last executing test programs: 2.925335188s ago: executing program 4 (id=1216): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000001b000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="520003000100b8", 0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0xa, 0x801, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 2.307126763s ago: executing program 4 (id=1227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x1a8, 0x40000}, 0x0) 2.196361517s ago: executing program 0 (id=1229): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={@loopback, @multicast1, 0x19, 0x16}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="ff07000000000000000000000000000013000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/28], 0x50) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000038, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0x110, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xffffffff, 0x4dc3, 0xaeb, 0x20000, r2, 0x8001, '\x00', 0x0, r4, 0x1, 0x3, 0x5, 0x4, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'macsec0\x00', {0x3}, 0x61}) 2.130707018s ago: executing program 4 (id=1231): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x1, 0x1, 0x3f800, 0x4, 0xd105}, &(0x7f00000000c0)=0x14) pipe(&(0x7f0000001dc0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xfc, r4, 0x3, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x2, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0xf}, {0x8, 0xb, 0xffffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x27}, {0x8, 0xb, 0xffff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e40)={0xcc, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x807f557d39e19880}, 0x8000) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r8, @ANYBLOB="1c98c05587dfc974c8da84"], 0x20}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001bc0)={0x0, @dev, @remote}, &(0x7f0000001c00)=0xc) sendmmsg$inet(r5, &(0x7f0000001d00)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)="f3fec71410ca68050f61ea7538c801674c1d1d2412f7d7db4abf2e68dcfab1e195e99cbb7099220742e563b6233fd2782bf4fdb4289a0be1a2be2d3fe908c698e08505a82ae1840c15e51a82b77effb5923b5a537842aa24fc14b62dfb4c03a3147ad4c1a953991b1031ec2c63ed928b3d6b7a72eff511003c49ec89fb8fea4d7ca5eb4a53c1bef73618844d05f5c079ecce6bfe48520ab417bb46f5418a2b6ffded1fe924010c84a68a008cf828fa83c2f9d2805d69c5d7ad631972d8631dd340cc6c91cc8269bfd10ef5dfa8bdf113b23f9a082c63607b9f4eb04b54", 0xdd}, {&(0x7f0000000180)="fb4c41bd0384ca059e81777b293799c7acb75389a1579bdbc15d7bb12873b0d90df169210662e7995da6f644f777977856d3be3eefdb1d9dbfb1654a0b2db73087a2e4f60f729843903814806ba0d9268fab0b424380d24926e1d41a653032345ea814894b9fd26c2a6e71365fc1f40f309796e81b77413157da32c9d873985d69e1d1b9e043eecbc28cb129d3716cff8219051d5bb525c4990a9e5c4ec47f7604f4dc3aa9110e8bd77e37468cbc10f465eb0183f33bb582ea96ace9c23bcbaa50850377ec8ceb29e069dbe145b32c505e351468eef623fda783918395662f108817b0b393de2d4b8504ae0719", 0xed}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000280)="09aea40f039abc2db195b137540e99aff7c63ab6c85010ef5d94b2fe2b4c1d130406f9f356368425444b370424f72c76cbd1b3fe665dd50d899b106428facb9526489da17ca9e1a112cff515e1b0d87186786afea5220cd1a1a7cc9edd", 0x5d}, {&(0x7f0000000300)="e4a5b818d537b9470651438d36b086f88acfa9bbcf611b1681d286cf602969d1a0b426d125580929ea9e702263b19a336fcc1e68ce75bc143bef580de63142af2b59dd067d8b9bb896f142de3251e171c8b453d875593ef9cd2ac8fdd6058805a747d69f77a90746e54773b5824797ffcb0920bb62535bf8", 0x78}, {&(0x7f0000000380)="9b5fe8320e61c4b490c647bf92ddaa715223f827e0e5bbaa4cf95e300f09e429f7cd53c22e53675933a04cac110c51dc358ec196ea9a3d5a1e63ef9a06fc6759954660c982966e4cedfc01b609c6f868fa9e32af56d3b71e520290b88e78b15292c365250d69ad31293f3797edd739bac89b8d82f6ed384044b3cfaa8dd862a7eae619591f4ca8b3013f85df01b003202152da14c19b9a6934b92fbb69334a63b668166c8066e30ca54852928869348657cc", 0xb2}, {&(0x7f0000000440)="28d46f0f44b3c244435e31ddad5a91f4bddf1414681d2cd186d6c9f83fe93a202f2d4fc18246f8cc1a55c1694f2d72dda84932bea11c40ad78c654817b60f627880c2060b3e95ec5d50294c0ac12d229671c4d30839f463de88d5f7bac579e8825ba48085379fca573f5c4a1c0d5960e4df2477eecd09910ff570fbcfeaa413247f24db57572cd594e1258dc51015947038d724d826e72e2bc66ba601b9b9097d201367a1f27fe5849a56f75688149", 0xaf}], 0x7, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @private=0xa010101}}}], 0x38}}, {{&(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000700)="596f1c779459dcd29bb3b444217f1c829b80915f4247563438fc7c16b8a33965f2d9a3b8aae7b6ee8782", 0x2a}, {&(0x7f0000000740)="a67919dd9a03b4077e7a251010c9f6ca673ff88feb6ddbcba3a7ccf585fd64a457c15e28667ca3663471d4cdfe93b05bda63d07ff7673429d35b1c637a065d30bad0de9056e1436175fc82", 0x4b}, {&(0x7f00000007c0)="dd7b0ac10a3b1724d60b321806a052181dcf94f25fb2b659e569368b640501a5c267b04e65de31fda5bd89", 0x2b}, {&(0x7f0000000800)="02cef6a1ecae699f6ec7973ca06214f7df05f43d5b9b497a3efd335b763c09b38a1acb88d430a7cdf0f89a7d4450b63fb05091734ca7d92654c0284d4375aa3cd6040af73c8c8f34c46cb1aad521be050d1536d26125d61028546e1d4eb9c6250748db8092fda9bb7860075eef1d05d46f5815e0887a807d5da4abc1d9e2d0e458fcffcedd19dfb236efbde2b96f79c9120a487695ce", 0x96}, {&(0x7f00000019c0)="540f74aeb37149ca0aa0760abb66281f273c481b426490f3b835d07931e7099fd7e42a36a16754fda6da4c61c886f0e6fdac90e51e5f96b147fc3afabd4a5d6024c41880cdd6474b77b6f2981618f6f386547bc8cef6b2c6735c3524975fc4cacc30258dec8468fde67f67d664e300e1ca0a465898eb8cb4bde4", 0x7a}, {&(0x7f0000001a40)="5d70adda2715ac2ce8a5939fab60bd6eb48d6c70d6b9dc62421cfac55f623c4adce3403ae7d716cc412a6dd49a9669046ce0999318338fcf8b38a9dbcb99b2e94cc0586a1acd7da0e04f92a16ed9fe5f45229dce3d072f892691898da5343a74b12583837a45684886a2251d98b4f739188ea50a0dcdc3bdee221095420ea7e15067392be8d55df0ed491e32b3ca8a0e25ffccfdcf407c3ab91c9f015b0f553414d54596bc9625edde184538d9b4ecfbcc689bfe192c806ada64d0145f7e86c6bb60949fa79347d4a5e18b4392a2b3139ae461152b4293a6dee71141421d3291a50363cf51f72294c47baf2a17b3f783bfc5406e32649661ba", 0xf9}], 0x6, &(0x7f0000001c40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x98}}], 0x3, 0x40) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fd007c05e8fe50a10a001e00014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) 2.02157336s ago: executing program 0 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x130, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd5d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffcef4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1b}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x35}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xeb500000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x59fb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x890}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x3ed, 0x1, 0x70bd2c, 0x25dfdbfc, "753ed742b078c5a68d7ba2763f2c76ed21cb0f06da6afd134ab6ab341e65db638ce25c7dd8acd3f9b425ebe97d606c5baf30dd87b1f08e1c4005a0300eed8ff1151b4a09c6f59964f1867ec5c93982e6bc696a0309f68a1a63a2a6ce4cf2b85da989065d96d6", ["", "", "", "", "", "", "", "", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20040041) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.860389741s ago: executing program 4 (id=1236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000040)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000080)='GPL\x00', 0x81, 0x82, &(0x7f00000000c0)=""/130, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0xd, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x40, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000040)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000080)='GPL\x00', 0x81, 0x82, &(0x7f00000000c0)=""/130, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0xd, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='bcache_alloc\x00', r0, 0x0, 0x4}, 0x18) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100290089024500001c010000000011907800000000e000000100004e2000089078dd762cf38aee9489015d905a7c2634f1b9bebc5908791166ef82595d09e485f0fc06863cbf51cdb3c78644c9060d904108bcde0de9913d000b859073"], 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.835158392s ago: executing program 2 (id=1238): socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0xc080) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba6e0d60508dbbb", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/210, 0xd2}}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40002043) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0x15, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_extract_tcp_res$synack(&(0x7f00000005c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002680), 0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route_sched(r7, 0x0, 0x4000040) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000000c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad4420988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0c56a20ff27fff0000000000", 0x89}], 0x1}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r11) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000026c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r7, @ANYBLOB="010000000000000000000f0100000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRESHEX=r3, @ANYRESHEX=r8, @ANYRESOCT=r11], 0x38}, 0x1, 0x0, 0x0, 0x44021}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 1.750761225s ago: executing program 1 (id=1239): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0xa8010000, 0x0, 0x40000}, 0x0) 1.688457575s ago: executing program 0 (id=1240): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r1, @ANYBLOB="200001ff", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) 1.633132462s ago: executing program 1 (id=1241): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18) mmap(&(0x7f0000ba3000/0x3000)=nil, 0x3000, 0x1800004, 0x8031, 0xffffffffffffffff, 0x3000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f77164557", 0x56c}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r3, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x24009000}, 0x80) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff12"], 0x30}}, 0x0) 1.598404792s ago: executing program 0 (id=1242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x300, 0x40000}, 0x0) 1.44825412s ago: executing program 0 (id=1243): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000011c0)="a0", 0x1, 0x20000080, &(0x7f00000012c0)={0xa, 0x400, 0x0, @private0}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042"], 0xfc}}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000700)=@assoc_value, &(0x7f0000000740)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0xf168, 0x2, 0x2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="5aa39be204152774decb2bd7a0dbb271180009ffffff9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) socket$caif_stream(0x25, 0x1, 0x3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xed55, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000006c0)={r6, 0x3, 0x1000, "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"}, 0x1008) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00b7299fa562e53c6700"/28], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, &(0x7f0000000180), r10, 0x0, 0x2000000000004, 0xa) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r12 = socket(0x2b, 0x1, 0x1) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}]}]}, 0x58}}, 0x0) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1.336420895s ago: executing program 3 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ffff000000000000ff01000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702006c1993b900850000008c000000b7000000000000009500000000000000e9c8244fdb1998a7e27f1038530143d5f4810689fe8c264029310620fa171cc269ca04490c4a88f9858096909585d2aae8965cc4eb280f7e5e3f2607e48bb8cee186211afbfa86fbee0d63915ca6453ac2955683206a459a5c14a74182a43e142c0ca67a7bdab7042840bd3762078bb9c2b3d7ba599b7513a02df9fc177e9286edb0650e033381ba3575ca"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="f318f6a49fb5e29af0c0700b5bee55e404cb19ac218f14346017904f4b93b5cb1245f4a9b179d5ec46021da673493a1e81803e383363fd2642028bf78ca1c1043da5e9d86e88ac663e076c755573852f75345c9a1375", 0x56}, {&(0x7f0000000540)="5f853757babc12b834dc561ea46dd95f39a51d4fa58fab3ed6ad410d88799417f2041788cb0e797b528f6219e95b6f2db33220cbdcd011e71b7726dbe4e0419b383e322282cac0380f1fc7d0c61963a391bb206e053d96484f9557f9f700dab2", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)="5921ebe6f5b0b9a23ad0211107cd10cd64da65ea3acde30eccb23a3254bdf5fc353e630fa593357ba74fe39df0935d244eb51a3f6b19d6915bfdf07e8f5f107714e969b9c88b87d148399f0e1a6844900588e724806a945afd9c10ce00df80f320ae670b35d8d3a265d30977046ec4c9173b7a9e40ac9f4408694faeac37f3322f51cf2b9563a13b47cae2647b760a4eedc4fb2743e158373bc44a7749e9eb14", 0xa0}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="c00492cbeb7b6a6cfc71d662313639b4be49", 0x12}], 0x3, &(0x7f0000000d00)=[@rights={{0x30, 0x1, 0x1, [r2, r3, r3, r3, r3, r2, 0xffffffffffffffff, r3]}}], 0x30, 0x20004000}}, {{&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000dc0)="a48363d135f4e238fcfa374684b125c782c947f645d2784830d5584d4b81213a437c36d4227ef1bd7008e3b788fa", 0x2e}, {&(0x7f0000000e00)="fbc7b6c3926cfd95294c5dc87dd8f419fb06d8ea2513bc11f061fa1076bd2d10a61d977b1c9a9aeb13eb395828a7b02224a0c6fd894853501615d6f1cc10b1f75a16101c555d3ed9c3cde4c5f3383ee52de87fb8fca58d961cc7f404e14cb1c8abb01d64742c195df12fe5ee4f195424", 0x70}, {&(0x7f0000000ec0)="da4434a5cb4d0bb90b3af6e3", 0xc}, {&(0x7f0000000f00)="6f3ce799b9ded4508cbf0f33d0b80e563477305c085647d389008c10e8c5e317c903b2186fd3a4e36adfa7f6a53f94b99480be3dc571a10f947014a6e8182500e578edd9eb572b5f877e9a40c834ecce2b7f268193e87f43886a47c57cd0ab0d36927f90d4a479d77279", 0x6a}], 0x4, &(0x7f00000011c0)=[@cred={{0x1c}}], 0x20, 0x880}}, {{&(0x7f0000001200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001380)}], 0x1, &(0x7f0000001440)=[@cred={{0x1c}}], 0x20, 0x84}}], 0x4, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) (async, rerun: 32) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x14) (rerun: 32) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4064}, 0x8) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18001841}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000200203010400000000000000000a00000808000100030000280900020000000000010000000800054000000000080004400000000f080001000200002508000100"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000808) readv(r2, 0x0, 0x0) (async) accept4$inet6(r4, 0x0, &(0x7f0000000280), 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) (async) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={r7, r9, 0x8, 0x0, 0x0, 0x3, 0x0, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x9) 1.226626757s ago: executing program 0 (id=1246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xfe}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="3f7ead2355f7dba182", 0x9}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) sendmsg$can_j1939(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x4}, 0xfc}, 0x18, &(0x7f0000000340)={0x0}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) pipe(&(0x7f00000000c0)) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r4}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xfe}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000100)="3f7ead2355f7dba182", 0x9}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) (async) sendmsg$can_j1939(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x4}, 0xfc}, 0x18, &(0x7f0000000340)={0x0}}, 0x0) (async) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) (async) 1.052414801s ago: executing program 1 (id=1247): r0 = socket$inet6(0x10, 0x2, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b20300200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x26) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000010000a005050000c84b0f70ed9a476e"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000001010000d0427bd70000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000400000001c0012800c0001006d6163766c616e000c00028008000700000000e0140035006d6163766c616e300000000000000000"], 0x50}}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0001000000000000000600017c00000400fc800c0001800600060080db00000800028004000680b5d557c1fc201add691d4b5a0e4f0f38737e19e07dbea1a93ad7ed4ce4d600d72385f0c89f1d5b0dd4a131bd6b07c0fd9646abba96b42a1757eb08f365fc523c6537f34b3d554a18ed3a218e70dec1f1a5738b756ee5ce8f578a02dd705596fcf562b71e0b7a493d5264e664cf58c88d58e9d7266be632b8906de1cb02974ca69bcc59a21ccd935056091c27f075541afcbc079ae35418001aca88e819dc82de5d300a38a0c95b0419d9f0d63c4e5e5ab7d8feca7225359ffbcbfd3c9d"], 0x2c}}, 0x4c000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="3b0c00002200000001000502000d040107040108054dce0e54749b366e82b12f7a2ded63346c3e839c605ec79eaff93a43a6d126bb019524c41d23743e8c0458cedf90ebb491e13ababd8e2b978d737a96da8cb9a04d4c17230faa95eb616d08b457570401ffcacb3a99786ce3149a8e"], 0x70) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}, 0xfd}, 0x18) socket$inet6(0x10, 0x2, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl(r1, 0x8b2c, &(0x7f0000000040)) (async) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b20300200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000740)={'vcan0\x00'}) (async) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x26) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000010000a005050000c84b0f70ed9a476e"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000001010000d0427bd70000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000400000001c0012800c0001006d6163766c616e000c00028008000700000000e0140035006d6163766c616e300000000000000000"], 0x50}}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0001000000000000000600017c00000400fc800c0001800600060080db00000800028004000680b5d557c1fc201add691d4b5a0e4f0f38737e19e07dbea1a93ad7ed4ce4d600d72385f0c89f1d5b0dd4a131bd6b07c0fd9646abba96b42a1757eb08f365fc523c6537f34b3d554a18ed3a218e70dec1f1a5738b756ee5ce8f578a02dd705596fcf562b71e0b7a493d5264e664cf58c88d58e9d7266be632b8906de1cb02974ca69bcc59a21ccd935056091c27f075541afcbc079ae35418001aca88e819dc82de5d300a38a0c95b0419d9f0d63c4e5e5ab7d8feca7225359ffbcbfd3c9d"], 0x2c}}, 0x4c000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="3b0c00002200000001000502000d040107040108054dce0e54749b366e82b12f7a2ded63346c3e839c605ec79eaff93a43a6d126bb019524c41d23743e8c0458cedf90ebb491e13ababd8e2b978d737a96da8cb9a04d4c17230faa95eb616d08b457570401ffcacb3a99786ce3149a8e"], 0x70) (async) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}, 0xfd}, 0x18) (async) 1.023515179s ago: executing program 3 (id=1248): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0xfffffffd, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl(r6, 0x4, &(0x7f00000001c0)="c9d1dbe308541324d10d6146e8e8acb7ebaeedb4d08b3aaa5774eb8523743f55fc930844b1eae601d200b1151a5c88c800fef58849502df0bd5f23c9f9") sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xaa}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000071000010700000000000000000a000000060003001d000000cfcbc857dfae16222a37feda2a888e744b5ebb116b81956b4006f55d873ac08d8baf1f378f3cf6212982975eb717d19f497e03c7429d1d5a8095d908d0f5e15416"], 0x1c}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-x86\x00'}, 0x58) 888.231938ms ago: executing program 2 (id=1249): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000440)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 812.465051ms ago: executing program 4 (id=1250): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 811.995983ms ago: executing program 1 (id=1251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000)=0xffffff80, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x5, 0x800, 0x8001, 0x4, 0x5, 0x10001, 0x4}, &(0x7f0000000140)={0x52, 0x28000000, 0xb, 0xd, 0xfffffffffffffff9, 0x9364, 0x6, 0x8}, &(0x7f0000000180)={0x8, 0x0, 0x6, 0x8000000000000000, 0x1, 0x6, 0x9, 0x2}, &(0x7f00000001c0)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x1]}, 0x8}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x40002000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r12) pipe(0x0) 751.405753ms ago: executing program 2 (id=1252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0xfdffffff, 0x0, 0x40000}, 0x0) 645.611192ms ago: executing program 3 (id=1253): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) 580.542864ms ago: executing program 4 (id=1254): socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 547.117261ms ago: executing program 2 (id=1255): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x600, 0x40000}, 0x0) 543.650458ms ago: executing program 1 (id=1256): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000001b000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="520003000100b8", 0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0xa, 0x801, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 348.414123ms ago: executing program 3 (id=1257): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180030000000000000020000a80050008"], 0x68}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa9c0961ff76c793d2000000583a01fe8000000000000000000000000000bbff02000000000000000000000000000102009078000007ca608cb02b00002f0000000000000000000000000000000001ff0100000000000000000000000000012b0404020010000000000000f0de650000000000000000000000012001000000000000000000000000000235cb50c4453321cbe0c1b64eb88a0cd1daf21edee0f3a5c1e8217094e6d74005cccf661f"], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10) 339.478386ms ago: executing program 2 (id=1258): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000100)=""/241, 0xf1}, {&(0x7f0000001940)=""/184, 0xb8}, {&(0x7f0000000800)=""/4105, 0x1009}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f00000007c0)=""/44, 0x2c}], 0x5}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {}, {0x0, 0xfef2}, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f00000004c0)=""/147, 0x93}], 0x3, &(0x7f0000000640)=""/171, 0xab}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2e0b68da, 0x8}}]}]}]}, 0x3c}, 0x1, 0xffffa888}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x73}, {0xfffffefffffffffd, 0xeca, 0x0, 0x0, 0x0, 0x0, 0x778a, 0xffff}}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@multicast1}}, 0xe8) close(r1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x1, 0x0, 0x400, 0x1, 0x3, 0x3]}, &(0x7f0000000080)=0x10) 289.016671ms ago: executing program 1 (id=1259): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c"], 0x90}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x80000000000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x36, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000002f77fbac141416e000030a94079f03b1800044020510e0845013f2325f003909050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff3e}, 0x2c) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1700000056002300000000000000000007"], 0x18}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000001c0)={r9, 0x9}, 0x8) sendmsg$tipc(r6, &(0x7f0000000480)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="0788d83aeac411738ddccc8c5925c027acbdf75a20d708", 0x17}, {&(0x7f0000000100)="9e421a53f22aac9bc2a76736e98ca79601a8617366a4d2ed67e3c7479fffc9fb5ad441784eb1719aeb849b0bc9faecf59f5c85e46df44a92ca438a898ab16a5087ae10f1305fb51e1072f2ff930ac554f2b1d1cc59601bec89ce5689952c0821e1442596631ca7a617bfe18811a50e20b69fcaa91c902451eb384d02d2d244ae3126f817c2ffc69fe7f11d41c4b80412405bc56f3d6ebb712115505b50f4264fd2b1b4e177bf", 0xa6}], 0x2, &(0x7f0000000440)="2cad89e98b9e78f76ec30e7c6c95642baaedb818041e5763e8489a5147f7a2ce44fcd790800e8951d4eea888ffd04bcd5446bffa63fc255450926f71b09ae54c", 0x40, 0x8000}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x12}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}, {0x0, 0x7}}}, 0x24}}, 0x20000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)={0x68, r12, 0xd55319eec59dfa33, 0xfffffffd, 0x80000003, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "525ef6c50012220c90484494f68cf0b03ab8d1cf5550e7bf"}]]}, 0x68}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa0, r12, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0x6, 0x4, 0x9, 0xb, 0x40, 0x1, 0x70, 0x9, 0x4, 0x53a, 0x0, 0x4, 0x4, 0x707, 0x7]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x0, 0x2, 0x0, {0x5, 0x7, 0x0, 0xc, 0x0, 0x1}, 0x8, 0x5, 0x40}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x3, 0x3, 0x0, {0x0, 0xa0, 0x0, 0x3ef, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x9d}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x300, {0xff, 0x2, 0x7ff, 0x62}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24048080}, 0x20001004) socket$can_raw(0x1d, 0x3, 0x1) 188.602411ms ago: executing program 3 (id=1260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca000000950000000000000041a0746132d8e43498deb141871e1d76549a2a176dc7339eb62e7c6fc4d5d068ece797609cd883855d4171266d293d736ef6e8a3ca5be1f5d35c0e921fb603000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 106.805189ms ago: executing program 3 (id=1261): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0xffffffff, @local, 0x8}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 0s ago: executing program 2 (id=1262): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000440)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): t+0x10/0x10 [ 98.723666][ T6449] netlink_rcv_skb+0x294/0x480 [ 98.723701][ T6449] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 98.723738][ T6449] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.723796][ T6449] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.723832][ T6449] netlink_unicast+0x7f6/0x990 [ 98.723872][ T6449] ? __pfx_netlink_unicast+0x10/0x10 [ 98.723900][ T6449] ? __virt_addr_valid+0x45f/0x530 [ 98.723922][ T6449] ? __phys_addr_symbol+0x2f/0x70 [ 98.723950][ T6449] ? __check_object_size+0x47a/0x730 [ 98.723985][ T6449] netlink_sendmsg+0x8de/0xcb0 [ 98.724018][ T6449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.724049][ T6449] ? aa_sock_msg_perm+0x91/0x160 [ 98.724088][ T6449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.724108][ T6449] __sock_sendmsg+0x221/0x270 [ 98.724143][ T6449] ____sys_sendmsg+0x53a/0x860 [ 98.724179][ T6449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.724203][ T6449] ? __fget_files+0x2a/0x410 [ 98.724237][ T6449] ? __fget_files+0x2a/0x410 [ 98.724278][ T6449] __sys_sendmsg+0x269/0x350 [ 98.724310][ T6449] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.724351][ T6449] ? do_sys_openat2+0x17a/0x1d0 [ 98.724411][ T6449] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.724446][ T6449] ? do_syscall_64+0x100/0x230 [ 98.724482][ T6449] ? do_syscall_64+0xb6/0x230 [ 98.724515][ T6449] do_syscall_64+0xf3/0x230 [ 98.724546][ T6449] ? clear_bhb_loop+0x35/0x90 [ 98.724579][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.724607][ T6449] RIP: 0033:0x7f4d76b8d169 [ 98.724625][ T6449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.724642][ T6449] RSP: 002b:00007f4d779d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.724664][ T6449] RAX: ffffffffffffffda RBX: 00007f4d76da5fa0 RCX: 00007f4d76b8d169 [ 98.724679][ T6449] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 98.724692][ T6449] RBP: 00007f4d779d8090 R08: 0000000000000000 R09: 0000000000000000 [ 98.724704][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.724716][ T6449] R13: 0000000000000000 R14: 00007f4d76da5fa0 R15: 00007ffc91f118a8 [ 98.724747][ T6449] [ 99.332479][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.152'. [ 99.571562][ T6473] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 99.620118][ T6470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.151'. [ 99.693123][ T6472] syzkaller1: entered promiscuous mode [ 99.718757][ T6472] syzkaller1: entered allmulticast mode [ 99.783426][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 99.796431][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 100.051885][ T6483] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.155959][ T6487] batadv_slave_1: entered promiscuous mode [ 100.164588][ T6487] batadv_slave_1: entered allmulticast mode [ 100.195445][ T6487] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 101.017797][ T6518] syzkaller1: tun_chr_ioctl cmd 35108 [ 101.040566][ T6518] batadv0: entered promiscuous mode [ 101.049823][ T6518] vlan2: entered promiscuous mode [ 101.071737][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 101.126526][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 101.149304][ T6514] netlink: 42 bytes leftover after parsing attributes in process `syz.2.162'. [ 101.774319][ T6555] netlink: 'syz.4.168': attribute type 4 has an invalid length. [ 101.888992][ T6535] netlink: 'syz.4.168': attribute type 4 has an invalid length. [ 102.171601][ T6573] FAULT_INJECTION: forcing a failure. [ 102.171601][ T6573] name failslab, interval 1, probability 0, space 0, times 0 [ 102.193802][ T6573] CPU: 0 UID: 0 PID: 6573 Comm: syz.3.172 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 102.193832][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.193844][ T6573] Call Trace: [ 102.193852][ T6573] [ 102.193860][ T6573] dump_stack_lvl+0x241/0x360 [ 102.193893][ T6573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.193917][ T6573] ? __pfx__printk+0x10/0x10 [ 102.193941][ T6573] ? __kmalloc_noprof+0xb5/0x4c0 [ 102.193971][ T6573] ? __pfx___might_resched+0x10/0x10 [ 102.194014][ T6573] should_fail_ex+0x40a/0x550 [ 102.194053][ T6573] should_failslab+0xac/0x100 [ 102.194083][ T6573] __kmalloc_noprof+0xdd/0x4c0 [ 102.194112][ T6573] ? __register_sysctl_table+0xd5/0x1620 [ 102.194150][ T6573] __register_sysctl_table+0xd5/0x1620 [ 102.194196][ T6573] ? __pfx___register_sysctl_table+0x10/0x10 [ 102.194229][ T6573] ? is_module_address+0x27/0x50 [ 102.194258][ T6573] ? register_net_sysctl_sz+0x33e/0x3b0 [ 102.194290][ T6573] nf_lwtunnel_net_init+0x56/0xf0 [ 102.194313][ T6573] ops_init+0x349/0x5b0 [ 102.194338][ T6573] ? lockdep_init_map_type+0xa1/0x910 [ 102.194374][ T6573] setup_net+0x287/0x9e0 [ 102.194393][ T6573] ? __pfx_down_read_killable+0x10/0x10 [ 102.194417][ T6573] ? __pfx_setup_net+0x10/0x10 [ 102.194443][ T6573] ? debug_mutex_init+0x38/0x70 [ 102.194476][ T6573] copy_net_ns+0x33f/0x570 [ 102.194501][ T6573] create_new_namespaces+0x425/0x7b0 [ 102.194543][ T6573] unshare_nsproxy_namespaces+0x124/0x180 [ 102.194576][ T6573] ksys_unshare+0x57d/0xa70 [ 102.194616][ T6573] ? __pfx_ksys_unshare+0x10/0x10 [ 102.194645][ T6573] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.194680][ T6573] ? do_syscall_64+0x100/0x230 [ 102.194723][ T6573] __x64_sys_unshare+0x38/0x40 [ 102.194752][ T6573] do_syscall_64+0xf3/0x230 [ 102.194784][ T6573] ? clear_bhb_loop+0x35/0x90 [ 102.194817][ T6573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.194845][ T6573] RIP: 0033:0x7f39d758d169 [ 102.194864][ T6573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.194880][ T6573] RSP: 002b:00007f39d84cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 102.194902][ T6573] RAX: ffffffffffffffda RBX: 00007f39d77a5fa0 RCX: 00007f39d758d169 [ 102.194917][ T6573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 102.194930][ T6573] RBP: 00007f39d84cd090 R08: 0000000000000000 R09: 0000000000000000 [ 102.194942][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.194954][ T6573] R13: 0000000000000000 R14: 00007f39d77a5fa0 R15: 00007ffe2469a568 [ 102.194993][ T6573] [ 103.099713][ T6610] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR' [ 103.143980][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.1.177 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 103.144013][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.144026][ T6610] Call Trace: [ 103.144034][ T6610] [ 103.144043][ T6610] dump_stack_lvl+0x241/0x360 [ 103.144078][ T6610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.144104][ T6610] ? __pfx__printk+0x10/0x10 [ 103.144134][ T6610] ? __kmalloc_cache_noprof+0x243/0x390 [ 103.144165][ T6610] ? sysfs_warn_dup+0x51/0xa0 [ 103.144195][ T6610] sysfs_warn_dup+0x8e/0xa0 [ 103.144223][ T6610] sysfs_do_create_link_sd+0xbe/0x110 [ 103.144254][ T6610] device_add_class_symlinks+0x1c5/0x250 [ 103.144281][ T6610] device_add+0x553/0xbf0 [ 103.144310][ T6610] wiphy_register+0x1922/0x2650 [ 103.144357][ T6610] ? __pfx_wiphy_register+0x10/0x10 [ 103.144387][ T6610] ? minstrel_ht_alloc+0x84b/0x940 [ 103.144431][ T6610] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 103.144472][ T6610] ieee80211_register_hw+0x35d9/0x42e0 [ 103.144511][ T6610] ? ieee80211_register_hw+0x1691/0x42e0 [ 103.144544][ T6610] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 103.144579][ T6610] ? __asan_memset+0x23/0x50 [ 103.144602][ T6610] ? __hrtimer_init+0x170/0x250 [ 103.144630][ T6610] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 103.144695][ T6610] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 103.144727][ T6610] ? trace_kmalloc+0x1f/0xd0 [ 103.144754][ T6610] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 103.144786][ T6610] ? kstrndup+0xbb/0x150 [ 103.144829][ T6610] hwsim_new_radio_nl+0xece/0x2290 [ 103.144874][ T6610] ? __pfx___nla_validate_parse+0x10/0x10 [ 103.144917][ T6610] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 103.144984][ T6610] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 103.145022][ T6610] genl_rcv_msg+0xb1f/0xec0 [ 103.145060][ T6610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.145119][ T6610] ? __pfx_lock_acquire+0x10/0x10 [ 103.145154][ T6610] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 103.145186][ T6610] ? __pfx___might_resched+0x10/0x10 [ 103.145228][ T6610] netlink_rcv_skb+0x206/0x480 [ 103.145264][ T6610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.145293][ T6610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.145362][ T6610] genl_rcv+0x28/0x40 [ 103.145386][ T6610] netlink_unicast+0x7f6/0x990 [ 103.145428][ T6610] ? __pfx_netlink_unicast+0x10/0x10 [ 103.145457][ T6610] ? __virt_addr_valid+0x45f/0x530 [ 103.145480][ T6610] ? __phys_addr_symbol+0x2f/0x70 [ 103.145500][ T6610] ? __check_object_size+0x47a/0x730 [ 103.145536][ T6610] netlink_sendmsg+0x8de/0xcb0 [ 103.145572][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.145599][ T6610] ? aa_sock_msg_perm+0x91/0x160 [ 103.145640][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.145660][ T6610] __sock_sendmsg+0x221/0x270 [ 103.145697][ T6610] ____sys_sendmsg+0x53a/0x860 [ 103.145735][ T6610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.145760][ T6610] ? __fget_files+0x2a/0x410 [ 103.145796][ T6610] ? __fget_files+0x2a/0x410 [ 103.145839][ T6610] __sys_sendmsg+0x269/0x350 [ 103.145873][ T6610] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.145961][ T6610] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.145996][ T6610] ? do_syscall_64+0x100/0x230 [ 103.146034][ T6610] ? do_syscall_64+0xb6/0x230 [ 103.146070][ T6610] do_syscall_64+0xf3/0x230 [ 103.146105][ T6610] ? clear_bhb_loop+0x35/0x90 [ 103.146138][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.146168][ T6610] RIP: 0033:0x7fa2b498d169 [ 103.146188][ T6610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.146204][ T6610] RSP: 002b:00007fa2b57d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.146228][ T6610] RAX: ffffffffffffffda RBX: 00007fa2b4ba5fa0 RCX: 00007fa2b498d169 [ 103.146243][ T6610] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 103.146256][ T6610] RBP: 00007fa2b4a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.146269][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.146281][ T6610] R13: 0000000000000000 R14: 00007fa2b4ba5fa0 R15: 00007ffde19cc268 [ 103.146314][ T6610] [ 104.059383][ T6642] netlink: 'syz.1.179': attribute type 21 has an invalid length. [ 104.086245][ T6642] netlink: 168 bytes leftover after parsing attributes in process `syz.1.179'. [ 104.612298][ T6656] netlink: 'syz.0.180': attribute type 4 has an invalid length. [ 104.663475][ T6658] netlink: 'syz.0.180': attribute type 4 has an invalid length. [ 104.847154][ T6670] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 104.958194][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 105.369158][ T6698] syzkaller1: entered promiscuous mode [ 105.410413][ T6698] syzkaller1: entered allmulticast mode [ 105.510444][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 105.717095][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.189'. [ 105.983355][ T6714] : entered promiscuous mode [ 106.157704][ T6727] netlink: 'syz.2.196': attribute type 3 has an invalid length. [ 106.168044][ T6727] netlink: 7 bytes leftover after parsing attributes in process `syz.2.196'. [ 106.229878][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.194'. [ 106.263543][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.195'. [ 106.977209][ T6761] netlink: 'syz.1.201': attribute type 39 has an invalid length. [ 107.185461][ T6766] xt_cgroup: invalid path, errno=-2 [ 107.410142][ T6781] FAULT_INJECTION: forcing a failure. [ 107.410142][ T6781] name failslab, interval 1, probability 0, space 0, times 0 [ 107.439084][ T6781] CPU: 1 UID: 0 PID: 6781 Comm: syz.3.207 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 107.439116][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.439129][ T6781] Call Trace: [ 107.439136][ T6781] [ 107.439145][ T6781] dump_stack_lvl+0x241/0x360 [ 107.439178][ T6781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.439202][ T6781] ? __pfx__printk+0x10/0x10 [ 107.439226][ T6781] ? __kmalloc_noprof+0xb5/0x4c0 [ 107.439256][ T6781] ? __pfx___might_resched+0x10/0x10 [ 107.439290][ T6781] should_fail_ex+0x40a/0x550 [ 107.439335][ T6781] should_failslab+0xac/0x100 [ 107.439366][ T6781] __kmalloc_noprof+0xdd/0x4c0 [ 107.439394][ T6781] ? __register_sysctl_table+0xd5/0x1620 [ 107.439432][ T6781] __register_sysctl_table+0xd5/0x1620 [ 107.439476][ T6781] ? __pfx___register_sysctl_table+0x10/0x10 [ 107.439528][ T6781] ? is_module_address+0x27/0x50 [ 107.439556][ T6781] ? register_net_sysctl_sz+0x33e/0x3b0 [ 107.439587][ T6781] nf_lwtunnel_net_init+0x56/0xf0 [ 107.439609][ T6781] ops_init+0x349/0x5b0 [ 107.439634][ T6781] ? lockdep_init_map_type+0xa1/0x910 [ 107.439668][ T6781] setup_net+0x287/0x9e0 [ 107.439687][ T6781] ? __pfx_down_read_killable+0x10/0x10 [ 107.439711][ T6781] ? __pfx_setup_net+0x10/0x10 [ 107.439736][ T6781] ? debug_mutex_init+0x38/0x70 [ 107.439768][ T6781] copy_net_ns+0x33f/0x570 [ 107.439793][ T6781] create_new_namespaces+0x425/0x7b0 [ 107.439835][ T6781] unshare_nsproxy_namespaces+0x124/0x180 [ 107.439866][ T6781] ksys_unshare+0x57d/0xa70 [ 107.439904][ T6781] ? __pfx_ksys_unshare+0x10/0x10 [ 107.439933][ T6781] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.439966][ T6781] ? do_syscall_64+0x100/0x230 [ 107.440003][ T6781] __x64_sys_unshare+0x38/0x40 [ 107.440031][ T6781] do_syscall_64+0xf3/0x230 [ 107.440060][ T6781] ? clear_bhb_loop+0x35/0x90 [ 107.440093][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.440120][ T6781] RIP: 0033:0x7f39d758d169 [ 107.440137][ T6781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.440153][ T6781] RSP: 002b:00007f39d84cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 107.440174][ T6781] RAX: ffffffffffffffda RBX: 00007f39d77a5fa0 RCX: 00007f39d758d169 [ 107.440189][ T6781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 107.440200][ T6781] RBP: 00007f39d84cd090 R08: 0000000000000000 R09: 0000000000000000 [ 107.440212][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.440223][ T6781] R13: 0000000000000000 R14: 00007f39d77a5fa0 R15: 00007ffe2469a568 [ 107.440253][ T6781] [ 107.800292][ T6786] hsr0: entered promiscuous mode [ 107.805372][ T6786] hsr0: entered allmulticast mode [ 107.812031][ T6786] hsr_slave_0: entered allmulticast mode [ 107.817971][ T6786] hsr_slave_1: entered allmulticast mode [ 108.693289][ T6827] netlink: 'syz.3.217': attribute type 1 has an invalid length. [ 108.862181][ T6827] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 108.911848][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 108.944484][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.978022][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 109.067587][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 109.128424][ T6840] FAULT_INJECTION: forcing a failure. [ 109.128424][ T6840] name failslab, interval 1, probability 0, space 0, times 0 [ 109.144194][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz.1.222 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 109.144224][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.144236][ T6840] Call Trace: [ 109.144243][ T6840] [ 109.144252][ T6840] dump_stack_lvl+0x241/0x360 [ 109.144284][ T6840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.144307][ T6840] ? __pfx__printk+0x10/0x10 [ 109.144331][ T6840] ? __kmalloc_noprof+0xb5/0x4c0 [ 109.144361][ T6840] ? __pfx___might_resched+0x10/0x10 [ 109.144395][ T6840] should_fail_ex+0x40a/0x550 [ 109.144432][ T6840] should_failslab+0xac/0x100 [ 109.144470][ T6840] __kmalloc_noprof+0xdd/0x4c0 [ 109.144497][ T6840] ? find_entry+0x207/0x250 [ 109.144525][ T6840] ? __register_sysctl_table+0xddc/0x1620 [ 109.144561][ T6840] __register_sysctl_table+0xddc/0x1620 [ 109.144607][ T6840] ? __pfx___register_sysctl_table+0x10/0x10 [ 109.144640][ T6840] ? is_module_address+0x27/0x50 [ 109.144668][ T6840] ? register_net_sysctl_sz+0x33e/0x3b0 [ 109.144701][ T6840] nf_lwtunnel_net_init+0x56/0xf0 [ 109.144723][ T6840] ops_init+0x349/0x5b0 [ 109.144748][ T6840] ? lockdep_init_map_type+0xa1/0x910 [ 109.144784][ T6840] setup_net+0x287/0x9e0 [ 109.144803][ T6840] ? __pfx_down_read_killable+0x10/0x10 [ 109.144827][ T6840] ? __pfx_setup_net+0x10/0x10 [ 109.144853][ T6840] ? debug_mutex_init+0x38/0x70 [ 109.144886][ T6840] copy_net_ns+0x33f/0x570 [ 109.144911][ T6840] create_new_namespaces+0x425/0x7b0 [ 109.144954][ T6840] unshare_nsproxy_namespaces+0x124/0x180 [ 109.144986][ T6840] ksys_unshare+0x57d/0xa70 [ 109.145026][ T6840] ? __pfx_ksys_unshare+0x10/0x10 [ 109.145056][ T6840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.145090][ T6840] ? do_syscall_64+0x100/0x230 [ 109.145129][ T6840] __x64_sys_unshare+0x38/0x40 [ 109.145157][ T6840] do_syscall_64+0xf3/0x230 [ 109.145188][ T6840] ? clear_bhb_loop+0x35/0x90 [ 109.145221][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.145249][ T6840] RIP: 0033:0x7fa2b498d169 [ 109.145267][ T6840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.145283][ T6840] RSP: 002b:00007fa2b57d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 109.145305][ T6840] RAX: ffffffffffffffda RBX: 00007fa2b4ba5fa0 RCX: 00007fa2b498d169 [ 109.145320][ T6840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 109.145332][ T6840] RBP: 00007fa2b57d9090 R08: 0000000000000000 R09: 0000000000000000 [ 109.145344][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.145356][ T6840] R13: 0000000000000000 R14: 00007fa2b4ba5fa0 R15: 00007ffde19cc268 [ 109.145386][ T6840] [ 109.145396][ T6840] sysctl could not get directory: /net/netfilter -12 [ 109.445248][ T6844] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 109.478846][ T6844] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 109.492202][ T6844] netlink: 188 bytes leftover after parsing attributes in process `syz.2.225'. [ 109.510740][ T6844] NCSI netlink: No device for ifindex 458760 [ 109.528251][ T6846] netlink: 'syz.0.224': attribute type 30 has an invalid length. [ 109.546466][ T6848] tipc: Started in network mode [ 109.551817][ T6848] tipc: Node identity 565758a00be, cluster identity 4711 [ 109.629051][ T6848] tipc: Enabled bearer , priority 0 [ 109.750084][ T6849] syzkaller0: entered promiscuous mode [ 109.756078][ T6849] syzkaller0: entered allmulticast mode [ 109.763302][ T6849] tipc: Resetting bearer [ 109.985279][ T63] tipc: Resetting bearer [ 110.023443][ T6847] tipc: Resetting bearer [ 110.735587][ T48] tipc: Node number set to 1572296864 [ 110.888851][ T6896] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.234'. [ 111.301596][ T6903] netlink: 'syz.1.236': attribute type 21 has an invalid length. [ 111.309798][ T6903] netlink: 128 bytes leftover after parsing attributes in process `syz.1.236'. [ 111.643891][ T6847] tipc: Disabling bearer [ 111.685867][ T6903] netlink: 'syz.1.236': attribute type 5 has an invalid length. [ 111.726305][ T6903] netlink: 'syz.1.236': attribute type 6 has an invalid length. [ 111.763173][ T6903] netlink: 3 bytes leftover after parsing attributes in process `syz.1.236'. [ 111.894621][ T6908] FAULT_INJECTION: forcing a failure. [ 111.894621][ T6908] name failslab, interval 1, probability 0, space 0, times 0 [ 111.928756][ T6908] CPU: 0 UID: 0 PID: 6908 Comm: syz.0.238 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 111.928785][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.928797][ T6908] Call Trace: [ 111.928804][ T6908] [ 111.928813][ T6908] dump_stack_lvl+0x241/0x360 [ 111.928844][ T6908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.928868][ T6908] ? __pfx__printk+0x10/0x10 [ 111.928892][ T6908] ? __kmalloc_noprof+0xb5/0x4c0 [ 111.928922][ T6908] ? __pfx___might_resched+0x10/0x10 [ 111.928956][ T6908] should_fail_ex+0x40a/0x550 [ 111.928993][ T6908] should_failslab+0xac/0x100 [ 111.929023][ T6908] __kmalloc_noprof+0xdd/0x4c0 [ 111.929050][ T6908] ? __register_sysctl_table+0xd5/0x1620 [ 111.929089][ T6908] __register_sysctl_table+0xd5/0x1620 [ 111.929134][ T6908] ? __pfx___register_sysctl_table+0x10/0x10 [ 111.929167][ T6908] ? is_module_address+0x27/0x50 [ 111.929194][ T6908] ? register_net_sysctl_sz+0x33e/0x3b0 [ 111.929226][ T6908] nf_log_net_init+0x38a/0x440 [ 111.929251][ T6908] ops_init+0x349/0x5b0 [ 111.929276][ T6908] ? lockdep_init_map_type+0xa1/0x910 [ 111.929318][ T6908] setup_net+0x287/0x9e0 [ 111.929337][ T6908] ? __pfx_down_read_killable+0x10/0x10 [ 111.929362][ T6908] ? __pfx_setup_net+0x10/0x10 [ 111.929388][ T6908] ? debug_mutex_init+0x38/0x70 [ 111.929421][ T6908] copy_net_ns+0x33f/0x570 [ 111.929447][ T6908] create_new_namespaces+0x425/0x7b0 [ 111.929501][ T6908] unshare_nsproxy_namespaces+0x124/0x180 [ 111.929534][ T6908] ksys_unshare+0x57d/0xa70 [ 111.929572][ T6908] ? __pfx_ksys_unshare+0x10/0x10 [ 111.929601][ T6908] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.929634][ T6908] ? do_syscall_64+0x100/0x230 [ 111.929671][ T6908] __x64_sys_unshare+0x38/0x40 [ 111.929699][ T6908] do_syscall_64+0xf3/0x230 [ 111.929728][ T6908] ? clear_bhb_loop+0x35/0x90 [ 111.929760][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.929786][ T6908] RIP: 0033:0x7f4d76b8d169 [ 111.929804][ T6908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.929819][ T6908] RSP: 002b:00007f4d779d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.929840][ T6908] RAX: ffffffffffffffda RBX: 00007f4d76da5fa0 RCX: 00007f4d76b8d169 [ 111.929854][ T6908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 111.929865][ T6908] RBP: 00007f4d779d8090 R08: 0000000000000000 R09: 0000000000000000 [ 111.929876][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.929887][ T6908] R13: 0000000000000000 R14: 00007f4d76da5fa0 R15: 00007ffc91f118a8 [ 111.929917][ T6908] [ 112.458849][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 112.503518][ T6932] macsec1: entered promiscuous mode [ 112.549537][ T6932] dummy0: entered promiscuous mode [ 112.593444][ T6932] dummy0: left promiscuous mode [ 112.635975][ T6943] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 112.726063][ T6931] bond1: entered promiscuous mode [ 112.731997][ T6931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.171904][ T6931] bond1 (unregistering): Released all slaves [ 113.206915][ T6935] netlink: 196 bytes leftover after parsing attributes in process `syz.4.247'. [ 113.222166][ T6935] netlink: 196 bytes leftover after parsing attributes in process `syz.4.247'. [ 113.232377][ T6935] netlink: 19 bytes leftover after parsing attributes in process `syz.4.247'. [ 113.266218][ T6939] netlink: 196 bytes leftover after parsing attributes in process `syz.4.247'. [ 113.276996][ T6939] netlink: 196 bytes leftover after parsing attributes in process `syz.4.247'. [ 113.286341][ T6939] netlink: 19 bytes leftover after parsing attributes in process `syz.4.247'. [ 113.315052][ T6943] team0: Port device dummy0 added [ 113.398795][ T6946] team0: Port device dummy0 removed [ 113.430470][ T6946] bridge_slave_0: left allmulticast mode [ 113.448451][ T6946] bridge_slave_0: left promiscuous mode [ 113.476536][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.506803][ T6946] bridge_slave_1: left allmulticast mode [ 113.512931][ T6946] bridge_slave_1: left promiscuous mode [ 113.538044][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.559955][ T6946] bond0: (slave bond_slave_0): Releasing backup interface [ 113.572387][ T6946] bond0: (slave bond_slave_1): Releasing backup interface [ 113.613227][ T6946] team0: Port device team_slave_0 removed [ 113.631164][ T6946] team0: Port device team_slave_1 removed [ 113.642490][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.651551][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.663534][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.677820][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.867939][ T6970] netlink: 'syz.4.254': attribute type 4 has an invalid length. [ 114.140326][ T6985] FAULT_INJECTION: forcing a failure. [ 114.140326][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 114.179224][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.0.259 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 114.179254][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.179266][ T6985] Call Trace: [ 114.179272][ T6985] [ 114.179281][ T6985] dump_stack_lvl+0x241/0x360 [ 114.179312][ T6985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.179334][ T6985] ? __pfx__printk+0x10/0x10 [ 114.179356][ T6985] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 114.179389][ T6985] ? __pfx___might_resched+0x10/0x10 [ 114.179419][ T6985] should_fail_ex+0x40a/0x550 [ 114.179458][ T6985] should_failslab+0xac/0x100 [ 114.179487][ T6985] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 114.179518][ T6985] ? nf_log_net_init+0x8b/0x440 [ 114.179544][ T6985] kmemdup_noprof+0x2b/0x70 [ 114.179577][ T6985] nf_log_net_init+0x8b/0x440 [ 114.179601][ T6985] ops_init+0x349/0x5b0 [ 114.179627][ T6985] ? lockdep_init_map_type+0xa1/0x910 [ 114.179663][ T6985] setup_net+0x287/0x9e0 [ 114.179682][ T6985] ? __pfx_down_read_killable+0x10/0x10 [ 114.179707][ T6985] ? __pfx_setup_net+0x10/0x10 [ 114.179733][ T6985] ? debug_mutex_init+0x38/0x70 [ 114.179766][ T6985] copy_net_ns+0x33f/0x570 [ 114.179791][ T6985] create_new_namespaces+0x425/0x7b0 [ 114.179834][ T6985] unshare_nsproxy_namespaces+0x124/0x180 [ 114.179865][ T6985] ksys_unshare+0x57d/0xa70 [ 114.179905][ T6985] ? __pfx_ksys_unshare+0x10/0x10 [ 114.179935][ T6985] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.179969][ T6985] ? do_syscall_64+0x100/0x230 [ 114.180007][ T6985] __x64_sys_unshare+0x38/0x40 [ 114.180036][ T6985] do_syscall_64+0xf3/0x230 [ 114.180066][ T6985] ? clear_bhb_loop+0x35/0x90 [ 114.180099][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.180136][ T6985] RIP: 0033:0x7f4d76b8d169 [ 114.180154][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.180170][ T6985] RSP: 002b:00007f4d779d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 114.180192][ T6985] RAX: ffffffffffffffda RBX: 00007f4d76da5fa0 RCX: 00007f4d76b8d169 [ 114.180207][ T6985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 114.180219][ T6985] RBP: 00007f4d779d8090 R08: 0000000000000000 R09: 0000000000000000 [ 114.180231][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.180243][ T6985] R13: 0000000000000000 R14: 00007f4d76da5fa0 R15: 00007ffc91f118a8 [ 114.180274][ T6985] [ 114.446230][ T6978] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR' [ 114.457239][ T6978] CPU: 0 UID: 0 PID: 6978 Comm: syz.3.256 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 114.457266][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.457279][ T6978] Call Trace: [ 114.457286][ T6978] [ 114.457294][ T6978] dump_stack_lvl+0x241/0x360 [ 114.457327][ T6978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.457352][ T6978] ? __pfx__printk+0x10/0x10 [ 114.457379][ T6978] ? __kmalloc_cache_noprof+0x243/0x390 [ 114.457409][ T6978] ? sysfs_warn_dup+0x51/0xa0 [ 114.457442][ T6978] sysfs_warn_dup+0x8e/0xa0 [ 114.457468][ T6978] sysfs_do_create_link_sd+0xbe/0x110 [ 114.457498][ T6978] device_add_class_symlinks+0x1c5/0x250 [ 114.457524][ T6978] device_add+0x553/0xbf0 [ 114.457552][ T6978] wiphy_register+0x1922/0x2650 [ 114.457599][ T6978] ? __pfx_wiphy_register+0x10/0x10 [ 114.457628][ T6978] ? minstrel_ht_alloc+0x84b/0x940 [ 114.457671][ T6978] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 114.457711][ T6978] ieee80211_register_hw+0x35d9/0x42e0 [ 114.457749][ T6978] ? ieee80211_register_hw+0x1691/0x42e0 [ 114.457781][ T6978] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 114.457815][ T6978] ? __asan_memset+0x23/0x50 [ 114.457837][ T6978] ? __hrtimer_init+0x170/0x250 [ 114.457865][ T6978] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 114.457933][ T6978] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 114.457964][ T6978] ? trace_kmalloc+0x1f/0xd0 [ 114.457990][ T6978] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 114.458023][ T6978] ? kstrndup+0xbb/0x150 [ 114.458067][ T6978] hwsim_new_radio_nl+0xece/0x2290 [ 114.458111][ T6978] ? __pfx___nla_validate_parse+0x10/0x10 [ 114.458152][ T6978] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 114.458224][ T6978] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 114.458270][ T6978] genl_rcv_msg+0xb1f/0xec0 [ 114.458305][ T6978] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.458362][ T6978] ? __pfx_lock_acquire+0x10/0x10 [ 114.458393][ T6978] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 114.458423][ T6978] ? __pfx___might_resched+0x10/0x10 [ 114.458463][ T6978] netlink_rcv_skb+0x206/0x480 [ 114.458497][ T6978] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.458524][ T6978] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.458592][ T6978] genl_rcv+0x28/0x40 [ 114.458616][ T6978] netlink_unicast+0x7f6/0x990 [ 114.458657][ T6978] ? __pfx_netlink_unicast+0x10/0x10 [ 114.458685][ T6978] ? __virt_addr_valid+0x45f/0x530 [ 114.458707][ T6978] ? __phys_addr_symbol+0x2f/0x70 [ 114.458726][ T6978] ? __check_object_size+0x47a/0x730 [ 114.458761][ T6978] netlink_sendmsg+0x8de/0xcb0 [ 114.458795][ T6978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.458822][ T6978] ? aa_sock_msg_perm+0x91/0x160 [ 114.458861][ T6978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.458879][ T6978] __sock_sendmsg+0x221/0x270 [ 114.458917][ T6978] ____sys_sendmsg+0x53a/0x860 [ 114.458954][ T6978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.458978][ T6978] ? __fget_files+0x2a/0x410 [ 114.459013][ T6978] ? __fget_files+0x2a/0x410 [ 114.459055][ T6978] __sys_sendmsg+0x269/0x350 [ 114.459088][ T6978] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.459176][ T6978] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.459213][ T6978] ? do_syscall_64+0x100/0x230 [ 114.459249][ T6978] ? do_syscall_64+0xb6/0x230 [ 114.459283][ T6978] do_syscall_64+0xf3/0x230 [ 114.459313][ T6978] ? clear_bhb_loop+0x35/0x90 [ 114.459347][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.459376][ T6978] RIP: 0033:0x7f39d758d169 [ 114.459396][ T6978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.459412][ T6978] RSP: 002b:00007f39d84cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.459433][ T6978] RAX: ffffffffffffffda RBX: 00007f39d77a5fa0 RCX: 00007f39d758d169 [ 114.459448][ T6978] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 114.459461][ T6978] RBP: 00007f39d760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.459474][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.459485][ T6978] R13: 0000000000000000 R14: 00007f39d77a5fa0 R15: 00007ffe2469a568 [ 114.459519][ T6978] [ 115.726868][ T7008] sctp: [Deprecated]: syz.3.266 (pid 7008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.726868][ T7008] Use struct sctp_sack_info instead [ 115.887656][ T7014] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 115.925577][ T7014] syzkaller1: linktype set to 780 [ 116.190085][ T7022] netlink: 'syz.3.271': attribute type 7 has an invalid length. [ 116.212692][ T7023] xt_hashlimit: size too large, truncated to 1048576 [ 116.220936][ T7022] netlink: 'syz.3.271': attribute type 8 has an invalid length. [ 116.307986][ T7028] xt_hashlimit: size too large, truncated to 1048576 [ 116.486902][ T7035] __nla_validate_parse: 2 callbacks suppressed [ 116.486923][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.273'. [ 116.830994][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.275'. [ 117.075875][ T7050] netlink: 36 bytes leftover after parsing attributes in process `syz.1.281'. [ 117.459525][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.286'. [ 117.526479][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.286'. [ 117.555882][ T7070] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 117.564508][ T7071] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 117.712618][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.288'. [ 117.820427][ T7086] netlink: 52 bytes leftover after parsing attributes in process `syz.0.290'. [ 118.144260][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 118.153285][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 118.178206][ T7093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.293'. [ 118.280161][ T5843] block nbd2: Receive control failed (result -107) [ 118.326544][ T7093] nbd2: detected capacity change from 0 to 256 [ 118.334956][ T6183] block nbd2: Dead connection, failed to find a fallback [ 118.339787][ T7105] FAULT_INJECTION: forcing a failure. [ 118.339787][ T7105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.355431][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz.3.297 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 118.355458][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.355470][ T7105] Call Trace: [ 118.355478][ T7105] [ 118.355488][ T7105] dump_stack_lvl+0x241/0x360 [ 118.355518][ T7105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.355541][ T7105] ? __pfx__printk+0x10/0x10 [ 118.355565][ T7105] ? __pfx_lock_release+0x10/0x10 [ 118.355605][ T7105] should_fail_ex+0x40a/0x550 [ 118.355642][ T7105] _copy_from_user+0x2d/0xb0 [ 118.355671][ T7105] move_addr_to_kernel+0x82/0x150 [ 118.355704][ T7105] __sys_sendto+0x268/0x4c0 [ 118.355732][ T7105] ? __pfx___sys_sendto+0x10/0x10 [ 118.355768][ T7105] ? __fget_files+0x2a/0x410 [ 118.355808][ T7105] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 118.355851][ T7105] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.355889][ T7105] __x64_sys_sendto+0xde/0x100 [ 118.355916][ T7105] do_syscall_64+0xf3/0x230 [ 118.355947][ T7105] ? clear_bhb_loop+0x35/0x90 [ 118.355979][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.356007][ T7105] RIP: 0033:0x7f39d758d169 [ 118.356025][ T7105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.356041][ T7105] RSP: 002b:00007f39d84cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 118.356063][ T7105] RAX: ffffffffffffffda RBX: 00007f39d77a5fa0 RCX: 00007f39d758d169 [ 118.356077][ T7105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 118.356095][ T7105] RBP: 00007f39d84cd090 R08: 0000200000b63fe4 R09: 000000000000001c [ 118.356108][ T7105] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 118.356120][ T7105] R13: 0000000000000000 R14: 00007f39d77a5fa0 R15: 00007ffe2469a568 [ 118.356148][ T7105] [ 119.106364][ T7091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.421372][ T7138] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.451749][ T7138] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 119.647988][ T7147] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 120.146444][ T7171] FAULT_INJECTION: forcing a failure. [ 120.146444][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 120.176847][ T7171] CPU: 0 UID: 0 PID: 7171 Comm: syz.1.311 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 120.176877][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.176889][ T7171] Call Trace: [ 120.176896][ T7171] [ 120.176905][ T7171] dump_stack_lvl+0x241/0x360 [ 120.176938][ T7171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.176962][ T7171] ? __pfx__printk+0x10/0x10 [ 120.176986][ T7171] ? __kmalloc_cache_noprof+0x48/0x390 [ 120.177017][ T7171] ? __pfx___might_resched+0x10/0x10 [ 120.177051][ T7171] should_fail_ex+0x40a/0x550 [ 120.177087][ T7171] should_failslab+0xac/0x100 [ 120.177117][ T7171] __kmalloc_cache_noprof+0x70/0x390 [ 120.177145][ T7171] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 120.177178][ T7171] tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 120.177214][ T7171] tcp_sendmsg_locked+0x48ec/0x4fd0 [ 120.177241][ T7171] ? mark_lock+0x9a/0x360 [ 120.177293][ T7171] ? mark_lock+0x9a/0x360 [ 120.177318][ T7171] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.177354][ T7171] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.177393][ T7171] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 120.177427][ T7171] ? tcp_sendmsg+0x22/0x50 [ 120.177454][ T7171] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.177491][ T7171] tcp_sendmsg+0x30/0x50 [ 120.177520][ T7171] __sock_sendmsg+0xef/0x270 [ 120.177556][ T7171] __sys_sendto+0x363/0x4c0 [ 120.177585][ T7171] ? __pfx___sys_sendto+0x10/0x10 [ 120.177621][ T7171] ? __fget_files+0x2a/0x410 [ 120.177660][ T7171] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.177694][ T7171] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.177733][ T7171] __x64_sys_sendto+0xde/0x100 [ 120.177766][ T7171] do_syscall_64+0xf3/0x230 [ 120.177798][ T7171] ? clear_bhb_loop+0x35/0x90 [ 120.177830][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.177858][ T7171] RIP: 0033:0x7fa2b498d169 [ 120.177876][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.177892][ T7171] RSP: 002b:00007fa2b57d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.177913][ T7171] RAX: ffffffffffffffda RBX: 00007fa2b4ba5fa0 RCX: 00007fa2b498d169 [ 120.177927][ T7171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 120.177938][ T7171] RBP: 00007fa2b57d9090 R08: 0000200000b63fe4 R09: 000000000000001c [ 120.177951][ T7171] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 120.177963][ T7171] R13: 0000000000000000 R14: 00007fa2b4ba5fa0 R15: 00007ffde19cc268 [ 120.177993][ T7171] [ 120.613642][ T7180] bridge_slave_0: left allmulticast mode [ 120.619428][ T7180] bridge_slave_0: left promiscuous mode [ 120.625361][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.642388][ T7180] bridge_slave_1: left allmulticast mode [ 120.648317][ T7180] bridge_slave_1: left promiscuous mode [ 120.654118][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.695783][ T7180] bond0: (slave bond_slave_0): Releasing backup interface [ 120.760375][ T7180] bond0: (slave bond_slave_1): Releasing backup interface [ 120.798541][ T7180] team0: Port device team_slave_0 removed [ 120.865277][ T7180] team0: Port device team_slave_1 removed [ 120.907877][ T7180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.923145][ T7180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.729052][ T7225] FAULT_INJECTION: forcing a failure. [ 121.729052][ T7225] name failslab, interval 1, probability 0, space 0, times 0 [ 121.742540][ T7225] CPU: 0 UID: 0 PID: 7225 Comm: syz.0.326 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 121.742565][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.742576][ T7225] Call Trace: [ 121.742583][ T7225] [ 121.742591][ T7225] dump_stack_lvl+0x241/0x360 [ 121.742621][ T7225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.742644][ T7225] ? __pfx__printk+0x10/0x10 [ 121.742678][ T7225] ? __pfx_lock_acquire+0x10/0x10 [ 121.742717][ T7225] should_fail_ex+0x40a/0x550 [ 121.742754][ T7225] should_failslab+0xac/0x100 [ 121.742783][ T7225] ? __inet_hash_connect+0xefc/0x2580 [ 121.742815][ T7225] kmem_cache_alloc_noprof+0x70/0x380 [ 121.742850][ T7225] __inet_hash_connect+0xefc/0x2580 [ 121.742885][ T7225] ? __pfx___inet6_check_established+0x10/0x10 [ 121.742930][ T7225] ? __inet_hash_connect+0x5e2/0x2580 [ 121.742967][ T7225] ? __pfx___inet_hash_connect+0x10/0x10 [ 121.743000][ T7225] ? sk_setup_caps+0x867/0xad0 [ 121.743032][ T7225] ? inet6_hash_connect+0xe3/0x160 [ 121.743064][ T7225] tcp_v6_connect+0x116c/0x1e50 [ 121.743103][ T7225] ? __pfx_tcp_v6_connect+0x10/0x10 [ 121.743129][ T7225] ? kasan_save_track+0x3f/0x80 [ 121.743151][ T7225] ? __kasan_kmalloc+0x98/0xb0 [ 121.743202][ T7225] __inet_stream_connect+0x262/0xf30 [ 121.743245][ T7225] ? __pfx___inet_stream_connect+0x10/0x10 [ 121.743277][ T7225] ? __kasan_kmalloc+0x98/0xb0 [ 121.743303][ T7225] ? __kmalloc_cache_noprof+0x243/0x390 [ 121.743331][ T7225] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 121.743364][ T7225] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 121.743399][ T7225] tcp_sendmsg_locked+0x48ec/0x4fd0 [ 121.743426][ T7225] ? mark_lock+0x9a/0x360 [ 121.743474][ T7225] ? mark_lock+0x9a/0x360 [ 121.743498][ T7225] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.743533][ T7225] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.743572][ T7225] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 121.743605][ T7225] ? tcp_sendmsg+0x22/0x50 [ 121.743631][ T7225] ? do_raw_spin_unlock+0x13c/0x8b0 [ 121.743675][ T7225] tcp_sendmsg+0x30/0x50 [ 121.743703][ T7225] __sock_sendmsg+0xef/0x270 [ 121.743738][ T7225] __sys_sendto+0x363/0x4c0 [ 121.743765][ T7225] ? __pfx___sys_sendto+0x10/0x10 [ 121.743803][ T7225] ? __fget_files+0x2a/0x410 [ 121.743843][ T7225] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.743878][ T7225] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.743916][ T7225] __x64_sys_sendto+0xde/0x100 [ 121.743943][ T7225] do_syscall_64+0xf3/0x230 [ 121.743974][ T7225] ? clear_bhb_loop+0x35/0x90 [ 121.744007][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.744035][ T7225] RIP: 0033:0x7f4d76b8d169 [ 121.744053][ T7225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.744069][ T7225] RSP: 002b:00007f4d779d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 121.744091][ T7225] RAX: ffffffffffffffda RBX: 00007f4d76da5fa0 RCX: 00007f4d76b8d169 [ 121.744105][ T7225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 121.744116][ T7225] RBP: 00007f4d779d8090 R08: 0000200000b63fe4 R09: 000000000000001c [ 121.744130][ T7225] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 121.744142][ T7225] R13: 0000000000000000 R14: 00007f4d76da5fa0 R15: 00007ffc91f118a8 [ 121.744173][ T7225] [ 121.766388][ T7228] netlink: zone id is out of range [ 122.102930][ T7228] netlink: zone id is out of range [ 122.111257][ T7228] netlink: zone id is out of range [ 122.117456][ T7228] netlink: zone id is out of range [ 122.122844][ T7228] netlink: zone id is out of range [ 122.128479][ T7228] netlink: zone id is out of range [ 122.295076][ T7228] netlink: zone id is out of range [ 122.357340][ T7242] __nla_validate_parse: 9 callbacks suppressed [ 122.357362][ T7242] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.333'. [ 122.480502][ T7245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'. [ 122.598830][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.336'. [ 122.608144][ T7249] net_ratelimit: 307 callbacks suppressed [ 122.608161][ T7249] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 123.142072][ T7253] infiniband syz0: set down [ 123.180201][ T7253] infiniband syz0: added ipvlan1 [ 123.326581][ T7253] RDS/IB: syz0: added [ 123.331673][ T7253] smc: adding ib device syz0 with port count 1 [ 123.338314][ T7253] smc: ib device syz0 port 1 has pnetid [ 123.577765][ T7270] openvswitch: netlink: Message has 20 unknown bytes. [ 124.384772][ T7283] netlink: 'syz.2.348': attribute type 2 has an invalid length. [ 124.683179][ T7290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.352'. [ 124.751599][ T7295] netlink: 44 bytes leftover after parsing attributes in process `syz.1.354'. [ 124.934812][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 124.946303][ T30] audit: type=1800 audit(1742879182.793:2): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.355" name="memory.events" dev="tmpfs" ino=347 res=0 errno=0 [ 124.976320][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.011232][ T30] audit: type=1804 audit(1742879182.813:3): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.355" name="/newroot/64/memory.events" dev="tmpfs" ino=347 res=1 errno=0 [ 125.060360][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 125.089280][ T7295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.102016][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 125.136649][ T7303] netlink: 32 bytes leftover after parsing attributes in process `syz.3.357'. [ 125.239922][ T5843] block nbd3: Receive control failed (result -107) [ 125.286564][ T7303] nbd3: detected capacity change from 0 to 256 [ 125.298965][ T5851] block nbd3: Dead connection, failed to find a fallback [ 125.309007][ T7310] netlink: 'syz.2.358': attribute type 39 has an invalid length. [ 126.913844][ T7369] netlink: 'syz.1.374': attribute type 3 has an invalid length. [ 126.976878][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 127.088074][ T7378] netlink: 'syz.0.377': attribute type 7 has an invalid length. [ 127.875692][ T7403] __nla_validate_parse: 2 callbacks suppressed [ 127.875712][ T7403] netlink: 52 bytes leftover after parsing attributes in process `syz.0.383'. [ 128.484565][ T7422] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 128.739370][ T7433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.387'. [ 128.795121][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.387'. [ 128.993934][ T7439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.389'. [ 129.017882][ T7433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.387'. [ 129.087773][ T7433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.387'. [ 130.112177][ T7469] netlink: 'syz.1.394': attribute type 6 has an invalid length. [ 130.760751][ T7489] ipt_ECN: cannot use operation on non-tcp rule [ 130.825781][ T7492] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 130.940763][ T7495] tun0: tun_chr_ioctl cmd 1074025675 [ 130.958504][ T7495] tun0: persist enabled [ 130.973423][ T7497] tun0: tun_chr_ioctl cmd 1074025675 [ 130.986857][ T7497] tun0: persist enabled [ 131.106303][ T7498] syzkaller0: entered allmulticast mode [ 131.146420][ T7497] tun0: tun_chr_ioctl cmd 1074025675 [ 131.156390][ T7497] tun0: persist disabled [ 131.164417][ T7508] netlink: 'syz.0.404': attribute type 4 has an invalid length. [ 131.229173][ T7508] netlink: 'syz.0.404': attribute type 4 has an invalid length. [ 131.469191][ T7486] syzkaller0: left allmulticast mode [ 131.770220][ T7524] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 131.882087][ T7524] bond1: entered promiscuous mode [ 131.948096][ T7524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.038938][ T7530] ipip0: entered promiscuous mode [ 132.096925][ T7530] ipip0: entered allmulticast mode [ 132.135700][ T7530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.178108][ T7530] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 132.255266][ T7530] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 132.394629][ T7530] bond1: (slave ipip0): making interface the new active one [ 132.435664][ T7557] netlink: 'syz.2.414': attribute type 7 has an invalid length. [ 132.468361][ T7530] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 132.927950][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.416'. [ 133.165278][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.185125][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 133.865295][ T7609] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 135.778553][ T7657] IPVS: stopping backup sync thread 7658 ... [ 135.795866][ T7658] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 136.212573][ T7670] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.716702][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 137.338490][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 137.539639][ T7688] delete_channel: no stack [ 137.823475][ T7723] netlink: 64 bytes leftover after parsing attributes in process `syz.0.452'. [ 138.381466][ T7749] netlink: 96 bytes leftover after parsing attributes in process `syz.2.460'. [ 138.573047][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 139.004632][ T7769] pimreg: entered allmulticast mode [ 139.077932][ T5843] Bluetooth: hci4: link tx timeout [ 139.083699][ T5843] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 139.093586][ T5843] Bluetooth: hci4: link tx timeout [ 139.098942][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.140607][ T7775] netlink: 'syz.3.470': attribute type 10 has an invalid length. [ 139.392947][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 139.452050][ T7783] netlink: 68 bytes leftover after parsing attributes in process `syz.0.472'. [ 139.614376][ T7776] netlink: 'syz.3.470': attribute type 10 has an invalid length. [ 140.032383][ T7802] netlink: 'syz.4.476': attribute type 1 has an invalid length. [ 140.090023][ T7802] netlink: 224 bytes leftover after parsing attributes in process `syz.4.476'. [ 140.612038][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 140.640904][ T7766] vlan2: entered allmulticast mode [ 140.656309][ T7766] batadv0: entered allmulticast mode [ 141.156425][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 141.709028][ T7856] @ÿ: renamed from veth0_vlan (while UP) [ 141.964472][ T7864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.009449][ T7864] bridge0: port 1(bond1) entered blocking state [ 142.026675][ T7864] bridge0: port 1(bond1) entered disabled state [ 142.043458][ T7864] bond1: entered allmulticast mode [ 142.064392][ T7864] bond1: entered promiscuous mode [ 142.124397][ T7877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'. [ 142.135656][ T7876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.491'. [ 142.144919][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.491'. [ 142.172417][ T5890] IPVS: starting estimator thread 0... [ 142.186469][ T7880] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 142.218835][ T7880] netlink: 'syz.0.492': attribute type 1 has an invalid length. [ 142.282573][ T7889] gretap0: entered promiscuous mode [ 142.315544][ T7889] macsec1: entered promiscuous mode [ 142.321102][ T7886] IPVS: using max 22 ests per chain, 52800 per kthread [ 142.365105][ T7889] gretap0: left promiscuous mode [ 142.473455][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 142.539110][ T7895] xt_bpf: check failed: parse error [ 142.780884][ T7910] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 143.398649][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 144.133599][ T7945] __nla_validate_parse: 2 callbacks suppressed [ 144.133620][ T7945] netlink: 256 bytes leftover after parsing attributes in process `syz.0.509'. [ 144.199468][ T7945] netlink: 136 bytes leftover after parsing attributes in process `syz.0.509'. [ 144.265944][ T7954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.319898][ T7999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.466044][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 145.907987][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 145.970670][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 146.683944][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 146.693750][ T8016] netlink: 'syz.0.529': attribute type 39 has an invalid length. [ 146.742633][ T8052] netlink: 52 bytes leftover after parsing attributes in process `syz.3.536'. [ 150.090346][ T8116] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 150.102141][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 150.111339][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 150.120698][ T8157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.557'. [ 150.154267][ T8113] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 150.169286][ T8116] batman_adv: batadv0: Adding interface: team0 [ 150.205919][ T8116] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.233549][ T8113] netlink: 2 bytes leftover after parsing attributes in process `syz.0.548'. [ 150.256300][ T8116] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 150.287167][ T5839] block nbd4: Receive control failed (result -107) [ 150.416423][ T8113] team0: entered promiscuous mode [ 150.434814][ T8113] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.456824][ T8157] nbd4: detected capacity change from 0 to 256 [ 150.470974][ T5852] block nbd4: Dead connection, failed to find a fallback [ 150.546428][ T8113] batman_adv: batadv0: Interface activated: team0 [ 150.589189][ T8113] batman_adv: batadv0: Interface deactivated: team0 [ 150.620591][ T8113] batman_adv: batadv0: Removing interface: team0 [ 150.642255][ T8113] bridge0: port 1(team0) entered blocking state [ 150.648921][ T8113] bridge0: port 1(team0) entered disabled state [ 150.656853][ T8113] team0: entered allmulticast mode [ 151.175384][ T8191] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.905117][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 151.930054][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 151.944591][ T8222] netlink: 32 bytes leftover after parsing attributes in process `syz.2.572'. [ 152.042054][ T5839] block nbd5: Receive control failed (result -107) [ 152.086475][ T8222] nbd5: detected capacity change from 0 to 256 [ 152.097144][ T5837] block nbd5: Dead connection, failed to find a fallback [ 152.217970][ T8234] FAULT_INJECTION: forcing a failure. [ 152.217970][ T8234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.252798][ T8234] CPU: 0 UID: 0 PID: 8234 Comm: syz.4.577 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 152.252828][ T8234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.252840][ T8234] Call Trace: [ 152.252846][ T8234] [ 152.252854][ T8234] dump_stack_lvl+0x241/0x360 [ 152.252885][ T8234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.252908][ T8234] ? __pfx__printk+0x10/0x10 [ 152.252928][ T8234] ? aa_label_sk_perm+0x4f3/0x6c0 [ 152.252965][ T8234] should_fail_ex+0x40a/0x550 [ 152.253000][ T8234] _copy_from_user+0x2d/0xb0 [ 152.253028][ T8234] copy_from_sockptr+0x63/0xa0 [ 152.253051][ T8234] packet_setsockopt+0x86a/0x1870 [ 152.253085][ T8234] ? __pfx_packet_setsockopt+0x10/0x10 [ 152.253128][ T8234] ? aa_sk_perm+0x96d/0xab0 [ 152.253162][ T8234] ? __pfx_aa_sk_perm+0x10/0x10 [ 152.253193][ T8234] ? __pfx_lock_acquire+0x10/0x10 [ 152.253231][ T8234] ? aa_sock_opt_perm+0x79/0x120 [ 152.253266][ T8234] ? __pfx_packet_setsockopt+0x10/0x10 [ 152.253295][ T8234] do_sock_setsockopt+0x3af/0x720 [ 152.253326][ T8234] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 152.253354][ T8234] ? __fget_files+0x395/0x410 [ 152.253382][ T8234] ? __fget_files+0x2a/0x410 [ 152.253419][ T8234] __x64_sys_setsockopt+0x1ee/0x280 [ 152.253449][ T8234] do_syscall_64+0xf3/0x230 [ 152.253479][ T8234] ? clear_bhb_loop+0x35/0x90 [ 152.253511][ T8234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.253538][ T8234] RIP: 0033:0x7f25a5d8d169 [ 152.253554][ T8234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.253569][ T8234] RSP: 002b:00007f25a6caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.253590][ T8234] RAX: ffffffffffffffda RBX: 00007f25a5fa5fa0 RCX: 00007f25a5d8d169 [ 152.253604][ T8234] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 152.253615][ T8234] RBP: 00007f25a6caf090 R08: 0000000000000010 R09: 0000000000000000 [ 152.253627][ T8234] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 152.253639][ T8234] R13: 0000000000000000 R14: 00007f25a5fa5fa0 R15: 00007ffda3ec0f38 [ 152.253666][ T8234] [ 152.697978][ T8244] x_tables: duplicate underflow at hook 2 [ 152.720641][ T8241] batadv0: entered promiscuous mode [ 152.786430][ T8240] batadv0: left promiscuous mode [ 152.994630][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 153.040871][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 153.142206][ T8261] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 153.201260][ T8261] netlink: 224 bytes leftover after parsing attributes in process `syz.0.586'. [ 153.410352][ T5839] block nbd6: Receive control failed (result -107) [ 153.446532][ T8271] nbd6: detected capacity change from 0 to 256 [ 153.471872][ T8237] block nbd6: Dead connection, failed to find a fallback [ 153.524920][ T8237] schedule_timeout: wrong timeout value c800000000000000 [ 153.535215][ T8276] FAULT_INJECTION: forcing a failure. [ 153.535215][ T8276] name failslab, interval 1, probability 0, space 0, times 0 [ 153.576222][ T8276] CPU: 0 UID: 0 PID: 8276 Comm: syz.1.592 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 153.576251][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.576264][ T8276] Call Trace: [ 153.576271][ T8276] [ 153.576280][ T8276] dump_stack_lvl+0x241/0x360 [ 153.576310][ T8276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.576333][ T8276] ? __pfx__printk+0x10/0x10 [ 153.576357][ T8276] ? __kmalloc_cache_noprof+0x48/0x390 [ 153.576389][ T8276] ? __pfx___might_resched+0x10/0x10 [ 153.576424][ T8276] ? packet_mc_add+0x28/0xb40 [ 153.576449][ T8276] should_fail_ex+0x40a/0x550 [ 153.576486][ T8276] should_failslab+0xac/0x100 [ 153.576516][ T8276] __kmalloc_cache_noprof+0x70/0x390 [ 153.576545][ T8276] ? packet_mc_add+0x128/0xb40 [ 153.576570][ T8276] packet_mc_add+0x128/0xb40 [ 153.576596][ T8276] ? _copy_from_user+0x95/0xb0 [ 153.576630][ T8276] packet_setsockopt+0x1170/0x1870 [ 153.576670][ T8276] ? __pfx_packet_setsockopt+0x10/0x10 [ 153.576715][ T8276] ? aa_sk_perm+0x96d/0xab0 [ 153.576754][ T8276] ? __pfx_aa_sk_perm+0x10/0x10 [ 153.576788][ T8276] ? __pfx_lock_acquire+0x10/0x10 [ 153.576817][ T8276] ? aa_sock_opt_perm+0x79/0x120 [ 153.576855][ T8276] ? __pfx_packet_setsockopt+0x10/0x10 [ 153.576885][ T8276] do_sock_setsockopt+0x3af/0x720 [ 153.576917][ T8276] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 153.576947][ T8276] ? __fget_files+0x395/0x410 [ 153.576977][ T8276] ? __fget_files+0x2a/0x410 [ 153.577016][ T8276] __x64_sys_setsockopt+0x1ee/0x280 [ 153.577048][ T8276] do_syscall_64+0xf3/0x230 [ 153.577084][ T8276] ? clear_bhb_loop+0x35/0x90 [ 153.577117][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.577145][ T8276] RIP: 0033:0x7fa2b498d169 [ 153.577163][ T8276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.577180][ T8276] RSP: 002b:00007fa2b57d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.577202][ T8276] RAX: ffffffffffffffda RBX: 00007fa2b4ba5fa0 RCX: 00007fa2b498d169 [ 153.577217][ T8276] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 153.577229][ T8276] RBP: 00007fa2b57d9090 R08: 0000000000000010 R09: 0000000000000000 [ 153.577241][ T8276] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 153.577254][ T8276] R13: 0000000000000000 R14: 00007fa2b4ba5fa0 R15: 00007ffde19cc268 [ 153.577284][ T8276] [ 153.577602][ T8237] CPU: 0 UID: 0 PID: 8237 Comm: udevd Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 153.577626][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.577637][ T8237] Call Trace: [ 153.577644][ T8237] [ 153.577652][ T8237] dump_stack_lvl+0x241/0x360 [ 153.577680][ T8237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.577704][ T8237] ? __pfx__printk+0x10/0x10 [ 153.577739][ T8237] schedule_timeout+0x21b/0x290 [ 153.577764][ T8237] ? __pfx_schedule_timeout+0x10/0x10 [ 153.577799][ T8237] ? prepare_to_wait_event+0x3bd/0x400 [ 153.577833][ T8237] nbd_queue_rq+0x6dd/0xef0 [ 153.577869][ T8237] ? __pfx_nbd_queue_rq+0x10/0x10 [ 153.577892][ T8237] ? __pfx_autoremove_wake_function+0x10/0x10 [ 153.577929][ T8237] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 153.577965][ T8237] ? sbitmap_get+0x289/0x3f0 [ 153.577988][ T8237] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 153.578014][ T8237] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 153.578045][ T8237] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 153.578087][ T8237] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 153.578115][ T8237] ? __pfx_lock_acquire+0x10/0x10 [ 153.578143][ T8237] ? __pfx___might_resched+0x10/0x10 [ 153.578175][ T8237] ? sbitmap_any_bit_set+0x155/0x190 [ 153.578195][ T8237] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 153.578223][ T8237] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 153.578256][ T8237] ? blk_mq_run_hw_queue+0x32b/0x500 [ 153.578278][ T8237] blk_mq_run_hw_queue+0x354/0x500 [ 153.578305][ T8237] blk_mq_flush_plug_list+0x118e/0x1870 [ 153.578345][ T8237] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 153.578370][ T8237] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 153.578409][ T8237] ? blk_mq_submit_bio+0x494/0x25d0 [ 153.578439][ T8237] __blk_flush_plug+0x420/0x500 [ 153.578469][ T8237] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.578495][ T8237] ? __pfx___blk_flush_plug+0x10/0x10 [ 153.578522][ T8237] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.578555][ T8237] __submit_bio+0x54a/0x6a0 [ 153.578573][ T8237] ? __pfx___submit_bio+0x10/0x10 [ 153.578606][ T8237] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 153.578631][ T8237] ? bio_associate_blkg_from_css+0x182/0xc70 [ 153.578662][ T8237] ? __pfx___might_resched+0x10/0x10 [ 153.578688][ T8237] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 153.578735][ T8237] block_read_full_folio+0x9b3/0xae0 [ 153.578771][ T8237] ? __pfx_blkdev_get_block+0x10/0x10 [ 153.578791][ T8237] ? __pfx_block_read_full_folio+0x10/0x10 [ 153.578832][ T8237] filemap_read_folio+0x148/0x3b0 [ 153.578849][ T8237] ? __pfx_blkdev_read_folio+0x10/0x10 [ 153.578869][ T8237] ? __pfx_filemap_read_folio+0x10/0x10 [ 153.578886][ T8237] ? __filemap_get_folio+0x9d2/0xb40 [ 153.578912][ T8237] ? __asan_memcpy+0x40/0x70 [ 153.578933][ T8237] do_read_cache_folio+0x373/0x5b0 [ 153.578952][ T8237] ? __pfx_blkdev_read_folio+0x10/0x10 [ 153.578976][ T8237] read_part_sector+0xb3/0x260 [ 153.579001][ T8237] adfspart_check_ICS+0xcb/0xa20 [ 153.579028][ T8237] ? snprintf+0xda/0x120 [ 153.579050][ T8237] ? vsnprintf+0x1148/0x1220 [ 153.579068][ T8237] ? vsnprintf+0x18e/0x1220 [ 153.579086][ T8237] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 153.579113][ T8237] ? set_page_refcounted+0xa1/0x1e0 [ 153.579144][ T8237] bdev_disk_changed+0x77f/0x14d0 [ 153.579183][ T8237] ? __pfx_bdev_disk_changed+0x10/0x10 [ 153.579204][ T8237] ? wait_on_inode+0xc1/0x230 [ 153.579233][ T8237] ? __pfx_wait_on_inode+0x10/0x10 [ 153.579257][ T8237] ? do_raw_spin_unlock+0x13c/0x8b0 [ 153.579282][ T8237] blkdev_get_whole+0x2d2/0x450 [ 153.579303][ T8237] bdev_open+0x2d4/0xc50 [ 153.579330][ T8237] blkdev_open+0x38e/0x4e0 [ 153.579354][ T8237] ? __pfx_blkdev_open+0x10/0x10 [ 153.579371][ T8237] do_dentry_open+0xdec/0x1960 [ 153.579407][ T8237] ? vfs_open+0x31/0x370 [ 153.579438][ T8237] vfs_open+0x3b/0x370 [ 153.579466][ T8237] path_openat+0x2c81/0x3590 [ 153.579510][ T8237] ? __pfx_path_openat+0x10/0x10 [ 153.579544][ T8237] do_filp_open+0x27f/0x4e0 [ 153.579564][ T8237] ? __pfx_do_filp_open+0x10/0x10 [ 153.579581][ T8237] ? do_raw_spin_lock+0x14f/0x370 [ 153.579633][ T8237] do_sys_openat2+0x13e/0x1d0 [ 153.579661][ T8237] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.579697][ T8237] __x64_sys_openat+0x247/0x2a0 [ 153.579724][ T8237] ? __pfx___x64_sys_openat+0x10/0x10 [ 153.579753][ T8237] ? do_syscall_64+0x100/0x230 [ 153.579782][ T8237] ? do_syscall_64+0xb6/0x230 [ 153.579809][ T8237] do_syscall_64+0xf3/0x230 [ 153.579834][ T8237] ? clear_bhb_loop+0x35/0x90 [ 153.579861][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.579884][ T8237] RIP: 0033:0x7fd6a19169a4 [ 153.579899][ T8237] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 153.579913][ T8237] RSP: 002b:00007fff7eb54d70 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.579931][ T8237] RAX: ffffffffffffffda RBX: 0000560bc2c4cec0 RCX: 00007fd6a19169a4 [ 153.579943][ T8237] RDX: 00000000000a0800 RSI: 0000560bc2c49070 RDI: 00000000ffffff9c [ 153.579954][ T8237] RBP: 0000560bc2c49070 R08: 0000000000000001 R09: 7fffffffffffffff [ 153.579966][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 153.579976][ T8237] R13: 0000560bc2c418a0 R14: 0000000000000001 R15: 0000560bc2c38910 [ 153.580001][ T8237] [ 153.580025][ T8237] block nbd6: shutting down sockets [ 153.625554][ T8279] batadv0: entered promiscuous mode [ 153.686536][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.271227][ T8278] batadv0: left promiscuous mode [ 154.490217][ T8298] xt_hashlimit: size too large, truncated to 1048576 [ 154.611517][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 154.653011][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.692947][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 154.726828][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.739431][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 154.747951][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.766458][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 154.784993][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.802427][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 154.836460][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.845578][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 154.880980][ T8309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.907455][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.942682][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 154.988731][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.032191][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 155.071823][ T8237] ldm_validate_partition_table(): Disk read failed. [ 155.105936][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.155486][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 155.193545][ T8237] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.213183][ T8237] Buffer I/O error on dev nbd6, logical block 0, async page read [ 155.224326][ T8237] Dev nbd6: unable to read RDB block 0 [ 155.268798][ T8237] nbd6: unable to read partition table [ 155.311465][ T8237] ldm_validate_partition_table(): Disk read failed. [ 155.341407][ T8237] Dev nbd6: unable to read RDB block 0 [ 155.342976][ T8334] __nla_validate_parse: 7 callbacks suppressed [ 155.342998][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 155.354840][ T8237] nbd6: unable to read partition table [ 155.413971][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 155.423430][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.603'. [ 155.568885][ T5839] block nbd7: Receive control failed (result -107) [ 155.637186][ T8334] nbd7: detected capacity change from 0 to 256 [ 155.674194][ T8237] block nbd7: Dead connection, failed to find a fallback [ 155.706537][ T8237] block nbd7: shutting down sockets [ 155.712711][ T8237] ldm_validate_partition_table(): Disk read failed. [ 155.757193][ T8343] batadv0: entered promiscuous mode [ 155.764225][ T8237] Dev nbd7: unable to read RDB block 0 [ 155.772853][ T8343] FAULT_INJECTION: forcing a failure. [ 155.772853][ T8343] name failslab, interval 1, probability 0, space 0, times 0 [ 155.790459][ T8237] nbd7: unable to read partition table [ 155.815695][ T8343] CPU: 1 UID: 0 PID: 8343 Comm: syz.0.606 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 155.815727][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.815741][ T8343] Call Trace: [ 155.815748][ T8343] [ 155.815757][ T8343] dump_stack_lvl+0x241/0x360 [ 155.815789][ T8343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.815813][ T8343] ? __pfx__printk+0x10/0x10 [ 155.815853][ T8343] should_fail_ex+0x40a/0x550 [ 155.815892][ T8343] should_failslab+0xac/0x100 [ 155.815924][ T8343] kmem_cache_alloc_node_noprof+0x77/0x380 [ 155.815955][ T8343] ? __alloc_skb+0x1c3/0x440 [ 155.815977][ T8343] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 155.816007][ T8343] __alloc_skb+0x1c3/0x440 [ 155.816036][ T8343] ? __pfx___alloc_skb+0x10/0x10 [ 155.816071][ T8343] ? if_nlmsg_size+0x755/0x7b0 [ 155.816097][ T8343] ? if_nlmsg_size+0x540/0x7b0 [ 155.816130][ T8343] rtmsg_ifinfo_build_skb+0x84/0x260 [ 155.816157][ T8343] ? kasan_save_track+0x3f/0x80 [ 155.816189][ T8343] rtmsg_ifinfo+0x91/0x1b0 [ 155.816225][ T8343] __dev_notify_flags+0xf7/0x400 [ 155.816256][ T8343] ? __pfx___dev_notify_flags+0x10/0x10 [ 155.816279][ T8343] ? __pfx_netdev_info+0x10/0x10 [ 155.816314][ T8343] __dev_set_promiscuity+0x152/0x5a0 [ 155.816341][ T8343] ? __kasan_kmalloc+0x98/0xb0 [ 155.816371][ T8343] dev_set_promiscuity+0x51/0xe0 [ 155.816397][ T8343] packet_mc_add+0x607/0xb40 [ 155.816433][ T8343] packet_setsockopt+0x1170/0x1870 [ 155.816470][ T8343] ? __pfx_packet_setsockopt+0x10/0x10 [ 155.816512][ T8343] ? aa_sk_perm+0x96d/0xab0 [ 155.816549][ T8343] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.816582][ T8343] ? __pfx_lock_acquire+0x10/0x10 [ 155.816611][ T8343] ? aa_sock_opt_perm+0x79/0x120 [ 155.816649][ T8343] ? __pfx_packet_setsockopt+0x10/0x10 [ 155.816679][ T8343] do_sock_setsockopt+0x3af/0x720 [ 155.816711][ T8343] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 155.816741][ T8343] ? __fget_files+0x395/0x410 [ 155.816770][ T8343] ? __fget_files+0x2a/0x410 [ 155.816811][ T8343] __x64_sys_setsockopt+0x1ee/0x280 [ 155.816842][ T8343] do_syscall_64+0xf3/0x230 [ 155.816872][ T8343] ? clear_bhb_loop+0x35/0x90 [ 155.816906][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.816934][ T8343] RIP: 0033:0x7f4d76b8d169 [ 155.816953][ T8343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.816971][ T8343] RSP: 002b:00007f4d779d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.816993][ T8343] RAX: ffffffffffffffda RBX: 00007f4d76da5fa0 RCX: 00007f4d76b8d169 [ 155.817008][ T8343] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 155.817021][ T8343] RBP: 00007f4d779d8090 R08: 0000000000000010 R09: 0000000000000000 [ 155.817033][ T8343] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 155.817055][ T8343] R13: 0000000000000000 R14: 00007f4d76da5fa0 R15: 00007ffc91f118a8 [ 155.817087][ T8343] [ 156.189364][ T8342] batadv0: left promiscuous mode [ 156.190629][ T8237] ldm_validate_partition_table(): Disk read failed. [ 156.203425][ T8237] Dev nbd7: unable to read RDB block 0 [ 156.209521][ T8237] nbd7: unable to read partition table [ 156.585895][ T8372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.611'. [ 156.679806][ T8376] batadv0: entered promiscuous mode [ 156.702836][ T8373] batadv0: left promiscuous mode [ 157.054877][ T8395] netlink: 84 bytes leftover after parsing attributes in process `syz.3.619'. [ 157.333824][ T8405] batadv0: entered promiscuous mode [ 157.345139][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 157.357181][ T8404] batadv0: left promiscuous mode [ 157.812968][ T8418] netlink: 'syz.1.626': attribute type 4 has an invalid length. [ 157.867849][ T8425] netlink: 'syz.1.626': attribute type 4 has an invalid length. [ 158.621312][ T8459] lo: entered allmulticast mode [ 158.627123][ T8459] tunl0: entered allmulticast mode [ 158.641549][ T8459] gre0: entered allmulticast mode [ 158.734603][ T8459] gretap0: entered allmulticast mode [ 158.899628][ T8472] x_tables: unsorted underflow at hook 3 [ 158.919578][ T8459] erspan0: entered allmulticast mode [ 158.942609][ T8459] ip_vti0: entered allmulticast mode [ 158.986691][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 159.009572][ T8459] ip6_vti0: entered allmulticast mode [ 159.035359][ T8459] sit0: entered allmulticast mode [ 159.067971][ T8459] ip6tnl0: entered allmulticast mode [ 159.100913][ T8459] ip6gre0: entered allmulticast mode [ 159.160208][ T8459] syz_tun: entered allmulticast mode [ 159.286677][ T8459] ip6gretap0: entered allmulticast mode [ 159.310188][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.317762][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.326699][ T8459] bridge0: entered allmulticast mode [ 159.352788][ T8459] vcan0: entered allmulticast mode [ 159.378962][ T8459] bond0: entered allmulticast mode [ 159.384192][ T8459] bond_slave_0: entered allmulticast mode [ 159.391116][ T8459] bond_slave_1: entered allmulticast mode [ 159.418090][ T8459] team0: entered allmulticast mode [ 159.423257][ T8459] team_slave_0: entered allmulticast mode [ 159.442577][ T8459] team_slave_1: entered allmulticast mode [ 159.458472][ T8459] dummy0: entered allmulticast mode [ 159.488748][ T8459] nlmon0: entered allmulticast mode [ 159.516262][ T8459] caif0: entered allmulticast mode [ 159.522121][ T8459] batadv0: entered allmulticast mode [ 159.548375][ T8459] vxcan0: entered allmulticast mode [ 159.558456][ T8459] vxcan1: entered allmulticast mode [ 159.574106][ T8459] veth0: entered allmulticast mode [ 159.588633][ T8459] veth1: entered allmulticast mode [ 159.628493][ T8459] wg0: entered allmulticast mode [ 159.658363][ T8459] wg1: entered allmulticast mode [ 159.676732][ T8459] wg2: entered allmulticast mode [ 159.688704][ T8459] veth0_to_bridge: entered allmulticast mode [ 159.733193][ T8459] veth1_to_bridge: entered allmulticast mode [ 159.786652][ T8459] veth0_to_bond: entered allmulticast mode [ 159.802981][ T8459] veth1_to_bond: entered allmulticast mode [ 159.820017][ T8459] veth0_to_team: entered allmulticast mode [ 159.833000][ T8459] veth1_to_team: entered allmulticast mode [ 159.863114][ T8459] veth0_to_batadv: entered allmulticast mode [ 159.877034][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.889220][ T8459] batadv_slave_0: entered allmulticast mode [ 159.909558][ T8459] veth1_to_batadv: entered allmulticast mode [ 159.932855][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.941894][ T8459] batadv_slave_1: entered allmulticast mode [ 159.963311][ T8459] xfrm0: entered allmulticast mode [ 159.988714][ T8459] veth0_to_hsr: entered allmulticast mode [ 160.012663][ T8459] hsr_slave_0: entered allmulticast mode [ 160.021648][ T8459] veth1_to_hsr: entered allmulticast mode [ 160.030457][ T8459] hsr_slave_1: entered allmulticast mode [ 160.045642][ T8459] hsr0: entered allmulticast mode [ 160.059240][ T8459] veth1_virt_wifi: entered allmulticast mode [ 160.085405][ T8459] veth0_virt_wifi: entered allmulticast mode [ 160.095349][ T8459] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 160.111743][ T8459] veth1_vlan: entered allmulticast mode [ 160.129090][ T8459] veth0_vlan: entered allmulticast mode [ 160.206514][ T8459] vlan0: entered allmulticast mode [ 160.211849][ T8459] vlan1: entered allmulticast mode [ 160.218754][ T8459] macvlan0: entered allmulticast mode [ 160.228669][ T8459] macvlan1: entered allmulticast mode [ 160.246557][ T8459] ipvlan0: entered allmulticast mode [ 160.252109][ T8459] ipvlan1: entered allmulticast mode [ 160.266925][ T8459] veth1_macvtap: entered allmulticast mode [ 160.273827][ T8459] veth0_macvtap: entered allmulticast mode [ 160.293929][ T8459] macvtap0: entered allmulticast mode [ 160.309171][ T8459] macsec0: entered allmulticast mode [ 160.328174][ T8459] geneve0: entered allmulticast mode [ 160.338316][ T8459] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.354083][ T8459] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.364212][ T8459] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.374708][ T8459] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.384261][ T8459] geneve1: entered allmulticast mode [ 160.400132][ T8459] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 160.422772][ T8459] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 160.435778][ T8459] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 160.449306][ T8459] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 160.477329][ T8459] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 160.494642][ T8459] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 160.503858][ T8459] syztnl1: entered allmulticast mode [ 160.511652][ T8459] gre1: entered allmulticast mode [ 160.519723][ T8459] syztnl2: entered allmulticast mode [ 160.525178][ T8459] veth2: entered allmulticast mode [ 160.539031][ T8459] veth3: entered allmulticast mode [ 160.545741][ T8459] bond1: entered allmulticast mode [ 160.552600][ T8462] batadv0: entered promiscuous mode [ 160.577225][ T8462] batadv0: left promiscuous mode [ 161.358388][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 161.379688][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 161.430760][ T8528] netlink: 32 bytes leftover after parsing attributes in process `syz.3.652'. [ 161.509938][ T5843] block nbd8: Receive control failed (result -107) [ 161.561694][ T8528] nbd8: detected capacity change from 0 to 256 [ 161.582450][ T8490] block nbd8: Dead connection, failed to find a fallback [ 162.129963][ T8555] netlink: 104 bytes leftover after parsing attributes in process `syz.1.660'. [ 162.481977][ T8571] netlink: 'syz.1.665': attribute type 25 has an invalid length. [ 162.647793][ T8580] batadv0: entered promiscuous mode [ 162.662515][ T8579] batadv0: left promiscuous mode [ 162.766966][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.669'. [ 163.278229][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 163.625289][ T8619] netlink: 96 bytes leftover after parsing attributes in process `syz.2.681'. [ 163.887351][ T8632] trusted_key: syz.3.684 sent an empty control message without MSG_MORE. [ 163.939490][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'. [ 163.949220][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 163.967051][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 164.137449][ T5843] block nbd9: Receive control failed (result -107) [ 164.216414][ T8637] nbd9: detected capacity change from 0 to 256 [ 164.223982][ T8237] block nbd9: Dead connection, failed to find a fallback [ 164.236151][ T8237] block nbd9: shutting down sockets [ 164.241430][ T8237] blk_print_req_error: 64 callbacks suppressed [ 164.241446][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.259263][ T8237] buffer_io_error: 64 callbacks suppressed [ 164.259281][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.276391][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.297216][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.320856][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.347369][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.365630][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.416426][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.446247][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.485675][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.515779][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.542384][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.572112][ T8659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.595028][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.621957][ T8659] netlink: 'syz.2.692': attribute type 21 has an invalid length. [ 164.636169][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.664620][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.700537][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.726241][ T8237] ldm_validate_partition_table(): Disk read failed. [ 164.753600][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.781801][ T8663] tipc: Started in network mode [ 164.797230][ T8663] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 164.810517][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.832643][ T8237] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.846817][ T8663] tipc: Enabling of bearer rejected, failed to enable media [ 164.875336][ T8237] Buffer I/O error on dev nbd9, logical block 0, async page read [ 164.906568][ T8237] Dev nbd9: unable to read RDB block 0 [ 164.912705][ T8237] nbd9: unable to read partition table [ 164.922994][ T8237] ldm_validate_partition_table(): Disk read failed. [ 164.947406][ T8237] Dev nbd9: unable to read RDB block 0 [ 164.953452][ T8237] nbd9: unable to read partition table [ 165.205580][ T8677] batadv0: entered promiscuous mode [ 165.233964][ T8676] batadv0: left promiscuous mode [ 165.810340][ T8703] syzkaller1: entered promiscuous mode [ 165.830434][ T8703] syzkaller1: entered allmulticast mode [ 166.359285][ T8733] batadv0: entered promiscuous mode [ 166.370085][ T8732] __nla_validate_parse: 7 callbacks suppressed [ 166.370104][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.715'. [ 166.402616][ T8731] batadv0: left promiscuous mode [ 166.637471][ T8744] tap0: tun_chr_ioctl cmd 1074025677 [ 166.643098][ T8744] tap0: linktype set to 823 [ 166.825915][ T8749] syzkaller1: tun_chr_ioctl cmd 21731 [ 166.871122][ T8752] xt_TCPMSS: Only works on TCP SYN packets [ 166.926797][ T8752] lo: entered allmulticast mode [ 166.937116][ T8752] netlink: 372 bytes leftover after parsing attributes in process `syz.0.721'. [ 167.562292][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 167.577537][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 167.619761][ T8777] netlink: 32 bytes leftover after parsing attributes in process `syz.0.729'. [ 167.662434][ T8783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.731'. [ 167.691356][ T5839] block nbd10: Receive control failed (result -107) [ 167.728960][ T8777] nbd10: detected capacity change from 0 to 256 [ 167.764633][ T8237] block nbd10: Dead connection, failed to find a fallback [ 167.783826][ T8237] block nbd10: shutting down sockets [ 167.790645][ T8237] ldm_validate_partition_table(): Disk read failed. [ 167.798421][ T8237] Dev nbd10: unable to read RDB block 0 [ 167.804640][ T8237] nbd10: unable to read partition table [ 167.815709][ T8237] ldm_validate_partition_table(): Disk read failed. [ 167.823246][ T8237] Dev nbd10: unable to read RDB block 0 [ 167.829857][ T8237] nbd10: unable to read partition table [ 171.976933][ T5208] udevd[5208]: worker [5854] /devices/virtual/block/nbd0 is taking a long time [ 171.986451][ T5208] udevd[5208]: worker [5853] /devices/virtual/block/nbd1 is taking a long time [ 181.006843][ T5208] udevd[5208]: worker [6183] /devices/virtual/block/nbd2 is taking a long time [ 187.024797][ T5208] udevd[5208]: worker [5851] /devices/virtual/block/nbd3 is taking a long time [ 194.601619][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.268173][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'. [ 195.289117][ T8963] sctp: [Deprecated]: syz.2.742 (pid 8963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.289117][ T8963] Use struct sctp_sack_info instead [ 195.527609][ T8969] batadv0: entered promiscuous mode [ 195.544074][ T8968] batadv0: left promiscuous mode [ 195.587606][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 195.604428][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 195.644123][ T8973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.746'. [ 195.737778][ T5839] block nbd11: Receive control failed (result -107) [ 195.796970][ T8973] nbd11: detected capacity change from 0 to 256 [ 195.819226][ T8237] block nbd11: Dead connection, failed to find a fallback [ 195.862204][ T8237] block nbd11: shutting down sockets [ 195.889303][ T8237] blk_print_req_error: 64 callbacks suppressed [ 195.889325][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.973499][ T8237] buffer_io_error: 64 callbacks suppressed [ 195.973519][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.000589][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.046548][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.054682][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.066316][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.074452][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.084986][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.093277][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.102865][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.111151][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.120703][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.129000][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.145636][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.154395][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.187816][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.195765][ T8237] ldm_validate_partition_table(): Disk read failed. [ 196.213494][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.283969][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.293718][ T9003] caif0: left allmulticast mode [ 196.326315][ T8237] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.335518][ T8237] Buffer I/O error on dev nbd11, logical block 0, async page read [ 196.375268][ T9003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.756'. [ 196.396575][ T8237] Dev nbd11: unable to read RDB block 0 [ 196.402777][ T8237] nbd11: unable to read partition table [ 196.427890][ T9006] xt_recent: hitcount (134219775) is larger than allowed maximum (65535) [ 196.450815][ T8237] ldm_validate_partition_table(): Disk read failed. [ 196.502895][ T8237] Dev nbd11: unable to read RDB block 0 [ 196.512118][ T8237] nbd11: unable to read partition table [ 196.694820][ T9013] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 196.705591][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 196.719985][ T9018] batadv0: entered promiscuous mode [ 196.820535][ T8971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.831592][ T9016] netlink: 'syz.4.760': attribute type 126 has an invalid length. [ 196.873425][ T9016] wireguard0: entered promiscuous mode [ 196.900981][ T9016] wireguard0: entered allmulticast mode [ 196.924373][ T9014] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 196.942027][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 196.948921][ T9027] netlink: 'syz.0.761': attribute type 4 has an invalid length. [ 197.021218][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 197.072176][ T9017] batadv0: left promiscuous mode [ 197.267127][ T9042] netlink: 'syz.1.765': attribute type 142 has an invalid length. [ 197.335002][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 197.347299][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 197.418959][ T5839] block nbd12: Receive control failed (result -107) [ 197.456777][ T9044] nbd12: detected capacity change from 0 to 256 [ 197.475343][ T8237] block nbd12: Dead connection, failed to find a fallback [ 197.521811][ T8237] block nbd12: shutting down sockets [ 197.548710][ T9053] netlink: 'syz.0.771': attribute type 1 has an invalid length. [ 197.550709][ T8237] ldm_validate_partition_table(): Disk read failed. [ 197.611149][ T8237] Dev nbd12: unable to read RDB block 0 [ 197.636691][ T8237] nbd12: unable to read partition table [ 197.664971][ T8237] ldm_validate_partition_table(): Disk read failed. [ 197.682741][ T8237] Dev nbd12: unable to read RDB block 0 [ 197.704298][ T8237] nbd12: unable to read partition table [ 197.995978][ T9065] netlink: 'syz.2.774': attribute type 2 has an invalid length. [ 198.183527][ T9074] batadv0: entered promiscuous mode [ 198.204759][ T9073] batadv0: left promiscuous mode [ 198.589285][ T5839] block nbd13: Receive control failed (result -107) [ 198.616529][ T9091] nbd13: detected capacity change from 0 to 256 [ 198.624378][ T8237] block nbd13: Dead connection, failed to find a fallback [ 198.668167][ T8237] block nbd13: shutting down sockets [ 198.674351][ T8237] ldm_validate_partition_table(): Disk read failed. [ 198.688559][ T8237] Dev nbd13: unable to read RDB block 0 [ 198.694677][ T8237] nbd13: unable to read partition table [ 198.720596][ T8237] ldm_validate_partition_table(): Disk read failed. [ 198.736770][ T8237] Dev nbd13: unable to read RDB block 0 [ 198.752564][ T8237] nbd13: unable to read partition table [ 198.955980][ T9106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.129968][ T9110] vlan3: entered allmulticast mode [ 199.135173][ T9110] hsr0: entered allmulticast mode [ 199.158680][ T9110] hsr_slave_0: entered allmulticast mode [ 199.196362][ T9110] hsr_slave_1: entered allmulticast mode [ 199.215343][ T9115] netlink: 'syz.4.793': attribute type 5 has an invalid length. [ 199.376993][ T9113] netlink: 'syz.2.791': attribute type 12 has an invalid length. [ 199.418540][ T9119] batadv0: entered promiscuous mode [ 199.427365][ T9110] netlink: 'syz.2.791': attribute type 12 has an invalid length. [ 199.448388][ T9109] batadv0: left promiscuous mode [ 199.596815][ T9125] tap0: tun_chr_ioctl cmd 1074025677 [ 199.603543][ T9125] tap0: linktype set to 768 [ 199.679233][ T5839] block nbd14: Receive control failed (result -107) [ 199.730227][ T9128] nbd14: detected capacity change from 0 to 256 [ 199.752760][ T8237] block nbd14: Dead connection, failed to find a fallback [ 199.790692][ T8237] block nbd14: shutting down sockets [ 199.812323][ T8237] ldm_validate_partition_table(): Disk read failed. [ 199.847292][ T8237] Dev nbd14: unable to read RDB block 0 [ 199.853400][ T8237] nbd14: unable to read partition table [ 199.920007][ T8237] ldm_validate_partition_table(): Disk read failed. [ 199.956751][ T8237] Dev nbd14: unable to read RDB block 0 [ 199.973302][ T8237] nbd14: unable to read partition table [ 200.084544][ T9143] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 200.190419][ T9143] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 200.288197][ T9143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.304811][ T6865] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 200.337014][ T9143] __nla_validate_parse: 15 callbacks suppressed [ 200.337049][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 200.477382][ T6877] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 201.146343][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 201.155226][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 201.213152][ T9177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.815'. [ 201.270053][ T5842] block nbd15: Receive control failed (result -107) [ 201.306368][ T9177] nbd15: detected capacity change from 0 to 256 [ 201.327752][ T8237] block nbd15: Dead connection, failed to find a fallback [ 201.366207][ T8237] block nbd15: shutting down sockets [ 201.371902][ T8237] blk_print_req_error: 138 callbacks suppressed [ 201.371919][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.469386][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 201.476523][ T8237] buffer_io_error: 138 callbacks suppressed [ 201.476547][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 201.501815][ T9181] nbd: illegal input index -381222912 [ 201.536621][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.586551][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 201.594601][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.652278][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 201.670715][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.712297][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 201.741244][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.786599][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 201.795266][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.804637][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 201.804753][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 201.804817][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 201.808060][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 201.860205][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 201.902876][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.956672][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.023048][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.085731][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.122520][ T9182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.817'. [ 202.131796][ T8237] ldm_validate_partition_table(): Disk read failed. [ 202.157213][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.250040][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.276423][ T8488] IPVS: starting estimator thread 0... [ 202.301759][ T8237] I/O error, dev nbd15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 202.352474][ T8237] Buffer I/O error on dev nbd15, logical block 0, async page read [ 202.364366][ T9213] netlink: 48 bytes leftover after parsing attributes in process `syz.0.826'. [ 202.366478][ T8237] Dev nbd15: unable to read RDB block 0 [ 202.373609][ T9209] IPVS: using max 25 ests per chain, 60000 per kthread [ 202.412638][ T8237] nbd15: unable to read partition table [ 202.438022][ T8237] ldm_validate_partition_table(): Disk read failed. [ 202.466405][ T8237] Dev nbd15: unable to read RDB block 0 [ 202.472544][ T8237] nbd15: unable to read partition table [ 202.696359][ T9214] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 202.735075][ T9219] netlink: 'syz.4.829': attribute type 2 has an invalid length. [ 202.772710][ T9219] netlink: 'syz.4.829': attribute type 8 has an invalid length. [ 202.796739][ T9219] netlink: 132 bytes leftover after parsing attributes in process `syz.4.829'. [ 202.861122][ T9221] team0: No ports can be present during mode change [ 202.900281][ T9219] netlink: 48 bytes leftover after parsing attributes in process `syz.4.829'. [ 203.155610][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 203.188095][ T9229] netlink: 'syz.1.833': attribute type 39 has an invalid length. [ 203.389932][ T5839] block nbd16: Receive control failed (result -107) [ 203.426968][ T9227] nbd16: detected capacity change from 0 to 256 [ 203.537111][ T8237] block nbd16: Dead connection, failed to find a fallback [ 203.554797][ T8237] block nbd16: shutting down sockets [ 203.576967][ T8237] ldm_validate_partition_table(): Disk read failed. [ 203.598709][ T8237] Dev nbd16: unable to read RDB block 0 [ 203.613661][ T9214] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.625327][ T8237] nbd16: unable to read partition table [ 203.657588][ T8237] ldm_validate_partition_table(): Disk read failed. [ 203.676523][ T9214] tipc: Enabled bearer , priority 10 [ 203.689481][ T8237] Dev nbd16: unable to read RDB block 0 [ 203.711165][ T8237] nbd16: unable to read partition table [ 203.747472][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.886213][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.026165][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.166265][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.306161][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.354390][ T9253] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.383795][ T9253] batadv0: entered promiscuous mode [ 204.392790][ T9251] batadv0: left promiscuous mode [ 204.446170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.586222][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.736824][ T5924] tipc: Node number set to 11521 [ 204.807993][ T5839] block nbd17: Receive control failed (result -107) [ 204.828453][ T9270] veth5: entered promiscuous mode [ 204.833859][ T9270] bridge1: port 1(veth5) entered blocking state [ 204.847605][ T9270] bridge1: port 1(veth5) entered disabled state [ 204.854324][ T9270] veth5: entered allmulticast mode [ 204.866173][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.886237][ T9261] nbd17: detected capacity change from 0 to 256 [ 204.900329][ T8237] block nbd17: Dead connection, failed to find a fallback [ 204.956394][ T8237] block nbd17: shutting down sockets [ 204.962560][ T8237] ldm_validate_partition_table(): Disk read failed. [ 204.976716][ T8237] Dev nbd17: unable to read RDB block 0 [ 204.988204][ T8237] nbd17: unable to read partition table [ 205.047516][ T8237] ldm_validate_partition_table(): Disk read failed. [ 205.055014][ T8237] Dev nbd17: unable to read RDB block 0 [ 205.091438][ T8237] nbd17: unable to read partition table [ 205.136196][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.245363][ T9281] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.666236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.684549][ T9291] batadv0: entered promiscuous mode [ 205.691915][ T9290] batadv0: left promiscuous mode [ 206.029920][ T9295] syzkaller1: entered promiscuous mode [ 206.035640][ T9295] syzkaller1: entered allmulticast mode [ 206.270263][ T9311] sctp: [Deprecated]: syz.4.862 (pid 9311) Use of int in max_burst socket option. [ 206.270263][ T9311] Use struct sctp_assoc_value instead [ 206.301370][ T9310] __nla_validate_parse: 8 callbacks suppressed [ 206.301392][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 206.386679][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 206.396033][ T9310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.863'. [ 206.462817][ T5839] block nbd18: Receive control failed (result -107) [ 206.506261][ T9310] nbd18: detected capacity change from 0 to 256 [ 206.515577][ T8237] block nbd18: Dead connection, failed to find a fallback [ 206.563568][ T8237] block nbd18: shutting down sockets [ 206.593737][ T8237] blk_print_req_error: 101 callbacks suppressed [ 206.593759][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.643644][ T8237] buffer_io_error: 101 callbacks suppressed [ 206.643666][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 206.710130][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.733170][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 206.770585][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.808471][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 206.828119][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.860727][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 206.887271][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.931020][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 206.966484][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.975696][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 207.025671][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.052841][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 207.079411][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.118935][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 207.144652][ T8237] ldm_validate_partition_table(): Disk read failed. [ 207.183258][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.220074][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 207.266402][ T8237] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.275617][ T8237] Buffer I/O error on dev nbd18, logical block 0, async page read [ 207.325511][ T8237] Dev nbd18: unable to read RDB block 0 [ 207.358034][ T8237] nbd18: unable to read partition table [ 207.413396][ T8237] ldm_validate_partition_table(): Disk read failed. [ 207.436704][ T8237] Dev nbd18: unable to read RDB block 0 [ 207.454710][ T8237] nbd18: unable to read partition table [ 207.666606][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 207.856791][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 207.896689][ T9356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.879'. [ 207.969182][ T5839] block nbd19: Receive control failed (result -107) [ 208.006795][ T9356] nbd19: detected capacity change from 0 to 256 [ 208.020806][ T8237] block nbd19: Dead connection, failed to find a fallback [ 208.057909][ T8237] block nbd19: shutting down sockets [ 208.064084][ T8237] ldm_validate_partition_table(): Disk read failed. [ 208.155066][ T8237] Dev nbd19: unable to read RDB block 0 [ 208.185175][ T8237] nbd19: unable to read partition table [ 208.207610][ T8237] ldm_validate_partition_table(): Disk read failed. [ 208.231292][ T8237] Dev nbd19: unable to read RDB block 0 [ 208.253283][ T8237] nbd19: unable to read partition table [ 208.513231][ T9382] tap0: tun_chr_ioctl cmd 1074025677 [ 208.519099][ T9382] tap0: linktype set to 768 [ 208.524814][ T9382] batadv0: entered promiscuous mode [ 208.710660][ T9382] batadv0: left promiscuous mode [ 209.142664][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 209.179696][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 209.206506][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.303963][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 209.336363][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 209.345219][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.399449][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.412549][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.535547][ T9413] xt_CT: No such helper "pptp" [ 209.614902][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.644800][ T5839] block nbd20: Receive control failed (result -107) [ 209.699876][ T9411] nbd20: detected capacity change from 0 to 256 [ 209.771319][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.796247][ C1] net_ratelimit: 3 callbacks suppressed [ 209.796269][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.797479][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.822441][ T9417] ip6gre1: entered promiscuous mode [ 209.836888][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.926750][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.961698][ T9402] netlink: 'syz.3.890': attribute type 7 has an invalid length. [ 209.998920][ T9421] batadv0: entered promiscuous mode [ 210.035700][ T9420] batadv0: left promiscuous mode [ 210.487403][ T9443] set match dimension is over the limit! [ 210.521618][ T9447] nlmon0: left allmulticast mode [ 210.551025][ T5839] block nbd21: Receive control failed (result -107) [ 210.596499][ T9441] nbd21: detected capacity change from 0 to 256 [ 210.836149][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.876209][ T48] IPVS: starting estimator thread 0... [ 210.943718][ T9462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.978627][ T9457] IPVS: using max 18 ests per chain, 43200 per kthread [ 211.267168][ T9471] vlan2: left allmulticast mode [ 211.272130][ T9471] batadv0: left allmulticast mode [ 211.331809][ T9471] __nla_validate_parse: 37 callbacks suppressed [ 211.331831][ T9471] netlink: 152 bytes leftover after parsing attributes in process `syz.2.915'. [ 211.349160][ T9471] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 211.379604][ T9478] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.586898][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 211.633111][ T9485] nbd: socks must be embedded in a SOCK_ITEM attr [ 211.712883][ T9494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.925'. [ 211.742400][ T9497] bond2: entered promiscuous mode [ 211.769344][ T9497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.790761][ T9500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.798362][ T9500] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 211.809095][ T9500] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 211.821814][ T9500] bond2: (slave ip6gre1): making interface the new active one [ 211.829789][ T9500] ip6gre1: entered promiscuous mode [ 211.836583][ T9500] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 211.876314][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.802793][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 212.835755][ T9548] nbd: socks must be embedded in a SOCK_ITEM attr [ 212.916315][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.954709][ T9558] batadv0: entered promiscuous mode [ 213.098515][ T9553] batadv0: left promiscuous mode [ 213.307299][ T9578] vlan2: entered allmulticast mode [ 213.319450][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 213.336231][ T9578] bond0: entered allmulticast mode [ 213.341436][ T9578] bond_slave_0: entered allmulticast mode [ 213.357571][ T9578] bond_slave_1: entered allmulticast mode [ 213.541305][ T9587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 213.550963][ T9593] batadv_slave_0: entered promiscuous mode [ 213.583281][ T9593] x_tables: duplicate underflow at hook 1 [ 213.833292][ T9605] batadv0: entered promiscuous mode [ 213.833509][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 213.846490][ T9603] batadv0: left promiscuous mode [ 213.956155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.501054][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 214.578594][ T9639] netlink: 60 bytes leftover after parsing attributes in process `syz.4.968'. [ 214.996177][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.116755][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 215.156467][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 215.175672][ T9654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.973'. [ 215.379619][ T5839] block nbd22: Receive control failed (result -107) [ 215.426183][ T9654] nbd22: detected capacity change from 0 to 256 [ 215.844539][ T9674] validate_nla: 11 callbacks suppressed [ 215.844562][ T9674] netlink: 'syz.0.981': attribute type 21 has an invalid length. [ 216.036155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.504967][ T9703] __nla_validate_parse: 4 callbacks suppressed [ 216.504991][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 216.651170][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 216.697319][ T9703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.990'. [ 216.770779][ T5839] block nbd23: Receive control failed (result -107) [ 216.806320][ T9703] nbd23: detected capacity change from 0 to 256 [ 217.062635][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.998'. [ 217.083252][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.093481][ T9733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.998'. [ 217.474055][ T9738] netlink: 'syz.2.999': attribute type 29 has an invalid length. [ 217.886834][ T9763] unsupported nla_type 52263 [ 217.953223][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1005'. [ 218.056514][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 218.116146][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.263551][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 218.365470][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 218.428908][ T9772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1009'. [ 218.509447][ T5839] block nbd24: Receive control failed (result -107) [ 218.548326][ T9772] nbd24: detected capacity change from 0 to 256 [ 219.156236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.547892][ T9828] sctp: [Deprecated]: syz.4.1027 (pid 9828) Use of int in max_burst socket option. [ 219.547892][ T9828] Use struct sctp_assoc_value instead [ 219.619974][ T5839] block nbd25: Receive control failed (result -107) [ 219.658127][ T9829] nbd25: detected capacity change from 0 to 256 [ 219.905595][ T9847] xt_connbytes: Forcing CT accounting to be enabled [ 220.097614][ T9861] netlink: 'syz.4.1037': attribute type 3 has an invalid length. [ 220.110123][ T9860] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.150868][ T9859] delete_channel: no stack [ 220.198027][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.268118][ T9868] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 220.280655][ T9868] batman_adv: batadv0: Adding interface: ip6gretap2 [ 220.313271][ T9868] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.359980][ T9868] batman_adv: batadv0: Interface activated: ip6gretap2 [ 220.459035][ T5839] block nbd26: Receive control failed (result -107) [ 220.546416][ T9873] nbd26: detected capacity change from 0 to 256 [ 220.984999][ T9900] netlink: 'syz.1.1053': attribute type 8 has an invalid length. [ 221.001192][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:00) already exists on: batadv_slave_1 [ 221.026257][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.196557][ T9909] xt_l2tp: invalid flags combination: c [ 221.236144][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.508353][ T9923] __nla_validate_parse: 9 callbacks suppressed [ 221.508378][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 221.566982][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 221.576380][ T9923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1061'. [ 221.619996][ T5839] block nbd27: Receive control failed (result -107) [ 221.668093][ T9923] nbd27: detected capacity change from 0 to 256 [ 222.276232][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.817607][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 222.858570][ T9979] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 222.884992][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1080'. [ 222.889715][ T9979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.909545][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 222.923208][ T9979] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 222.941488][ T9979] netlink: 'syz.0.1081': attribute type 2 has an invalid length. [ 222.951133][ T9979] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1081'. [ 222.956603][ T9977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1080'. [ 223.083691][ T5839] block nbd28: Receive control failed (result -107) [ 223.147771][ T9977] nbd28: detected capacity change from 0 to 256 [ 223.257306][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1082'. [ 223.316165][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.429933][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 224.230263][ T5839] block nbd29: Receive control failed (result -107) [ 224.281709][T10027] nbd29: detected capacity change from 0 to 256 [ 224.356141][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.308727][T10074] nbd: socks must be embedded in a SOCK_ITEM attr [ 225.331303][T10079] veth0_vlan: entered allmulticast mode [ 225.396260][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.415569][T10080] netlink: 'syz.0.1111': attribute type 2 has an invalid length. [ 225.659427][T10092] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 225.743965][T10092] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 225.772902][T10092] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 226.243239][T10120] nbd: socks must be embedded in a SOCK_ITEM attr [ 226.436308][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.561159][T10138] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 226.658996][T10138] bond3: (slave gretap1): making interface the new active one [ 226.697575][T10138] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 226.968020][T10149] netlink: 'syz.3.1129': attribute type 74 has an invalid length. [ 227.365074][T10157] __nla_validate_parse: 10 callbacks suppressed [ 227.365099][T10157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1131'. [ 227.476140][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.683633][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 227.711708][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 227.861607][T10179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1140'. [ 228.061724][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 228.073410][T10185] tipc: Started in network mode [ 228.090737][T10185] tipc: Node identity 2, cluster identity 4711 [ 228.112354][T10185] tipc: Node number set to 2 [ 228.127076][T10185] tipc: Cannot configure node identity twice [ 228.141144][T10187] veth1_to_team: entered promiscuous mode [ 228.153243][T10187] macvtap1: entered promiscuous mode [ 228.163329][T10187] macvtap1: entered allmulticast mode [ 228.189480][T10187] veth1_to_team: entered allmulticast mode [ 228.383290][T10195] bridge: RTM_NEWNEIGH with invalid ether address [ 228.516208][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.624664][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 228.641798][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 228.653231][T10211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1151'. [ 228.659737][T10217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1153'. [ 228.673007][T10209] x_tables: duplicate underflow at hook 3 [ 228.689399][ T5839] block nbd30: Receive control failed (result -107) [ 228.726597][T10211] nbd30: detected capacity change from 0 to 256 [ 228.965271][T10225] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1158'. [ 229.536800][T10262] netlink: 'syz.4.1169': attribute type 72 has an invalid length. [ 229.556161][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.603877][T10263] tipc: Can't bind to reserved service type 1 [ 229.663331][ T5839] block nbd31: Receive control failed (result -107) [ 229.726731][T10265] nbd31: detected capacity change from 0 to 256 [ 230.456869][ T30] audit: type=1800 audit(1742879288.323:4): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1174" name="cgroup.controllers" dev="tmpfs" ino=1215 res=0 errno=0 [ 230.596153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.738657][ T5839] block nbd32: Receive control failed (result -107) [ 230.826261][T10304] nbd32: detected capacity change from 0 to 256 [ 231.036765][T10320] batman_adv: batadv0: Adding interface: dummy0 [ 231.043135][T10320] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.069919][T10320] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 231.118384][T10328] No such timeout policy "syz0" [ 231.140778][T10326] Driver unsupported XDP return value 0 on prog (id 455) dev N/A, expect packet loss! [ 231.182991][T10326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.308593][T10326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.636220][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.849745][T10342] delete_channel: no stack [ 232.048355][ T5839] block nbd33: Receive control failed (result -107) [ 232.110448][T10358] nbd33: detected capacity change from 0 to 256 [ 232.148486][T10363] ax25_connect(): syz.1.1202 uses autobind, please contact jreuter@yaina.de [ 232.238458][T10363] batadv2: entered allmulticast mode [ 232.676149][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.859209][T10402] __nla_validate_parse: 23 callbacks suppressed [ 232.859233][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 232.955729][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 232.986232][T10402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1216'. [ 233.059293][ T5839] block nbd34: Receive control failed (result -107) [ 233.076576][T10402] nbd34: detected capacity change from 0 to 256 [ 233.103038][T10418] x_tables: duplicate underflow at hook 1 [ 233.318118][T10431] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1224'. [ 233.340314][T10429] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1225'. [ 233.360393][T10431] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1224'. [ 233.600625][T10448] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1231'. [ 233.612589][T10448] netlink: 'syz.4.1231': attribute type 30 has an invalid length. [ 233.716149][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.760277][T10454] netlink: 212400 bytes leftover after parsing attributes in process `syz.0.1234'. [ 233.770052][T10454] netlink: get zone limit has 4 unknown bytes [ 233.911563][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'. [ 233.950880][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 233.999587][ T5839] block nbd35: Receive control failed (result -107) [ 234.037679][T10463] nbd35: detected capacity change from 0 to 256 [ 234.425313][T10488] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 234.632393][T10500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.756140][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.867367][T10509] 8021q: VLANs not supported on nlmon0 [ 235.150115][ T5839] block nbd36: Receive control failed (result -107) [ 235.186303][T10521] nbd36: detected capacity change from 0 to 256 [ 235.385118][T10532] netlink: 'syz.1.1259': attribute type 21 has an invalid length. [ 235.411298][T10532] netlink: 'syz.1.1259': attribute type 5 has an invalid length. [ 235.431835][T10532] netlink: 'syz.1.1259': attribute type 6 has an invalid length. [ 235.454271][T10530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.563524][ T31] INFO: task udevd:5853 blocked for more than 143 seconds. [ 235.580787][ T31] Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 235.596473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.614258][T10532] hsr0: entered promiscuous mode [ 235.626098][ T31] task:udevd state:D stack:22544 pid:5853 tgid:5853 ppid:1 task_flags:0x400140 flags:0x00004002 [ 235.652796][ T31] Call Trace: [ 235.658686][ T31] [ 235.661700][ T31] __schedule+0x190e/0x4c90 [ 235.675030][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888054e25800: rx timeout, send abort [ 235.686012][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888054e25800: 0x0fe00: (3) A timeout occurred and this is the connection abort to close the session. [ 235.710386][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 235.725007][ T31] ? __pfx___schedule+0x10/0x10 [ 235.732232][ T31] ? __blk_flush_plug+0x449/0x500 [ 235.742434][ T31] ? __pfx_lock_release+0x10/0x10 [ 235.754011][ T31] ? __pfx___mod_timer+0x10/0x10 [ 235.762047][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.774022][ T31] ? schedule+0x90/0x320 [ 235.781663][ T31] schedule+0x14b/0x320 [ 235.786128][ T31] schedule_timeout+0x15a/0x290 [ 235.791173][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 235.796355][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.805312][ T31] ? __pfx_process_timeout+0x10/0x10 [ 235.810920][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 235.834379][ T31] nbd_queue_rq+0x6dd/0xef0 [ 235.845092][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 235.857777][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 235.872421][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 235.886153][ T31] ? sbitmap_get+0x289/0x3f0 [ 235.896147][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 235.906408][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 235.913060][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 235.919998][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 235.927143][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 235.932616][ T31] ? __pfx___might_resched+0x10/0x10 [ 235.938532][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 235.944276][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 235.951390][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 235.958772][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 235.964577][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 235.983598][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 235.996358][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 236.003372][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 236.015096][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 236.025673][ T31] __blk_flush_plug+0x420/0x500 [ 236.036456][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 236.042532][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 236.053802][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.067631][ T31] __submit_bio+0x54a/0x6a0 [ 236.072227][ T31] ? __pfx___submit_bio+0x10/0x10 [ 236.079311][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 236.085556][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 236.095251][ T31] ? __pfx___might_resched+0x10/0x10 [ 236.100960][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 236.107480][ T31] block_read_full_folio+0x9b3/0xae0 [ 236.113122][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 236.125285][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 236.133267][ T31] filemap_read_folio+0x148/0x3b0 [ 236.143692][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.151529][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 236.162068][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 236.168415][ T31] ? __asan_memcpy+0x40/0x70 [ 236.173074][ T31] do_read_cache_folio+0x373/0x5b0 [ 236.180028][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.186508][ T31] read_part_sector+0xb3/0x260 [ 236.191347][ T31] adfspart_check_ICS+0xcb/0xa20 [ 236.196793][ T31] ? snprintf+0xda/0x120 [ 236.201333][ T31] ? vsnprintf+0x1148/0x1220 [ 236.205982][ T31] ? vsnprintf+0x18e/0x1220 [ 236.210703][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 236.216455][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 236.221719][ T31] bdev_disk_changed+0x77f/0x14d0 [ 236.227291][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 236.232807][ T31] ? wait_on_inode+0xc1/0x230 [ 236.237754][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 236.243072][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 236.248553][ T31] blkdev_get_whole+0x2d2/0x450 [ 236.253644][ T31] bdev_open+0x2d4/0xc50 [ 236.258215][ T31] blkdev_open+0x38e/0x4e0 [ 236.262835][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 236.268183][ T31] do_dentry_open+0xdec/0x1960 [ 236.273193][ T31] ? vfs_open+0x31/0x370 [ 236.282042][ T31] vfs_open+0x3b/0x370 [ 236.291507][ T31] path_openat+0x2c81/0x3590 [ 236.298027][ T31] ? __pfx_path_openat+0x10/0x10 [ 236.303016][ T31] do_filp_open+0x27f/0x4e0 [ 236.312147][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 236.317374][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 236.322506][ T31] do_sys_openat2+0x13e/0x1d0 [ 236.327426][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.332695][ T31] __x64_sys_openat+0x247/0x2a0 [ 236.337718][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 236.343154][ T31] ? do_syscall_64+0x100/0x230 [ 236.348084][ T31] ? do_syscall_64+0xb6/0x230 [ 236.352821][ T31] do_syscall_64+0xf3/0x230 [ 236.360697][ T31] ? clear_bhb_loop+0x35/0x90 [ 236.365445][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.371489][ T31] RIP: 0033:0x7fd6a19169a4 [ 236.375959][ T31] RSP: 002b:00007fff7eb54d70 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.384565][ T31] RAX: ffffffffffffffda RBX: 0000560bc2c49d00 RCX: 00007fd6a19169a4 [ 236.393573][ T31] RDX: 00000000000a0800 RSI: 0000560bc2c419d0 RDI: 00000000ffffff9c [ 236.402712][ T31] RBP: 0000560bc2c419d0 R08: 0000000000000001 R09: 7fffffffffffffff [ 236.414492][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 236.422668][ T31] R13: 0000560bc2c4f890 R14: 0000000000000001 R15: 0000560bc2c38910 [ 236.430871][ T31] [ 236.433970][ T31] INFO: task udevd:5854 blocked for more than 144 seconds. [ 236.441355][T10532] hsr_slave_0: left promiscuous mode [ 236.448893][ T31] Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 236.456635][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.465341][ T31] task:udevd state:D stack:20888 pid:5854 tgid:5854 ppid:1 task_flags:0x400140 flags:0x00004002 [ 236.477434][ T31] Call Trace: [ 236.480764][ T31] [ 236.483737][ T31] __schedule+0x190e/0x4c90 [ 236.488359][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 236.494670][ T31] ? __pfx___schedule+0x10/0x10 [ 236.503166][ T31] ? __blk_flush_plug+0x449/0x500 [ 236.509998][ T31] ? __pfx_lock_release+0x10/0x10 [ 236.515107][ T31] ? __pfx___mod_timer+0x10/0x10 [ 236.520304][ T31] ? schedule+0x90/0x320 [ 236.524603][ T31] schedule+0x14b/0x320 [ 236.528904][ T31] schedule_timeout+0x15a/0x290 [ 236.533812][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 236.539331][ T31] ? __pfx_process_timeout+0x10/0x10 [ 236.544686][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 236.550214][ T31] nbd_queue_rq+0x6dd/0xef0 [ 236.554758][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 236.559855][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 236.566009][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 236.571728][ T31] ? sbitmap_get+0x289/0x3f0 [ 236.576441][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 236.582466][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 236.588375][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 236.594970][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 236.608753][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 236.613859][ T31] ? __pfx___might_resched+0x10/0x10 [ 236.619591][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 236.624924][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 236.630709][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 236.637551][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 236.642891][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 236.648086][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 236.653693][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 236.659658][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 236.664933][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 236.670212][ T31] __blk_flush_plug+0x420/0x500 [ 236.675096][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 236.681243][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 236.686771][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.693150][ T31] __submit_bio+0x54a/0x6a0 [ 236.698034][ T31] ? __pfx___submit_bio+0x10/0x10 [ 236.703116][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 236.708845][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 236.714876][ T31] ? __pfx___might_resched+0x10/0x10 [ 236.720351][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 236.728081][ T31] block_read_full_folio+0x9b3/0xae0 [ 236.733455][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 236.738924][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 236.744806][ T31] filemap_read_folio+0x148/0x3b0 [ 236.750236][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.755751][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 236.761737][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 236.767118][ T31] ? __asan_memcpy+0x40/0x70 [ 236.771747][ T31] do_read_cache_folio+0x373/0x5b0 [ 236.776932][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.782450][ T31] read_part_sector+0xb3/0x260 [ 236.787314][ T31] adfspart_check_ICS+0xcb/0xa20 [ 236.792307][ T31] ? snprintf+0xda/0x120 [ 236.796618][ T31] ? vsnprintf+0x1148/0x1220 [ 236.801568][ T31] ? vsnprintf+0x18e/0x1220 [ 236.806145][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 236.814002][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 236.819337][ T31] bdev_disk_changed+0x77f/0x14d0 [ 236.824422][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 236.830076][ T31] ? wait_on_inode+0xc1/0x230 [ 236.834800][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 236.836155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.840185][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 236.852440][ T31] blkdev_get_whole+0x2d2/0x450 [ 236.857401][ T31] bdev_open+0x2d4/0xc50 [ 236.861698][ T31] blkdev_open+0x38e/0x4e0 [ 236.866304][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 236.871293][ T31] do_dentry_open+0xdec/0x1960 [ 236.876146][ T31] ? vfs_open+0x31/0x370 [ 236.880518][ T31] vfs_open+0x3b/0x370 [ 236.884637][ T31] path_openat+0x2c81/0x3590 [ 236.889323][ T31] ? __pfx_path_openat+0x10/0x10 [ 236.894336][ T31] do_filp_open+0x27f/0x4e0 [ 236.898926][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 236.904327][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 236.909467][ T31] do_sys_openat2+0x13e/0x1d0 [ 236.914181][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.919515][ T31] __x64_sys_openat+0x247/0x2a0 [ 236.924415][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 236.929883][ T31] ? do_syscall_64+0x100/0x230 [ 236.934677][ T31] ? do_syscall_64+0xb6/0x230 [ 236.939518][ T31] do_syscall_64+0xf3/0x230 [ 236.944065][ T31] ? clear_bhb_loop+0x35/0x90 [ 236.948828][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.954769][ T31] RIP: 0033:0x7fd6a19169a4 [ 236.959327][ T31] RSP: 002b:00007fff7eb54d70 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.967853][ T31] RAX: ffffffffffffffda RBX: 0000560bc2cd8b50 RCX: 00007fd6a19169a4 [ 236.975886][ T31] RDX: 00000000000a0800 RSI: 0000560bc2c39390 RDI: 00000000ffffff9c [ 236.983923][ T31] RBP: 0000560bc2c39390 R08: 0000000000000001 R09: 7fffffffffffffff [ 236.991952][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 236.999988][ T31] R13: 0000560bc2c43ce0 R14: 0000000000000001 R15: 0000560bc2c38910 [ 237.008454][ T31] [ 237.011632][ T31] [ 237.011632][ T31] Showing all locks held in the system: [ 237.019535][ T31] 1 lock held by khungtaskd/31: [ 237.024429][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 237.034469][ T31] 2 locks held by kworker/u8:4/63: [ 237.039729][ T31] 2 locks held by getty/5591: [ 237.044458][ T31] #0: ffff888031c260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 237.054489][ T31] #1: ffffc900033432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 237.064737][ T31] 3 locks held by udevd/5837: [ 237.069496][ T31] #0: ffff888025d3b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 237.096105][ T31] #1: ffff8881437f3710 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 237.105716][ T31] #2: ffff888025e70178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 237.126332][ T31] 3 locks held by udevd/5851: [ 237.134879][ T31] #0: ffff888025c574c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 237.146194][ T31] #1: ffff8881437d3f90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 237.155824][ T31] #2: ffff888025da51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 237.165008][ T31] 3 locks held by udevd/5852: [ 237.169827][ T31] #0: ffff888025cc34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 237.179356][ T31] #1: ffff888142728790 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 237.189207][ T31] #2: ffff888025e4e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 237.198360][ T31] 3 locks held by udevd/5853: [ 237.203061][ T31] #0: ffff8881427d14c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 237.212843][ T31] #1: ffff8880255dbe10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 237.222547][ T31] #2: ffff888025d00178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 237.231685][ T31] 3 locks held by udevd/5854: [ 237.236692][ T31] #0: ffff888143fd94c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 237.246290][ T31] #1: ffff8881437d3410 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 237.255866][ T31] #2: ffff888025cd0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 237.264843][ T31] 3 locks held by kworker/u8:8/5913: [ 237.270402][ T31] #0: ffff88814d41c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 237.282101][ T31] #1: ffffc90004867c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 237.300155][ T31] #2: ffffffff8fed7108 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0 [ 237.309932][ T31] 3 locks held by udevd/6183: [ 237.314902][ T31] #0: ffff888025c534c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 237.324547][ T31] #1: ffff8881437d3a90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 237.334268][ T31] #2: ffff888025d67178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 237.343324][ T31] 2 locks held by kworker/u8:21/6876: [ 237.348815][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 237.360600][ T31] #1: ffffc9001b5cfc60 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 237.372466][ T31] 2 locks held by kworker/u8:22/6877: [ 237.377999][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 237.389861][ T31] #1: ffffc9001b50fc60 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 237.404088][ T31] 3 locks held by udevd/8490: [ 237.408908][ T31] #0: ffff888025cc74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 237.418538][ T31] #1: ffff8880255ff190 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 237.428264][ T31] #2: ffff888025f451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 237.437284][ T31] 2 locks held by syz.4.1254/10516: [ 237.442524][ T31] #0: ffff88806e213208 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 237.452875][ T31] #1: ffffffff8eb3e8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 237.463873][ T31] 1 lock held by syz.4.1254/10517: [ 237.469048][ T31] #0: ffffffff8fed7108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 237.479117][ T31] 2 locks held by syz.4.1254/10523: [ 237.484364][ T31] #0: ffffffff8feca510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 237.493965][ T31] #1: ffffffff8fed7108 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x50 [ 237.503112][ T31] 2 locks held by syz.1.1259/10531: [ 237.508409][ T31] #0: ffff88804fcab808 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 237.519073][ T31] #1: ffffffff8fed7108 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1ce/0x960 [ 237.528111][ T31] 2 locks held by syz.1.1259/10532: [ 237.533423][ T31] #0: ffffffff8fed7108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x387/0x8c0 [ 237.542511][ T31] #1: ffffffff8eb3e8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 237.556082][ T31] 2 locks held by syz.1.1259/10536: [ 237.561326][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 237.575033][ T31] #1: ffffffff8fed7108 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8b0 [ 237.584430][ T31] 2 locks held by syz.2.1262/10540: [ 237.595178][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 237.604120][ T31] #1: ffffffff8fed7108 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8b0 [ 237.613669][ T31] [ 237.617231][T10532] hsr_slave_1: left promiscuous mode [ 237.632544][ T31] ============================================= [ 237.632544][ T31] [ 237.655965][ T31] NMI backtrace for cpu 0 [ 237.655993][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 237.656017][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.656040][ T31] Call Trace: [ 237.656049][ T31] [ 237.656058][ T31] dump_stack_lvl+0x241/0x360 [ 237.656090][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.656112][ T31] ? __pfx__printk+0x10/0x10 [ 237.656143][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 237.656176][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 237.656198][ T31] ? _printk+0xd5/0x120 [ 237.656217][ T31] ? __pfx__printk+0x10/0x10 [ 237.656236][ T31] ? __wake_up_klogd+0xcc/0x110 [ 237.656264][ T31] ? __pfx__printk+0x10/0x10 [ 237.656284][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 237.656316][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 237.656344][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 237.656374][ T31] watchdog+0x1058/0x10a0 [ 237.656407][ T31] ? watchdog+0x1ea/0x10a0 [ 237.656445][ T31] ? __pfx_watchdog+0x10/0x10 [ 237.656476][ T31] kthread+0x7a9/0x920 [ 237.656493][ T31] ? __pfx_kthread+0x10/0x10 [ 237.656514][ T31] ? __pfx_watchdog+0x10/0x10 [ 237.656552][ T31] ? __pfx_kthread+0x10/0x10 [ 237.656569][ T31] ? __pfx_kthread+0x10/0x10 [ 237.656591][ T31] ? __pfx_kthread+0x10/0x10 [ 237.656608][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.656634][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 237.656662][ T31] ? __pfx_kthread+0x10/0x10 [ 237.656682][ T31] ret_from_fork+0x4b/0x80 [ 237.656710][ T31] ? __pfx_kthread+0x10/0x10 [ 237.656729][ T31] ret_from_fork_asm+0x1a/0x30 [ 237.656769][ T31] [ 237.820596][ T31] Sending NMI from CPU 0 to CPUs 1: [ 237.826234][ C1] NMI backtrace for cpu 1 [ 237.826250][ C1] CPU: 1 UID: 0 PID: 48 Comm: kworker/1:1 Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 237.826270][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.826282][ C1] Workqueue: events_long defense_work_handler [ 237.826307][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 237.826335][ C1] Code: 8b 3d 74 82 93 0c 48 89 de 5b e9 c3 ee 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d6 03 00 65 8b 15 c0 e5 41 7e 81 e2 00 01 ff 00 [ 237.826351][ C1] RSP: 0018:ffffc90000b878d8 EFLAGS: 00000802 [ 237.826365][ C1] RAX: ffffffff81ae680f RBX: ffffc90000b879a0 RCX: 1ffff92000170f2c [ 237.826378][ C1] RDX: 0000000000000004 RSI: 00000000ffffe747 RDI: ffff88807badc650 [ 237.826390][ C1] RBP: ffffc90000b87a10 R08: ffffffff818949a6 R09: 0000000000000000 [ 237.826402][ C1] R10: ffffc90000b87a60 R11: fffff52000170f4d R12: dffffc0000000000 [ 237.826415][ C1] R13: ffff88807badc650 R14: 00000000ffffe747 R15: dffffc0000000000 [ 237.826428][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 237.826442][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.826454][ C1] CR2: 00007f39d7779178 CR3: 0000000060286000 CR4: 00000000003526f0 [ 237.826470][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.826480][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.826491][ C1] Call Trace: [ 237.826497][ C1] [ 237.826505][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 237.826527][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 237.826555][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 237.826575][ C1] ? nmi_handle+0x2a/0x5a0 [ 237.826610][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 237.826632][ C1] ? nmi_handle+0x14f/0x5a0 [ 237.826657][ C1] ? nmi_handle+0x2a/0x5a0 [ 237.826684][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 237.826708][ C1] ? default_do_nmi+0x63/0x160 [ 237.826727][ C1] ? exc_nmi+0x123/0x1f0 [ 237.826745][ C1] ? end_repeat_nmi+0xf/0x53 [ 237.826773][ C1] ? __queue_delayed_work+0xd6/0x300 [ 237.826797][ C1] ? __mod_timer+0x9f/0x10e0 [ 237.826820][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 237.826844][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 237.826869][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 237.826893][ C1] [ 237.826899][ C1] [ 237.826904][ C1] __mod_timer+0x9f/0x10e0 [ 237.826926][ C1] ? update_defense_level+0x122/0xcf0 [ 237.826944][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 237.826965][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 237.826989][ C1] ? __pfx___mod_timer+0x10/0x10 [ 237.827011][ C1] ? update_defense_level+0x8ec/0xcf0 [ 237.827031][ C1] ? __queue_delayed_work+0x23e/0x300 [ 237.827054][ C1] ? queue_delayed_work_on+0x1b4/0x390 [ 237.827079][ C1] queue_delayed_work_on+0x1ca/0x390 [ 237.827105][ C1] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 237.827129][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.827161][ C1] ? process_scheduled_works+0x9c6/0x18e0 [ 237.827183][ C1] process_scheduled_works+0xabe/0x18e0 [ 237.827226][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 237.827253][ C1] ? assign_work+0x364/0x3d0 [ 237.827276][ C1] worker_thread+0x870/0xd30 [ 237.827306][ C1] ? __kthread_parkme+0x169/0x1d0 [ 237.827331][ C1] ? __pfx_worker_thread+0x10/0x10 [ 237.827354][ C1] kthread+0x7a9/0x920 [ 237.827368][ C1] ? __pfx_kthread+0x10/0x10 [ 237.827384][ C1] ? __pfx_worker_thread+0x10/0x10 [ 237.827407][ C1] ? __pfx_kthread+0x10/0x10 [ 237.827421][ C1] ? __pfx_kthread+0x10/0x10 [ 237.827438][ C1] ? __pfx_kthread+0x10/0x10 [ 237.827451][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.827473][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 237.827496][ C1] ? __pfx_kthread+0x10/0x10 [ 237.827512][ C1] ret_from_fork+0x4b/0x80 [ 237.827535][ C1] ? __pfx_kthread+0x10/0x10 [ 237.827550][ C1] ret_from_fork_asm+0x1a/0x30 [ 237.827579][ C1] [ 237.828728][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 238.224169][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 238.234682][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.244752][ T31] Call Trace: [ 238.248043][ T31] [ 238.250996][ T31] dump_stack_lvl+0x241/0x360 [ 238.255713][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.260932][ T31] ? __pfx__printk+0x10/0x10 [ 238.265532][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.271540][ T31] ? vscnprintf+0x5d/0x90 [ 238.275883][ T31] panic+0x349/0x880 [ 238.279792][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 238.285963][ T31] ? __pfx_panic+0x10/0x10 [ 238.290389][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 238.295777][ T31] ? __irq_work_queue_local+0x137/0x410 [ 238.301346][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 238.306739][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 238.312907][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 238.319079][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 238.325258][ T31] watchdog+0x1097/0x10a0 [ 238.329622][ T31] ? watchdog+0x1ea/0x10a0 [ 238.334071][ T31] ? __pfx_watchdog+0x10/0x10 [ 238.338872][ T31] kthread+0x7a9/0x920 [ 238.342954][ T31] ? __pfx_kthread+0x10/0x10 [ 238.347557][ T31] ? __pfx_watchdog+0x10/0x10 [ 238.352260][ T31] ? __pfx_kthread+0x10/0x10 [ 238.356859][ T31] ? __pfx_kthread+0x10/0x10 [ 238.361459][ T31] ? __pfx_kthread+0x10/0x10 [ 238.366069][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.371297][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 238.376519][ T31] ? __pfx_kthread+0x10/0x10 [ 238.381150][ T31] ret_from_fork+0x4b/0x80 [ 238.385589][ T31] ? __pfx_kthread+0x10/0x10 [ 238.390189][ T31] ret_from_fork_asm+0x1a/0x30 [ 238.394980][ T31] [ 238.398363][ T31] Kernel Offset: disabled [ 238.402704][ T31] Rebooting in 86400 seconds..