569.536413][T14791] path_openat+0x2e08/0x3860 [ 1569.541577][T14791] do_file_open+0x23e/0x4a0 [ 1569.546623][T14791] do_sys_openat2+0x113/0x200 [ 1569.551859][T14791] __x64_sys_openat+0x138/0x170 [ 1569.557264][T14791] do_syscall_64+0x14d/0xf80 [ 1569.562399][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.568856][T14791] [ 1569.568856][T14791] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1569.576109][T14791] __mutex_lock+0x19f/0x1300 [ 1569.581249][T14791] nbd_queue_rq+0xc6/0x1100 [ 1569.586325][T14791] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1569.592423][T14791] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1569.599318][T14791] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1569.605851][T14791] blk_mq_run_hw_queue+0x348/0x4f0 [ 1569.611506][T14791] blk_mq_dispatch_list+0xd16/0xe10 [ 1569.617251][T14791] blk_mq_flush_plug_list+0x48d/0x570 [ 1569.623255][T14791] __blk_flush_plug+0x3ed/0x4d0 [ 1569.628652][T14791] __submit_bio+0x28d/0x580 [ 1569.633726][T14791] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1569.639921][T14791] block_read_full_folio+0x599/0x830 [ 1569.645774][T14791] filemap_read_folio+0x137/0x3b0 [ 1569.651352][T14791] do_read_cache_folio+0x358/0x590 [ 1569.657010][T14791] read_part_sector+0xb6/0x2b0 [ 1569.662322][T14791] adfspart_check_ICS+0xa5/0xa40 [ 1569.667806][T14791] bdev_disk_changed+0x7ba/0x1550 [ 1569.673384][T14791] blkdev_get_whole+0x380/0x510 [ 1569.678832][T14791] bdev_open+0x31e/0xd30 [ 1569.683681][T14791] blkdev_open+0x470/0x610 [ 1569.688665][T14791] do_dentry_open+0x785/0x14e0 [ 1569.694018][T14791] vfs_open+0x3b/0x340 [ 1569.698665][T14791] path_openat+0x2e08/0x3860 [ 1569.703809][T14791] do_file_open+0x23e/0x4a0 [ 1569.708948][T14791] do_sys_openat2+0x113/0x200 [ 1569.714181][T14791] __x64_sys_openat+0x138/0x170 [ 1569.719592][T14791] do_syscall_64+0x14d/0xf80 [ 1569.724733][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.731215][T14791] [ 1569.731215][T14791] -> #0 (set->srcu){.+.+}-{0:0}: [ 1569.738374][T14791] __lock_acquire+0x15a5/0x2cf0 [ 1569.743791][T14791] lock_sync+0x9d/0x120 [ 1569.748516][T14791] __synchronize_srcu+0xca/0x300 [ 1569.754019][T14791] elevator_switch+0x1e8/0x7a0 [ 1569.759355][T14791] elevator_change+0x2cc/0x450 [ 1569.764666][T14791] elevator_set_default+0x36c/0x430 [ 1569.770417][T14791] blk_register_queue+0x366/0x430 [ 1569.776081][T14791] __add_disk+0x677/0xd50 [ 1569.780966][T14791] add_disk_fwnode+0xfb/0x480 [ 1569.786196][T14791] nbd_dev_add+0x72c/0xb50 [ 1569.791167][T14791] nbd_genl_connect+0x962/0x1cf0 [ 1569.796682][T14791] genl_family_rcv_msg_doit+0x22a/0x330 [ 1569.802863][T14791] genl_rcv_msg+0x61c/0x7a0 [ 1569.807918][T14791] netlink_rcv_skb+0x232/0x4b0 [ 1569.813243][T14791] genl_rcv+0x28/0x40 [ 1569.817769][T14791] netlink_unicast+0x75c/0x8e0 [ 1569.823075][T14791] netlink_sendmsg+0x813/0xb40 [ 1569.828392][T14791] ____sys_sendmsg+0x972/0x9f0 [ 1569.833727][T14791] ___sys_sendmsg+0x2a5/0x360 [ 1569.838960][T14791] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1569.844460][T14791] do_syscall_64+0x14d/0xf80 [ 1569.849598][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.856234][T14791] [ 1569.856234][T14791] other info that might help us debug this: [ 1569.856234][T14791] [ 1569.866583][T14791] Chain exists of: [ 1569.866583][T14791] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 1569.866583][T14791] [ 1569.880273][T14791] Possible unsafe locking scenario: [ 1569.880273][T14791] [ 1569.888005][T14791] CPU0 CPU1 [ 1569.893398][T14791] ---- ---- [ 1569.898779][T14791] lock(&q->elevator_lock); [ 1569.903401][T14791] lock(&q->q_usage_counter(io)#49); [ 1569.911322][T14791] lock(&q->elevator_lock); [ 1569.918455][T14791] sync(set->srcu); [ 1569.922381][T14791] [ 1569.922381][T14791] *** DEADLOCK *** [ 1569.922381][T14791] [ 1569.930743][T14791] 6 locks held by syz.1.11545/14791: [ 1569.936112][T14791] #0: ffffffff8fc3ad90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1569.944349][T14791] #1: ffffffff8fc3abc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1569.953359][T14791] #2: ffff88808f71e1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 1569.963760][T14791] #3: ffff888088030fb8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430 [ 1569.973658][T14791] #4: ffff888088030a20 (&q->q_usage_counter(queue)#120){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1569.984665][T14791] #5: ffff888088030f28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1569.994541][T14791] [ 1569.994541][T14791] stack backtrace: [ 1570.000458][T14791] CPU: 1 UID: 0 PID: 14791 Comm: syz.1.11545 Not tainted syzkaller #0 PREEMPT(full) [ 1570.000482][T14791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1570.000495][T14791] Call Trace: [ 1570.000503][T14791] [ 1570.000512][T14791] dump_stack_lvl+0xe8/0x150 [ 1570.000544][T14791] print_circular_bug+0x2e1/0x300 [ 1570.000579][T14791] check_noncircular+0x12e/0x150 [ 1570.000611][T14791] __lock_acquire+0x15a5/0x2cf0 [ 1570.000638][T14791] ? check_path+0x21/0x40 [ 1570.000669][T14791] ? lockdep_unlock+0x5d/0xd0 [ 1570.000690][T14791] ? __lock_acquire+0x146e/0x2cf0 [ 1570.000716][T14791] ? __synchronize_srcu+0xb6/0x300 [ 1570.000739][T14791] lock_sync+0x9d/0x120 [ 1570.000762][T14791] ? __synchronize_srcu+0xb6/0x300 [ 1570.000789][T14791] __synchronize_srcu+0xca/0x300 [ 1570.000811][T14791] ? do_raw_spin_lock+0x12b/0x2f0 [ 1570.000830][T14791] ? __pfx___synchronize_srcu+0x10/0x10 [ 1570.000858][T14791] ? read_tsc+0x9/0x20 [ 1570.000879][T14791] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 1570.000900][T14791] ? synchronize_srcu+0x20d/0x270 [ 1570.000924][T14791] elevator_switch+0x1e8/0x7a0 [ 1570.000948][T14791] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1570.000977][T14791] elevator_change+0x2cc/0x450 [ 1570.000999][T14791] ? do_raw_spin_unlock+0xf5/0x210 [ 1570.001021][T14791] elevator_set_default+0x36c/0x430 [ 1570.001051][T14791] ? __pfx_elevator_set_default+0x10/0x10 [ 1570.001080][T14791] ? disk_register_independent_access_ranges+0x2db/0x380 [ 1570.001187][T14791] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1570.001334][T14791] blk_register_queue+0x366/0x430 [ 1570.001371][T14791] __add_disk+0x677/0xd50 [ 1570.001401][T14791] ? down_read+0x272/0x2e0 [ 1570.001429][T14791] add_disk_fwnode+0xfb/0x480 [ 1570.001460][T14791] nbd_dev_add+0x72c/0xb50 [ 1570.001491][T14791] ? __pfx_nbd_dev_add+0x10/0x10 [ 1570.001523][T14791] ? bpf_lsm_capable+0x9/0x20 [ 1570.001552][T14791] ? security_capable+0x7e/0x2c0 [ 1570.001584][T14791] nbd_genl_connect+0x962/0x1cf0 [ 1570.001606][T14791] ? __pfx___nla_validate_parse+0x10/0x10 [ 1570.001633][T14791] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1570.001657][T14791] ? rcu_is_watching+0x15/0xb0 [ 1570.001683][T14791] ? trace_kmalloc+0x2a/0x110 [ 1570.001707][T14791] ? __nla_parse+0x40/0x60 [ 1570.001729][T14791] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1570.001752][T14791] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1570.001777][T14791] genl_family_rcv_msg_doit+0x22a/0x330 [ 1570.001802][T14791] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1570.001830][T14791] ? __lock_acquire+0x6b5/0x2cf0 [ 1570.001858][T14791] genl_rcv_msg+0x61c/0x7a0 [ 1570.001881][T14791] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1570.001900][T14791] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1570.001928][T14791] netlink_rcv_skb+0x232/0x4b0 [ 1570.001955][T14791] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1570.001975][T14791] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1570.002017][T14791] ? down_read+0x272/0x2e0 [ 1570.002045][T14791] ? genl_rcv+0xd/0x40 [ 1570.002064][T14791] genl_rcv+0x28/0x40 [ 1570.002082][T14791] netlink_unicast+0x75c/0x8e0 [ 1570.002111][T14791] netlink_sendmsg+0x813/0xb40 [ 