last executing test programs: 6.390932021s ago: executing program 3 (id=5949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002500010325bd7000fcffffff110000000800030048"], 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x20004044) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf}, 0x90) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @loopback, 0x10000}}, 0x0, 0x0, 0x4, 0x0, "61236b90dcdfe3ce2bb54fa6c4654e6c39d7ddcc4501330078eb7bf1597d638c7d4315210fb34d4c84c2f976071138016e8934b34d8b9cff05cd33c159c2c5a51f1bbe5b7d758286a3c82392b39a1d3f"}, 0xd8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) write(r3, &(0x7f0000000000)="ff5a9ffe", 0x4) close(r1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9953927c9d17452b6dcda3b2d6b0602e528d8d86e51f68d5de8ff45c5ce03df25eae3116ca5db7e1c37fe6f7f01c0216e1192ab0c40bf091a702dcd4dfa98c3f8ce79708adfa86abff31c977f6172b882cde529864e4b5919100d367fc4d64", @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES32, @ANYRES64], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100027bd7000fddbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0a001a00ffffffffffff00000a0006000808903f3a2654ffe28a738c39021100000100000a001a0008021100000000000a0006000802cac1040100000a001a001cffff0500ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 6.390548155s ago: executing program 3 (id=5950): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea07", 0xd, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r5, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r4, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 6.387938127s ago: executing program 4 (id=5955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1}, 0x80000001}], 0x1, 0x102, 0x0) sendmmsg(r0, 0x0, 0x0, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x1000, "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"}, &(0x7f0000001400)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001440)={r2, 0x4, 0x20}, 0xc) 6.078168908s ago: executing program 3 (id=5957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x800}) (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) 5.978687706s ago: executing program 4 (id=5958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c", 0xc}], 0x1}, 0x4041) 5.88017836s ago: executing program 0 (id=5959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c", 0xc}], 0x1}, 0x4041) (fail_nth: 1) 3.606052033s ago: executing program 3 (id=5960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[], 0xffdd) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000180)) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x9, 0xffffff00, 0x0, 0x5, 0x4, 0x8, 0x2}, 0x1c) 3.56608177s ago: executing program 4 (id=5961): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xfc1, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 3.513387614s ago: executing program 1 (id=5962): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x4}, 0x50) 3.446302846s ago: executing program 0 (id=5964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000003b01000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 3.418962106s ago: executing program 4 (id=5965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3000000}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dc36fc1514b5eec45a1324c9e1"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "16f8"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 3.377529913s ago: executing program 1 (id=5967): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r4, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 2.95083101s ago: executing program 4 (id=5968): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x300, 0x0, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x15, 0x0, &(0x7f0000000000)) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.772379869s ago: executing program 2 (id=5970): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000110087d44a372eaf541d000a07000000", @ANYRES32=r1], 0x44}}, 0x2000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2f, 0x2, &(0x7f0000000040)=@raw=[@generic={0x63, 0x1, 0x3, 0x8c, 0x713ac8be}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xaa, &(0x7f0000000100)=""/170, 0x40e00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x4, 0x0, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x1, 0x2, 0xa, 0xb}, {0x3, 0x1, 0xb, 0x4}, {0x0, 0x3, 0x8, 0x7}, {0x4, 0x5, 0x3}], 0x10, 0x22ef}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 2.676282576s ago: executing program 1 (id=5971): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2094) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = accept(r0, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000400)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="5b50ab67646456927fb380e4da5384558b36c1000010354b446e8634374654d46b432ddc249b3a9b828a5cc14b525180bf19b08942954be434cc5a207a0d3ff8db5c3861eff5e86bf0b827956316daaa10501530a680b41b0129ef06c096dd85527c17cd28a6fdd6d359691f4c9a07a7cf432f4294a66e9b966631e455e0d76f4950f311a43b8cb5bd54e63d97", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000380001800800080000000000060002002f00000008000500000000000800090000000000060001000a0000000c0007000000000000000000"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000600)=0x6, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000003ec0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003e80)={&(0x7f0000007440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x11c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x32, 0x6, "25503eb99057deb4dc27c65de0099de1b822ced345206bd4dd2c185f5ac55258335a289c83fa876ddc517ad5aae7"}, @NFTA_TABLE_USERDATA={0xbe, 0x6, "adfd324f29a4518d3ba0e2443ec8696f53dcfbee67df9e21ba0d42ff7f0000000000003f0ae383d3e7951bac9e9d4916c48421299df3c7955cde8f9b2a1016b473ce428df1cbf8614855dba30028608b67d3e240f68d476b58b635ad0397bff77315312094869364a96f2212fc3cfcf8897325de312e4a8627e06d3336bbab07c18377c49333e17d2b4412c0755f24c3166a5637176bf49f33435465204217ce8cd3b72b208ae2b1ed48fab63439815c33ff931b02c7a2151c91"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7ffd}]}, @NFT_MSG_NEWSETELEM={0x33a8, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3364, 0x3, 0x0, 0x1, [{0x16c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x12cc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x21, 0x1, "bd031855f876d57c3fe8667ec799fc2a2af95758662f1029ddd723ac5b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "519835155033b3bee915dc1cdc18e52e3b29e64dc81a3a265997489d17c929a83c4819c94e9cf0a4164ef2a23520700339be042b3da96ffdef786379cee4dbd5dd0e3f5a5ebbfe2f33ebe8ece349bfb283c302c1818f23c657ca82e4eb5b792d70f754956e73e6db"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0xd8, 0x1, "bd257fcc2662556cef8daaa6d21b1db0483ea42ef00b4b5d743ef168c4f3ce4540d0f1732d02f5b39caa9a8e8960b15c5627c0232dc9444158add3fcddb2105ef5273fc5c7309e33fcb05eac529bbd638bfcd7bc2b9e18a1840e9422de0149e12a87d2ac9eeab7a9c9a93c0e24f4b844e65bbd0a692d71cd31d3051a0e32e4c2cc5eacae888e31eb6665b563b5f043e0411e4b8830bd9de71b11f276de3f67fba626dd718e3b023260e1334f52b2a7f85e61cc40ff872ece4c02a77e87ae7d5e2c90b41058fb972752c6034ef8f4ff4271cfccfe"}]}, @NFTA_SET_ELEM_DATA={0x1ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "8f7634c669c50911b56099df63de6d7f5decc8e3399dad90c92ac4ae2fd603f93768d006a5cbfde48cd649ebcffb12a89410053e491ac252fa833d7f4cdcf38b20e90742d06b9a7a484d"}, @NFTA_DATA_VALUE={0xd3, 0x1, "a4234e0f4cd2e80024e788938772d32064e01a2981a5bdec0a99232fb7e7382c3ecfed7bd4333a167aa0faff19c14de60061ca7fd50b023c1f2a0b0bbe6b5d75892c285deb32443bc85d60ecdfae697a44ec9e594312233ff0c3b6cc36c796fbf94b895d079eb895b169794a1f37d19884aca40c84625950366bdc324aa30267d679594ef2acf81c45f0a76c2bdd6c9fab5d029aea88efe1de260a9f5d9f74069536d8b809b57e68c4a6bd9556fb3e0fc3d7fb55356690dc2e8590b13c782fe784fdd3c71d1744c856fb3732dbff2c"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x98, 0x1, "ca3e3d0c122e7793879da7e92b43ff52469b8a29de29aff6fa827e9b7a00c784371c0c2b0b3a9fadcb077936d30cea634fb9a23788a706074aa0d234defe2f3e06f870e05660b15e1c74d0b23aa2b5591e9b8aed27f7d873f7ee753f60c6d06cacc2870d5664979d96b2a9e8d8f5f1208b4e25373deb9161c8269dbbf4342381836037227bfad54400ff114cede4925e4b06eddc"}]}, @NFTA_SET_ELEM_USERDATA={0x47, 0x6, 0x1, 0x0, "85071a0c0417fabd12b12b24ad908436d3f4e2864198e66ace295c214a463f1e238485f20377f73f78068f7ce02b8dabda4455581a7728372f86858da7247af75015ad"}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}]}, @NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "dce80a109811e9999a038cde681defa298d46589832a4387967dc5c0ffe73681d6630a5b9fad9d0086ab7981dec504696a6e72ee4bdf61067e60495fc4a6ea952e6744f961fdbacd4e9ae11417c4de9c5f81604db78c8b61e1e7eaa2f596ee01596c3a5f9b25e150bf6a6ec17610babb373831182cff46da0b63fa99da9d23615e1e2756ea80c87d62ec448b7e825c51e925f92d97d348747c591bdec3cbf5eea7e7df4339e3d472c3a992e3b7a4e7f9ccf14e756067cfa45b64f22d53827c923a9e9c1a60abd2f8439c9410e180717c471839544f896a733de01f60bc4a32e14ddb123285"}, @NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "fdb1d93f774c481073c3c5444de9a72f000d0576e8d1efb30fe6d10c00f845eec83abcf97cd0a365277ba8d1f694335199b39301d0a044f16ce7a3936bc5a2530493b275bee37638d332343ba770d6bd81310c9ff3934c9c9e42d9e48419db492749dd07a25a727f980fc9c247846eeefe"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1a54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x12a4, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x130, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x120, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}, @NFTA_MATCH_INFO={0x7b, 0x3, "2062e5bef99b6e11384d5002454f5626ca63da187de4d4830f96777515efede6a955f05b4e9485367af9a3b25b9c88965298592c12d7f7a6d321cbe3d562f7bddfffa32279e68cbe831f3eb19d6eb7673fde8a2ac4fa10a31fdff42ca88c1e95d066bf38abf24cc9db91cca9f75d1b232253737b67ccce"}, @NFTA_MATCH_NAME={0xb, 0x1, 'recent\x00'}, @NFTA_MATCH_INFO={0x5f, 0x3, "851105628db2478ca78825cb098326f7416bcd4f292d213e56597cede67806013ec7e5a51fb7bcd95fed49688bd82c4cf4ef12e8033e06af8cb3bfd5baf0ad6a0b9081a864c5d362d70cee1dac6ca3208d3197456ea9f9d7c4d008"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0x8, 0x1, 'set\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}, {0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xdfeb32d727d66b03}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x44, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10c8, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10b8, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x80, 0x3, "799f6dd1a748f2bb0619e496587dc275e0f228f6c03b0732bb6532c01675018d29f3095febda6cf3bf505dc8df5cdbc11ee9fc83f477c76fb9518a9312928739539ff8f925fc8a9ff0ee4db1958c75d42bb0334b4ddb58837d7456c1b568957deaa239d75673b5e31b2c2c1054b1eee3372a8f71e4d2d2445d7fd2bf"}, @NFTA_MATCH_INFO={0x1004, 0x3, "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"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'udplite\x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x534, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x514, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x504, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0xfc, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "dabb27bf9807252995cd2d58f0493859fb1e883b5b08b5517fc5c47a38f6f6dc4457345740248a8ec89a2f05e8287920b849defa8714f7d18e47ee9c80da6ca528acbba5d635d602c70e378f4f1b00c68895ac70721137719a0113d292f15f360e05fbf8974aa160d72dfa940fddd74d92cb315e6c6cfef10675f96152ba972d432574c5971af5d4c3a5e18f0e6c6183ea1a78fee7c561f2d5fa07f76369a1726020"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x3f4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x42, 0x1, "43f8d549f776688c9518d1ddc0715fc27518c4cb29017409c7ec1a5956d59874e9d6bd8a105f813681d2179eed2a56bbc882deb36857570a5f38e83530ac"}, @NFTA_DATA_VALUE={0x6c, 0x1, "c6ce8f8f25091efeed28093547a4fe116557a24b7c276cb1a00d673a8362be5d42374b2d47b3f4f5e869c0df38d0ee4a190de8ac1c8bc6046146061f3ae3d451a21795e820914882c28abb48db7af288937c83950e2e1571f56635a1f9932d3bc0e69d98a882aca3"}, @NFTA_DATA_VALUE={0x74, 0x1, "d40aae810791acf555383aba574b09bdc46ef1384e7b0a4a5600d71ea5e34ba4bedd1b7373e1181878286b656970d31f0d13114d2f87fb9697d40560373ff0d5bec0f10664e83e2b6dbac637ece306d5c5421232576da78c5121a72566740c35b1ab84e4551db1fe96c2ff6bd782c132"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "7fa1ea7a65b911441cdafe5967fbe51919238cdf4a658e7b07ab6ebf8a053957e43b072664c426471c64ae4278b256ebe27a8740500ecec0201a3ca1e99fb3f851bbdf5a83978d816d97820872c56300a8faf50b94e9a93cbf7eedbfa1730bc31543f9022de49b32d415d4f390aaeb5c11e651c7857be5712c6043b2b28bbda4e993b14fce91c378d91ff3e3f2b91426fd74b6786a44270e50421881e550f31f6c6be1502f502caae47b192c4bbb5cc4a07ed81b06ab5bef905e29902be3e33885d2bb061d2c5e"}, @NFTA_DATA_VALUE={0xd3, 0x1, "0c80ce1a262c498bda2c282c304c6de12f1386ea5f27adaf93494647f2ac068e26690c4ae2e18e0d9ae351dc5a01fa3a0e85e4bd11b1bad9da0132fdc8c5b1e5253e0e351dfcd75fabe58d534f5204591cc1235d11f9d5d6c1ce1b101f7c4b80fb64fbcdfdffd3506538300e087e07994e4acad4b8381251af8f0542f231db8e14f56ec1d49993c3daef98e1a67fb7391f56d9c551235ed162783962c89debacc97c400bba410b678587e6affb8286949d1226df73a5ae0abcc712b9df54399a1b4b9dddba81fc68db7a6f9565e5f8"}, @NFTA_DATA_VALUE={0xe5, 0x1, "48081b81da102fe28a9b43700c3bfae65e6ae3abd3c2b913918b21b1f0febe33ab14dbed49f397130bcc2556adbea0f5a6c6b59f34f0b04a44ec5f8964ccd7d7eb9a3bc328a73276864c4400d5f6d28e1e05c922062b5e606bd471f38fdae06af0f5a05bca6a4d73f1d6009a46c4d493d071acdf3fe97129357f781c1222140be23eea92035234dfa173ab7e83363092c3a459bb16eccd0fb63f4bebd3e6bc002ede7f0f1846de6143feb1b8ab707ed51163c2699f6695186269695adc7410ac4fff4dd41f0b73df00e7b31e3870fc51316dc360de80e4d08827f0e621617b13e1"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x190, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xfc}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x9f, 0x3, "9d2e5ac9488fa76811920c84aeaa3261735ac5e3590474429682f627082f927befa0611c082255e2ee5e7be6310b07bfdcabc964d74982b55cacd97805a44cdec0da5fd00f52cebdd671f150d8e0838f3e8e86cfa7781481feba52b5be3f6afe20622b084ef58b903fdbc0ff5011d5668da35a139abe4734ed7689be05ed57d31855a71460d9a37fd951d34eae50d2e8ac73f59d727065a7114389"}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dccp\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xc5, 0x6, 0x1, 0x0, "8cd3fb94df1d11ae8ff0c5c20334db903142bfeda509cc918278b5d7fbb45d09943ece60bf4a4e8738f48fd888b9942e9743ccae6891b65c1753fa72fc51a13dca7dae0cc764da4164a1ca7d1c754b6f40ad859552fb388fd887aa7328459a81c3457e48ff57a067f3f63b9fee8d596540244e9d3deec81590f4f33332be3c3b6f44b274d83cc93a692e42cd82c0f09dacff8f021e8f6e82c5b1847e50ebc0781e1eebe3f1ea52f93516ec0b52bd66cedfde78b1eae2554c85473bd5542a7f7bde"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "70fef3c606b1ae"}, @NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2df0c049f9d774ff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x7, 0x1, "e21e7d"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x148, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "f124e7910eb0362ae19d96256caf7040ea1f9103963f4049ad1286321669673a4fce13be71e36486fbdc08159f7edc4edef440cb68b7d224c5a35cc2149c061ceb14033d7cc9d3c8a11aee7d996cd54c2d5e7563c3"}, @NFTA_DATA_VALUE={0xe5, 0x1, "cfa28458e2d23fd5d9076f9bcf0e72eac701e872f70847077478f4ef0a9a0d8b440df3754e17054b8738ee72d69fbb247a4fb99ecf3aa3e8aecd3023c7bd2b185fdee638ba6bc4b2c9e63eb86633ec49759289c6709ca889291defa6f22eb6b72d274d967f1b4fa5b30e615e41a96474e927a01880f163f93b456422b3f45cb5ead2946c3f8b494fc615b40281af505501d680c51dca51968fe7be61766606181e1ed953113dbde1d8a89ffadcb6e728addbfb6860226987ec5e6f942019c40b6b689523d7e15ee0ce5ae5cc144542f1a444c4f8580012d1489a0115a645e98111"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x49, 0x6, 0x1, 0x0, "f8ad17a945a9e4e9faac4f5c4a2576b04854a3c5e60091c1faa17b6f4c0ff9b73488e20ce2e574e66c8ab6f3d8e19e2e96243cf81342644a92c26ed6a7eb089f687a310355"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3524}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100210000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000f21000010000000000000000000200000a14000000020a0102000000000100000000000008140000000b0a010400000000000000000500000a140000001100010000000000000000000000000ab9c7"], 0x50}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r7, 0x400454ce, 0xa) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xe0901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r9, @ANYRES32=r4], 0x44}}, 0x0) 2.616622647s ago: executing program 2 (id=5972): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x4, 0x6, [0x6, 0x0, 0x1, 0x7d8, 0x4, 0x3]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @multicast1}}, 0x6, 0xd69, 0x6, 0x6, 0x47, 0xa, 0x3}, 0x9c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r1, 0xfff}, &(0x7f0000000180)=0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x45, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000200)=0x3) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000240)=0x1) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000280)) r3 = accept4$llc(0xffffffffffffffff, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10, 0x800) recvmmsg(r3, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/62, 0x3e}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/11, 0xb}], 0x6, &(0x7f0000000700)=""/4096, 0x1000}, 0x4}], 0x1, 0x10101, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000001740)={0x68, 0x6, 0xd9c, 0x2c000000, 0x10}) ioctl$FIONCLEX(r2, 0x5450) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000001780)={0xfe, 0x3, 0x2}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f00000017c0)={0x1a, 0x103, 0x3, 0x5, 0xf9, 0x1, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'sit0\x00', &(0x7f0000001800)={@remote, @rand_addr=0x64010101, 0x17, 0x8}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001980)={r3, &(0x7f0000001880)='\x00', 0xb80, &(0x7f00000018c0)={@_ha_fsid={[0x4, 0x4]}, {0xfe5c, 0x0, 0x9f68, 0x9}}, 0x332, &(0x7f0000001900), &(0x7f0000001940)=0x4d}) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f00000019c0)) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000001a00)=0x2) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000001a40)) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000001a80)=0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001b00)={'wg1\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)=@delqdisc={0xa8, 0x25, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0x5}, {0x1, 0x10}, {0xa, 0xffe0}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x27}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x23}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8001}, 0x90f1adc3b32f7b02) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000001c80)={0x1, 0xcb, 0x1}) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000001cc0)=0x200) r7 = accept4$netrom(r5, 0x0, &(0x7f0000001d00), 0x80800) getsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f0000001d40)=0x678, &(0x7f0000001d80)=0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000001dc0)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000001e00)=0x9, 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000020c0)={{r3}, 0x0, 0x12, @inherit={0x60, &(0x7f0000002040)={0x1, 0x3, 0x2, 0x2, {0x8, 0x7, 0x8, 0x81f0, 0x6}, [0x4, 0x8, 0xfe95]}}, @name="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"}) 597.202507ms ago: executing program 3 (id=5973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) close(r3) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c", 0xc}], 0x1}, 0x4041) 494.01045ms ago: executing program 0 (id=5974): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r2, 0x2f, 0x8, 0x4}, 0x20) 466.303463ms ago: executing program 4 (id=5975): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) accept(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x88100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7f}, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtclass={0x50, 0x28, 0x300, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0x8}, {0xffff, 0x4}, {0x3, 0xb}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 465.426711ms ago: executing program 2 (id=5976): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 408.570167ms ago: executing program 1 (id=5977): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r1, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x2400c010) (async) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 314.042692ms ago: executing program 0 (id=5978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4000000}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dc36fc1514b5eec45a1324c9e1"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "16f8"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 312.915139ms ago: executing program 2 (id=5979): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000140)=""/135, 0x87, 0x0, &(0x7f0000000200)=""/167, 0xa7}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2e}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) close(0x4) 277.52383ms ago: executing program 1 (id=5980): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800c000b0006000000000000000c00020000"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0xd, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000080)=""/113, 0x2e, 0x71, 0x0, 0x2}, 0x28) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x2}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRESOCT=0x0, @ANYRES32=r5, @ANYRES16=r2, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x9, r1}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000640)=r6, 0x4) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800c000b0006000000000000000c00020000"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0xd, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000080)=""/113, 0x2e, 0x71, 0x0, 0x2}, 0x28) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) (async) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x2}}, 0x14) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRESOCT=0x0, @ANYRES32=r5, @ANYRES16=r2, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x9, r1}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) (async) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000640)=r6, 0x4) (async) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000340)) (async) 269.1607ms ago: executing program 3 (id=5981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400001, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000000040)={r0, 0x0, 0xd, 0x1353, 0x5, 0x1}) (async, rerun: 32) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000080)={{r1}, "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"}) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000001080)=0x7a9c, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = accept$inet6(0xffffffffffffffff, &(0x7f00000010c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001100)=0x1c) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000001140)={@remote, @mcast2, @empty, 0x6, 0x6, 0x8, 0x500, 0xfff, 0x1080040}) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f00000011c0)={'vlan1\x00', 0x1}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001200)={'hsr0\x00', 0x0}) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000001240)={r2, 0x0, 0x0, 0x8708, 0xfffffffffffffff0, 0x1}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x14, &(0x7f0000001280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xf8000000, 0x0, 0x0, 0x0, 0xd6}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x49ba}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val, @alu={0x4, 0x0, 0x2, 0x7, 0x1, 0x18}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000001340)='syzkaller\x00', 0x5, 0xb7, &(0x7f0000001380)=""/183, 0x41000, 0x54, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0xf, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000014c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r6], &(0x7f0000001500)=[{0x4, 0x5, 0xf}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x3, 0xe, 0x8}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001700)={@cgroup, 0x12, 0x1, 0x7, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001640)=[0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0], 0x0}, 0x40) (async) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001780), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@ifindex=r7, r8, 0x1a, 0x2004, 0x0, @value=r10, @void, @void, @void, r9}, 0x20) (async) pipe(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0xc020f509, &(0x7f0000001800)={r1, 0x4, 0x9, 0x200000000000}) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'vxcan1\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000001880)={0x1d, r14, 0x1, {0x2, 0x1, 0x3}, 0xfd}, 0x18) getsockname$packet(r12, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001940)=r8, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000001980)=[@timestamp, @window={0x3, 0x4, 0xad}, @window={0x3, 0x7f, 0x1}, @mss={0x2, 0xb5f}, @timestamp], 0x5) splice(r3, &(0x7f00000019c0)=0x8, r5, &(0x7f0000001a00)=0x72630101, 0xc9a7, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001ac0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, [0x7, 0x4, 0xc0000000000, 0xac1, 0x5, 0x9, 0x2, 0x8, 0x0, 0xeae, 0x6d6, 0x8, 0x81, 0x2, 0x400]}, &(0x7f0000001bc0)=0x100) 214.075225ms ago: executing program 0 (id=5982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x2040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf53, 0x7}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x8000000000000001, 0x1, [0x4, 0x4, 0x800000000, 0x0, 0x4], [0x6ca7, 0x2, 0xffffffff, 0xc5ce, 0x2, 0x5, 0x365, 0x80, 0x2, 0x21d5, 0xd, 0x10, 0xfffffffffffffff3, 0x6, 0x6c2, 0x6, 0x10000, 0x80, 0x8000, 0x2, 0x2, 0x55f, 0x0, 0x0, 0xfffffffffffffff7, 0x100000000, 0x401, 0x6, 0x8, 0x575, 0x3e12449, 0x0, 0x0, 0x8, 0x5, 0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0x8, 0x0, 0x8, 0xb, 0x9, 0x1, 0xddac, 0x7, 0x74ce, 0x4, 0xffffffffffffffff, 0x800, 0x1, 0xc932, 0x8000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x6ddc4fed, 0x8, 0x4, 0x4, 0x5, 0x3ff, 0x3, 0x7, 0x4, 0x3, 0x0, 0xffffffff80000000, 0x2, 0x1, 0x63f, 0xf4, 0x9cee, 0x0, 0x2, 0x1, 0x3, 0x5, 0xfffffffffffffffd, 0xa, 0x4, 0xc, 0x100000001, 0x3, 0x9, 0xa002, 0xf, 0xfffffffffffffffd, 0x2, 0x100, 0xbdc0, 0x6, 0x5, 0x3, 0x8, 0x6, 0x4, 0x2, 0xfffffffffffffff8, 0x7f, 0x100, 0x1, 0x19ed, 0x7, 0x2, 0x100, 0x5, 0x9, 0x6e, 0x1, 0x100000001, 0x9e7e, 0x4, 0x7]}) r3 = accept(r0, 0x0, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000880)={0x81, 0xb, 0x0, 0x5, 0x8, 0xffffffff, 0x6}, &(0x7f00000008c0)=0x20) sendmsg$nl_route(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd29, 0x25dfdbff, {0x80, 0x0, 0x0, 0x6, 0xff, 0x3, 0xff, 0x7}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301410000000000950000004d000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 190.52826ms ago: executing program 2 (id=5983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4, 0xff, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001900)={r4, 0x3182, 0x4, [0x8, 0x4, 0xff9c, 0xb9]}, &(0x7f0000001940)=0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000018c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x58, r5, 0x300, 0x70bd26, 0x6, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20004040) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r8) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x14, r9, 0xd5c15c672e322a81}, 0x14}}, 0x20000008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000280)={r10}, &(0x7f0000000340)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x31}, 0x94) sendmsg(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)="eb2e7afc550a6e44088065dbe2ee08209713f981c13010f1af131249b4d4f1e73e47", 0x22}, {&(0x7f0000000180)="b08e143b20880b1bbcbe406b621bb2ba1308b12aca524d99e4b970d043724c004576ea57900f6166e00905749be35563d66b5f4addc2ccf5eac79c3a19b006f2e9bdf2f5a6c7efc22f2369015e0f62fedad46e0b56", 0x55}, {&(0x7f00000002c0)="54b0ce36c0d314fb14c18d7db63a7b4177d5030396528d721797404e20a4661bdb781497b188d45c7659452735a8f5925c33e5b039a7495c9e590af0dc03a59a439e8e35ec805879a55752237498f578b7fd5af564926416b1da745e245b204451a8b4f3cf762a96c07f12966f5f056e34187dbfb18295e693369db21639fee3a958e2c2b7d625ebe0287e0007c206a81b17f4b4cb184b8df318f358", 0x9c}, {&(0x7f0000000380)="a1135b158621a60cc1d3598d05f2895a4c7352dff0267e9ab17defecb375e395b9def25e2ace7d26fe1c523f038dbefa07f67bbe4ac26a44ede2f2218ec5ff08337572be4a562b4ec21dc88d31c32e14f53795028bd3386c1fd69ce8a0b90ab6274acade513fd6700be13b40a04d6999f9d006dee97d2cec75c96b3397f2ae4a666828", 0x83}, {&(0x7f0000000440)="9c5b8da882d7995c77e8c503f375dfe03786029d1d6346d7cfc3f8982456cf859cc71620d5d6bfef0374bd44bcfa", 0x2e}, {&(0x7f0000000480)="3a3555b9b4f6f9b401b5fa3838ff451ba204686295bd47d6756c4f0cf7be7a389df0557da07f39da7592fbc467cfa000293f1a64d8cc351c683c69f5c9ea0f0c003968dcf50b4916b8ace6e448bfa4987cd43660cd915eab23c4a0fa299d3f353b30e28cbd4b429dd31d9b15c09840c1b01215eb", 0x74}, {&(0x7f0000000500)="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", 0x1000}], 0x7, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x228}, 0x10010) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200100001900010400000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000200102000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000001000000000009c58ebe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00020000005400080050000800003f48000469279fdfb4d61f875a85a4281346abb932025eb6acbd59dedeaef97f5bc7dfc96de5315ade683ad0653ae56641ab2e4ef656cec35705181727e04a49ade0c320770e55f35f821b0c00150000000000ff"], 0x120}}, 0x0) 127.45466ms ago: executing program 0 (id=5984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000003c01000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 66.708728ms ago: executing program 1 (id=5985): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000de7503c32e3a8a32aa809cdf0da6f5988cc8e5793f885645df37911501e4f1deae028f982b111f2d1dd9288dab1d2d87301ab9533cdcac515919491cda8734e76ec6883dd86677ebedadd0074e15915e653f095d47beac9a5d4fd2dcf51a321e9f0efb9c39199b47906ab2790768883ed8f39b282dd4a2", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x1}], 0x1}}], 0x1, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=5986): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e80)=ANY=[@ANYRES8=0x0], 0x31f4}, 0x1, 0x0, 0x0, 0xd61fc3b143bf2ac}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000000010028f) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, 0x0, &(0x7f0000000180)=0x90) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f00000000c0), 0x4) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x5c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8015) close(r1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0x2000c014) kernel console output (not intermixed with test programs): tributes in process `syz.0.4353'. [ 608.963131][T21380] netlink: 'syz.0.4353': attribute type 1 has an invalid length. [ 608.974178][T21380] xt_l2tp: v2 doesn't support IP mode [ 608.987266][T21384] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4355'. [ 609.053230][T21386] bond2 (unregistering): Released all slaves [ 609.237217][T21399] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4359'. [ 609.253529][T21399] netlink: 'syz.0.4359': attribute type 6 has an invalid length. [ 609.263523][T21399] netlink: 'syz.0.4359': attribute type 5 has an invalid length. [ 609.689474][T21428] __nla_validate_parse: 5 callbacks suppressed [ 609.689495][T21428] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4367'. [ 609.764778][T21439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4369'. [ 609.819705][ T7969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.831648][T21442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.847508][T21434] lo speed is unknown, defaulting to 1000 [ 609.873613][ T7969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.886781][T21434] wg1 speed is unknown, defaulting to 1000 [ 610.214745][T21452] syzkaller1: entered promiscuous mode [ 610.230712][T21452] syzkaller1: entered allmulticast mode [ 610.430366][T21460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4375'. [ 610.568482][T21472] openvswitch: netlink: Flow key attr not present in new flow. [ 610.760908][T21480] netlink: 'syz.2.4383': attribute type 4 has an invalid length. [ 610.780241][T21480] netlink: 'syz.2.4383': attribute type 1 has an invalid length. [ 610.829583][T21480] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4383'. [ 610.913796][T21485] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4386'. [ 610.943382][T21487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4384'. [ 611.102384][T21495] netlink: 'syz.4.4385': attribute type 1 has an invalid length. [ 611.296837][T21495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 611.318220][T21493] syzkaller1: entered promiscuous mode [ 611.355910][T21493] syzkaller1: entered allmulticast mode [ 611.884900][T21533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4397'. [ 611.950185][T21533] netlink: 'syz.3.4397': attribute type 8 has an invalid length. [ 611.973011][T21533] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4397'. [ 612.081002][T21552] syzkaller1: entered promiscuous mode [ 612.086818][T21552] syzkaller1: entered allmulticast mode [ 612.346485][ T1683] block nbd0: Possible stuck request ffff888026f80000: control (read@0,1024B). Runtime 270 seconds [ 612.358904][ T1683] block nbd0: Possible stuck request ffff888026f80200: control (read@1024,1024B). Runtime 270 seconds [ 612.370685][ T1683] block nbd0: Possible stuck request ffff888026f80400: control (read@2048,1024B). Runtime 270 seconds [ 612.382268][ T1683] block nbd0: Possible stuck request ffff888026f80600: control (read@3072,1024B). Runtime 270 seconds [ 612.516843][T21571] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.4412'. [ 612.971381][T21589] netlink: 'syz.0.4417': attribute type 4 has an invalid length. [ 613.049662][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4417'. [ 614.188204][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.197634][ T8570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.207136][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.224784][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.284661][ T25] block nbd1: Possible stuck request ffff888027028000: control (read@0,1024B). Runtime 180 seconds [ 614.295872][ T25] block nbd1: Possible stuck request ffff888027028200: control (read@1024,1024B). Runtime 180 seconds [ 614.310168][ T25] block nbd1: Possible stuck request ffff888027028400: control (read@2048,1024B). Runtime 180 seconds [ 614.321707][ T25] block nbd1: Possible stuck request ffff888027028600: control (read@3072,1024B). Runtime 180 seconds [ 614.574911][T21677] netlink: 'syz.4.4439': attribute type 1 has an invalid length. [ 614.745097][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.954944][T21695] __nla_validate_parse: 2 callbacks suppressed [ 614.954970][T21695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4444'. [ 615.027251][T21702] netlink: 'syz.1.4447': attribute type 15 has an invalid length. [ 615.036774][T21699] tipc: Failed to obtain node identity [ 615.050160][T21699] tipc: Enabling of bearer rejected, failed to enable media [ 615.249390][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4448'. [ 615.278951][T21715] netlink: 'syz.3.4448': attribute type 3 has an invalid length. [ 615.305327][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.355608][T21715] netlink: 'syz.3.4448': attribute type 3 has an invalid length. [ 615.769100][T21742] xt_hashlimit: size too large, truncated to 1048576 [ 616.188336][ T3534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.198002][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.212796][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.241318][T21758] netlink: 'syz.4.4460': attribute type 2 has an invalid length. [ 616.354725][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.765577][T21801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4471'. [ 616.803783][T21801] bond3: entered promiscuous mode [ 616.810329][T21801] bond3: entered allmulticast mode [ 616.818132][T21801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 619.305033][ T10] net_ratelimit: 3 callbacks suppressed [ 619.305050][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.395707][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.405090][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.414136][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.576611][T21785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.809741][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 619.829196][T21820] vlan2: entered promiscuous mode [ 619.845312][T21820] vlan2: entered allmulticast mode [ 619.855641][T21820] hsr_slave_1: entered allmulticast mode [ 619.874941][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 619.908009][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 619.932941][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 619.946708][T21820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4475'. [ 620.050633][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 620.065016][T21834] netlink: 'syz.4.4481': attribute type 33 has an invalid length. [ 620.083619][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 620.164923][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 620.199491][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 620.222521][T21843] x_tables: unsorted entry at hook 2 [ 620.245765][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 620.275475][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 620.285866][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 620.295773][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 620.305713][T21826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 620.320513][T21849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4486'. [ 620.402297][T21854] netlink: 'syz.2.4486': attribute type 2 has an invalid length. [ 620.425964][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.458159][T21855] netlink: 'syz.1.4488': attribute type 10 has an invalid length. [ 621.050932][T21891] ip6gre1: entered allmulticast mode [ 621.155464][T21897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.167089][T21899] netlink: 'syz.4.4500': attribute type 2 has an invalid length. [ 621.207112][T21899] 9: entered promiscuous mode [ 621.322177][T21905] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 621.440003][T21911] netlink: 'syz.3.4506': attribute type 23 has an invalid length. [ 621.465138][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.522578][T21918] sctp: [Deprecated]: syz.4.4508 (pid 21918) Use of int in maxseg socket option. [ 621.522578][T21918] Use struct sctp_assoc_value instead [ 621.531742][T21917] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20001 [ 621.551204][T21917] netlink: 'syz.3.4507': attribute type 21 has an invalid length. [ 621.947309][ T8570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.956452][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.658626][T21989] sctp: [Deprecated]: syz.4.4531 (pid 21989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.658626][T21989] Use struct sctp_sack_info instead [ 622.736899][T21994] xt_hashlimit: size too large, truncated to 1048576 [ 622.787371][T21997] : renamed from vxcan1 [ 622.875299][T21998] veth1_vlan (unregistering): left allmulticast mode [ 623.987793][T22040] netlink: 'syz.1.4548': attribute type 1 has an invalid length. [ 624.067670][T22051] xt_socket: unknown flags 0x50 [ 624.260706][T22067] netlink: 'syz.2.4555': attribute type 8 has an invalid length. [ 624.450785][T22079] netlink: 'syz.1.4561': attribute type 21 has an invalid length. [ 624.512498][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 624.585784][T10600] net_ratelimit: 4 callbacks suppressed [ 624.585803][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.985072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.996257][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.372468][T22134] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 625.390802][T22137] xt_socket: unknown flags 0x50 [ 625.399843][T22138] __nla_validate_parse: 34 callbacks suppressed [ 625.399864][T22138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4579'. [ 625.417288][T22138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4579'. [ 625.426616][T22138] netlink: 'syz.0.4579': attribute type 6 has an invalid length. [ 625.437470][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4576'. [ 625.484646][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4576'. [ 625.625663][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.785151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.930516][T22168] netlink: 'syz.2.4588': attribute type 4 has an invalid length. [ 626.012987][T22171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4590'. [ 626.152100][T22182] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4592'. [ 626.195684][T22187] netlink: 'syz.2.4588': attribute type 4 has an invalid length. [ 626.207655][T22176] lo speed is unknown, defaulting to 1000 [ 626.225822][T22176] wg1 speed is unknown, defaulting to 1000 [ 626.299508][T22192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4593'. [ 626.530398][T22199] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 626.646311][T22202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'. [ 626.664857][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.850106][T22212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4602'. [ 626.877100][T22214] netlink: 'syz.0.4601': attribute type 21 has an invalid length. [ 626.929579][T22214] netlink: 'syz.0.4601': attribute type 6 has an invalid length. [ 626.986106][T22214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4601'. [ 627.067043][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.076103][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.889441][T22262] IPv6: NLM_F_CREATE should be specified when creating new route [ 627.915578][T22263] syzkaller1: entered promiscuous mode [ 627.937123][T22263] syzkaller1: entered allmulticast mode [ 628.050069][T22270] netlink: 'syz.2.4622': attribute type 16 has an invalid length. [ 628.064802][T22270] netlink: 'syz.2.4622': attribute type 17 has an invalid length. [ 628.314026][T22287] netlink: 'syz.0.4628': attribute type 29 has an invalid length. [ 628.330483][T22287] netlink: 'syz.0.4628': attribute type 29 has an invalid length. [ 628.391285][T22287] netlink: 'syz.0.4628': attribute type 32 has an invalid length. [ 628.692622][T22305] bond6: entered promiscuous mode [ 628.698029][T22305] bond6: entered allmulticast mode [ 628.719180][T22305] 8021q: adding VLAN 0 to HW filter on device bond6 [ 628.759080][T22316] syzkaller1: entered promiscuous mode [ 628.764795][T22316] syzkaller1: entered allmulticast mode [ 629.296724][T22354] veth9: entered promiscuous mode [ 629.315247][T22353] H: renamed from dummy0 [ 629.406336][T22349] macvtap1: entered promiscuous mode [ 629.412293][T22349] macvtap1: entered allmulticast mode [ 629.421007][T22349] veth1_vlan: entered allmulticast mode [ 629.486654][T22349] macvtap2: entered promiscuous mode [ 629.492634][T22349] macvtap2: entered allmulticast mode [ 629.580351][T22360] syzkaller1: entered promiscuous mode [ 629.586584][T22360] syzkaller1: entered allmulticast mode [ 629.784976][T10600] net_ratelimit: 4 callbacks suppressed [ 629.784996][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.024630][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 630.032771][ C0] lec:lec_tx_timeout: lec0 [ 630.189064][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.255918][T22404] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 630.417016][T22405] __nla_validate_parse: 13 callbacks suppressed [ 630.417041][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4660'. [ 630.461039][T22415] gtp1: entered promiscuous mode [ 630.468209][T22415] gtp1: entered allmulticast mode [ 630.584292][T22419] syzkaller1: entered promiscuous mode [ 630.604695][T22419] syzkaller1: entered allmulticast mode [ 630.770953][T22429] netlink: 5068 bytes leftover after parsing attributes in process `syz.3.4671'. [ 630.828193][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.011417][T22447] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4675'. [ 631.030698][T22445] batadv0: entered promiscuous mode [ 631.042085][T22445] hsr1: entered promiscuous mode [ 631.056490][T22445] hsr1: entered allmulticast mode [ 631.057082][T22451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4676'. [ 631.084787][T22445] bond0: entered allmulticast mode [ 631.090159][T22445] bridge3: entered allmulticast mode [ 631.096255][T22445] batadv0: entered allmulticast mode [ 631.102220][T22445] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 631.114988][T22445] batadv0: left promiscuous mode [ 631.123555][T22452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4676'. [ 631.155485][T22455] veth0: entered promiscuous mode [ 631.253392][T22457] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4677'. [ 631.268214][T22461] validate_nla: 3 callbacks suppressed [ 631.268235][T22461] netlink: 'syz.4.4679': attribute type 1 has an invalid length. [ 631.282784][T22462] netlink: 'syz.4.4679': attribute type 1 has an invalid length. [ 631.396338][T22469] netlink: 'syz.1.4681': attribute type 1 has an invalid length. [ 631.427084][T22464] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 631.438951][T22464] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 631.476347][T22469] bond7: entered promiscuous mode [ 631.481905][T22469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 631.501181][T22471] bond7: (slave bridge7): making interface the new active one [ 631.511071][T22471] bridge7: entered promiscuous mode [ 631.517706][T22471] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 631.638410][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4682'. [ 631.831408][T22444] veth0: left promiscuous mode [ 631.865225][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.904850][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.064913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.073525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.226529][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.807930][T22435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.954709][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.024194][T22496] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 634.090424][T22496] 8021q: adding VLAN 0 to HW filter on device bond6 [ 634.182538][T22496] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 634.195353][T22496] netlink: 'syz.2.4689': attribute type 2 has an invalid length. [ 634.686669][T22519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4696'. [ 634.746159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.984996][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.150338][T22551] x_tables: unsorted underflow at hook 4 [ 635.168483][T22550] syzkaller1: entered promiscuous mode [ 635.193548][T22550] syzkaller1: entered allmulticast mode [ 635.201312][T22551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4703'. [ 636.028216][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.036478][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.184865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.193161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.221451][T22581] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4711'. [ 636.265884][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.418862][T22586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4712'. [ 636.508926][T22590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4715'. [ 636.523829][T22590] netlink: 'syz.3.4715': attribute type 39 has an invalid length. [ 636.539454][T22590] hsr_slave_1 (unregistering): left promiscuous mode [ 636.576937][T22591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4715'. [ 637.064906][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.785886][T22535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 637.939392][T22606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.106053][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.169279][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4724'. [ 638.395290][T22636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4727'. [ 638.452186][T22638] netlink: 'syz.1.4729': attribute type 1 has an invalid length. [ 639.144885][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.304899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.185094][T10600] net_ratelimit: 3 callbacks suppressed [ 640.185123][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.344720][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 641.225365][ T9187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.428340][T22640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.456984][T22650] netlink: 'syz.0.4732': attribute type 1 has an invalid length. [ 641.502516][T22650] netlink: 'syz.0.4732': attribute type 3 has an invalid length. [ 641.522396][T22650] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4732'. [ 641.533914][T22650] NCSI netlink: No device for ifindex 813332851 [ 641.682855][T22684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4744'. [ 641.773145][T22688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.782870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.794408][T22684] hsr_slave_0 (unregistering): left promiscuous mode [ 641.959273][T22691] bond8: option min_links: invalid value (18446744073709551614) [ 641.978499][T22691] bond8: option min_links: allowed values 0 - 2147483647 [ 641.992911][T22691] bond8 (unregistering): Released all slaves [ 642.266632][T10600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.347693][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.424825][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 642.424965][ T1683] block nbd0: Possible stuck request ffff888026f80000: control (read@0,1024B). Runtime 300 seconds [ 642.450920][ T1683] block nbd0: Possible stuck request ffff888026f80200: control (read@1024,1024B). Runtime 300 seconds [ 642.464693][ T1683] block nbd0: Possible stuck request ffff888026f80400: control (read@2048,1024B). Runtime 300 seconds [ 642.476433][ T1683] block nbd0: Possible stuck request ffff888026f80600: control (read@3072,1024B). Runtime 300 seconds [ 642.505024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.532521][T22741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4759'. [ 642.563304][T22744] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4760'. [ 642.574130][T22744] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4760'. [ 642.584204][T22744] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4760'. [ 642.594822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.606410][T22744] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4760'. [ 642.616214][T22744] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4760'. [ 642.625770][T22744] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4760'. [ 642.628380][T22746] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4759'. [ 643.168781][T22772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.306522][ T9187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.345329][ T25] block nbd1: Possible stuck request ffff888027028000: control (read@0,1024B). Runtime 210 seconds [ 644.356511][ T25] block nbd1: Possible stuck request ffff888027028200: control (read@1024,1024B). Runtime 210 seconds [ 644.367905][ T25] block nbd1: Possible stuck request ffff888027028400: control (read@2048,1024B). Runtime 210 seconds [ 644.379310][ T25] block nbd1: Possible stuck request ffff888027028600: control (read@3072,1024B). Runtime 210 seconds [ 645.102238][T22710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.384869][ T5830] net_ratelimit: 2 callbacks suppressed [ 645.384890][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.398857][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.784946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.989503][T22869] syzkaller1: entered promiscuous mode [ 646.996320][T22869] syzkaller1: entered allmulticast mode [ 648.706118][T22824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.719785][T22832] __nla_validate_parse: 59 callbacks suppressed [ 648.719806][T22832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4791'. [ 648.889796][T22876] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4804'. [ 648.945607][T22876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4804'. [ 648.989473][T22876] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4804'. [ 649.000849][T22876] netlink: 'syz.2.4804': attribute type 3 has an invalid length. [ 649.009304][T22876] netlink: 'syz.2.4804': attribute type 2 has an invalid length. [ 649.019703][T22876] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4804'. [ 649.420050][T22901] netlink: 'syz.2.4810': attribute type 27 has an invalid length. [ 649.456363][T22901] netlink: 'syz.2.4810': attribute type 2 has an invalid length. [ 649.775207][T22925] vcan0: tx address claim with dest, not broadcast [ 649.935976][T22936] netlink: 'syz.3.4825': attribute type 1 has an invalid length. [ 649.981056][T22936] bond2: entered promiscuous mode [ 649.986532][T22936] bond2: entered allmulticast mode [ 649.992255][T22936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.005349][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4825'. [ 650.108252][ T7969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.304296][T22960] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4828'. [ 650.446588][T22975] : entered promiscuous mode [ 650.607236][T22983] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4834'. [ 651.024336][T23001] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4840'. [ 651.079603][T23003] netlink: 'syz.1.4843': attribute type 1 has an invalid length. [ 651.087686][T23003] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4843'. [ 651.109562][T23008] netlink: 'syz.2.4844': attribute type 1 has an invalid length. [ 651.277518][T23015] netlink: 'syz.3.4846': attribute type 1 has an invalid length. [ 651.304800][T23015] netlink: 'syz.3.4846': attribute type 2 has an invalid length. [ 651.464473][T23020] netlink: 'syz.2.4851': attribute type 4 has an invalid length. [ 651.782078][ T5194] udevd[5194]: worker [6492] /devices/virtual/block/nbd1 timeout; kill it [ 651.803071][ T5194] udevd[5194]: seq 21398 '/devices/virtual/block/nbd1' killed [ 651.885042][T23041] xt_ecn: cannot match TCP bits for non-tcp packets [ 651.919629][T23041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.945599][T23041] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 652.110783][T23055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.119924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.930662][T23102] syzkaller1: entered promiscuous mode [ 652.944811][T23102] syzkaller1: entered allmulticast mode [ 653.328287][T23125] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 653.397859][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.409368][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.429848][T23125] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode [ 653.453396][T23125] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode [ 653.541753][T23134] tipc: Failed to obtain node identity [ 653.547612][T23134] tipc: Enabling of bearer rejected, failed to enable media [ 653.723892][T23139] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 653.801737][T23149] __nla_validate_parse: 9 callbacks suppressed [ 653.801761][T23149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4896'. [ 653.904925][T23159] syzkaller0: entered promiscuous mode [ 653.910726][T23159] syzkaller0: entered allmulticast mode [ 654.038233][T23164] xt_l2tp: invalid flags combination: 8 [ 654.455297][T23193] syzkaller1: entered promiscuous mode [ 654.467976][T23193] syzkaller1: entered allmulticast mode [ 654.836352][T23205] syzkaller0: entered promiscuous mode [ 654.863717][T23205] syzkaller0: entered allmulticast mode [ 654.946787][T23216] SET target dimension over the limit! [ 655.136338][T23224] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4915'. [ 655.179420][T23230] IPVS: ip_vs_edit_dest(): server weight less than zero [ 655.381753][T23240] syzkaller1: entered promiscuous mode [ 655.406282][T23240] syzkaller1: entered allmulticast mode [ 655.435967][ T8242] lec:lec_start_xmit: lec0:No lecd attached [ 655.546613][T23249] xt_recent: Unsupported userspace flags (000000b1) [ 655.652589][T23252] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 655.672635][T23252] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 655.710517][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.719375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.772738][T23254] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4927'. [ 655.935290][T23267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4931'. [ 655.946145][T23267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4931'. [ 656.006733][T23271] geneve2: entered promiscuous mode [ 656.012019][T23271] geneve2: entered allmulticast mode [ 656.050929][T23273] netlink: 444 bytes leftover after parsing attributes in process `syz.2.4935'. [ 656.061798][ T7966] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 656.078279][ T7966] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 656.100244][ T7966] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 656.125548][T23271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4933'. [ 656.141188][T23271] bond0: entered promiscuous mode [ 656.156744][T23271] bond0: left promiscuous mode [ 656.185979][ T3534] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 656.484298][T23301] validate_nla: 6 callbacks suppressed [ 656.484321][T23301] netlink: 'syz.0.4940': attribute type 10 has an invalid length. [ 656.589303][T23312] netlink: 'syz.3.4943': attribute type 1 has an invalid length. [ 656.601816][T23312] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4943'. [ 656.612796][T23312] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4943'. [ 656.670633][T23312] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4943'. [ 656.822799][T23322] syzkaller0: entered promiscuous mode [ 656.828516][T23322] syzkaller0: entered allmulticast mode [ 657.129890][T23345] syzkaller0: entered promiscuous mode [ 657.136239][T23345] syzkaller0: entered allmulticast mode [ 657.146070][T23344] syzkaller1: entered promiscuous mode [ 657.151666][T23344] syzkaller1: entered allmulticast mode [ 657.243471][T23349] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 657.257647][T23349] bond3 (unregistering): Released all slaves [ 657.696250][T23381] bond_slave_1: mtu less than device minimum [ 659.716224][T23321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.939309][T23393] syzkaller1: entered promiscuous mode [ 659.946784][T23393] syzkaller1: entered allmulticast mode [ 659.954830][T23391] syzkaller0: entered promiscuous mode [ 659.960413][T23391] syzkaller0: entered allmulticast mode [ 660.078231][T23401] Bluetooth: MGMT ver 1.23 [ 660.220867][T23406] syzkaller0: entered promiscuous mode [ 660.226635][T23406] syzkaller0: entered allmulticast mode [ 660.326508][T23409] __nla_validate_parse: 1 callbacks suppressed [ 660.326535][T23409] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4974'. [ 660.392169][T23409] bond8: option miimon: invalid value (18446744073709551585) [ 660.399973][T23409] bond8: option miimon: allowed values 0 - 2147483647 [ 660.410615][T23409] bond8 (unregistering): Released all slaves [ 660.619905][T23418] ksmbd: Unknown IPC event: 3, ignore. [ 660.660620][T23424] netlink: 'syz.1.4975': attribute type 12 has an invalid length. [ 660.677965][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4975'. [ 660.704997][T23424] netlink: 'syz.1.4975': attribute type 12 has an invalid length. [ 660.719438][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4975'. [ 660.935591][T23433] syzkaller1: entered promiscuous mode [ 660.941148][T23433] syzkaller1: entered allmulticast mode [ 661.064556][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 661.072671][ C0] lec:lec_tx_timeout: lec0 [ 661.291800][T23453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.549846][T23466] mac80211_hwsim hwsim30 : renamed from wlan1 (while UP) [ 661.724985][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4994'. [ 661.960912][T23486] netlink: 67 bytes leftover after parsing attributes in process `syz.4.4998'. [ 662.193481][ T35] nci: nci_ntf_packet: unknown ntf opcode 0x53f [ 662.210348][ T35] nci: nci_rx_work: unknown MT 0x6 [ 662.238895][T23517] openvswitch: netlink: IPv6 tunnel dst address is zero [ 662.393796][T23525] bond3: entered promiscuous mode [ 662.602320][T23537] syzkaller0: Caught tx_queue_len zero misconfig [ 662.739798][T23540] pim6reg: entered allmulticast mode [ 665.104715][T23504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.299528][T23553] netlink: 'syz.0.5019': attribute type 4 has an invalid length. [ 665.324303][T23553] netlink: 'syz.0.5019': attribute type 4 has an invalid length. [ 665.548505][T23572] syzkaller1: entered promiscuous mode [ 665.556027][T23572] syzkaller1: entered allmulticast mode [ 665.821218][T23589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5028'. [ 665.836447][T23589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5028'. [ 666.331122][ T6524] udevd[6524]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 666.417614][T23607] x_tables: duplicate underflow at hook 2 [ 666.652725][T23629] syzkaller1: entered promiscuous mode [ 666.661790][T23629] syzkaller1: entered allmulticast mode [ 667.128212][T23657] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 667.163080][T23662] netlink: 'syz.4.5047': attribute type 4 has an invalid length. [ 667.249010][T23657] bond3 (unregistering): Released all slaves [ 667.402781][T23671] bond5: option packets_per_slave: invalid value (262144) [ 667.411434][T23671] bond5: option packets_per_slave: allowed values 0 - 65535 [ 667.422089][T23671] bond5 (unregistering): Released all slaves [ 667.692304][T23685] syzkaller1: entered promiscuous mode [ 667.724691][T23685] syzkaller1: entered allmulticast mode [ 667.987472][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5059'. [ 668.164063][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5062'. [ 668.275747][T23723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5062'. [ 668.386540][T23728] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5068'. [ 668.450347][T23733] syzkaller1: entered promiscuous mode [ 668.466962][T23733] syzkaller1: entered allmulticast mode [ 669.201191][T23781] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5087'. [ 669.423626][T23795] netlink: 'syz.0.5092': attribute type 2 has an invalid length. [ 669.582788][T23804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5097'. [ 669.613762][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5097'. [ 669.910688][T23829] x_tables: duplicate underflow at hook 2 [ 669.977254][T23828] syzkaller0: entered promiscuous mode [ 669.982798][T23828] syzkaller0: entered allmulticast mode [ 670.201496][T23841] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 670.232172][T23843] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5111'. [ 670.297340][T23845] syzkaller1: entered promiscuous mode [ 670.302897][T23845] syzkaller1: entered allmulticast mode [ 670.590339][T23874] nbd: must specify at least one socket [ 670.678327][T23877] : renamed from bond0 (while UP) [ 671.057530][T23897] syzkaller0: entered promiscuous mode [ 671.073456][T23897] syzkaller0: entered allmulticast mode [ 671.243006][T23909] syzkaller1: entered promiscuous mode [ 671.265583][T23909] syzkaller1: entered allmulticast mode [ 671.278939][T23908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5132'. [ 671.448961][T23917] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5133'. [ 671.632902][T23928] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5137'. [ 671.660834][T23934] FAULT_INJECTION: forcing a failure. [ 671.660834][T23934] name failslab, interval 1, probability 0, space 0, times 1 [ 671.710454][T23934] CPU: 1 UID: 0 PID: 23934 Comm: syz.4.5138 Not tainted syzkaller #0 PREEMPT(full) [ 671.710486][T23934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 671.710508][T23934] Call Trace: [ 671.710588][T23934] [ 671.710629][T23934] dump_stack_lvl+0xe8/0x150 [ 671.710757][T23934] should_fail_ex+0x412/0x560 [ 671.710884][T23934] should_failslab+0xa8/0x100 [ 671.710938][T23934] ? skb_clone+0x212/0x3a0 [ 671.711069][T23934] kmem_cache_alloc_noprof+0x87/0x650 [ 671.711098][T23934] ? apparmor_capable+0x126/0x170 [ 671.711182][T23934] skb_clone+0x212/0x3a0 [ 671.711206][T23934] ? nfnetlink_rcv+0x4b0/0x27b0 [ 671.711281][T23934] nfnetlink_rcv+0x4e2/0x27b0 [ 671.711324][T23934] ? lockdep_hardirqs_on+0x7a/0x110 [ 671.711450][T23934] ? __dev_queue_xmit+0x277/0x3890 [ 671.711521][T23934] ? __local_bh_enable_ip+0xd0/0x130 [ 671.711571][T23934] ? __dev_queue_xmit+0x1e78/0x3890 [ 671.711597][T23934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.711647][T23934] ? __dev_queue_xmit+0x277/0x3890 [ 671.711680][T23934] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 671.711728][T23934] ? ref_tracker_free+0x693/0x840 [ 671.711783][T23934] ? __copy_skb_header+0xa3/0x4a0 [ 671.711810][T23934] ? __pfx_ref_tracker_free+0x10/0x10 [ 671.711860][T23934] ? skb_clone+0x246/0x3a0 [ 671.711890][T23934] ? __netlink_deliver_tap+0x807/0x850 [ 671.711992][T23934] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.712043][T23934] netlink_unicast+0x80f/0x9b0 [ 671.712083][T23934] ? __pfx_netlink_unicast+0x10/0x10 [ 671.712116][T23934] ? netlink_sendmsg+0x650/0xb40 [ 671.712134][T23934] ? skb_put+0x11b/0x210 [ 671.712161][T23934] netlink_sendmsg+0x813/0xb40 [ 671.712190][T23934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.712215][T23934] ? aa_sock_msg_perm+0xf1/0x1b0 [ 671.712279][T23934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.712328][T23934] ____sys_sendmsg+0x972/0x9f0 [ 671.712400][T23934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.712436][T23934] ? import_iovec+0x73/0xa0 [ 671.712502][T23934] ___sys_sendmsg+0x2a5/0x360 [ 671.712533][T23934] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.712596][T23934] ? __fget_files+0x2a/0x420 [ 671.712645][T23934] ? __fget_files+0x3a0/0x420 [ 671.712688][T23934] __x64_sys_sendmsg+0x1bd/0x2a0 [ 671.712716][T23934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.712752][T23934] ? __pfx_ksys_write+0x10/0x10 [ 671.712801][T23934] do_syscall_64+0x14d/0xf80 [ 671.712826][T23934] ? trace_irq_disable+0x3b/0x150 [ 671.712854][T23934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.712876][T23934] ? clear_bhb_loop+0x40/0x90 [ 671.712903][T23934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.712930][T23934] RIP: 0033:0x7f4445f9c819 [ 671.712995][T23934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.713014][T23934] RSP: 002b:00007f4446ddc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.713068][T23934] RAX: ffffffffffffffda RBX: 00007f4446215fa0 RCX: 00007f4445f9c819 [ 671.713085][T23934] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 671.713099][T23934] RBP: 00007f4446ddc090 R08: 0000000000000000 R09: 0000000000000000 [ 671.713112][T23934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.713125][T23934] R13: 00007f4446216038 R14: 00007f4446215fa0 R15: 00007ffc53328bb8 [ 671.713160][T23934] [ 672.237675][T23950] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20003 [ 672.271205][T23951] netlink: 'syz.4.5144': attribute type 1 has an invalid length. [ 672.325823][T23951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5144'. [ 672.404720][T23951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5144'. [ 672.446730][T23957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5146'. [ 672.505110][ T1683] block nbd0: Possible stuck request ffff888026f80000: control (read@0,1024B). Runtime 330 seconds [ 672.516143][ T1683] block nbd0: Possible stuck request ffff888026f80200: control (read@1024,1024B). Runtime 330 seconds [ 672.527475][ T1683] block nbd0: Possible stuck request ffff888026f80400: control (read@2048,1024B). Runtime 330 seconds [ 672.541078][ T1683] block nbd0: Possible stuck request ffff888026f80600: control (read@3072,1024B). Runtime 330 seconds [ 672.601501][T23964] syzkaller1: entered promiscuous mode [ 672.607567][T23964] syzkaller1: entered allmulticast mode [ 672.863964][T23984] netlink: 'syz.1.5156': attribute type 83 has an invalid length. [ 673.071059][T23997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5159'. [ 673.112998][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 673.192575][T24000] tun0: tun_chr_ioctl cmd 1074025675 [ 673.201812][T24004] netlink: 'syz.4.5163': attribute type 1 has an invalid length. [ 673.213027][T24000] tun0: persist disabled [ 673.232878][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5161'. [ 673.271894][T24000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5161'. [ 673.333006][T24000] geneve2: entered promiscuous mode [ 673.345667][T24000] geneve2: entered allmulticast mode [ 673.887152][T24037] netlink: 'syz.2.5173': attribute type 1 has an invalid length. [ 673.895417][T24037] netlink: 'syz.2.5173': attribute type 1 has an invalid length. [ 674.124197][T24048] syz_tun: entered allmulticast mode [ 674.222245][T24050] syz_tun: left allmulticast mode [ 674.250889][T24021] wg1 speed is unknown, defaulting to 1000 [ 674.427283][ T25] block nbd1: Possible stuck request ffff888027028000: control (read@0,1024B). Runtime 240 seconds [ 674.438223][ T25] block nbd1: Possible stuck request ffff888027028200: control (read@1024,1024B). Runtime 240 seconds [ 674.455095][ T25] block nbd1: Possible stuck request ffff888027028400: control (read@2048,1024B). Runtime 240 seconds [ 674.466693][ T25] block nbd1: Possible stuck request ffff888027028600: control (read@3072,1024B). Runtime 240 seconds [ 674.585279][T24069] netlink: 'syz.0.5183': attribute type 3 has an invalid length. [ 674.617990][T24072] xt_HMARK: proto mask must be zero with L3 mode [ 675.026689][T24087] netlink: 'syz.2.5192': attribute type 61 has an invalid length. [ 675.101766][T24089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.117200][T24089] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 675.263531][T24093] xt_hashlimit: size too large, truncated to 1048576 [ 675.371727][T24102] syzkaller1: entered promiscuous mode [ 675.385624][T24102] syzkaller1: entered allmulticast mode [ 677.386866][T24063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.397084][T24099] __nla_validate_parse: 9 callbacks suppressed [ 677.397104][T24099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5193'. [ 677.848615][T24158] netlink: 'syz.0.5215': attribute type 9 has an invalid length. [ 677.901463][T24163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5215'. [ 677.926714][T24155] syz.3.5213 (24155) used greatest stack depth: 16904 bytes left [ 677.998968][T24165] netlink: 'syz.2.5217': attribute type 9 has an invalid length. [ 678.008222][T24165] netlink: 'syz.2.5217': attribute type 11 has an invalid length. [ 678.016692][T24165] netlink: 'syz.2.5217': attribute type 12 has an invalid length. [ 678.026531][T24165] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.5217'. [ 678.501520][T24186] FAULT_INJECTION: forcing a failure. [ 678.501520][T24186] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 678.537335][T24186] CPU: 0 UID: 0 PID: 24186 Comm: syz.0.5224 Not tainted syzkaller #0 PREEMPT(full) [ 678.537374][T24186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 678.537387][T24186] Call Trace: [ 678.537396][T24186] [ 678.537405][T24186] dump_stack_lvl+0xe8/0x150 [ 678.537443][T24186] should_fail_ex+0x412/0x560 [ 678.537481][T24186] _copy_from_user+0x2d/0xb0 [ 678.537588][T24186] kstrtouint_from_user+0xd6/0x180 [ 678.537625][T24186] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 678.537677][T24186] proc_fail_nth_write+0x8e/0x210 [ 678.537728][T24186] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 678.537768][T24186] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 678.537802][T24186] vfs_write+0x29a/0xb90 [ 678.537838][T24186] ? __pfx_vfs_write+0x10/0x10 [ 678.537864][T24186] ? __fget_files+0x2a/0x420 [ 678.537903][T24186] ? __fget_files+0x3a0/0x420 [ 678.537934][T24186] ? __fget_files+0x2a/0x420 [ 678.537978][T24186] ksys_write+0x150/0x270 [ 678.538006][T24186] ? __pfx_ksys_write+0x10/0x10 [ 678.538045][T24186] do_syscall_64+0x14d/0xf80 [ 678.538072][T24186] ? trace_irq_disable+0x3b/0x150 [ 678.538091][T24186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.538160][T24186] ? clear_bhb_loop+0x40/0x90 [ 678.538187][T24186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.538209][T24186] RIP: 0033:0x7f64efb5d04e [ 678.538230][T24186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 678.538249][T24186] RSP: 002b:00007f64f0b22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.538271][T24186] RAX: ffffffffffffffda RBX: 00007f64f0b236c0 RCX: 00007f64efb5d04e [ 678.538287][T24186] RDX: 0000000000000001 RSI: 00007f64f0b230a0 RDI: 0000000000000004 [ 678.538300][T24186] RBP: 00007f64f0b23090 R08: 0000000000000000 R09: 0000000000000000 [ 678.538313][T24186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 678.538325][T24186] R13: 00007f64efe16038 R14: 00007f64efe15fa0 R15: 00007ffdc965ebf8 [ 678.538370][T24186] [ 678.764417][T24196] netlink: 'syz.3.5228': attribute type 11 has an invalid length. [ 678.772512][T24190] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 678.806651][T24201] netlink: 'syz.3.5228': attribute type 11 has an invalid length. [ 679.094753][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5235'. [ 679.102858][T24219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5236'. [ 679.113231][T24220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5236'. [ 679.300970][T24232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.320468][T24232] netlink: 'syz.2.5239': attribute type 1 has an invalid length. [ 679.777177][T24252] syzkaller1: entered promiscuous mode [ 679.784215][T24252] syzkaller1: entered allmulticast mode [ 680.213881][T24282] netlink: 'syz.2.5255': attribute type 1 has an invalid length. [ 680.289755][T24282] bond8: entered promiscuous mode [ 680.295566][T24282] bond8: entered allmulticast mode [ 680.304264][T24282] 8021q: adding VLAN 0 to HW filter on device bond8 [ 680.361760][T24296] macvlan0: entered promiscuous mode [ 680.380322][T24296] macvlan0: entered allmulticast mode [ 680.391667][T24296] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 680.434202][T24298] macvlan0: entered promiscuous mode [ 680.442762][T24298] macvlan0: entered allmulticast mode [ 680.459116][T24298] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 680.668679][T24316] syzkaller0: entered promiscuous mode [ 680.674220][T24316] syzkaller0: entered allmulticast mode [ 682.711032][T24322] syzkaller1: entered promiscuous mode [ 682.716900][T24322] syzkaller1: entered allmulticast mode [ 683.128895][T24279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.334946][T24336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5265'. [ 683.346621][T24338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.359205][T24331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 683.435786][T24344] netlink: 'syz.2.5267': attribute type 4 has an invalid length. [ 684.244322][T24371] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.505568][T23976] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.525082][T23976] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.539134][T23976] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.550410][T23976] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.565455][T23976] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.595518][T23976] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.604487][T23976] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.671126][T23976] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.717981][T24386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5276'. [ 684.988216][T24407] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5282'. [ 685.013726][T24407] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5282'. [ 685.149548][T24414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5283'. [ 685.253833][T24418] netlink: 'syz.0.5284': attribute type 1 has an invalid length. [ 685.351957][T24426] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5287'. [ 685.369616][T24424] syzkaller1: entered promiscuous mode [ 685.372877][T24426] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 685.395699][T24424] syzkaller1: entered allmulticast mode [ 685.655673][T24438] syzkaller0: entered promiscuous mode [ 685.675492][T24438] syzkaller0: entered allmulticast mode [ 685.743615][T24447] FAULT_INJECTION: forcing a failure. [ 685.743615][T24447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.774254][T24449] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5296'. [ 685.801407][T24447] CPU: 1 UID: 0 PID: 24447 Comm: syz.4.5294 Not tainted syzkaller #0 PREEMPT(full) [ 685.801438][T24447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 685.801452][T24447] Call Trace: [ 685.801461][T24447] [ 685.801470][T24447] dump_stack_lvl+0xe8/0x150 [ 685.801507][T24447] should_fail_ex+0x412/0x560 [ 685.801545][T24447] _copy_from_iter+0x1d3/0x1670 [ 685.801655][T24447] ? rcu_is_watching+0x15/0xb0 [ 685.801708][T24447] ? __pfx__copy_from_iter+0x10/0x10 [ 685.801751][T24447] ? netlink_sendmsg+0x650/0xb40 [ 685.801771][T24447] ? skb_put+0x11b/0x210 [ 685.801799][T24447] netlink_sendmsg+0x6c0/0xb40 [ 685.801830][T24447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.801855][T24447] ? aa_sock_msg_perm+0xf1/0x1b0 [ 685.801888][T24447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 685.801917][T24447] ____sys_sendmsg+0x972/0x9f0 [ 685.801952][T24447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.801988][T24447] ? import_iovec+0x73/0xa0 [ 685.802015][T24447] ___sys_sendmsg+0x2a5/0x360 [ 685.802046][T24447] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.802118][T24447] ? __fget_files+0x2a/0x420 [ 685.802150][T24447] ? __fget_files+0x3a0/0x420 [ 685.802193][T24447] __x64_sys_sendmsg+0x1bd/0x2a0 [ 685.802221][T24447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.802258][T24447] ? __pfx_ksys_write+0x10/0x10 [ 685.802294][T24447] do_syscall_64+0x14d/0xf80 [ 685.802321][T24447] ? trace_irq_disable+0x3b/0x150 [ 685.802339][T24447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.802361][T24447] ? clear_bhb_loop+0x40/0x90 [ 685.802387][T24447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.802408][T24447] RIP: 0033:0x7f4445f9c819 [ 685.802429][T24447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.802447][T24447] RSP: 002b:00007f4446dbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.802471][T24447] RAX: ffffffffffffffda RBX: 00007f4446216090 RCX: 00007f4445f9c819 [ 685.802487][T24447] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 685.802500][T24447] RBP: 00007f4446dbb090 R08: 0000000000000000 R09: 0000000000000000 [ 685.802513][T24447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.802526][T24447] R13: 00007f4446216128 R14: 00007f4446216090 R15: 00007ffc53328bb8 [ 685.802562][T24447] [ 686.074887][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.203819][T24453] netlink: 'syz.0.5299': attribute type 1 has an invalid length. [ 686.427207][T24466] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 686.499574][T24472] syzkaller0: entered promiscuous mode [ 686.507424][T24472] syzkaller0: entered allmulticast mode [ 686.611219][T24481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5309'. [ 686.808824][T24489] netlink: 'syz.0.5312': attribute type 1 has an invalid length. [ 686.837923][T24491] netlink: 'syz.3.5314': attribute type 17 has an invalid length. [ 686.854698][T24494] sctp: [Deprecated]: syz.2.5316 (pid 24494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.854698][T24494] Use struct sctp_sack_info instead [ 686.871787][T24491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5314'. [ 686.881107][T24491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5314'. [ 686.899882][T24491] gretap0: entered promiscuous mode [ 686.909193][T24491] gretap0: left promiscuous mode [ 686.961685][T24498] netlink: 'syz.1.5317': attribute type 16 has an invalid length. [ 686.969864][T24498] netlink: 'syz.1.5317': attribute type 17 has an invalid length. [ 686.978851][T24498] lo: left promiscuous mode [ 686.994724][T24498] lo: left allmulticast mode [ 687.007926][T24498] tunl0: left promiscuous mode [ 687.038706][T24498] gre0: left promiscuous mode [ 687.151796][T24498] gretap0: left promiscuous mode [ 687.179891][T24498] erspan0: left promiscuous mode [ 687.215746][T24498] ip_vti0: left promiscuous mode [ 687.246416][T24498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.429724][T24521] syzkaller0: entered promiscuous mode [ 687.437263][T24521] syzkaller0: entered allmulticast mode [ 687.487676][T24523] xt_l2tp: invalid flags combination: 8 [ 687.761620][T24542] FAULT_INJECTION: forcing a failure. [ 687.761620][T24542] name failslab, interval 1, probability 0, space 0, times 0 [ 687.803256][T24542] CPU: 0 UID: 0 PID: 24542 Comm: syz.1.5332 Not tainted syzkaller #0 PREEMPT(full) [ 687.803288][T24542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 687.803302][T24542] Call Trace: [ 687.803311][T24542] [ 687.803322][T24542] dump_stack_lvl+0xe8/0x150 [ 687.803359][T24542] should_fail_ex+0x412/0x560 [ 687.803397][T24542] should_failslab+0xa8/0x100 [ 687.803428][T24542] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 687.803454][T24542] ? __alloc_skb+0x186/0x7d0 [ 687.803476][T24542] ? __alloc_skb+0x1d0/0x7d0 [ 687.803495][T24542] ? __local_bh_enable_ip+0xd0/0x130 [ 687.803538][T24542] __alloc_skb+0x1d0/0x7d0 [ 687.803565][T24542] netlink_sendmsg+0x5d4/0xb40 [ 687.803598][T24542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.803623][T24542] ? aa_sock_msg_perm+0xf1/0x1b0 [ 687.803657][T24542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 687.803685][T24542] ____sys_sendmsg+0x972/0x9f0 [ 687.803721][T24542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.803757][T24542] ? import_iovec+0x73/0xa0 [ 687.803785][T24542] ___sys_sendmsg+0x2a5/0x360 [ 687.803816][T24542] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.803882][T24542] ? __fget_files+0x2a/0x420 [ 687.803912][T24542] ? __fget_files+0x3a0/0x420 [ 687.803955][T24542] __x64_sys_sendmsg+0x1bd/0x2a0 [ 687.803984][T24542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 687.804021][T24542] ? __pfx_ksys_write+0x10/0x10 [ 687.804058][T24542] do_syscall_64+0x14d/0xf80 [ 687.804084][T24542] ? trace_irq_disable+0x3b/0x150 [ 687.804103][T24542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.804124][T24542] ? clear_bhb_loop+0x40/0x90 [ 687.804151][T24542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.804172][T24542] RIP: 0033:0x7f690599c819 [ 687.804192][T24542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.804211][T24542] RSP: 002b:00007f69068e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.804234][T24542] RAX: ffffffffffffffda RBX: 00007f6905c15fa0 RCX: 00007f690599c819 [ 687.804255][T24542] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 687.804269][T24542] RBP: 00007f69068e9090 R08: 0000000000000000 R09: 0000000000000000 [ 687.804283][T24542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.804295][T24542] R13: 00007f6905c16038 R14: 00007f6905c15fa0 R15: 00007ffe20573748 [ 687.804330][T24542] [ 688.213121][T24558] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 688.359489][T24571] C: renamed from lo (while UP) [ 688.371357][T24571] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 688.478160][T24579] delete_channel: no stack [ 688.807067][T24598] FAULT_INJECTION: forcing a failure. [ 688.807067][T24598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.820679][T24598] CPU: 0 UID: 0 PID: 24598 Comm: syz.2.5347 Not tainted syzkaller #0 PREEMPT(full) [ 688.820707][T24598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 688.820720][T24598] Call Trace: [ 688.820728][T24598] [ 688.820737][T24598] dump_stack_lvl+0xe8/0x150 [ 688.820774][T24598] should_fail_ex+0x412/0x560 [ 688.820812][T24598] _copy_from_iter+0x1d3/0x1670 [ 688.820851][T24598] ? rcu_is_watching+0x15/0xb0 [ 688.820888][T24598] ? __pfx__copy_from_iter+0x10/0x10 [ 688.820930][T24598] ? netlink_sendmsg+0x650/0xb40 [ 688.820951][T24598] ? skb_put+0x11b/0x210 [ 688.820978][T24598] netlink_sendmsg+0x6c0/0xb40 [ 688.821008][T24598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.821030][T24598] ? aa_sock_msg_perm+0xf1/0x1b0 [ 688.821063][T24598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 688.821091][T24598] ____sys_sendmsg+0x972/0x9f0 [ 688.821126][T24598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.821161][T24598] ? import_iovec+0x73/0xa0 [ 688.821187][T24598] ___sys_sendmsg+0x2a5/0x360 [ 688.821218][T24598] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.821288][T24598] ? __fget_files+0x2a/0x420 [ 688.821321][T24598] ? __fget_files+0x3a0/0x420 [ 688.821364][T24598] __x64_sys_sendmsg+0x1bd/0x2a0 [ 688.821393][T24598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 688.821439][T24598] ? __pfx_ksys_write+0x10/0x10 [ 688.821475][T24598] do_syscall_64+0x14d/0xf80 [ 688.821501][T24598] ? trace_irq_disable+0x3b/0x150 [ 688.821519][T24598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.821542][T24598] ? clear_bhb_loop+0x40/0x90 [ 688.821568][T24598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.821590][T24598] RIP: 0033:0x7f61b879c819 [ 688.821611][T24598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.821628][T24598] RSP: 002b:00007f61b95d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.821650][T24598] RAX: ffffffffffffffda RBX: 00007f61b8a15fa0 RCX: 00007f61b879c819 [ 688.821666][T24598] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 688.821680][T24598] RBP: 00007f61b95d8090 R08: 0000000000000000 R09: 0000000000000000 [ 688.821693][T24598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.821705][T24598] R13: 00007f61b8a16038 R14: 00007f61b8a15fa0 R15: 00007fff887346b8 [ 688.821740][T24598] [ 689.106815][T24601] __nla_validate_parse: 5 callbacks suppressed [ 689.106836][T24601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5349'. [ 689.237795][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5351'. [ 689.283524][T24583] : renamed from bond0 (while UP) [ 689.597642][T24615] syzkaller0: entered promiscuous mode [ 689.603471][T24615] syzkaller0: entered allmulticast mode [ 689.830871][T24628] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 689.839511][T24628] syzkaller1: Refused to change device type [ 690.128312][T24605] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 690.135380][T24605] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 690.172786][T24605] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 690.181402][T24605] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 690.293747][T24605] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 690.300738][T24605] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 690.338653][T24605] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 690.351296][T24605] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 690.916350][T24678] netlink: 'syz.2.5368': attribute type 10 has an invalid length. [ 691.084541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 691.092788][ C0] lec:lec_tx_timeout: lec0 [ 691.238905][T24688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5373'. [ 691.267562][T24690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5372'. [ 691.454408][T24697] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5375'. [ 691.788421][T24711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5378'. [ 692.239471][T24736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5385'. [ 692.407262][T24739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5387'. [ 692.504281][T24739] bridge0: entered promiscuous mode [ 692.569689][T24739] macsec1: entered promiscuous mode [ 692.594982][T24739] macsec1: entered allmulticast mode [ 692.620837][T24739] bridge0: entered allmulticast mode [ 692.648334][T24739] bridge0: port 2(macsec1) entered blocking state [ 692.669092][T24739] bridge0: port 2(macsec1) entered disabled state [ 692.696571][T24739] bridge0: left allmulticast mode [ 692.702086][T24739] bridge0: left promiscuous mode [ 693.013647][T24776] syzkaller0: entered promiscuous mode [ 693.046672][T24776] syzkaller0: entered allmulticast mode [ 693.246853][T24791] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20001 [ 693.317519][T24793] xt_hashlimit: size too large, truncated to 1048576 [ 693.526763][T24806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5400'. [ 693.572977][T24806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5400'. [ 693.732420][T24812] netlink: 'syz.4.5405': attribute type 30 has an invalid length. [ 693.793361][T24817] netlink: 'syz.3.5406': attribute type 14 has an invalid length. [ 693.802421][T24812] bond0: option arp_missed_max: invalid value (0) [ 693.802460][T24812] bond0: option arp_missed_max: allowed values 1 - 255 [ 693.839395][T24812] bond0 (unregistering): Released all slaves [ 693.856309][T24817] netlink: 'syz.3.5406': attribute type 13 has an invalid length. [ 693.883257][T24825] netlink: 'syz.2.5409': attribute type 11 has an invalid length. [ 694.434113][T24859] netlink: 'syz.1.5418': attribute type 1 has an invalid length. [ 694.464112][T24859] __nla_validate_parse: 5 callbacks suppressed [ 694.464134][T24859] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5418'. [ 694.493519][T24859] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5418'. [ 694.505535][T24859] netlink: 658 bytes leftover after parsing attributes in process `syz.1.5418'. [ 694.517784][T24858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5419'. [ 694.527618][T24858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.582285][T24858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.641704][T24859] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5418'. [ 702.585532][ T1683] block nbd0: Possible stuck request ffff888026f80000: control (read@0,1024B). Runtime 360 seconds [ 702.597365][ T1683] block nbd0: Possible stuck request ffff888026f80200: control (read@1024,1024B). Runtime 360 seconds [ 702.609232][ T1683] block nbd0: Possible stuck request ffff888026f80400: control (read@2048,1024B). Runtime 360 seconds [ 702.621265][ T1683] block nbd0: Possible stuck request ffff888026f80600: control (read@3072,1024B). Runtime 360 seconds [ 704.515856][ T25] block nbd1: Possible stuck request ffff888027028000: control (read@0,1024B). Runtime 270 seconds [ 704.526897][ T25] block nbd1: Possible stuck request ffff888027028200: control (read@1024,1024B). Runtime 270 seconds [ 704.538214][ T25] block nbd1: Possible stuck request ffff888027028400: control (read@2048,1024B). Runtime 270 seconds [ 704.549403][ T25] block nbd1: Possible stuck request ffff888027028600: control (read@3072,1024B). Runtime 270 seconds [ 715.422954][T24887] netlink: 'syz.3.5425': attribute type 1 has an invalid length. [ 715.450494][T24889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5424'. [ 715.652270][T24898] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 715.883160][T24914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5433'. [ 715.952780][T24917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.983192][T24917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.992603][T24917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.069331][T24918] bridge0: port 4(gretap0) entered blocking state [ 716.076153][T24918] bridge0: port 4(gretap0) entered disabled state [ 716.089929][T24918] gretap0: entered allmulticast mode [ 716.091991][T24917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.106278][T24927] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5435'. [ 716.118380][T24918] gretap0: entered promiscuous mode [ 716.135961][T24917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.160392][T24926] syzkaller0: entered promiscuous mode [ 716.174625][T24926] syzkaller0: entered allmulticast mode [ 716.311142][T24936] netlink: 'syz.4.5441': attribute type 9 has an invalid length. [ 716.580629][T24953] lo: entered promiscuous mode [ 716.594423][T24953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.615918][T24956] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.5449'. [ 716.724115][T24960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5451'. [ 716.767006][T24958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5450'. [ 716.842672][T24964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5453'. [ 717.031733][T24980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5455'. [ 717.854273][T24995] openvswitch: netlink: Missing valid actions attribute. [ 717.889504][T24995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.092474][T25014] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5467'. [ 718.132161][T25014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5467'. [ 718.497175][T25038] netlink: 'syz.2.5475': attribute type 29 has an invalid length. [ 718.506434][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.518482][ T8242] lec:lec_start_xmit: lec0:No lecd attached [ 718.526706][T25037] netlink: 'syz.3.5476': attribute type 1 has an invalid length. [ 718.537921][T25038] netlink: 'syz.2.5475': attribute type 29 has an invalid length. [ 718.548691][T25038] netlink: 'syz.2.5475': attribute type 29 has an invalid length. [ 718.559089][T25038] netlink: 'syz.2.5475': attribute type 29 has an invalid length. [ 718.569083][T25038] netlink: 'syz.2.5475': attribute type 29 has an invalid length. [ 718.592293][T25038] netlink: 'syz.2.5475': attribute type 29 has an invalid length. [ 718.616651][T25038] netlink: 'syz.2.5475': attribute type 29 has an invalid length. [ 719.237958][T25082] macsec0: entered promiscuous mode [ 719.243316][T25082] macsec0: entered allmulticast mode [ 719.265755][T25086] veth1_macvtap: entered promiscuous mode [ 719.314661][T25086] veth1_macvtap: entered allmulticast mode [ 719.333416][T25086] macsec0: left promiscuous mode [ 719.360567][T25086] macsec0: left allmulticast mode [ 719.380754][T25086] veth1_macvtap: left allmulticast mode [ 719.785269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.083156][T25132] syzkaller0: left allmulticast mode [ 720.090758][T25126] xt_CT: No such helper "pptp" [ 720.196138][T25142] FAULT_INJECTION: forcing a failure. [ 720.196138][T25142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.248858][T25142] CPU: 1 UID: 0 PID: 25142 Comm: syz.2.5499 Not tainted syzkaller #0 PREEMPT(full) [ 720.248881][T25142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 720.248891][T25142] Call Trace: [ 720.248897][T25142] [ 720.248904][T25142] dump_stack_lvl+0xe8/0x150 [ 720.248932][T25142] should_fail_ex+0x412/0x560 [ 720.248960][T25142] _copy_from_user+0x2d/0xb0 [ 720.248981][T25142] __sys_sendto+0x2b0/0x710 [ 720.249001][T25142] ? __pfx___sys_sendto+0x10/0x10 [ 720.249016][T25142] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 720.249114][T25142] ? __fget_files+0x3a0/0x420 [ 720.249146][T25142] ? ksys_write+0x242/0x270 [ 720.249165][T25142] ? __pfx_ksys_write+0x10/0x10 [ 720.249186][T25142] __x64_sys_sendto+0xde/0x100 [ 720.249205][T25142] do_syscall_64+0x14d/0xf80 [ 720.249223][T25142] ? trace_irq_disable+0x3b/0x150 [ 720.249236][T25142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.249251][T25142] ? clear_bhb_loop+0x40/0x90 [ 720.249270][T25142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.249285][T25142] RIP: 0033:0x7f61b879c819 [ 720.249299][T25142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.249313][T25142] RSP: 002b:00007f61b9596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 720.249329][T25142] RAX: ffffffffffffffda RBX: 00007f61b8a16180 RCX: 00007f61b879c819 [ 720.249341][T25142] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 0000000000000009 [ 720.249350][T25142] RBP: 00007f61b9596090 R08: 00002000000001c0 R09: 0000000000000014 [ 720.249361][T25142] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 720.249370][T25142] R13: 00007f61b8a16218 R14: 00007f61b8a16180 R15: 00007fff887346b8 [ 720.249394][T25142] [ 720.575146][T25154] __nla_validate_parse: 10 callbacks suppressed [ 720.575175][T25154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5505'. [ 720.683655][T25160] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5508'. [ 720.705388][T25163] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5508'. [ 720.735466][T25162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5507'. [ 720.759383][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5507'. [ 720.781025][T25162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5507'. [ 720.886796][T25173] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 721.160330][T25187] bond0 (unregistering): Released all slaves [ 721.281070][T25186] bond0 (unregistering): Released all slaves [ 721.788620][T25227] erspan0: entered promiscuous mode [ 721.794066][T25227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5526'. [ 721.871426][T25227] netlink: 'syz.2.5526': attribute type 1 has an invalid length. [ 721.940226][T25234] netlink: 'syz.0.5529': attribute type 4 has an invalid length. [ 721.950506][T25236] netlink: 'syz.0.5529': attribute type 4 has an invalid length. [ 721.997072][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5527'. [ 722.206292][T25248] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5534'. [ 722.299662][T25255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5535'. [ 722.659904][T25281] netlink: 'syz.0.5544': attribute type 4 has an invalid length. [ 722.771983][T25281] nbd: nbd0 already in use [ 722.783377][T25281] block nbd0: NBD_DISCONNECT [ 722.802709][T25281] block nbd0: Send disconnect failed -32 [ 722.810743][T25281] block nbd0: shutting down sockets [ 722.835883][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 722.845741][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 723.068483][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.078119][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 723.086007][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.095631][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 723.103458][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.113035][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 723.144288][ T7047] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.185236][ T7047] Buffer I/O error on dev nbd0, logical block 0, async page read [ 723.186977][T25293] netlink: 'syz.1.5548': attribute type 2 has an invalid length. [ 723.232210][ T7047] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.260611][ T7047] Buffer I/O error on dev nbd0, logical block 1, async page read [ 723.299869][ T7047] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.334445][ T7047] Buffer I/O error on dev nbd0, logical block 2, async page read [ 723.383906][ T7047] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.413249][ T7047] Buffer I/O error on dev nbd0, logical block 3, async page read [ 723.429389][ T7047] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.448052][ T7047] Buffer I/O error on dev nbd0, logical block 0, async page read [ 723.493548][ T7047] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.535403][ T7047] Buffer I/O error on dev nbd0, logical block 1, async page read [ 723.559828][ T7047] ldm_validate_partition_table(): Disk read failed. [ 723.571379][ T7047] Dev nbd0: unable to read RDB block 0 [ 723.585919][ T7047] nbd0: unable to read partition table [ 723.687654][ T5194] udevd[5194]: worker [7047] terminated by signal 9 (Killed) [ 723.705109][ T7962] net_ratelimit: 1 callbacks suppressed [ 723.705132][ T7962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.743533][ T5194] udevd[5194]: worker [7047] failed while handling '/devices/virtual/block/nbd0' [ 723.919339][T25326] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 724.041536][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 724.049657][ C0] lec:lec_tx_timeout: lec0 [ 724.106495][ T7969] bond1 (unregistering): (slave gretap1): Releasing active interface [ 724.117401][ T7969] gretap1 (unregistering): left allmulticast mode [ 724.280152][ T7969] bond5 (unregistering): (slave bridge0): Releasing active interface [ 724.442036][ T7969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.454369][ T7969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.467068][ T7969] bond0 (unregistering): Released all slaves [ 724.484825][ T7969] bond1 (unregistering): Released all slaves [ 724.505259][ T7969] bond2 (unregistering): Released all slaves [ 724.521694][ T7969] bond3 (unregistering): Released all slaves [ 724.537977][ T7969] bond4 (unregistering): Released all slaves [ 724.554061][ T7969] bond5 (unregistering): Released all slaves [ 724.570976][ T7969] bond6 (unregistering): Released all slaves [ 724.595584][ T7969] bond7 (unregistering): Released all slaves [ 724.855036][ T7969] tipc: Disabling bearer [ 724.864105][T25342] netlink: 'syz.3.5560': attribute type 2 has an invalid length. [ 724.872718][ T7969] tipc: Left network mode [ 724.902040][T25342] netlink: 'syz.3.5560': attribute type 1 has an invalid length. [ 724.968798][ T7969] IPVS: stopping backup sync thread 6100 ... [ 725.257038][T25362] FAULT_INJECTION: forcing a failure. [ 725.257038][T25362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.298711][T25362] CPU: 0 UID: 0 PID: 25362 Comm: syz.2.5564 Not tainted syzkaller #0 PREEMPT(full) [ 725.298740][T25362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 725.298753][T25362] Call Trace: [ 725.298761][T25362] [ 725.298770][T25362] dump_stack_lvl+0xe8/0x150 [ 725.298807][T25362] should_fail_ex+0x412/0x560 [ 725.298848][T25362] _copy_from_user+0x2d/0xb0 [ 725.298876][T25362] kstrtouint_from_user+0xd6/0x180 [ 725.298921][T25362] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 725.298973][T25362] proc_fail_nth_write+0x8e/0x210 [ 725.299006][T25362] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 725.299045][T25362] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 725.299079][T25362] vfs_write+0x29a/0xb90 [ 725.299114][T25362] ? __pfx_vfs_write+0x10/0x10 [ 725.299139][T25362] ? __fget_files+0x2a/0x420 [ 725.299175][T25362] ? __fget_files+0x3a0/0x420 [ 725.299206][T25362] ? __fget_files+0x2a/0x420 [ 725.299248][T25362] ksys_write+0x150/0x270 [ 725.299273][T25362] ? __pfx_ksys_write+0x10/0x10 [ 725.299311][T25362] do_syscall_64+0x14d/0xf80 [ 725.299337][T25362] ? trace_irq_disable+0x3b/0x150 [ 725.299355][T25362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.299377][T25362] ? clear_bhb_loop+0x40/0x90 [ 725.299403][T25362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.299424][T25362] RIP: 0033:0x7f61b875d04e [ 725.299444][T25362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 725.299462][T25362] RSP: 002b:00007f61b9595fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 725.299485][T25362] RAX: ffffffffffffffda RBX: 00007f61b95966c0 RCX: 00007f61b875d04e [ 725.299501][T25362] RDX: 0000000000000001 RSI: 00007f61b95960a0 RDI: 000000000000000a [ 725.299514][T25362] RBP: 00007f61b9596090 R08: 0000000000000000 R09: 0000000000000000 [ 725.299527][T25362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.299540][T25362] R13: 00007f61b8a16218 R14: 00007f61b8a16180 R15: 00007fff887346b8 [ 725.299575][T25362] [ 726.012186][T25388] sctp: [Deprecated]: syz.0.5574 (pid 25388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.012186][T25388] Use struct sctp_sack_info instead [ 726.036921][T25389] sctp: [Deprecated]: syz.0.5574 (pid 25389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.036921][T25389] Use struct sctp_sack_info instead [ 726.208573][T25396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.286056][T25386] syzkaller0: entered promiscuous mode [ 726.302271][T25386] syzkaller0: entered allmulticast mode [ 726.892428][T25412] __nla_validate_parse: 9 callbacks suppressed [ 726.892451][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5579'. [ 726.908993][T25412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5579'. [ 728.114829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.425994][ T7969] hsr_slave_0: left promiscuous mode [ 728.431973][ T7969] hsr_slave_1: left promiscuous mode [ 728.439688][ T7969] veth1_macvtap: left promiscuous mode [ 728.445491][ T7969] veth1_vlan: left promiscuous mode [ 728.450845][ T7969] veth0_vlan: left promiscuous mode [ 728.542984][T25417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5580'. [ 728.553141][T25417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5580'. [ 728.598369][ T7962] smc: removing ib device syz1 [ 729.166348][T25426] netlink: 'syz.2.5583': attribute type 1 has an invalid length. [ 729.466398][T23976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.476314][ T7963] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.503566][ T7963] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.513537][ T7963] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.522543][ T7963] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.839301][T25444] syzkaller0: entered promiscuous mode [ 729.867843][T25444] syzkaller0: entered allmulticast mode [ 730.048888][T25462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5595'. [ 730.094770][T25462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5595'. [ 730.469417][T25480] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 730.681398][T25490] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 730.735598][T25486] netlink: 'syz.4.5603': attribute type 62 has an invalid length. [ 731.158858][T25512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5612'. [ 731.206746][T25515] x_tables: duplicate underflow at hook 1 [ 731.568511][T25524] syzkaller1: entered promiscuous mode [ 731.584838][T25524] syzkaller1: entered allmulticast mode [ 731.602908][T25535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.645708][T25535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.666309][T25535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5618'. [ 731.769907][T25540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5619'. [ 731.863417][T25546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5619'. [ 732.130940][ T7969] IPVS: stop unused estimator thread 0... [ 732.334278][T25558] syzkaller0: entered promiscuous mode [ 732.340544][T25558] syzkaller0: entered allmulticast mode [ 732.642758][T25574] IPv6: NLM_F_CREATE should be specified when creating new route [ 732.677047][T25574] netlink: 'syz.4.5632': attribute type 1 has an invalid length. [ 732.903392][T25594] netlink: 54 bytes leftover after parsing attributes in process `syz.2.5636'. [ 732.935663][T25594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5636'. [ 733.033343][T25597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5636'. [ 733.492058][T25617] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 733.534655][T25617] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 733.564798][T25617] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 733.640786][T25623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.747081][T25629] netlink: 'syz.3.5647': attribute type 11 has an invalid length. [ 733.963582][T25633] netlink: 'syz.4.5650': attribute type 3 has an invalid length. [ 734.183953][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 734.197314][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 734.206145][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 734.216966][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.225490][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.261971][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 734.271430][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 734.279984][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 734.290366][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.302012][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.469562][T25646] openvswitch: netlink: IP tunnel attribute has 58 unknown bytes. [ 734.511902][T25646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5655'. [ 734.587060][ T25] block nbd1: Possible stuck request ffff888027028000: control (read@0,1024B). Runtime 300 seconds [ 734.599074][ T25] block nbd1: Possible stuck request ffff888027028200: control (read@1024,1024B). Runtime 300 seconds [ 734.610417][ T25] block nbd1: Possible stuck request ffff888027028400: control (read@2048,1024B). Runtime 300 seconds [ 734.622279][ T25] block nbd1: Possible stuck request ffff888027028600: control (read@3072,1024B). Runtime 300 seconds [ 735.080058][T25662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5661'. [ 735.191707][T25678] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5667'. [ 735.229989][T25640] chnl_net:caif_netlink_parms(): no params data found [ 735.364859][T25686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5670'. [ 735.451378][T25640] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.458951][T25640] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.466881][T25640] bridge_slave_0: entered allmulticast mode [ 735.475088][T25640] bridge_slave_0: entered promiscuous mode [ 735.484425][T25640] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.491897][T25640] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.499430][T25640] bridge_slave_1: entered allmulticast mode [ 735.507737][T25640] bridge_slave_1: entered promiscuous mode [ 735.579831][T25640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.612127][T25640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.624160][T25699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5672'. [ 735.693892][T25640] team0: Port device team_slave_0 added [ 735.709696][T25640] team0: Port device team_slave_1 added [ 735.750489][T25640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.759511][T25640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.786013][T25640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.800729][T25640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.808066][T25640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.836596][T25640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.878996][T25703] netlink: 'syz.1.5674': attribute type 1 has an invalid length. [ 735.919193][T25640] hsr_slave_0: entered promiscuous mode [ 735.933279][T25640] hsr_slave_1: entered promiscuous mode [ 735.941133][T25640] debugfs: 'hsr0' already exists in 'hsr' [ 735.949074][T25640] Cannot create hsr debugfs directory [ 736.070787][T25709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5677'. [ 736.175615][T25712] ip6gre0: Master is either lo or non-ether device [ 736.184024][T25712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5678'. [ 736.266924][T25640] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.296572][T25640] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.317621][T25640] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 736.345078][ T5832] Bluetooth: hci2: command tx timeout [ 736.383820][T25723] netlink: 'syz.4.5681': attribute type 7 has an invalid length. [ 736.454266][T25723] veth0_to_team: entered promiscuous mode [ 736.535400][T25723] veth0_to_team: left promiscuous mode [ 736.568856][T25640] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.610554][T25640] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.642665][T25640] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 736.923499][T25640] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.951511][T25640] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.972539][T25640] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 737.110005][T25640] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.123764][T25640] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.140019][T25640] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 737.467134][T25640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 737.488010][T25640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 737.508212][T25640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 737.520978][T25640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 737.732057][T25776] netlink: 'syz.4.5697': attribute type 3 has an invalid length. [ 737.790579][T25640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.852762][T25640] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.891273][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.898616][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.922331][T25787] __nla_validate_parse: 4 callbacks suppressed [ 737.922353][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5700'. [ 737.943550][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.950868][ T7962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.191178][T25640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.251696][T25796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.269543][T25796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.309494][T25794] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 738.350258][T25794] bond9: option packets_per_slave: allowed values 0 - 65535 [ 738.372653][T25794] bond9 (unregistering): Released all slaves [ 738.411149][T25804] netlink: 'syz.1.5706': attribute type 7 has an invalid length. [ 738.425970][ T51] Bluetooth: hci2: command tx timeout [ 738.732488][T25640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.766164][T25821] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5710'. [ 738.926991][T25827] netlink: 'syz.2.5712': attribute type 21 has an invalid length. [ 739.034722][T25831] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5713'. [ 739.119715][T25640] veth0_vlan: entered promiscuous mode [ 739.167236][T25827] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 739.210451][T25640] veth1_vlan: entered promiscuous mode [ 739.458743][T25640] veth0_macvtap: entered promiscuous mode [ 739.514265][T25640] veth1_macvtap: entered promiscuous mode [ 739.606958][T25640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.682379][T25856] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5719'. [ 739.695095][T25640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.735754][ T7962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.760834][ T7962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.802144][ T7962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.992957][ T7962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.060943][T25865] netlink: 'syz.2.5722': attribute type 83 has an invalid length. [ 740.092271][T25867] tipc: Enabling of bearer rejected, failed to enable media [ 740.302823][T23975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.325848][T25873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5724'. [ 740.335586][T23975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.423242][ T7963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.458028][ T7963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.526437][ T5829] Bluetooth: hci2: command 0x040f tx timeout [ 740.541104][T25881] netlink: 'syz.2.5729': attribute type 7 has an invalid length. [ 740.600427][T25881] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5729'. [ 741.073329][T25919] netlink: 'syz.4.5740': attribute type 4 has an invalid length. [ 741.092082][T25919] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5740'. [ 741.126271][T25919] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.5740'. [ 741.244649][T25915] nbd0: detected capacity change from 0 to 63 [ 741.252353][ T5829] block nbd0: Receive control failed (result -32) [ 741.256119][ T5832] block nbd0: Receive control failed (result -32) [ 741.266497][ T6524] block nbd0: Dead connection, failed to find a fallback [ 741.276392][ T6524] block nbd0: shutting down sockets [ 741.288333][ T6524] blk_print_req_error: 54 callbacks suppressed [ 741.288354][ T6524] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.318233][ T6524] buffer_io_error: 54 callbacks suppressed [ 741.318254][ T6524] Buffer I/O error on dev nbd0, logical block 0, async page read [ 741.333495][ T6524] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.343769][ T6524] Buffer I/O error on dev nbd0, logical block 1, async page read [ 741.352328][ T6524] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.362556][ T6524] Buffer I/O error on dev nbd0, logical block 2, async page read [ 741.424762][ T6524] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.445241][ T6524] Buffer I/O error on dev nbd0, logical block 3, async page read [ 741.465951][ T6524] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.476417][T25925] netlink: 'syz.4.5743': attribute type 10 has an invalid length. [ 741.500956][ T6524] Buffer I/O error on dev nbd0, logical block 0, async page read [ 741.510600][T25925] netlink: 396 bytes leftover after parsing attributes in process `syz.4.5743'. [ 741.537804][ T6524] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.586496][ T6524] Buffer I/O error on dev nbd0, logical block 1, async page read [ 741.616142][ T6524] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.661438][T25935] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 741.695198][ T6524] Buffer I/O error on dev nbd0, logical block 2, async page read [ 741.732030][ T6524] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.760779][ T6524] Buffer I/O error on dev nbd0, logical block 3, async page read [ 741.779235][ T6524] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.828398][ T6524] Buffer I/O error on dev nbd0, logical block 0, async page read [ 741.868330][ T6524] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.906012][ T6524] Buffer I/O error on dev nbd0, logical block 1, async page read [ 741.927177][T25945] sctp: [Deprecated]: syz.1.5746 (pid 25945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 741.927177][T25945] Use struct sctp_sack_info instead [ 741.942314][ T6524] ldm_validate_partition_table(): Disk read failed. [ 741.981591][ T6524] Dev nbd0: unable to read RDB block 0 [ 741.999796][ T6524] nbd0: unable to read partition table [ 742.066851][ T6524] ldm_validate_partition_table(): Disk read failed. [ 742.082130][ T6524] Dev nbd0: unable to read RDB block 0 [ 742.102901][ T6524] nbd0: unable to read partition table [ 742.390647][T25957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.424207][T25957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.492822][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5749'. [ 742.574361][T25957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.598788][ T5832] Bluetooth: hci2: command 0x040f tx timeout [ 742.607079][T25957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.799238][T25985] netlink: 'syz.0.5756': attribute type 13 has an invalid length. [ 742.816722][T25957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.849569][T25957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.917274][T25985] gretap0: refused to change device tx_queue_len [ 742.947381][T25985] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 742.973818][T25990] tipc: Enabling of bearer rejected, failed to enable media [ 743.092602][T25957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.125128][T25957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.151982][T25998] netlink: 'syz.0.5760': attribute type 1 has an invalid length. [ 743.179348][T26000] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 743.485637][T23973] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.493902][T23973] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.550247][T23973] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.572667][T23973] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.748230][ T7969] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.756951][ T7969] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.786971][T26027] __nla_validate_parse: 2 callbacks suppressed [ 743.786994][T26027] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5767'. [ 743.820807][ T7969] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.840490][ T7969] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.371482][T26043] netlink: 'syz.4.5770': attribute type 29 has an invalid length. [ 744.407862][T26046] erspan0: entered allmulticast mode [ 744.607070][T26059] Bluetooth: MGMT ver 1.23 [ 744.665289][ T5832] Bluetooth: hci2: command 0x040f tx timeout [ 744.697367][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5778'. [ 744.727887][T26065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5778'. [ 744.751399][T26068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5778'. [ 745.005894][T26082] : entered promiscuous mode [ 745.159322][T26086] openvswitch: netlink: Actions may not be safe on all matching packets [ 745.296671][T26092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5789'. [ 745.813167][T26105] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.820965][T26105] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.947713][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5796'. [ 745.974767][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5796'. [ 745.996318][T26105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.018595][T26105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.229261][T26106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.261412][T26117] syz_tun: entered allmulticast mode [ 746.288535][T23975] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.298301][T23975] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.315866][T23975] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.333263][T26112] syz_tun: left allmulticast mode [ 746.628724][T26145] netlink: 'syz.2.5803': attribute type 4 has an invalid length. [ 746.895931][T26155] FAULT_INJECTION: forcing a failure. [ 746.895931][T26155] name failslab, interval 1, probability 0, space 0, times 0 [ 746.908720][T26155] CPU: 1 UID: 0 PID: 26155 Comm: syz.4.5806 Not tainted syzkaller #0 PREEMPT(full) [ 746.908749][T26155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 746.908764][T26155] Call Trace: [ 746.908772][T26155] [ 746.908782][T26155] dump_stack_lvl+0xe8/0x150 [ 746.908820][T26155] should_fail_ex+0x412/0x560 [ 746.908862][T26155] should_failslab+0xa8/0x100 [ 746.908891][T26155] ? skb_clone+0x212/0x3a0 [ 746.908920][T26155] kmem_cache_alloc_noprof+0x87/0x650 [ 746.908945][T26155] ? __bpf_redirect+0xcb4/0x12a0 [ 746.909078][T26155] skb_clone+0x212/0x3a0 [ 746.909109][T26155] bpf_clone_redirect+0x16a/0x4b0 [ 746.909141][T26155] ? bpf_test_run+0x1d1/0x830 [ 746.909207][T26155] ? bpf_test_run+0x1d1/0x830 [ 746.909239][T26155] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 746.909259][T26155] bpf_test_run+0x354/0x830 [ 746.909312][T26155] ? __pfx_bpf_test_run+0x10/0x10 [ 746.909360][T26155] ? trace_kmem_cache_alloc+0x29/0xf0 [ 746.909380][T26155] ? slab_build_skb+0x52/0x410 [ 746.909398][T26155] ? csum_partial+0x239/0x2c0 [ 746.909435][T26155] ? convert___skb_to_skb+0x3d/0x5b0 [ 746.909470][T26155] bpf_prog_test_run_skb+0xd22/0x1c90 [ 746.909515][T26155] ? __fget_files+0x2a/0x420 [ 746.909547][T26155] ? __fget_files+0x3a0/0x420 [ 746.909577][T26155] ? __fget_files+0x2a/0x420 [ 746.909614][T26155] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 746.909646][T26155] bpf_prog_test_run+0x2c7/0x340 [ 746.909689][T26155] __sys_bpf+0x643/0x950 [ 746.909725][T26155] ? __pfx___sys_bpf+0x10/0x10 [ 746.909775][T26155] ? ksys_write+0x242/0x270 [ 746.909803][T26155] ? __pfx_ksys_write+0x10/0x10 [ 746.909835][T26155] __x64_sys_bpf+0x7c/0x90 [ 746.909867][T26155] do_syscall_64+0x14d/0xf80 [ 746.909895][T26155] ? trace_irq_disable+0x3b/0x150 [ 746.909914][T26155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.909937][T26155] ? clear_bhb_loop+0x40/0x90 [ 746.909963][T26155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.909985][T26155] RIP: 0033:0x7f4445f9c819 [ 746.910005][T26155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.910024][T26155] RSP: 002b:00007f4446ddc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 746.910047][T26155] RAX: ffffffffffffffda RBX: 00007f4446215fa0 RCX: 00007f4445f9c819 [ 746.910063][T26155] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 746.910078][T26155] RBP: 00007f4446ddc090 R08: 0000000000000000 R09: 0000000000000000 [ 746.910091][T26155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.910104][T26155] R13: 00007f4446216038 R14: 00007f4446215fa0 R15: 00007ffc53328bb8 [ 746.910137][T26155] [ 747.376674][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 747.388214][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 747.400192][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.432534][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 747.456509][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 747.472238][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 747.480861][T26165] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5809'. [ 747.535580][T26165] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5809'. [ 747.982812][T26159] chnl_net:caif_netlink_parms(): no params data found [ 748.165043][T26185] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5817'. [ 748.609764][T26159] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.618491][T26159] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.627201][T26159] bridge_slave_0: entered allmulticast mode [ 748.636154][T26159] bridge_slave_0: entered promiscuous mode [ 748.841617][T26159] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.849379][T26159] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.857854][T26159] bridge_slave_1: entered allmulticast mode [ 748.871026][T26159] bridge_slave_1: entered promiscuous mode [ 748.882030][T26207] netlink: 'syz.2.5823': attribute type 15 has an invalid length. [ 748.896132][T26207] __nla_validate_parse: 1 callbacks suppressed [ 748.896152][T26207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5823'. [ 748.920962][T26207] netlink: 'syz.2.5823': attribute type 15 has an invalid length. [ 748.929299][T26207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5823'. [ 748.976619][T26159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.999001][T26159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.087499][T26159] team0: Port device team_slave_0 added [ 749.112488][T26159] team0: Port device team_slave_1 added [ 749.216242][T26159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.225794][T26213] netlink: 'syz.2.5826': attribute type 1 has an invalid length. [ 749.235509][T26213] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5826'. [ 749.245169][T26159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.274898][T26159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.293306][T26159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.309453][T26159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.399810][T26159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.437312][T26219] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5827'. [ 749.469559][T26219] netlink: Conntrack attr has 3 unknown bytes [ 749.487137][T26222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5828'. [ 749.506774][T26222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5828'. [ 749.545399][ T5832] Bluetooth: hci5: command tx timeout [ 749.717800][T26159] hsr_slave_0: entered promiscuous mode [ 749.744392][T26159] hsr_slave_1: entered promiscuous mode [ 749.773972][T26159] debugfs: 'hsr0' already exists in 'hsr' [ 749.801552][T26159] Cannot create hsr debugfs directory [ 749.875759][T26230] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5832'. [ 749.982263][T26233] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5833'. [ 750.028524][T26237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5834'. [ 750.223548][T26247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'. [ 750.283478][T26247] bond9: option xmit_hash_policy: invalid value (64) [ 750.317529][T26247] bond9 (unregistering): Released all slaves [ 750.410483][T26159] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.422652][T26159] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.580064][T26159] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.591825][T26159] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.679142][T26159] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.713672][T26159] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.750858][T26265] netlink: 'syz.0.5842': attribute type 8 has an invalid length. [ 750.777412][T26275] netlink: 'syz.2.5846': attribute type 1 has an invalid length. [ 751.030473][T26275] bond9: (slave gretap2): making interface the new active one [ 751.047114][T26275] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 751.141157][T26277] 8021q: adding VLAN 0 to HW filter on device bond10 [ 751.213149][T26277] bond9: (slave bond10): Enslaving as a backup interface with an up link [ 751.232141][T26159] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.256931][T26159] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.625210][ T5832] Bluetooth: hci5: command tx timeout [ 751.641374][T26159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 751.680171][T26159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 751.709759][T26159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 751.731553][T26159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 752.001593][T26329] netlink: 'syz.0.5858': attribute type 11 has an invalid length. [ 752.123826][T26159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.192364][T26159] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.207116][T26337] xt_bpf: check failed: parse error [ 752.248927][T23975] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.256217][T23975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.371181][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.378457][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.722461][T26361] gretap1: entered promiscuous mode [ 752.740448][T26361] batman_adv: batadv0: Adding interface: gretap1 [ 752.748457][T26361] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 752.854066][T26361] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 753.064628][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 753.072877][ C0] lec:lec_tx_timeout: lec0 [ 753.689246][T26398] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode [ 753.705250][ T5832] Bluetooth: hci5: command tx timeout [ 753.763550][T26159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.980990][T26159] veth0_vlan: entered promiscuous mode [ 754.018964][T26159] veth1_vlan: entered promiscuous mode [ 754.100364][T26159] veth0_macvtap: entered promiscuous mode [ 754.149132][T26159] veth1_macvtap: entered promiscuous mode [ 754.199926][T26159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.248696][T26159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.301949][ T7962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.342507][ T7962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.365814][ T7962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.390765][ T7962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.411895][T26425] netlink: 'syz.2.5880': attribute type 29 has an invalid length. [ 754.435188][T26425] __nla_validate_parse: 5 callbacks suppressed [ 754.435208][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5880'. [ 754.692431][T26438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5884'. [ 754.705624][T26438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5884'. [ 754.726309][ T7963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.747551][T26440] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5883'. [ 754.765610][ T7963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.781993][T26440] netlink: Conntrack attr has 3 unknown bytes [ 754.792791][T26438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5884'. [ 754.821055][T26438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5884'. [ 754.843054][ T7962] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.886193][ T7962] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.969170][ T7962] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.005006][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.045152][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.086228][ T29] audit: type=1800 audit(1775150579.989:3): pid=26450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5886" name="memory.events" dev="tmpfs" ino=2735 res=0 errno=0 [ 755.156534][T26450] netlink: 'syz.2.5886': attribute type 39 has an invalid length. [ 755.165298][ T29] audit: type=1804 audit(1775150579.999:4): pid=26450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5886" name="/newroot/536/memory.events" dev="tmpfs" ino=2735 res=1 errno=0 [ 755.217659][ T29] audit: type=1804 audit(1775150580.119:5): pid=26453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5886" name="/newroot/536/memory.events" dev="tmpfs" ino=2735 res=1 errno=0 [ 755.271483][ T29] audit: type=1800 audit(1775150580.119:6): pid=26453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5886" name="memory.events" dev="tmpfs" ino=2735 res=0 errno=0 [ 755.785169][ T5832] Bluetooth: hci5: command tx timeout [ 755.798288][T26479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.893074][T26485] netlink: 'syz.1.5894': attribute type 1 has an invalid length. [ 756.006025][T26489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5895'. [ 756.228350][T26498] netlink: 'syz.0.5898': attribute type 10 has an invalid length. [ 756.532169][T26498] team0: Device ipvlan1 failed to register rx_handler [ 756.708733][T26504] netlink: 'syz.0.5901': attribute type 3 has an invalid length. [ 756.717009][T26504] netlink: 'syz.0.5901': attribute type 3 has an invalid length. [ 756.727078][T26504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5901'. [ 756.928228][T26512] syzkaller0: entered promiscuous mode [ 756.963232][T26512] syzkaller0: entered allmulticast mode [ 756.992590][T26520] netlink: 'syz.2.5904': attribute type 13 has an invalid length. [ 757.092758][T26520] gretap0: refused to change device tx_queue_len [ 757.127300][T26520] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 757.446400][T26532] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.5908'. [ 758.185403][T26547] syzkaller0: entered promiscuous mode [ 758.191087][T26547] syzkaller0: entered allmulticast mode [ 761.336260][T26571] gretap0: left allmulticast mode [ 761.341380][T26571] gretap0: left promiscuous mode [ 761.363081][T26571] bridge0: port 4(gretap0) entered disabled state [ 761.389475][T26571] team0: left allmulticast mode [ 761.394427][T26571] team_slave_0: left allmulticast mode [ 761.400507][T26571] team_slave_1: left allmulticast mode [ 761.407180][T26571] team0: left promiscuous mode [ 761.412010][T26571] team_slave_0: left promiscuous mode [ 761.420998][T26571] team_slave_1: left promiscuous mode [ 761.427476][T26571] bridge0: port 3(team0) entered disabled state [ 761.452558][T26571] : (slave batadv0): Releasing backup interface [ 761.484200][T26571] bridge_slave_0: left allmulticast mode [ 761.490302][T26571] bridge_slave_0: left promiscuous mode [ 761.499369][T26571] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.512279][T26571] bridge_slave_1: left allmulticast mode [ 761.518809][T26571] bridge_slave_1: left promiscuous mode [ 761.525170][T26571] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.542065][T26587] xt_CONNSECMARK: invalid mode: 0 [ 761.548685][T26571] : (slave bond_slave_0): Releasing backup interface [ 761.562276][T26571] : (slave bond_slave_1): Releasing backup interface [ 761.578748][T26587] netlink: 'syz.3.5921': attribute type 39 has an invalid length. [ 761.591675][T26571] team0: Port device team_slave_0 removed [ 761.604253][T26571] team0: Port device team_slave_1 removed [ 761.612705][T26571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.620835][T26571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.639315][T26571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 761.660066][T26572] team0: No ports can be present during mode change [ 761.978491][T26605] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5926'. [ 762.011533][T26608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5928'. [ 762.039744][T26605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'. [ 762.078731][T26611] syzkaller1: entered promiscuous mode [ 762.104786][T26611] syzkaller1: entered allmulticast mode [ 762.573769][T26645] netlink: 'syz.1.5940': attribute type 9 has an invalid length. [ 762.643694][T26652] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5939'. [ 762.659484][T26653] syzkaller0: entered promiscuous mode [ 762.667838][T26653] syzkaller0: entered allmulticast mode [ 763.041129][T26665] syzkaller1: entered promiscuous mode [ 763.065837][T26665] syzkaller1: entered allmulticast mode [ 763.173781][T26672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5948'. [ 763.549227][T26690] netlink: 'syz.0.5953': attribute type 1 has an invalid length. [ 763.640813][T26690] bond1: entered promiscuous mode [ 763.647314][T26690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 763.679054][T26690] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5953'. [ 763.693966][T26697] netlink: 'syz.2.5956': attribute type 63 has an invalid length. [ 763.721536][T26697] netlink: 'syz.2.5956': attribute type 63 has an invalid length. [ 763.809930][T26697] syzkaller0: entered promiscuous mode [ 763.820100][T26697] syzkaller0: entered allmulticast mode [ 763.892864][T26690] bond1: (slave bridge2): making interface the new active one [ 763.910432][T26690] bridge2: entered promiscuous mode [ 763.918040][T26690] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 764.673103][ T25] block nbd1: Possible stuck request ffff888027028000: control (read@0,1024B). Runtime 330 seconds [ 764.684220][ T25] block nbd1: Possible stuck request ffff888027028200: control (read@1024,1024B). Runtime 330 seconds [ 764.700199][ T25] block nbd1: Possible stuck request ffff888027028400: control (read@2048,1024B). Runtime 330 seconds [ 764.711833][ T25] block nbd1: Possible stuck request ffff888027028600: control (read@3072,1024B). Runtime 330 seconds [ 766.247445][T26719] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 766.547375][T26737] syzkaller1: entered promiscuous mode [ 766.553016][T26737] syzkaller1: entered allmulticast mode [ 766.570937][T26741] FAULT_INJECTION: forcing a failure. [ 766.570937][T26741] name failslab, interval 1, probability 0, space 0, times 0 [ 766.583693][T26741] CPU: 0 UID: 0 PID: 26741 Comm: syz.2.5966 Not tainted syzkaller #0 PREEMPT(full) [ 766.583723][T26741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 766.583733][T26741] Call Trace: [ 766.583741][T26741] [ 766.583749][T26741] dump_stack_lvl+0xe8/0x150 [ 766.583776][T26741] should_fail_ex+0x412/0x560 [ 766.583804][T26741] should_failslab+0xa8/0x100 [ 766.583825][T26741] ? skb_clone+0x212/0x3a0 [ 766.583844][T26741] kmem_cache_alloc_noprof+0x87/0x650 [ 766.583862][T26741] ? __bpf_redirect+0xcb4/0x12a0 [ 766.583889][T26741] skb_clone+0x212/0x3a0 [ 766.583910][T26741] bpf_clone_redirect+0x16a/0x4b0 [ 766.583934][T26741] ? bpf_test_run+0x1d1/0x830 [ 766.583962][T26741] ? bpf_test_run+0x1d1/0x830 [ 766.583985][T26741] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 766.584001][T26741] bpf_test_run+0x354/0x830 [ 766.584040][T26741] ? __pfx_bpf_test_run+0x10/0x10 [ 766.584070][T26741] ? trace_kmem_cache_alloc+0x29/0xf0 [ 766.584085][T26741] ? slab_build_skb+0x52/0x410 [ 766.584099][T26741] ? csum_partial+0x239/0x2c0 [ 766.584126][T26741] ? convert___skb_to_skb+0x3d/0x5b0 [ 766.584151][T26741] bpf_prog_test_run_skb+0xd22/0x1c90 [ 766.584184][T26741] ? __fget_files+0x2a/0x420 [ 766.584224][T26741] ? __fget_files+0x3a0/0x420 [ 766.584246][T26741] ? __fget_files+0x2a/0x420 [ 766.584272][T26741] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 766.584296][T26741] bpf_prog_test_run+0x2c7/0x340 [ 766.584315][T26741] __sys_bpf+0x643/0x950 [ 766.584340][T26741] ? __pfx___sys_bpf+0x10/0x10 [ 766.584375][T26741] ? ksys_write+0x242/0x270 [ 766.584394][T26741] ? __pfx_ksys_write+0x10/0x10 [ 766.584416][T26741] __x64_sys_bpf+0x7c/0x90 [ 766.584439][T26741] do_syscall_64+0x14d/0xf80 [ 766.584481][T26741] ? trace_irq_disable+0x3b/0x150 [ 766.584499][T26741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.584522][T26741] ? clear_bhb_loop+0x40/0x90 [ 766.584546][T26741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.584566][T26741] RIP: 0033:0x7f61b879c819 [ 766.584586][T26741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.584605][T26741] RSP: 002b:00007f61b95d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 766.584628][T26741] RAX: ffffffffffffffda RBX: 00007f61b8a15fa0 RCX: 00007f61b879c819 [ 766.584643][T26741] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 766.584656][T26741] RBP: 00007f61b95d8090 R08: 0000000000000000 R09: 0000000000000000 [ 766.584669][T26741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.584682][T26741] R13: 00007f61b8a16038 R14: 00007f61b8a15fa0 R15: 00007fff887346b8 [ 766.584715][T26741] [ 767.174229][T26760] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.5971'. [ 767.390817][T26766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5971'. [ 769.248397][T26755] macvtap2: entered promiscuous mode [ 769.253763][T26755] macvtap2: entered allmulticast mode [ 769.281778][T26759] macvtap2: entered promiscuous mode [ 769.289283][T26759] macvtap2: entered allmulticast mode [ 769.392065][T26768] syzkaller0: entered promiscuous mode [ 769.409178][T26768] syzkaller0: entered allmulticast mode [ 769.640205][T26786] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 769.871204][T26801] syzkaller1: entered promiscuous mode [ 769.889816][T26801] syzkaller1: entered allmulticast mode [ 770.037027][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5986'. [ 770.061641][T26806] bond3: entered promiscuous mode [ 770.375802][T26824] sctp: [Deprecated]: syz.1.5992 (pid 26824) Use of int in maxseg socket option. [ 770.375802][T26824] Use struct sctp_assoc_value instead [ 770.407543][T26823] syzkaller0: entered promiscuous mode [ 770.414092][T26823] syzkaller0: entered allmulticast mode [ 782.200740][ T8242] lec:lec_start_xmit: lec0:No lecd attached [ 787.215129][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 787.223179][ C0] lec:lec_tx_timeout: lec0 [ 794.748476][ T25] block nbd1: Possible stuck request ffff888027028000: control (read@0,1024B). Runtime 360 seconds [ 794.759705][ T25] block nbd1: Possible stuck request ffff888027028200: control (read@1024,1024B). Runtime 360 seconds [ 794.770804][ T25] block nbd1: Possible stuck request ffff888027028400: control (read@2048,1024B). Runtime 360 seconds [ 794.782188][ T25] block nbd1: Possible stuck request ffff888027028600: control (read@3072,1024B). Runtime 360 seconds [ 797.305455][ T30] INFO: task udevd:6492 blocked for more than 143 seconds. [ 797.312740][ T30] Not tainted syzkaller #0 [ 797.318715][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 797.328718][ T30] task:udevd state:D stack:22496 pid:6492 tgid:6492 ppid:5194 task_flags:0x400140 flags:0x00080002 [ 797.341325][ T30] Call Trace: [ 797.344827][ T30] [ 797.347804][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 797.352341][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 797.357915][ T30] ? __pfx___schedule+0x10/0x10 [ 797.362819][ T30] ? schedule+0x90/0x360 [ 797.368209][ T30] schedule+0x164/0x360 [ 797.372446][ T30] io_schedule+0x7f/0xd0 [ 797.377475][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 797.382855][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 797.390651][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 797.397730][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 797.403526][ T30] do_read_cache_folio+0x1ad/0x590 [ 797.409358][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 797.415648][ T30] read_part_sector+0xb6/0x2b0 [ 797.420568][ T30] adfspart_check_POWERTEC+0x92/0xef0 [ 797.426634][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 797.432245][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 797.438762][ T30] bdev_disk_changed+0x7ba/0x1550 [ 797.443897][ T30] ? bdev_open+0xe0/0xd30 [ 797.505656][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 797.511242][ T30] blkdev_get_whole+0x380/0x510 [ 797.565589][ T30] bdev_open+0x31e/0xd30 [ 797.569978][ T30] blkdev_open+0x470/0x610 [ 797.593306][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 797.622700][ T30] do_dentry_open+0x785/0x14e0 [ 797.634542][ T30] vfs_open+0x3b/0x340 [ 797.639927][ T30] ? path_openat+0x2df0/0x3860 [ 797.655435][ T30] path_openat+0x2e08/0x3860 [ 797.660162][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 797.667339][ T30] ? stack_depot_save_flags+0x33/0x810 [ 797.672908][ T30] ? __pfx_path_openat+0x10/0x10 [ 797.678353][ T30] ? __x64_sys_openat+0x138/0x170 [ 797.683756][ T30] ? do_syscall_64+0x14d/0xf80 [ 797.689741][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.696916][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 797.702961][ T30] do_file_open+0x23e/0x4a0 [ 797.711109][ T30] ? __pfx_do_file_open+0x10/0x10 [ 797.717306][ T30] ? _raw_spin_unlock+0x28/0x50 [ 797.722224][ T30] ? alloc_fd+0x64b/0x6c0 [ 797.728882][ T30] do_sys_openat2+0x113/0x200 [ 797.733638][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 797.740564][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 797.748067][ T30] ? rcu_is_watching+0x15/0xb0 [ 797.752962][ T30] __x64_sys_openat+0x138/0x170 [ 797.760228][ T30] do_syscall_64+0x14d/0xf80 [ 797.766077][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.772316][ T30] ? clear_bhb_loop+0x40/0x90 [ 797.778238][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.784269][ T30] RIP: 0033:0x7fadb46a7407 [ 797.790069][ T30] RSP: 002b:00007ffde129f360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 797.800388][ T30] RAX: ffffffffffffffda RBX: 00007fadb4d59880 RCX: 00007fadb46a7407 [ 797.811842][ T30] RDX: 00000000000a0800 RSI: 000055acef007520 RDI: ffffffffffffff9c [ 797.821707][ T30] RBP: 000055aceeff0910 R08: 0000000000000000 R09: 0000000000000000 [ 797.830819][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055acef00df10 [ 797.841064][ T30] R13: 000055aceeffe190 R14: 0000000000000000 R15: 000055acef00df10 [ 797.850443][ T30] [ 797.882863][ T30] [ 797.882863][ T30] Showing all locks held in the system: [ 797.914570][ T30] 1 lock held by khungtaskd/30: [ 797.919506][ T30] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 797.965202][ T30] 2 locks held by getty/5585: [ 797.970666][ T30] #0: ffff8880328900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 798.007613][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 798.055147][ T30] 4 locks held by kworker/0:3/5830: [ 798.060697][ T30] 1 lock held by udevd/6492: [ 798.097187][ T30] #0: ffff888026fa3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 798.135855][ T30] 2 locks held by kworker/u8:21/7969: [ 798.141307][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 798.190744][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 798.226119][ T30] 3 locks held by kworker/0:17/10619: [ 798.231608][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 798.267462][ T30] #1: ffffc9000c60fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 798.296552][ T30] #2: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 798.336418][ T30] 2 locks held by syz-executor/17193: [ 798.341871][ T30] #0: ffffffff8fbcf108 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 798.395151][ T30] #1: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 798.444724][ T30] 4 locks held by syz-executor/25640: [ 798.450195][ T30] 1 lock held by syz-executor/26159: [ 798.484703][ T30] [ 798.487106][ T30] ============================================= [ 798.487106][ T30] [ 798.516300][ T30] NMI backtrace for cpu 1 [ 798.516322][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 798.516346][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 798.516359][ T30] Call Trace: [ 798.516367][ T30] [ 798.516377][ T30] dump_stack_lvl+0xe8/0x150 [ 798.516413][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 798.516514][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 798.516554][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 798.516598][ T30] sys_info+0x135/0x170 [ 798.516651][ T30] watchdog+0xfd9/0x1030 [ 798.516684][ T30] ? watchdog+0x21a/0x1030 [ 798.516712][ T30] kthread+0x388/0x470 [ 798.516739][ T30] ? __pfx_watchdog+0x10/0x10 [ 798.516757][ T30] ? __pfx_kthread+0x10/0x10 [ 798.516779][ T30] ret_from_fork+0x51e/0xb90 [ 798.516816][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 798.516842][ T30] ? __switch_to+0xc7d/0x1450 [ 798.516883][ T30] ? __pfx_kthread+0x10/0x10 [ 798.516906][ T30] ret_from_fork_asm+0x1a/0x30 [ 798.516954][ T30] [ 798.516962][ T30] Sending NMI from CPU 1 to CPUs 0: [ 798.631079][ C0] NMI backtrace for cpu 0 [ 798.631099][ C0] CPU: 0 UID: 0 PID: 17486 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 798.631121][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 798.631132][ C0] RIP: 0010:__lock_acquire+0x853/0x2cf0 [ 798.631164][ C0] Code: 48 89 d8 48 c1 e8 20 29 c5 89 c1 c1 c1 04 31 e9 01 d8 29 cb 89 ca c1 c2 06 31 da 01 c1 29 d0 89 d6 c1 c6 08 31 c6 01 ca 29 f1 <89> f3 c1 c3 10 31 cb 01 d6 29 da 89 dd c1 c5 13 31 d5 01 f3 29 ee [ 798.631180][ C0] RSP: 0018:ffffc90003cb7578 EFLAGS: 00000012 [ 798.631196][ C0] RAX: 0000000000104207 RBX: 0000000000004008 RCX: 00000000105209fd [ 798.631209][ C0] RDX: 00000000ffef7dec RSI: 00000000efadb5f8 RDI: ffff888050193d00 [ 798.631222][ C0] RBP: 0000000000004008 R08: ffffffff81767e95 R09: ffffffff8e75e620 [ 798.631235][ C0] R10: ffffc90003cb7868 R11: fffff52000796f19 R12: ffff888050194858 [ 798.631249][ C0] R13: ffff888050194858 R14: ffff888050193d00 R15: 0000000000000000 [ 798.631262][ C0] FS: 0000000000000000(0000) GS:ffff888125459000(0000) knlGS:0000000000000000 [ 798.631276][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.631288][ C0] CR2: 0000564673de2ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 798.631305][ C0] Call Trace: [ 798.631311][ C0] [ 798.631323][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 798.631349][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 798.631375][ C0] lock_acquire+0xf0/0x2e0 [ 798.631397][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 798.631426][ C0] ? __unwind_start+0xf7/0x760 [ 798.631452][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 798.631477][ C0] unwind_next_frame+0xc2/0x23c0 [ 798.631502][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 798.631530][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 798.631550][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 798.631582][ C0] __unwind_start+0x5b8/0x760 [ 798.631611][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 798.631631][ C0] arch_stack_walk+0xe3/0x150 [ 798.631660][ C0] ? __unwind_start+0xf7/0x760 [ 798.631688][ C0] stack_trace_save+0xa9/0x100 [ 798.631706][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 798.631724][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 798.631749][ C0] save_stack+0x122/0x230 [ 798.631769][ C0] ? __pfx_save_stack+0x10/0x10 [ 798.631798][ C0] __reset_page_owner+0x71/0x1f0 [ 798.631818][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 798.631863][ C0] ? ___free_pages+0xb2/0x220 [ 798.631886][ C0] vfree+0x25a/0x400 [ 798.631902][ C0] ? __pfx_kcov_close+0x10/0x10 [ 798.631929][ C0] kcov_close+0x28/0x50 [ 798.631954][ C0] __fput+0x44f/0xa70 [ 798.631986][ C0] task_work_run+0x1d9/0x270 [ 798.632012][ C0] ? __pfx_task_work_run+0x10/0x10 [ 798.632031][ C0] ? kmem_cache_free+0x187/0x630 [ 798.632050][ C0] ? do_exit+0x70a/0x23c0 [ 798.632083][ C0] do_exit+0x70f/0x23c0 [ 798.632103][ C0] ? __pfx_do_exit+0x10/0x10 [ 798.632119][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 798.632142][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 798.632162][ C0] do_group_exit+0x21b/0x2d0 [ 798.632182][ C0] __x64_sys_exit_group+0x3f/0x40 [ 798.632200][ C0] x64_sys_call+0x221a/0x2240 [ 798.632226][ C0] do_syscall_64+0x14d/0xf80 [ 798.632246][ C0] ? trace_irq_disable+0x3b/0x150 [ 798.632261][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.632278][ C0] ? clear_bhb_loop+0x40/0x90 [ 798.632298][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.632315][ C0] RIP: 0033:0x7f895079c819 [ 798.632337][ C0] Code: Unable to access opcode bytes at 0x7f895079c7ef. [ 798.632346][ C0] RSP: 002b:00007ffc7acc64f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 798.632364][ C0] RAX: ffffffffffffffda RBX: 00007f8950833bd9 RCX: 00007f895079c819 [ 798.632383][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 798.632394][ C0] RBP: 00007f8950833beb R08: 0000000000000000 R09: 00000000000927c0 [ 798.632411][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 798.632422][ C0] R13: 00000000000927c0 R14: 00000000000bc146 R15: 00007ffc7acc66a0 [ 798.632447][ C0] [ 799.068788][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 799.075727][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 799.084891][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 799.095016][ T30] Call Trace: [ 799.098337][ T30] [ 799.101312][ T30] vpanic+0x56c/0xa60 [ 799.105359][ T30] ? __pfx___schedule+0x10/0x10 [ 799.110259][ T30] ? __pfx_vpanic+0x10/0x10 [ 799.114818][ T30] ? __pfx_console_unlock+0x10/0x10 [ 799.120068][ T30] panic+0xc5/0xd0 [ 799.123835][ T30] ? __pfx_panic+0x10/0x10 [ 799.128298][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 799.133726][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 799.139937][ T30] watchdog+0x1023/0x1030 [ 799.144356][ T30] ? watchdog+0x21a/0x1030 [ 799.148852][ T30] kthread+0x388/0x470 [ 799.152984][ T30] ? __pfx_watchdog+0x10/0x10 [ 799.157717][ T30] ? __pfx_kthread+0x10/0x10 [ 799.162357][ T30] ret_from_fork+0x51e/0xb90 [ 799.166996][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 799.172155][ T30] ? __switch_to+0xc7d/0x1450 [ 799.176874][ T30] ? __pfx_kthread+0x10/0x10 [ 799.181909][ T30] ret_from_fork_asm+0x1a/0x30 [ 799.186802][ T30] [ 799.190668][ T30] Kernel Offset: disabled [ 799.195009][ T30] Rebooting in 86400 seconds..