1570.002143][T14791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1570.002172][T14791] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1570.002190][T14791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1570.002214][T14791] ____sys_sendmsg+0x972/0x9f0 [ 1570.002247][T14791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1570.002281][T14791] ? import_iovec+0x73/0xa0 [ 1570.002304][T14791] ___sys_sendmsg+0x2a5/0x360 [ 1570.002336][T14791] ? __pfx____sys_sendmsg+0x10/0x10 [ 1570.002368][T14791] ? futex_wake+0x4ac/0x580 [ 1570.002410][T14791] ? __fget_files+0x2a/0x420 [ 1570.002426][T14791] ? __fget_files+0x3a0/0x420 [ 1570.002447][T14791] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1570.002477][T14791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1570.002511][T14791] ? rcu_is_watching+0x15/0xb0 [ 1570.002545][T14791] do_syscall_64+0x14d/0xf80 [ 1570.002567][T14791] ? trace_irq_disable+0x3b/0x150 [ 1570.002584][T14791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.002602][T14791] ? clear_bhb_loop+0x40/0x90 [ 1570.002624][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.002641][T14791] RIP: 0033:0x7ff5e479c819 [ 1570.002660][T14791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.002677][T14791] RSP: 002b:00007ff5e56c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1570.002698][T14791] RAX: ffffffffffffffda RBX: 00007ff5e4a15fa0 RCX: 00007ff5e479c819 [ 1570.002713][T14791] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000006 [ 1570.002726][T14791] RBP: 00007ff5e4832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1570.002738][T14791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1570.002750][T14791] R13: 00007ff5e4a16038 R14: 00007ff5e4a15fa0 R15: 00007ffcf0530c38 [ 1570.002778][T14791] [ 1570.530185][T14791] __nla_validate_parse: 3 callbacks suppressed [ 1570.530205][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11545'. [ 1570.611754][ T7272] block nbd83: Receive control failed (result -1) [ 1570.696293][T14791] nbd83: detected capacity change from 0 to 8192 [ 1570.738453][T14589] block nbd83: Dead connection, failed to find a fallback [ 1570.745706][T14589] block nbd83: shutting down sockets [ 1570.752565][T14589] blk_print_req_error: 138 callbacks suppressed [ 1570.752586][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1570.967100][T14589] buffer_io_error: 138 callbacks suppressed [ 1570.967124][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.017335][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.030272][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.052980][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.065237][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.074137][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.085116][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.102480][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.113191][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.131076][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.146057][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.154961][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.165682][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.183144][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.207512][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.215595][T14589] ldm_validate_partition_table(): Disk read failed. [ 1571.222677][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.236713][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.244705][T14589] I/O error, dev nbd83, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1571.256151][T14589] Buffer I/O error on dev nbd83, logical block 0, async page read [ 1571.266317][T14589] Dev nbd83: unable to read RDB block 0 [ 1571.278770][T14589] nbd83: unable to read partition table [ 1571.290327][T14589] ldm_validate_partition_table(): Disk read failed. [ 1571.300217][T14589] Dev nbd83: unable to read RDB block 0 [ 1571.306125][T14589] nbd83: unable to read partition table [ 1574.180273][ T7972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog